last executing test programs: 1m21.984022289s ago: executing program 32 (id=42): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)=@v2={0x2, @adiantum, 0x0, '\x00', @auto="fc06d4cd1131a6f26983e371d4f64c42"}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x0, 0x6b, 0xae, 0x64c9, 0x20, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000, 0x20, 0x3, 0xff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000bb570000c60700003ca4000080040000", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="04000000f0ffffff020000000a000000000000000000000000000000cd379ce102d89af0af8d795747a5e050329a9695632d7ccf143e134c18"], 0x50) setrlimit(0x0, &(0x7f0000000180)={0x259, 0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x10000839, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m11.993776197s ago: executing program 33 (id=137): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1m9.56636418s ago: executing program 0 (id=169): syz_mount_image$ext4(&(0x7f0000000f80)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f0000000280)={[{@auto_da_alloc}, {@bh}]}, 0x0, 0x531, &(0x7f0000000980)="$eJzs3UFvG1kdAPD/TOxu0mZxFjjASuyu2JXSCuokG7obcVhAQtxWAi33EhI3iuLEVeK0TVTRVIgzEkKAxAUucEHiAyChfgSEVIneESAQghYOIBUG2R4XJ7GdpE3ibPz7SS9+b2Y8//fszPi9mdFMAEPrjYi4HBFZlmVXIqKUT0/zFDut1FjuyeO7C42URJZ98Lckknxae10v5a+X8reN5uVvJvvjbmxtr8xXq5X1vDxVX02eZtn21eXV+aXKUmVtdnbmnbl3567NTR9LOyci4r0v/+kH3/35V9779Wdv//76Xy5/q9XAls52HNJon3lJnlp/orhr4UJErB8x2FlWaLaw5dqA6wIAQH+N/v5HI+LTEXElSjHS7M0dQr/eLwAAAHCmZF8Yj6dJ6/wfAAAAcD6lETEeSVrOr/cdjzQtl1vX8H48LqbV2kb9M1np2fGCiSimN5arlen82oGJKCaN8kx+jW27/Pae8mxEvBIR3y+NNcvlhVp1caBHPgAAAGB4XNoz/v9nqTX+BwAAAM6ZiUFXAAAAADhxxv8AAABw/hn/AwAAwLn21fffb6Ss/fzrxVtbmyu1W1cXKxsr5dXNhZGord8sL9VqS8179q0etL5qrXbzc7G2eWeqXtmoT21sbV9frW2u1a8ve2IgAAAADMorrz94lETEzufH0ojIko55xYhspHPhwunXDzg56VEW/uPJ1QM4fSODrgAwMLr0MLyKg64AMHAH7Qd6Xrzzm+OvCwAAcDImP/ngUbTO/zdTw4V8XjLIigEnLj//n9jWYfg4/w/Dy/k/GF7Ffj0AgwI499JDbOovfv4/y8J4AwAABmq8mZK0nI8DxiNNy+WIl5uPBSgmN5arlemI+EhE/K5UfKlRnmm+M3F4AAAAAAAAAAAAAAAAAAAAAAAAAAAOKcuSyHoYy58O1ms+AAAA8OEQkf45ad7NfywmS2+N7z0+cCH5V6n5GhG3f/zBD+/M1+vrM43pf382vf6jfPrbp3/8AgAAANivPU5vj+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dg9eXx3oZ1OM+5fvxQREx3xk8jjF2K0+ToaxYi4+I8kCh3vSyJi5Bji79yPiE90a3/SqFZM5LXYGz+NiLEBx790DPFhmD1o7H++2G37S+ON5mv37a+Qpxe1b//XEb+9/xvpsf97udsK0/2TXn34y6me8e9HvFrovv9px096xH/zkG38xte3t3vNy34aMdn19yfZFWsqKdyc2tjavrq8Or9UWaqszc7OvDP37ty1uempG8vVSv639YYLu2N871O/+u+eVe5q/8WI0V77337tf+uQ7f/PwzuPP9bKFvfMKsZPsuzym91/f0fzjyjLsmam0BF7JF9Zmpcn2/mdVr7Ta7/47Wuv96jb2P2IxR6f/wHff5f/tO6ufO3bfzjssgDAydvY2l6Zr1Yr610zrb5F/2VOORNnoxrPmWl/7GelPs+fuXeUVoxFe8rPvhMn/Q3OR79l2p3YU/ig7uWhTvHb+XeWZ4r7Glg46oYGAACcM//v9A+6JgAAAAAAAAAAAAAAAAAAADC8DroN2HHcqW5vzJ3BNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoK//BQAA//+1cMKP") (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m9.420061079s ago: executing program 0 (id=171): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000016000103978faf90898e4124bd7002ffdbdf25090000005b0374679066e305b8dbe1492fe5360fa975833fd5c2e91757199005d370fa21203b9258e24aeeca9a2bf3b8abf3d91942f7a6013ea316ee522178a2f02ae6ab3e95c40e3d82fcdd33f4101d3ef0b136b91f99237eedf525dee29dcc296003cfd558dfed55eeda66c0200624e5d8a70de6e09d355fc06001361f58c1e8d80fcdbaba8ff8830a750b279c4f02979daf1fdef9599e6d3b8a45bcc1d0acdcabf56e6a650b843168f52fa849e2a18e35ca52c24d09c8c20670cbd16f"], 0x14}, 0x1, 0x0, 0x0, 0x4044004}, 0x20000000) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000300)='E', 0x1, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x101, 0x2, 0x2}) close(0x3) close(0x4) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$P9_RREADDIR(r6, &(0x7f00000005c0)={0x64, 0x29, 0x2, {0x2, [{{0x80, 0x0, 0x7}, 0x7ff, 0x80, 0x21, './debug/ieee80211/phy0/aql_enable'}]}}, 0x44) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 1m9.341421929s ago: executing program 0 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) eventfd2(0xffffffff, 0x80801) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) shutdown(r0, 0x0) unshare(0x28000600) unshare(0x4000400) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) signalfd4(r1, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x414386cf302dc66a) pselect6(0x40, &(0x7f0000000100)={0x0, 0x1, 0x1, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000090603000000000000000000000000000900020073797a310000000005000100070000001c000780180001801400"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) 1m7.820194666s ago: executing program 0 (id=187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = memfd_create(&(0x7f0000000480)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x84\xcb\xd4\xe7?\xce8\xee\xd9)+\xe3\x1b\xf9\xe3y\x04`\x964+\xfd0zu7\xe2\xac\x90\x95\x1f\xfc\xf4a\xda\x05L9\xe5X\xc5\x00\b\xb4(\x89\xfb\xb0E0\x10\x10C\x9e\x96\x9c\xdf\xdb\xff8Bv\xa1$\'!\xb4\xba\xe8\xf5\xe9\xf8\xc3hPH\x93\x1c\xa2\x1d7\xdd\xc11\xa7\xa9\xb7E\xd0Z\xef+\xd5\x9f\xbc\xa4\xf6\b\xce\xb9\n\x0e\x84RnE\xe2\xb5y1?\x06\x9d\xd6\xeb-l\bu\x93w\'<\b\x14\xee\x80\xbe\x84\xd5\x92\x94ICQ\xee\xab\xb6\xdd\x95a\xa1\x0eC\x02\xa3\x98.\xd9 \xb3p\xe4\b\xc8\x95\xb3\x1a|\xc7d\xd4\xc9\\\xfdO]\xd7\xf2\xf4jz\xa7\xab6\x1e\xc5\x04d|?\x94\x9c>\xa8\x1a\x99htF\xa8\"fV12\xa8%\x82*z2\x94\xdb\xbe\x1d\xd0\x8f\\\xe4\n3}\xa1\xd7Qn_i\xafBW\xe0u', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78) (async) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000300)="0100000000000004ff6943b80000000800000028f2000000008607000000d7b01f63dd95890000947132923301ec74fa98cb594ed9fabe9e", 0x418, r2) sendfile(r0, r1, &(0x7f00000001c0), 0x8) r3 = syz_socket_connect_nvme_tcp() fcntl$addseals(r3, 0x409, 0x8) 1m7.796229322s ago: executing program 34 (id=187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = memfd_create(&(0x7f0000000480)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x84\xcb\xd4\xe7?\xce8\xee\xd9)+\xe3\x1b\xf9\xe3y\x04`\x964+\xfd0zu7\xe2\xac\x90\x95\x1f\xfc\xf4a\xda\x05L9\xe5X\xc5\x00\b\xb4(\x89\xfb\xb0E0\x10\x10C\x9e\x96\x9c\xdf\xdb\xff8Bv\xa1$\'!\xb4\xba\xe8\xf5\xe9\xf8\xc3hPH\x93\x1c\xa2\x1d7\xdd\xc11\xa7\xa9\xb7E\xd0Z\xef+\xd5\x9f\xbc\xa4\xf6\b\xce\xb9\n\x0e\x84RnE\xe2\xb5y1?\x06\x9d\xd6\xeb-l\bu\x93w\'<\b\x14\xee\x80\xbe\x84\xd5\x92\x94ICQ\xee\xab\xb6\xdd\x95a\xa1\x0eC\x02\xa3\x98.\xd9 \xb3p\xe4\b\xc8\x95\xb3\x1a|\xc7d\xd4\xc9\\\xfdO]\xd7\xf2\xf4jz\xa7\xab6\x1e\xc5\x04d|?\x94\x9c>\xa8\x1a\x99htF\xa8\"fV12\xa8%\x82*z2\x94\xdb\xbe\x1d\xd0\x8f\\\xe4\n3}\xa1\xd7Qn_i\xafBW\xe0u', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0x78) (async) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000300)="0100000000000004ff6943b80000000800000028f2000000008607000000d7b01f63dd95890000947132923301ec74fa98cb594ed9fabe9e", 0x418, r2) sendfile(r0, r1, &(0x7f00000001c0), 0x8) r3 = syz_socket_connect_nvme_tcp() fcntl$addseals(r3, 0x409, 0x8) 40.311799356s ago: executing program 6 (id=516): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x174, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0x2, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) setuid(0xee00) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0xff9e) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="ea57c6b4e9414f8d7a36545493119e8e452a7023e7f6dc1c2f96e34489c81b602fba3e72f4bf13299f3859f7830667faa10ed99c", 0x34, r1) pselect6(0x40, &(0x7f0000000440)={0x0, 0x4, 0x18000000, 0x4c8, 0x7d, 0x9, 0x8, 0x1}, &(0x7f0000000480)={0x2, 0x200, 0x0, 0x8000000000000000, 0x10000, 0x8, 0x6, 0x7f}, &(0x7f00000004c0)={0xb80c, 0x5, 0xf28, 0xffffffffffffd534, 0x4, 0x7fffffffffffffff, 0x1, 0x3ff}, &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f00000005c0)={&(0x7f0000000580)={[0xd]}, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)="11", 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 40.18811688s ago: executing program 6 (id=520): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000040), 0x4) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) r4 = socket$packet(0x11, 0x3, 0x300) close(r4) (async) close(r4) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$packet_int(r4, 0x65, 0x8, 0x0, 0x0) (async) setsockopt$packet_int(r4, 0x65, 0x8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x200}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x45a3b}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xb, 0x1, {0x40001, 0x5eb, 0x2, 0x88a8}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b28d, 0x45a3b}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0xb, 0x1, {0x40001, 0x5eb, 0x2, 0x88a8}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0xfffffffd}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r6, 0x37}, 0x8) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r6, 0x37}, 0x8) 39.308227212s ago: executing program 6 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@other={'trylock', ' ', 'mem'}, 0xc) 38.028440537s ago: executing program 6 (id=536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x0, @pix={0x3, 0x7ff, 0x30314742, 0x1, 0x1000, 0x1, 0x0, 0x2, 0x0, 0x2, 0x1, 0x4}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0xfffffe40, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "b9fb3c16"}, 0x1, 0x2, {0x0}, 0x7000000}) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x8, 0x13, r3, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, &(0x7f0000000100)=""/83, 0x53, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}, 0x0, 0x3f}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000005c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "b928a7020253641e", "e282d495ff61cdd0c6df00e85dc14e09", "7ec8b2c1", "39ab3e87f65cfcb9"}, 0x28) sendto$inet6(r4, &(0x7f0000000300)="c6", 0x1, 0x8040, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x3fee) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000001b40)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705e, 0x64ef}, {0xb, 0x1203}]}}) unshare(0x28000600) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, 0x0, &(0x7f0000001000)=0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x30, 0x3) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000280)={0x100, r9}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000001c0)=',', 0x1}, {&(0x7f0000000580)="06c391891fe7a0aa63998d25b797", 0xe}, {&(0x7f0000000780)="3ad667fc905d682b82dc7bba428fde5aa0384509182fccd7941df43e2cefc3d87ef7ea2406ea992fb12c0cd454", 0x2d}], 0x3) 37.687658665s ago: executing program 6 (id=540): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001040)) sendto$inet(r1, &(0x7f0000000200)="a39c6d8399f12818ad22281c0a113c21ac1cf9f3e9b18be658cbabffb2983e5613a2989dd78f414c93f3791ee348270c8cc5db021def2487b4a520a59bdd8feae1d54862c01b3963e986574d92cfb17693811c255921fea73000ecae7dca2fa022750dc1c636839b73c96a277e21099f5bacf30554a38f323409fbe875eada9ab37f85250d4a394b9a3a22c53c8f97fccdfa1afc85b0a4a251219735f0d9dc138a7a8fb5fdd25e68e0de60665e7b64e62f97e11ec11a95450c3f48a84f15fb33681689d3d89dc0", 0xc7, 0x5032, 0x0, 0x0) 36.995827754s ago: executing program 6 (id=545): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 36.852010607s ago: executing program 35 (id=545): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 33.824192415s ago: executing program 7 (id=572): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0xe, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x8, 0x404d, 0x2ba9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0xe608}) close_range(r7, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r2, &(0x7f0000001740)='memory.numa_stat\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x11, 0x2b, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x3, 0xc134bd1f1c334b21, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x7, 0x1, 0x0, 0x7, 0xa, 0x8, 0x4}, @map_fd={0x18, 0x8}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0xb9, 0xb6, &(0x7f0000000400)=""/182, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xe, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x5, 0x4, 0x10, 0xc}, {0x2, 0x2, 0x5, 0x9}, {0x3, 0x3, 0x0, 0xa}, {0x2, 0x1, 0xc}, {0x4, 0x5, 0x1, 0x5}, {0x5, 0x5, 0x3, 0x4}, {0x2, 0x5, 0x9, 0xc}], 0x10, 0x57b23a91}, 0x94) read(r2, &(0x7f0000001880)=""/82, 0x52) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x0, 0x0, 0x35315241}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@fallback=r0, r0, 0x32, 0x0, r0, @void, @value=r8, @void, @void, r1}, 0x20) 32.636192438s ago: executing program 7 (id=579): unshare(0x40200) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r3 = semget(0x1, 0x4, 0x39c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(r3, 0x0, 0x0) semget$private(0x0, 0x1, 0x80) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x5, 0x7ff, 0xb9, 0x80, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10, 0xa274c50e45e81cd7, r5, 0x4f39d000) semtimedop(r3, &(0x7f0000000200)=[{0x0, 0x3, 0x1000}], 0x1, &(0x7f0000000240)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES64=r4, @ANYRES32=r2], 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) write$rfkill(r7, &(0x7f0000000100)={0x400, 0x4, 0x0, 0x1, 0x1}, 0x8) 32.551547389s ago: executing program 7 (id=580): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/nvme0n1\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000001c0)={0x1, 0xa32}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x6, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x6, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) 32.343902901s ago: executing program 7 (id=582): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122d, &(0x7f0000001280)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_open_dev$video(&(0x7f0000000080), 0xad47, 0x1) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000140)={0x5, @output={0x0, 0x0, {0x2, 0x2}, 0x100, 0x7fffffff}}) syz_io_uring_setup(0xc7c, &(0x7f0000000000)={0x0, 0x3c6c, 0x800, 0x0, 0x61}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000240)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(r0, &(0x7f0000000300)='cpuacct.stat\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mknodat(r2, 0x0, 0x8910, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x595f, 0x40000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x7211, 0x3a1a, 0x1, 0x0, 0x0) 31.852282578s ago: executing program 7 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000a40)={0xfffffffe, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}}, {{0x2, 0x0, @loopback}}}, 0x108) syz_emit_ethernet(0x60, &(0x7f00000002c0)={@remote, @local, @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x6, 0x0, 0x3}}, {@x25={0x805, {0x3, 0x4, 0xf7, "ccaf7fbc346aadd311303341aba59a914dc697b453a5a02bbc48c1d080ca953819ea3375c194bec7fbe2c939c66fbadc785babd49c2b98ad4179b306dd2fc3fab2c56218a612b8"}}}}, 0x0) 31.226856712s ago: executing program 7 (id=593): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x10001, 0x9, 0x0, 0xfffffffd}) (async) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x110, 0xfffffffffffffffd) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a0a00ff000000007110710000000000950000000000000074db3a4dfa0d0b30637760f152fafd3ed00d1563079b63a2aad81ad20b86e42a1c4f3c653a063285254283a66395b2db62d564723e949e8e67744e61a278ad26204b17b88d82b7c5963f7ba501da936064c9809382a747740707cd312601b8ee1e08f48152130704d8ee1c9437f5e3025d971d521b0e96b9a08c27192611b2d864fb740b9daeb2f2f8edaaa59ba01baa3e359f7e"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$FUSE_GETXATTR(r1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='\xf3\xd9\b\x9f\x91\"\xc0yc\x1fpex\x00sV\x01\x00\x00\x00b\xf4DG\xa1\xf3(\ad\xb0l \xfd\xd7\x8e~\x02\t\x00\x00\x00\x00\x00\x00\xfa', 0x4) (async) unshare(0x28000600) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0), r4, r3}}, 0x18) (async) pwrite64(r2, 0x0, 0x0, 0x7fffffffffffffff) (async) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x10000) (async) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000500)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f8900000020006c000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x302) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x83, 0x6, 0xfffffffe, 0x8, 0xfffff613, 0x79f3, 0xde, 0xd, 0xfffffff8, 0x206, 0x6, 0x4, 0xffff1045, 0x2, 0x7, 0x1000, 0xfffffbff, 0x40, 0xffffad7d, 0x4, 0x4, 0x1, 0x6, 0x4, 0x10001, 0x1, 0x4, 0x815, 0x3ff, 0x4, 0xffffff81]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) 31.177430612s ago: executing program 36 (id=593): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x10001, 0x9, 0x0, 0xfffffffd}) (async) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000200)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a30080601103c80fffffe0068302106082a85030701010101301506092a850307010201010106082a85030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101300a06082a8503070101030203410002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202", 0x110, 0xfffffffffffffffd) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a0a00ff000000007110710000000000950000000000000074db3a4dfa0d0b30637760f152fafd3ed00d1563079b63a2aad81ad20b86e42a1c4f3c653a063285254283a66395b2db62d564723e949e8e67744e61a278ad26204b17b88d82b7c5963f7ba501da936064c9809382a747740707cd312601b8ee1e08f48152130704d8ee1c9437f5e3025d971d521b0e96b9a08c27192611b2d864fb740b9daeb2f2f8edaaa59ba01baa3e359f7e"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) write$FUSE_GETXATTR(r1, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000040)='\xf3\xd9\b\x9f\x91\"\xc0yc\x1fpex\x00sV\x01\x00\x00\x00b\xf4DG\xa1\xf3(\ad\xb0l \xfd\xd7\x8e~\x02\t\x00\x00\x00\x00\x00\x00\xfa', 0x4) (async) unshare(0x28000600) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0), r4, r3}}, 0x18) (async) pwrite64(r2, 0x0, 0x0, 0x7fffffffffffffff) (async) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x10000) (async) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000500)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f8900000020006c000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x302) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x83, 0x6, 0xfffffffe, 0x8, 0xfffff613, 0x79f3, 0xde, 0xd, 0xfffffff8, 0x206, 0x6, 0x4, 0xffff1045, 0x2, 0x7, 0x1000, 0xfffffbff, 0x40, 0xffffad7d, 0x4, 0x4, 0x1, 0x6, 0x4, 0x10001, 0x1, 0x4, 0x815, 0x3ff, 0x4, 0xffffff81]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6) 27.140505258s ago: executing program 9 (id=595): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122d, &(0x7f0000001280)="$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") r0 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0xe, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ftruncate(r2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000380)={0x0, 0x595f, 0x40000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, 0x0, 0x0, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x7211, 0x3a1a, 0x1, 0x0, 0x0) 26.97209107s ago: executing program 9 (id=637): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d010200083bbe156ccc020b38054f47ee1cd0000900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c3, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000480)=ANY=[]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001100b21714095c5e5f80e1875da4a0c6000000000000000000000200000000", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x2, 0xff1, &(0x7f0000000a80)=""/4081, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x65c1, r7, 0x2, &(0x7f0000001b40)=[r0, r0, r7, 0xffffffffffffffff, r0, r0], &(0x7f00000001c0)=[{0x1, 0x3, 0x27, 0x5}, {0x3, 0x5, 0xc, 0x8}], 0x10, 0x66}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 24.925844214s ago: executing program 9 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000006800010400000000000000000000000000000000140002000100000001000000020000000100000006000300000000007234e1021391ba9df37895c996015c1167e1e227f05a807ba77f81240b865983630a07a08b16d4ce52a878f2f5677f4105fa80737463"], 0x34}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000003c0)={0x0, 0x106, 0x0, {0x9, @pix_mp={0x0, 0x0, 0x41415270, 0x2, 0x8, [{0x0, 0x10}, {0x8}, {0x0, 0xffffffff}, {0x8, 0x3}, {}, {0x0, 0x5}, {0x0, 0x7}], 0x7, 0x0, 0x3}}, 0xfffffffc}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x180, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f00000001c0)="010000000037a788a11d130000009282d9c66923c63a454106210107000000", 0x1f, r3) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) 24.875664625s ago: executing program 37 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000006800010400000000000000000000000000000000140002000100000001000000020000000100000006000300000000007234e1021391ba9df37895c996015c1167e1e227f05a807ba77f81240b865983630a07a08b16d4ce52a878f2f5677f4105fa80737463"], 0x34}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000003c0)={0x0, 0x106, 0x0, {0x9, @pix_mp={0x0, 0x0, 0x41415270, 0x2, 0x8, [{0x0, 0x10}, {0x8}, {0x0, 0xffffffff}, {0x8, 0x3}, {}, {0x0, 0x5}, {0x0, 0x7}], 0x7, 0x0, 0x3}}, 0xfffffffc}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x180, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f00000001c0)="010000000037a788a11d130000009282d9c66923c63a454106210107000000", 0x1f, r3) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x259fdbfd, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) 16.502116341s ago: executing program 8 (id=750): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x11, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./proc/sys/net/ipv4/vs/est_cpulist\x00', &(0x7f0000000180), 0x8020, &(0x7f00000001c0)=ANY=[@ANYBLOB="706964735f6c6f63616c6576656e7405000000000000006f9bd06c6576656e74732c706964735f6c6f63616c6576656e74732c66736d616769633d3078303030303030303030303030303030352c00"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="5500000011002914001100020004040002000407200000", 0x17) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000300)={r0, 0x1, 0x81, "109626529590c7689f38b72f7dfc9efa6f50bb42e0ccd496f2b40750c6b79682a81907339aec7d6bb15dbff3e0a03540426a4242ab8dfeb25dc1290c3c1e69c773662cebe4744b734d17073bdb9645dba58685e115cedbbab9c166fb7323e0d309549ed29879d5b5b8e64166eb47a0212a38e8b154f298d19b1f14f4959c20087cc835e4a53feb6467576da13b4b03abb4677ee61959373997a3c3001c0f0071031c99c907c7dabe892bf2d80ab731625fd84208327d4ac98e0dc2a26cbdc3fed4cbb5d2e8aadba29742e895b045a816f83915b3598dd18bc3623b51f5eb5b2cb176a475b3"}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r4, 0x10, 0x800, 0x8000) fallocate(r4, 0x10, 0xffff, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000003440)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0xffffffffffffff35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071181b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSREP(r7, 0x8000450a, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) 16.096648755s ago: executing program 8 (id=752): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'batadv0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0xfffffffffffffffe) mlockall(0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x1a1041, 0x13) write$sysctl(r1, &(0x7f0000000000)='4\x00', 0x2) 15.716162452s ago: executing program 8 (id=756): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 15.514956127s ago: executing program 8 (id=761): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x100000c, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '@'}}]}) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x480a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}}, 0x0) capset(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 15.24147026s ago: executing program 8 (id=765): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000240)={0x82, 0x401, 0xfeaa, 0x717e387b, 0xb4, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb4e54c69f901b9c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x7f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x19) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000240)={0x82, 0x401, 0xfeaa, 0x717e387b, 0xb4, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb4e54c69f901b9c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x7f, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) (async) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x19) (async) 14.894121517s ago: executing program 8 (id=768): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c844) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 14.818011251s ago: executing program 38 (id=768): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c844) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004fc0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) 9.903045672s ago: executing program 3 (id=815): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='sys_link/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x97, 0x0, &(0x7f0000000320)={0x2, 0x15, @loopback}, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="04000100040001000400010004000100040001"], 0x460}}, 0x0) (async) lseek(r0, 0x41, 0x3) 9.723917297s ago: executing program 3 (id=816): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000003c0)=ANY=[]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x141042, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000e"], 0xffdd) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0)={0x7, 0x3, 0x80, 0x58, 0xc, 0x7, 0x3, 0x8, 0x1, 0x81, 0x2, 0x50, 0x2, 0x20}, 0xe) getdents64(r5, &(0x7f0000003640)=""/4123, 0x101b) 9.329808066s ago: executing program 3 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0xf, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x31363553}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01f10000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140004"], 0xe8}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 9.128156998s ago: executing program 3 (id=820): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) (async) r2 = fcntl$dupfd(r0, 0x0, r0) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a00)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000940)="3ea2a963912ae18486c54ce10c3921ff6757a21af15fd750a1b86ead029a1dbb1e4b4cf812b3c5a64affc8fb4633ec02d0fbf1ee5924694e6fef9148dbcc5d9b67d874dcf390e3c060b2aacabcc8ac07807ec90267233d912efc87d127b8b5073b09317210480bc86a65b4d0d65d0e19bede7fe0a0df3dd8d4265d571975afe3fe14d37f2348735429d6977e90adb545ad313f866b6f221515de0733c858820d8819faa7f8db0af808a88c29db114f", 0xaf, r2}, 0x68) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x4, 0x9, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff010}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @random="b84fbdff8a20", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8}}}}}}}, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@noinit_itable}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xc00) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) lseek(r5, 0x1ff, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r2, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x8}) (async) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f0000000000)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00f7a98a6f3da4519f4b38d9450092aac2c7cefa"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x2a042, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x30, 0x9e, 0x0, 0xfffff020}, {0x6, 0x12, 0x0, 0x4}]}, 0x10) 8.6803004s ago: executing program 3 (id=824): inotify_add_watch(0xffffffffffffffff, 0x0, 0x81000482) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="17000000020001000003be8c5e687a8aa8006cf3010100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b0eadfbd70f94820610f3bbcaf51b29069da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df018000000000010000000166f938e91b9c7328401400000080c457681f009cee4a5acb3dac00001fb73150338c8eec25a02aff06011500000000010000994fb4ff000affff02dfccebf6ba00085d", 0xc0) mount(0x0, 0x0, 0x0, 0x2200020, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x236000, 0x1000, 0x0, 0x1}, 0x20) (async) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async, rerun: 64) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (rerun: 64) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x18) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 6.225257487s ago: executing program 3 (id=853): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 6.164090809s ago: executing program 39 (id=853): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 5.669920942s ago: executing program 4 (id=862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x20000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xa}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x101040, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000600)={'wlan0\x00', 0x1}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_READ(r8, 0x8008700b, &(0x7f0000000180)) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8d40, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"}) ioctl$TCSETS(r8, 0x5402, &(0x7f00000001c0)={0x81, 0x0, 0x7, 0x1, 0x1b, "81fff70a41af0be7c9c02ee6b8f9340e68f7b6"}) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)={0x2c, r1, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x985}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5}]}, 0x2c}}, 0x0) 5.094860971s ago: executing program 4 (id=868): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt/file0\x00', 0x42, 0x1ff) fsetxattr(r2, &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000340)=@known='user.syz\x00', 0x0, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt/file0\x00', 0x42, 0x1ff) (async) fsetxattr(r2, &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0x0, 0x0) (async) fsetxattr(r2, &(0x7f0000000340)=@known='user.syz\x00', 0x0, 0x0, 0x0) (async) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000001000)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") (async) 4.927920648s ago: executing program 4 (id=870): r0 = socket(0x40000000015, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x60010000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0137ff"], 0x27) 4.680907003s ago: executing program 4 (id=875): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newlink={0x70, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa5a1, 0x42401}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3, 0x5e6, 0xf77, 0x8100}}, {0x14, 0x1, {0x9, 0x6c2, 0x6, 0x88a8}}]}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x70}}, 0x4000844) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x9, 0x266, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [], {0x14}}, 0x28}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000b0c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x9, 0xfffffffa, 0x110002, 0x10, 0x2, 0x3, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000009080)={0x2020}, 0xfffffdca) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@random={'security.', '-)/%@}\x00'}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) 4.486717784s ago: executing program 4 (id=877): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r0, r3, 0x25, 0x4, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r4, r1, 0x4, r0}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0x7, 0x1}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r0, 0x20, &(0x7f0000000980)={&(0x7f0000000800)=""/122, 0x7a, 0x0, &(0x7f0000000880)=""/197, 0xc5}}, 0x10) r9 = syz_open_dev$vcsu(&(0x7f0000000a00), 0x9, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', r3, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r13 = dup3(r12, r11, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r14 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r14, 0x1) r15 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r15) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0x1d, 0x23, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff7fff}, @jmp={0x5, 0x0, 0x3, 0x2, 0xa, 0x90, 0x8}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0xf5d6582d0947287, 0x4, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x8f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}]}, &(0x7f0000000600)='GPL\x00', 0x70000, 0xaf, &(0x7f0000000640)=""/175, 0x40f00, 0x41, '\x00', r3, 0x1b, r7, 0x8, &(0x7f0000000740)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x6, 0x39, 0x8}, 0x10, r8, 0x0, 0x0, &(0x7f0000000bc0)=[r9, r10, r13, r14, 0x1, 0x1, r15], 0x0, 0x10, 0x9bd}, 0x94) 4.049711462s ago: executing program 2 (id=879): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f00000005c0), 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x5}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xfdef) truncate(&(0x7f0000000000)='./file1\x00', 0x4) (async) truncate(&(0x7f0000000000)='./file1\x00', 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000016c0)={&(0x7f00000000c0), 0xc, &(0x7f0000001680)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x103c, 0xe, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa24, 0x3, 0x0, 0x1, [{0x380, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x370, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x62, 0x1, "fc92168e2f6a66519ecedc84a93033f222ca0ce2960d90737a61556a21eedb98c508d1319617a932d424c68e9f6121fdfe8aa64df440754c8519078bbd84d816eb12d76b8c9669136a552321fc49cf8205da854bfbf6238825b7ca3a5559"}, @NFTA_DATA_VALUE={0xc7, 0x1, "17ab024415c1905dcab34b39c3613b7f3748fe8eaa6a56fa670713db6f2865eeb591bc0aa82400486c1a4d0b54a3b1333a14f335ff26428ef9c3f336268bf7f730add1de90b2b919319bb6d4403861d1dc1a3cb60be40ea07002b33bc5cffce5ca7f6dca5a47d52290e273b5cc0c3b27784097abbd5569767bb791a863ead4c3ae4001e35b67e615ef79ae44c3a0becc9b0f910877e55438e5946a2a6db734cf451f58cffaad0d380de4f4d71d85c27a20bd33db5885db9d4e7d8326ca3a0ae258e64b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xcc, 0x1, "7fa740344ec1ba61bba9ceef8a6b44306b4b5b92592c9762bfa2f150785d41d06dafcf89f18267f4371dfcbb7264b41a5f1bba9954fc03995e9f1fc23f803ee75f1e8993a98fab253624961a42461ea7d4c603867ebc0bc246a49a59b121c209e7a17d79bd1c9088c3320810bcdc1953a1c7f7d331c634b93a3162c0d643a2a16d114a0b09339249f1c585949f20bd72969134bd4b0fed6a82516de5587d2c53ffbbf71b1708c95d7f44f3cc6d051f267891eb2c040519b21f6faacb9d494169c911a52a7d6187f8"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xed, 0x1, "8ab65a3f063d1ff3507865dba21451f9e3918c495a1cff798ba235ef766a80e8ff5445c6bb9cc9eef38ba13166109586b1642e9ebf73d948ff908127447909bb94418a631b920353c3d03868abdcd3a3e85b20ffc7e7ba3b420b443245c4081c2911fb7deda1220a461a803db034bd24866defd24b76e3fa6fce2e6661e719d19c6561477096012bc3f6c2a415465939ee0e4d6575f6ace0ca84be0878c9671e9c55b3f6bdea13ed93dced0f4e144227af08eb46b839402d92f2b61b682106c0bd205aba081552253539a01881c4636879a4a7b69113ca380d7aa9e604622c510632886244b68d546c"}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @osf={{0x8}, @void}}]}, {0x1e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8f, 0x6, 0x1, 0x0, "72d63cbcb18c65ce5be956d7628696697ae8b3493f87f55ffb1474399d77683a3f8c84b6ff4fae72d24f9c7aa8b1ab7bc527a48e7ae0f56a8308387f7266de966c3682e6b4fd946a9ec2e2d13b3b81beb2dc4d650e6d9f28f31720040f34b6b258f47f1cfbe4fc95aaa206d889d8e1856e6f08174263163baf15e9d883a1288827487a7c580fedf0a5e225"}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x108, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x101, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x4bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1ac, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x99, 0x1, "29b65e0b7d600d8e16dbfcc5686a92d99fd47b10db70e44c714e5bae81cbb979676058a6a02bd404b9e78e8d3a14c7c1c04e32b250732ef0b365f7865f853066a7074f71a08dfbf041fddd15f9936ffcff3486af16ee25788ae61d3f1f689a0c0417d564663c45e038921f2018207e03349b4763b2f83aa953eed9cf6c3ed02139b58e737ea55938d88152060341b5657fcafd0b41"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "44d4f44c80d9f5c37ad0e7d459617396c2444fdabf0f8112e20cce3bbb682977014b07e39a3f8d6486292fd6ee2625cd6cb3aa1c61d2562c417193b0d7d1edb586cf99830cae1bfc8307db3eebca521eb68730e011ea25f620557f5d1ea839d99222fbe417a66aa7316dc0092aecdbabbf8c78604919ea2eaf2ce46580c74985dd99b31319ce5b6657053a85b10f8e2d30b6d6088515f9fedd8c871e73dac7829b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY={0x2b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "af3c5f286728cb79718d12e1472873dccacf7e2d38460b588bc3d685c967698151c5bf9ed21107cce015be4578d98e40e6a18444fc974fcbb58e5f9f109613f3aea7e7f6e5b5fa3e9fb9086f6f4a76a2b77237d6bc"}, @NFTA_DATA_VALUE={0x59, 0x1, "abff22b1653c477b98fceb017792e9c80e2d00a7618dd3910bb94ab7f946b69e8596153d722329e4ab23e6f07e373d4d6a39070bfb2e44e365a2577042302d6c19d9d0dcf5eca19814da3e70e4b19999a72567ff44"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x66, 0x1, "6a4d393b08ea2d542fe3f4e93990b7bcb856133f1ab4d2ae91cc5456147db8a7194d601f80533d8271779f1535eb4a056d4bdeb14e43ab5b279baf7a905fb28b6c2e46b2fc32698a31501b6fbec808b7bd5c8689997243c2d36e586a7ed84f689966"}, @NFTA_DATA_VALUE={0xaa, 0x1, "7eb125c24a5ae8977791e91af6f05c4d76b0b20680adad276e65ba26bec7970ba9002daf080f595481bcc00673a9a1e93ba2ae9d1dc5a0a15891c46d2766b12a5ad2cf3bbe54b8b9cf4334bd59689f86f0f8db3cfe103210e40aefe05490b77927e7a64b0140af7ffbe69e18b054ca10152545537ff127fd2e4f97d533cbf0af8992ec0e779a6b7a13a60d955f2f30fde343d5bfb1de8e24e0791d92b56d42629fb5338cd89c"}, @NFTA_DATA_VALUE={0x9a, 0x1, "59b02407e751ded800dffb5fee26171c6a068f7e6d1d44b4a02d68e6564532c69f489cc2600a2ab32f0446b15c728564635dd1d98cde72b800a659b169f8b56526d6f9ec2575e9805376c7773c6f3c26948643c1e4773263f4353e38d132867f6ac8eee1f6224684115e87369813e698565619c476412a2393928ff550e24284f53df5cf51b559b972df9423bbeb3e11cb334874fa43"}, @NFTA_DATA_VALUE={0x1c, 0x1, "7ae7d2aa0eacaaadc2a99e84ca1df4c850e236e364405f85"}]}, @NFTA_SET_ELEM_USERDATA={0x42, 0x6, 0x1, 0x0, "ada6528c6673512770072957ebaea1ad4bda5f2cedc7fc169cd73d470054fed5b025a9c4d7a9f9418b32c5151f028f511831be44da54e4d3c10cfdfe48c8"}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c4, 0x3, 0x0, 0x1, [{0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0xe8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "38ce46e1acdd5785315107d2a84a605896387c6f5c64f48276c535dc02b1416025bcba83461dfb2397943eb65fc7261f6d2518827a96527f4174d8840ef51be253aeed670244a47f2c457ecf8053295ee86ce8dfb2b46b5939fc2cd4c18ed536edf0b628a32fee0816816c6ee99710747fd6791782ab6d6b62b4bf840015296aaab3ba9ddee859e6c343d88b5a"}, @NFTA_DATA_VALUE={0x4e, 0x1, "877dcfee45c40e719a5ecaca4cbf10c01d300f2dd31bccc9db8e12f9cb605bf9a468c4b25dd177660e0202db248baab5829998b56f5ec39d88d7fbae00ab6daaa6356813426ed12cbf3b"}]}, @NFTA_SET_ELEM_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "93349db8f8f14f6f6aaa6a834a6780b60dc06708db2893aedb3e20d2ddbd61dcf787f4d8fcbb15b04bec9b09ed798e4af2d2c1bc67095ec7d0d99314b6a223a53a15d706acb046be61"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}, {0x424, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0xa8, 0xb, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x44, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_KEY={0x230, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8e, 0x1, "2d320f10a1546582d7a50226deb65c74e6f3706a4802d9f57f68461bde71bee26e0071a4302fcfd9aeb776c6f70e296a9ff62928964c0f40d91b06fa2cff84c2cac02171144271939c5d11615b974f00fdc047280d7f58911ebae08422dbdaab5b6bc34475ae55342fe62ad41b94ca67b3bb16648951d6718ad856ebe5bbc4effe25a9cd82f88ee8e856"}, @NFTA_DATA_VALUE={0xde, 0x1, "4d768f85363dd1d95f669848022df91ce7a059cda87b3540cf19f3a63a62aaf68bda8109ed3007ed5176e3f7b67e07fcfd83c8146730d7a82434a9a57b01c6e5dbd45acef90fc75090febc6dd766b090b47cbc74cd3aee3b64dc896dd4fd896faf51c2fa7037a89e61472252a817e68728a1d163a09374810f962d1465c0fd913f9d91d2ae292c6030d8516fd184ebc58729614196073dbe7fd13ca27c17263a24a111b497c5c5d8c065c73a43b7dcf6f623c263b604c06b5254c9f8592e0ceee470a58e8b72ab56368f30fed0cfe1e2349a783f1a5deec23b89"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5f, 0x1, "251c819794c0d617431c410f2aad64552d3c9359fd4cb8910de20c11a9bd481c8cc8207f46cf016c190ab53fe1f6b085f764e87f34d2411a60c3749c9a5bdb38d28418c679aa0282848ad7f9a6fded884a7d3a338e3e80005791fc"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_RANGE_OP={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x1f, 0x6, 0x1, 0x0, "a6d292c3471ebf8299b725066119ac118d3d965322ff9f7a61513c"}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1064}}, 0x20004001) 3.954377268s ago: executing program 4 (id=880): mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f00000002c0)='GPL\x00', 0x401, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x2, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1], &(0x7f0000000780)=[{0x0, 0x1, 0xb, 0x7}, {0x1, 0x3, 0xe, 0xb}, {0x4, 0x5, 0x10, 0x8}, {0x1, 0x2, 0xd, 0x6}, {0x0, 0x3, 0xf, 0x1}], 0x10, 0x7fff}, 0x94) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000d50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r6, &(0x7f0000005880)=ANY=[@ANYBLOB="00c0b6040b6e2334a66600008606"], 0x40) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r10, &(0x7f0000000200)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1, 0xffffffec, 0xf) syz_emit_ethernet(0x1015, &(0x7f00000013c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@x25={0x805, {0x3, 0xd, 0x1, "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"}}}}, &(0x7f0000002400)={0x1, 0x3, [0xed1, 0x94, 0x8da, 0x1bd]}) write$FUSE_OPEN(r4, &(0x7f0000000240)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 3.779134119s ago: executing program 40 (id=880): mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x2, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f00000002c0)='GPL\x00', 0x401, 0xd6, &(0x7f0000000440)=""/214, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x2, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1], &(0x7f0000000780)=[{0x0, 0x1, 0xb, 0x7}, {0x1, 0x3, 0xe, 0xb}, {0x4, 0x5, 0x10, 0x8}, {0x1, 0x2, 0xd, 0x6}, {0x0, 0x3, 0xf, 0x1}], 0x10, 0x7fff}, 0x94) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000d50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r6, &(0x7f0000005880)=ANY=[@ANYBLOB="00c0b6040b6e2334a66600008606"], 0x40) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r10, &(0x7f0000000200)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1, 0xffffffec, 0xf) syz_emit_ethernet(0x1015, &(0x7f00000013c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@x25={0x805, {0x3, 0xd, 0x1, "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"}}}}, &(0x7f0000002400)={0x1, 0x3, [0xed1, 0x94, 0x8da, 0x1bd]}) write$FUSE_OPEN(r4, &(0x7f0000000240)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3, @ANYRESOCT=r4, @ANYRES8=r3], &(0x7f0000000100)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 3.736198963s ago: executing program 2 (id=882): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) write(r1, &(0x7f0000000280)='0', 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @empty}, &(0x7f0000000200)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x9, 0x400, 0x5161, 0xffffffffffffffff, 0x400, '\x00', r3, r0, 0x2, 0x4, 0x5, 0x3}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000000c0), &(0x7f0000000180)='./cgroup.cpu/test/memory.oom_control\x00', 0x25, 0x2) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)="03", 0x1) r5 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x4000000000000004, &(0x7f0000000040), 0x2, 0x6}) syz_ublk_setup_io_uring(0x23, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) 3.685093178s ago: executing program 2 (id=883): r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018070000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100000a0000650005000000000018010000786c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.976034044s ago: executing program 5 (id=887): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x4000801, 0x4, 0x4}) write(r0, &(0x7f0000000400)='3', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='sys_mnt\x00', 0x17f) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000002f80)=""/54) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=ANY=[@ANYRES64=r3], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11) close_range(r2, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x230) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}}, 0x0, 0x0, 0x300, 0x0, 0x26}, 0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f001, 0x2}) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) 2.760183506s ago: executing program 2 (id=888): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x4, 0xc3, &(0x7f0000000140)="8600bc5ff89b7a52975b95acd8054b91a5a07a73b379552e2a0800d91c450bc2fbdabb8d252a066ed7e54e52bb2b38d4c274a9ef1749eb6f03fa93d7a040ceac68adf8e766297b60eb6fe6ebeffbbfcdde2a5b0777c3829a759b2b26260053e25bbae7817c8987accc61d7264e92c66fd1846fa9e1cf35ccd76639dc549061a9381cebef199484a71a12cf9ee39ce252711f9587db6a77d0447a2d5c9ffb41b3bd77f9d63039fccf10cb727e69289172723f60c18c0d10f54f03ebd714f83db2035ef5"}) (async) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) (async) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x2, 0x5, 0xe, 0x1000}]}, 0x10) 2.347685744s ago: executing program 5 (id=889): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c3, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000480)=ANY=[]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001100b21714095c5e5f80e1875da4a0c6000000000000000000000200000000", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x2, 0xff1, &(0x7f0000000a80)=""/4081, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x65c1, r7, 0x2, &(0x7f0000001b40)=[r0, r0, r7, 0xffffffffffffffff, r0, r0], &(0x7f00000001c0)=[{0x1, 0x3, 0x27, 0x5}, {0x3, 0x5, 0xc, 0x8}], 0x10, 0x66}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2.295324072s ago: executing program 2 (id=890): syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447608000000000000000050000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VNI={0x8}]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8, 0x1c}]}, 0x24}}, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file0\x00', &(0x7f00000001c0)={0x141000, 0x4}, 0x18) r5 = openat(r4, &(0x7f0000000000)='./file1\x00', 0x40000, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000200)={0xe, 0x5}) readv(r5, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/50, 0x100000}], 0x3) 1.95209842s ago: executing program 2 (id=891): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'xfrm0\x00'}}, 0x1e) (async) writev(r0, &(0x7f0000000c00)=[{&(0x7f00000009c0)="9401236586c4ee0dcef1cbc11d4f40d94c7ce1e5c89bb11d8d2fd6904a33cc1154f66e2abd5e8d344f5bbdf1144d905d8f0eb01392dbeb54375780c13dade6ee8e51c82909fc6b89b3d2469a144b3e214227efd6091af33f082a240be3d68e85bf378b918ebb950e3cbc24ae265dd8ac1be3abc4c9c8a588917b4a43a74a057fff7c66d77b82e448b6d387a19df1c80cc1e3cb444cad602f1de0a822e305c4c750e4833404", 0xa5}, {&(0x7f0000000a80)="0cd148733204db417e9132b62bafddf4e241fd1c86991733404e1360cd20184c", 0x20}, {&(0x7f0000000ac0)="e74a60a3af8b9941f5ce23b5777017e205df5ba90f811025e0e841b5648d0d4e40cab94840be4cddecbc84acda51b3d5b9cc331123b1a187a2497110577608977307998af7a39b3ecacc73f549242c1ae1db5accfc3d0b3cf9bf3bb8679254527cf338237f53e27c2de9b138cdbeb910d5c7ac0feae293286f3c3076beecba9adb3af3628311c74ce211f6b0a1ee9f00ecb6459c5d2c85e9e2130a44e381", 0x9e}, {&(0x7f0000000b80)="0545a81845ce7cbdedb1a7c584e74c5870d352d0bc4dac3b6d2b51c1be404ca8f18bc7d0f548d3b7ddb034a8b4e1655db4ae3053b2f86782d5ea98adf9d2c2eadddfafd0d57eec7d17ec4001d250849a77fd51e65604142a1503be67e04483162f5c", 0x62}], 0x4) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r3 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) bind$can_raw(r2, &(0x7f0000000700)={0x1d, r4}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x17, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async, rerun: 32) r6 = socket(0x1a, 0x805, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1c, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb47, 0x0, 0x0, 0x0, 0x4}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x401}, @generic={0x9, 0x0, 0x9, 0xa89, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ldst={0x3, 0x2, 0x2, 0x3, 0x1, 0x50, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000380)='GPL\x00', 0x7, 0xf, &(0x7f00000003c0)=""/15, 0x40f00, 0x60, '\x00', r7, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x8, 0x0, 0x21}, 0x10, 0xffffffffffffffff, r5, 0xa, &(0x7f0000000540)=[r1], &(0x7f0000000580)=[{0x2, 0x1, 0x8, 0x9}, {0x4, 0x2, 0xb, 0x5}, {0x0, 0x2, 0x2, 0x9}, {0x4, 0x2, 0x3, 0x4}, {0x2, 0x2, 0x1, 0x6}, {0x1, 0x4, 0xc, 0x1}, {0x2, 0x5, 0x9, 0x4}, {0x5, 0x3, 0x6, 0x7}, {0x3, 0x5, 0xa, 0x3}, {0x4, 0x5, 0x9, 0x8}], 0x10, 0xffffffff}, 0x94) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000180)={r8, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) (async, rerun: 32) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) (rerun: 32) write(r9, &(0x7f0000000100)='select \n', 0x10) (async) write(r9, &(0x7f0000000100)='file read /etc/passwd task.uid=0X0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) (async) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r10, 0x4b46, 0xffffffffffffffff) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f00000000c0)={r8}, &(0x7f00000001c0)=0x8) 1.457545273s ago: executing program 5 (id=896): r0 = getpid() process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000a00000018070000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100000a0000650005000000000018010000786c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 956.786024ms ago: executing program 1 (id=898): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0x58}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4806}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="010000df6d320892cb1775e1b1be0001000000140003007665746830000000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) (async) sendmsg$nl_route(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 609.799195ms ago: executing program 1 (id=899): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newnexthop={0x28, 0x68, 0x401, 0x1000000, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x7c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x815}, 0x20000000) 488.1891ms ago: executing program 1 (id=900): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000001"}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) 486.429423ms ago: executing program 5 (id=901): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000100)=0xe0000, 0x4) (async, rerun: 32) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) setsockopt(r0, 0x80, 0x3, &(0x7f00000019c0)="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", 0x1000) (async, rerun: 64) write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) (async) lseek(r0, 0x0, 0x0) (async) read(r0, &(0x7f0000000100), 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x17, 0x4, &(0x7f0000001980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000140)='GPL\x00', 0xd, 0xff3, &(0x7f00000004c0)=""/4083, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 486.175414ms ago: executing program 0 (id=854): r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0xcf) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x3, {0x1, 0x0, 0x2}, 0x1}, 0x19) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, r3, 0x0, {0x2, 0xf, 0x3}}, 0x18) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x2, 0x8, 0x80, "dfbf9d1b8eb3f1b4adb069df4abec2fe57bc5e28a04b818df1bb1b5fab6dbec7", 0x34324d59}) munmap$binder(0x0, 0xffffffff) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) setns(0xc9, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/tty/drivers\x00', 0x0, 0x0) preadv2(r8, &(0x7f0000001900)=[{&(0x7f0000001480)=""/239, 0xef}], 0x1, 0xffffffff, 0x6, 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0040af", @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340001010101010100000400e200"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x8010) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, {{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x44, 0x8, [{{@in6=@loopback}, 0x0, @in6=@private2}]}]}, 0x16c}}, 0x0) accept4$phonet_pipe(r8, 0x0, &(0x7f00000002c0), 0xeec26f50b605dce7) 485.692892ms ago: executing program 1 (id=902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_NEWNSID={0x24, 0x58, 0x5, 0x0, 0x0, {}, [@NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r1}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000540000001500020000000000bf010000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000540000001500020000000000bf010000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x36, 0x0, &(0x7f0000000600)="00112233445566778899aabb0800450000280001000040067ceb7f0000017f00000100500050000000000000000050022000917c0000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x36, 0x0, &(0x7f0000000600)="00112233445566778899aabb0800450000280001000040067ceb7f0000017f00000100500050000000000000000050022000917c0000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/kmsg\x00', 0x95) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r3}}, './dev/kmsg\x00'}) semop(0x0, &(0x7f0000000040)=[{0x2, 0xd9, 0x3800}], 0x1) (async) semop(0x0, &(0x7f0000000040)=[{0x2, 0xd9, 0x3800}], 0x1) semop(0x0, &(0x7f0000000140)=[{0x4}, {0x2}], 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x0, 0x0, 0x34325842}}) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x0, 0x0, 0x402, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r5, 0xe) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001740)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="997425bd7000fbdbdf25150000007c0001803c00028008000400070000000800040002000000080004000000010008000400030000000800030006000000080004000500000008000100100000003c0002800800020003000000080003002761000000020000000000000800010007000000080003000600000008000300020000000800020001800000"], 0x90}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r8, 0x11, 0x7efffeff00000000) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000001010400000000141a00000200001024000180140001800800010000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000000101010000000000000000020000020800160000000007240001801400018008000100e000000108000200e00000010c0002800500010000000000d583cc70"], 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) (async) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000000101010000000000000000020000020800160000000007240001801400018008000100e000000108000200e00000010c0002800500010000000000d583cc70"], 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp6\x00') 431.00237ms ago: executing program 5 (id=903): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x400) ioctl$RTC_WKALM_RD(r1, 0x40187013, &(0x7f0000000440)) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) 422.091992ms ago: executing program 0 (id=904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x1c3, 0x2f) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FIEMAP(r8, 0xc020660b, &(0x7f0000000480)=ANY=[]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001100b21714095c5e5f80e1875da4a0c6000000000000000000000200000000", @ANYRES32=r7, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x2, 0xff1, &(0x7f0000000a80)=""/4081, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x65c1, r7, 0x2, &(0x7f0000001b40)=[r0, r0, r7, 0xffffffffffffffff, r0, r0], &(0x7f00000001c0)=[{0x1, 0x3, 0x27, 0x5}, {0x3, 0x5, 0xc, 0x8}], 0x10, 0x66}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 275.87442ms ago: executing program 5 (id=905): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYRESDEC], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000780)={0x7, 0x79, 0x2}, 0x7) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f00000004c0)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r5, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) (async) write(r5, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000052c0), r6) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000052c0), r6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000005680)={0x0, 0x0, &(0x7f0000005640)={&(0x7f00000054c0)={0x2c, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x44) socket$igmp(0x2, 0x3, 0x2) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xd6a6, 0x800, 0x1, 0x256}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) (async) r8 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xd6a6, 0x800, 0x1, 0x256}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000040)={0x28, 0x3, r13, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x525b}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x4b, 0x0, @fd, 0x1, 0x0, 0x0, 0x11, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) 275.489279ms ago: executing program 1 (id=906): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket(0x2, 0x5, 0x5) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, 0x0, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9f9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f00000001c0)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "b9fb3c16"}, 0x1, 0x2, {0x0}, 0x7000000}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000300), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0xc) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x24, @empty}, 0x10) 0s ago: executing program 1 (id=907): socket$netlink(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000004080)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x4, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) (async) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) setsockopt(r4, 0x84, 0x81, &(0x7f0000000040)="0000000001000000", 0x8) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x5) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) kernel console output (not intermixed with test programs): y: 9 callbacks suppressed [ 57.727113][ T6344] loop7: detected capacity change from 0 to 512 [ 57.751807][ T6344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.779885][ T5803] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.790141][ T6352] netlink: 176 bytes leftover after parsing attributes in process `syz.5.290'. [ 57.790472][ T6352] netlink: 176 bytes leftover after parsing attributes in process `syz.5.290'. [ 57.790533][ T6352] netlink: 176 bytes leftover after parsing attributes in process `syz.5.290'. [ 57.790592][ T6352] netlink: 176 bytes leftover after parsing attributes in process `syz.5.290'. [ 57.790646][ T6352] netlink: 176 bytes leftover after parsing attributes in process `syz.5.290'. [ 57.790695][ T6352] netlink: 176 bytes leftover after parsing attributes in process `syz.5.290'. [ 57.790742][ T6352] netlink: 176 bytes leftover after parsing attributes in process `syz.5.290'. [ 57.790784][ T6352] netlink: 176 bytes leftover after parsing attributes in process `syz.5.290'. [ 57.871578][ T6361] No control pipe specified [ 57.900484][ T6359] loop1: detected capacity change from 0 to 512 [ 57.928347][ T6359] ext4: Unknown parameter 'noacl' [ 58.017336][ T6371] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 58.343220][ T6361] bridge_slave_1: left allmulticast mode [ 58.343249][ T6361] bridge_slave_1: left promiscuous mode [ 58.343351][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.344534][ T6361] bridge_slave_0: left allmulticast mode [ 58.344544][ T6361] bridge_slave_0: left promiscuous mode [ 58.344603][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.363267][ T5574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.393190][ T4721] Bluetooth: hci4: command tx timeout [ 58.431912][ T6380] loop5: detected capacity change from 0 to 8192 [ 58.525978][ T6387] loop5: detected capacity change from 0 to 1024 [ 58.540660][ T6387] ext4: Unknown parameter 'obj_role' [ 58.547823][ T6387] binder: 6386:6387 ioctl 80205871 20000800 returned -22 [ 58.554987][ T6387] binder_alloc: binder_alloc_mmap_handler: 6386 20ffd000-21000000 already mapped failed -16 [ 58.562855][ T6387] binder: 6386:6387 tried to acquire reference to desc 0, got 1 instead [ 58.563071][ T6387] binder_alloc: 6386: binder_alloc_buf, no vma [ 58.563114][ T6387] binder: cannot allocate buffer: vma cleared, target dead or dying [ 58.563138][ T6387] binder: 6386:6387 transaction async to 6386:0 failed 5/29189/-3, code 0 size 37-24 line 3408 [ 58.577107][ T868] binder: undelivered TRANSACTION_ERROR: 29189 [ 58.632311][ T6393] loop1: detected capacity change from 0 to 256 [ 58.640453][ T6391] loop5: detected capacity change from 0 to 1024 [ 58.841274][ T6411] gre1: entered promiscuous mode [ 58.842311][ T6413] binder: 6410:6413 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 58.842329][ T6413] binder: 6413 RLIMIT_NICE not set [ 58.898032][ T6413] binder: 6410:6413 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 58.898412][ T868] binder: undelivered death notification, 0000000000000000 [ 59.288217][ T26] net_ratelimit: 259 callbacks suppressed [ 59.288235][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.345318][ T6427] 9p: Bad value for 'rfdno' [ 59.403228][ T6429] loop6: detected capacity change from 0 to 8192 [ 59.474976][ T6434] loop2: detected capacity change from 0 to 512 [ 59.477629][ T6434] ext4: Unknown parameter 'noacl' [ 59.533728][ T6435] netlink: 'syz.6.311': attribute type 58 has an invalid length. [ 59.534013][ T6435] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 59.606793][ T6437] loop1: detected capacity change from 0 to 8 [ 59.607596][ T6437] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 59.607604][ T6437] unable to read xattr id index table [ 59.609085][ T6437] SQUASHFS error: zlib decompression failed, data probably corrupt [ 59.609101][ T6437] SQUASHFS error: Failed to read block 0x9b: -5 [ 59.609110][ T6437] SQUASHFS error: Unable to read metadata cache entry [99] [ 59.609117][ T6437] SQUASHFS error: Unable to read inode 0x127 [ 59.882394][ T6444] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.123837][ T6462] loop2: detected capacity change from 0 to 8192 [ 60.159705][ T6468] team0: entered promiscuous mode [ 60.159722][ T6468] team_slave_0: entered promiscuous mode [ 60.159788][ T6468] team_slave_1: entered promiscuous mode [ 60.159838][ T6468] bond1: entered promiscuous mode [ 60.160771][ T6468] macvlan2: entered promiscuous mode [ 60.161250][ T6468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 60.259986][ T6470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.279914][ T6470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.317831][ T4890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.339786][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.416399][ T6495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.417839][ T6495] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.669746][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.669817][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.669958][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.214883][ T6522] ext4: Unknown parameter 'noacl' [ 61.274971][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.558796][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.649531][ T6536] __nla_validate_parse: 126 callbacks suppressed [ 61.649548][ T6536] netlink: 32 bytes leftover after parsing attributes in process `syz.5.340'. [ 61.706853][ T6543] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 61.809351][ T6549] netlink: 44 bytes leftover after parsing attributes in process `syz.7.345'. [ 61.817265][ T6544] vfat: Unknown parameter 'nom' [ 62.553016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.822706][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.874867][ T6589] set_capacity_and_notify: 6 callbacks suppressed [ 62.874883][ T6589] loop2: detected capacity change from 0 to 2048 [ 62.907271][ T6589] Alternate GPT is invalid, using primary GPT. [ 62.907354][ T6589] loop2: p2 p3 p7 [ 62.977753][ T5130] udevd[5130]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 62.980854][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 62.985892][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 63.010645][ T6598] loop6: detected capacity change from 0 to 512 [ 63.130215][ T6607] loop7: detected capacity change from 0 to 8192 [ 63.181843][ T6608] loop2: detected capacity change from 0 to 512 [ 63.185524][ T6608] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.186598][ T6608] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 63.603871][ T6616] loop7: detected capacity change from 0 to 512 [ 63.604277][ T6616] ext4: Unknown parameter 'noacl' [ 63.686348][ T6618] loop1: detected capacity change from 0 to 128 [ 63.706721][ T6618] EXT4-fs mount: 1 callbacks suppressed [ 63.706740][ T6618] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.785294][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.787452][ T5574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.851576][ T6622] netlink: 40 bytes leftover after parsing attributes in process `syz.6.367'. [ 63.884348][ T6625] loop2: detected capacity change from 0 to 2048 [ 63.902416][ T6625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.966059][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.392857][ T6635] loop5: detected capacity change from 0 to 8192 [ 64.479301][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.479334][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.513680][ T24] cfg80211: failed to load regulatory.db [ 64.612786][ T6643] loop7: detected capacity change from 0 to 8192 [ 64.763528][ T6651] loop5: detected capacity change from 0 to 256 [ 65.090818][ T24] net_ratelimit: 2 callbacks suppressed [ 65.090836][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.579798][ T6691] pimreg: entered allmulticast mode [ 65.691099][ T6699] fuse: Bad value for 'fd' [ 65.698499][ T6699] overlay: Unknown parameter 'dont_hash' [ 65.713837][ T6699] overlayfs: failed to resolve './file0/file0/file0': -2 [ 65.720011][ T6695] ext4: Unknown parameter 'noacl' [ 65.919077][ T6718] FAULT_INJECTION: forcing a failure. [ 65.919077][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 65.919096][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.2.386 Not tainted syzkaller #0 PREEMPT [ 65.919106][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.919110][ T6718] Call trace: [ 65.919113][ T6718] show_stack+0x2c/0x3c (C) [ 65.919130][ T6718] __dump_stack+0x30/0x40 [ 65.919140][ T6718] dump_stack_lvl+0xd8/0x12c [ 65.919149][ T6718] dump_stack+0x1c/0x28 [ 65.919158][ T6718] should_fail_ex+0x418/0x58c [ 65.919168][ T6718] should_failslab+0xc4/0x120 [ 65.919186][ T6718] __kmalloc_noprof+0x108/0x6c8 [ 65.919197][ T6718] security_msg_msg_alloc+0x54/0x304 [ 65.919207][ T6718] load_msg+0x1f4/0x270 [ 65.919214][ T6718] do_msgrcv+0x1e0/0x1024 [ 65.919222][ T6718] __arm64_sys_msgrcv+0xd0/0xe8 [ 65.919229][ T6718] invoke_syscall+0x98/0x244 [ 65.919242][ T6718] el0_svc_common+0xec/0x23c [ 65.919252][ T6718] do_el0_svc+0x4c/0x5c [ 65.919261][ T6718] el0_svc+0x60/0x1d8 [ 65.919271][ T6718] el0t_64_sync_handler+0x44/0x104 [ 65.919280][ T6718] el0t_64_sync+0x198/0x19c [ 65.919822][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 65.972969][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 66.132642][ T6738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.152722][ T4890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.167762][ T6738] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.389: missing EA_INODE flag [ 66.169007][ T6738] EXT4-fs (loop2): Remounting filesystem read-only [ 66.177187][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.456838][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 66.509581][ T6758] netlink: 'syz.7.393': attribute type 1 has an invalid length. [ 66.528859][ T6758] bond1: entered promiscuous mode [ 66.529263][ T6758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.610723][ T6763] binder: 6762:6763 ioctl c0306201 20000300 returned -14 [ 66.615938][ T6764] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 66.615954][ T6764] FAT-fs (loop6): bogus number of directory entries (1) [ 66.615961][ T6764] FAT-fs (loop6): Can't find a valid FAT filesystem [ 66.617947][ T6764] netlink: 60 bytes leftover after parsing attributes in process `syz.6.395'. [ 66.632235][ T6758] veth3: entered allmulticast mode [ 66.634710][ T6758] bond1: (slave veth3): making interface the new active one [ 66.634722][ T6758] veth3: entered promiscuous mode [ 66.638783][ T6758] bond1: (slave veth3): Enslaving as an active interface with an up link [ 66.902076][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.419058][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.553990][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'. [ 67.626050][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.406'. [ 68.128811][ T6850] set_capacity_and_notify: 7 callbacks suppressed [ 68.128825][ T6850] loop1: detected capacity change from 0 to 8192 [ 68.226378][ T6865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.416'. [ 68.314809][ T6870] loop5: detected capacity change from 0 to 512 [ 68.327649][ T6870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.561393][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.573467][ T6870] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.417: iget: bad i_size value: 2533274857506816 [ 68.621015][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.654309][ T6882] fuse: Bad value for 'fd' [ 68.658960][ T6882] loop5: detected capacity change from 0 to 1024 [ 68.659557][ T6882] EXT4-fs (loop5): inodes count not valid: 32 vs 8192 [ 68.669971][ T6876] loop2: detected capacity change from 0 to 8192 [ 68.737366][ T6878] netlink: 'syz.1.420': attribute type 83 has an invalid length. [ 68.740045][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 68.753574][ T6876] loop2: p1[EZD] p3 p4 [ 68.753587][ T6876] loop2: partition table partially beyond EOD, truncated [ 68.754001][ T6876] loop2: p1 size 67043332 extends beyond EOD, truncated [ 68.755961][ T6876] loop2: p3 start 33556736 is beyond EOD, truncated [ 68.755973][ T6876] loop2: p4 size 32769 extends beyond EOD, truncated [ 69.087274][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 69.089251][ T5130] udevd[5130]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 69.156025][ T6896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.156137][ T6896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.156301][ T6896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.159313][ T6896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.159405][ T6896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.183985][ T6900] loop7: detected capacity change from 0 to 512 [ 69.184280][ T6900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.190785][ T6900] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 69.190795][ T6900] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 69.190868][ T6900] EXT4-fs (loop7): orphan cleanup on readonly fs [ 69.198221][ T6900] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.426: bg 0: block 15: invalid block bitmap [ 69.198248][ T6900] loop7: lost filesystem error report for type 5 error -117 [ 69.201999][ T6894] loop6: detected capacity change from 0 to 8192 [ 69.202250][ T6900] EXT4-fs (loop7): Remounting filesystem read-only [ 69.202534][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 69.202549][ C0] EXT4-fs (loop7): initial error at time 69: ext4_validate_block_bitmap:436 [ 69.202563][ C0] EXT4-fs (loop7): last error at time 69: ext4_validate_block_bitmap:436 [ 69.204142][ T6900] EXT4-fs (loop7): 1 truncate cleaned up [ 69.204568][ T6900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.232469][ T6902] loop2: detected capacity change from 0 to 512 [ 69.234872][ T6902] ext4: Unknown parameter 'noacl' [ 69.266508][ T5803] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.326493][ T6912] netlink: 'syz.6.430': attribute type 11 has an invalid length. [ 69.616681][ T6916] loop6: detected capacity change from 0 to 512 [ 69.634098][ T6916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.864622][ T6927] loop7: detected capacity change from 0 to 512 [ 69.898138][ T6927] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.012939][ T6936] loop2: detected capacity change from 0 to 512 [ 70.057761][ T6936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.193773][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 70.194107][ T6950] xt_MASQUERADE: bad MAP_IPS. [ 70.254550][ T5574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.320735][ T6958] netlink: 32 bytes leftover after parsing attributes in process `syz.6.439'. [ 70.406005][ T6965] EXT4-fs: Ignoring removed bh option [ 70.426421][ T6965] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.442: corrupted in-inode xattr: e_value size too large [ 70.426442][ T6965] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.426596][ T6965] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.442: couldn't read orphan inode 15 (err -117) [ 70.426609][ T6965] loop6: lost filesystem error report for type 5 error -117 [ 70.427180][ T6965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.473167][ T6965] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #12: comm syz.6.442: corrupted in-inode xattr: bad e_name length [ 70.481692][ T6965] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #12: comm syz.6.442: corrupted in-inode xattr: bad e_name length [ 70.498595][ T6965] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #12: comm syz.6.442: corrupted in-inode xattr: bad e_name length [ 70.501448][ T6936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.434'. [ 70.508658][ T6965] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #12: comm syz.6.442: corrupted in-inode xattr: bad e_name length [ 70.519350][ T6965] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #12: comm syz.6.442: corrupted in-inode xattr: bad e_name length [ 70.519809][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.443'. [ 70.531520][ T6965] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #12: comm syz.6.442: corrupted in-inode xattr: bad e_name length [ 70.633047][ T24] net_ratelimit: 10 callbacks suppressed [ 70.633061][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.640458][ T5574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.728842][ T5803] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.854151][ T7000] cgroup: name respecified [ 70.875360][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.877082][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.056543][ T7017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.448'. [ 71.250607][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.287712][ T7020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.288673][ T7020] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.328333][ T7015] syzkaller0: entered promiscuous mode [ 71.328355][ T7015] syzkaller0: entered allmulticast mode [ 71.340999][ T7015] EXT4-fs: Ignoring removed nobh option [ 71.398956][ T7015] EXT4-fs (loop5): 1 truncate cleaned up [ 71.404024][ T7015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.673913][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.851929][ T7040] ublk_ctrl_add_dev: invalid recovery flags 10 [ 71.875598][ T7039] netlink: 'syz.6.458': attribute type 2 has an invalid length. [ 71.875615][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.458'. [ 72.644431][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.668604][ T7055] bond2: option lp_interval: invalid value (18446744073709551613) [ 72.668620][ T7055] bond2: option lp_interval: allowed values 1 - 2147483647 [ 72.671261][ T7055] bond2 (unregistering): Released all slaves [ 72.701214][ T10] hid-generic 0003:1234:5678.0002: collection stack underflow [ 72.701232][ T10] hid-generic 0003:1234:5678.0002: item 0 0 0 12 parsing failed [ 72.701487][ T10] hid-generic 0003:1234:5678.0002: probe with driver hid-generic failed with error -22 [ 72.712762][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.023327][ T7084] EXT4-fs: Ignoring removed i_version option [ 73.023349][ T7084] ext4: Unknown parameter 'd' [ 73.061196][ T7088] netlink: 'syz.1.473': attribute type 4 has an invalid length. [ 73.061212][ T7088] __nla_validate_parse: 1 callbacks suppressed [ 73.061220][ T7088] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.473'. [ 73.228543][ T7087] fuse: root generation should be zero [ 73.549315][ T7097] set_capacity_and_notify: 9 callbacks suppressed [ 73.549341][ T7097] loop7: detected capacity change from 0 to 512 [ 73.552220][ T7097] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 73.644356][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.476'. [ 73.913425][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.936855][ T7110] loop6: detected capacity change from 0 to 512 [ 73.990784][ T7115] ip_tables: iptables: counters copy to user failed while replacing table [ 74.033221][ T7110] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.481: bad orphan inode 15 [ 74.033245][ T7110] loop6: lost filesystem error report for type 5 error -117 [ 74.033353][ T7110] ext4_test_bit(bit=14, block=5) = 0 [ 74.033796][ T7110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.116120][ T5574] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.443301][ T4814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.468785][ T7123] dlm: Unknown command passed to DLM device : 0 [ 74.468785][ T7123] [ 74.555710][ T7127] FAULT_INJECTION: forcing a failure. [ 74.555710][ T7127] name fail_futex, interval 1, probability 0, space 0, times 0 [ 74.555733][ T7127] CPU: 0 UID: 0 PID: 7127 Comm: syz.5.487 Not tainted syzkaller #0 PREEMPT [ 74.555744][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.555749][ T7127] Call trace: [ 74.555752][ T7127] show_stack+0x2c/0x3c (C) [ 74.555773][ T7127] __dump_stack+0x30/0x40 [ 74.555785][ T7127] dump_stack_lvl+0xd8/0x12c [ 74.555796][ T7127] dump_stack+0x1c/0x28 [ 74.555807][ T7127] should_fail_ex+0x418/0x58c [ 74.555820][ T7127] should_fail+0x14/0x24 [ 74.555830][ T7127] get_futex_key+0x1ec/0x12b0 [ 74.555841][ T7127] futex_wake+0x10c/0x594 [ 74.555851][ T7127] do_futex+0x2c4/0x378 [ 74.555861][ T7127] __arm64_sys_futex+0x2e4/0x418 [ 74.555871][ T7127] invoke_syscall+0x98/0x244 [ 74.555883][ T7127] el0_svc_common+0xec/0x23c [ 74.555894][ T7127] do_el0_svc+0x4c/0x5c [ 74.555905][ T7127] el0_svc+0x60/0x1d8 [ 74.555916][ T7127] el0t_64_sync_handler+0x44/0x104 [ 74.555926][ T7127] el0t_64_sync+0x198/0x19c [ 74.649769][ T7136] sctp: [Deprecated]: syz.7.489 (pid 7136) Use of int in maxseg socket option. [ 74.649769][ T7136] Use struct sctp_assoc_value instead [ 74.808588][ T7213] loop6: detected capacity change from 0 to 8 [ 74.810635][ T7213] squashfs: Unknown parameter 'func' [ 75.007140][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.155342][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.6.494'. [ 75.218267][ T7219] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 75.220988][ T7219] bond1 (unregistering): Released all slaves [ 75.404065][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. [ 75.561250][ T7233] nfs: Unknown parameter 'smackfstransmuteCª' [ 75.813756][ T7265] loop6: detected capacity change from 0 to 1024 [ 75.817446][ T7265] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 75.818758][ T7265] JBD2: no valid journal superblock found [ 75.820727][ T7265] EXT4-fs (loop6): Could not load journal inode [ 75.870560][ T7266] loop7: detected capacity change from 0 to 8192 [ 75.885526][ T7269] loop5: detected capacity change from 0 to 1024 [ 75.889724][ T7269] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 76.153735][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.179431][ T7269] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.505: lblock 2 mapped to illegal pblock 2 (length 1) [ 76.179457][ T7269] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 76.182525][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 76.182540][ C1] EXT4-fs (loop5): initial error at time 76: ext4_map_blocks:790: inode 3: block 2 [ 76.182559][ C1] EXT4-fs (loop5): last error at time 76: ext4_map_blocks:790: inode 3: block 2 [ 76.188026][ T7269] EXT4-fs (loop5): Remounting filesystem read-only [ 76.188049][ T7269] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 76.188074][ T7269] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 76.188722][ T7269] EXT4-fs (loop5): 1 orphan inode deleted [ 76.189160][ T7269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.190901][ T7269] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.260390][ T7274] random: crng reseeded on system resumption [ 76.322798][ T7286] loop7: detected capacity change from 0 to 512 [ 76.384485][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.508'. [ 76.460924][ T7298] netlink: 28 bytes leftover after parsing attributes in process `syz.5.511'. [ 76.729507][ T7303] netlink: 48 bytes leftover after parsing attributes in process `syz.5.513'. [ 76.743303][ T7303] netlink: zone id is out of range [ 76.743315][ T7303] netlink: zone id is out of range [ 76.743320][ T7303] netlink: set zone limit has 4 unknown bytes [ 76.745257][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.513'. [ 76.807963][ T7306] loop1: detected capacity change from 0 to 1024 [ 77.197660][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.327121][ T7323] loop7: detected capacity change from 0 to 8192 [ 77.371413][ T7323] loop7: RDSK (0) [ 77.371413][ T7323] AHDI p2 p3 p4 [ 77.371508][ T7323] loop7: p2 start 67108614 is beyond EOD, truncated [ 77.371519][ T7323] loop7: p3 size 55780 extends beyond EOD, truncated [ 77.374925][ T7322] tipc: Started in network mode [ 77.374945][ T7322] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 77.375018][ T7322] tipc: Enabled bearer , priority 0 [ 77.556922][ T7339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 77.622989][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.629549][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.521'. [ 77.653420][ T7340] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 77.780486][ T7347] loop5: detected capacity change from 0 to 8192 [ 78.161394][ T7357] random: crng reseeded on system resumption [ 78.182146][ T7355] /dev/loop7: Can't open blockdev [ 78.248492][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.352083][ T7376] __nla_validate_parse: 1 callbacks suppressed [ 78.352097][ T7376] netlink: 88 bytes leftover after parsing attributes in process `syz.7.525'. [ 78.352133][ T7375] netlink: 88 bytes leftover after parsing attributes in process `syz.7.525'. [ 78.396807][ T7379] overlayfs: missing 'lowerdir' [ 78.445159][ T7379] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 78.448017][ T7379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 78.448111][ T7379] EXT4-fs (loop2): orphan cleanup on readonly fs [ 78.463468][ T7379] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.529: bg 0: block 361: padding at end of block bitmap is not set [ 78.463987][ T7379] loop2: lost filesystem error report for type 5 error -117 [ 78.466520][ T7379] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 78.466538][ T7379] loop2: lost filesystem error report for type 5 error -117 [ 78.467113][ T7379] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.529: attempt to clear invalid blocks 33619980 len 1 [ 78.467140][ T7379] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.472570][ C0] EXT4-fs (loop2): error count since last fsck: 3 [ 78.472583][ C0] EXT4-fs (loop2): initial error at time 78: ext4_validate_block_bitmap:445 [ 78.472595][ C0] EXT4-fs (loop2): last error at time 78: ext4_clear_blocks:876: inode 11 [ 78.494422][ T7372] tipc: Node number set to 11578026 [ 78.502055][ T7379] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.529: invalid indirect mapped block 1811939328 (level 0) [ 78.502085][ T7379] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.504082][ T7379] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.529: invalid indirect mapped block 2185560079 (level 1) [ 78.504103][ T7379] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 78.513978][ T7379] EXT4-fs (loop2): 1 truncate cleaned up [ 78.522843][ T7379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 78.619928][ T7383] set_capacity_and_notify: 2 callbacks suppressed [ 78.619940][ T7383] loop5: detected capacity change from 0 to 4096 [ 78.642374][ T7383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.642389][ T7383] EXT4-fs (loop5): Test dummy encryption mode enabled [ 78.674692][ T7383] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 78.674740][ T7383] System zones: 0-5 [ 78.703141][ T7383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.719451][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 78.855341][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.274662][ T7373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.366871][ T7414] loop5: detected capacity change from 0 to 512 [ 79.387379][ T7414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.446795][ T7414] Injecting memory failure for pfn 0x2193cf at process virtual address 0x20001000 [ 79.455695][ T7414] Memory failure: 0x2193cf: unhandlable page. [ 79.455709][ T7414] Memory failure: 0x2193cf: recovery action for reserved kernel page: Ignored [ 79.517384][ T7430] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 79.518488][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.605079][ T7432] loop5: detected capacity change from 0 to 8192 [ 79.641120][ T7432] syz.5.537: attempt to access beyond end of device [ 79.641120][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.641142][ T7432] buffer_io_error: 10 callbacks suppressed [ 79.641148][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.641799][ T7432] syz.5.537: attempt to access beyond end of device [ 79.641799][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.641817][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.641840][ T7432] syz.5.537: attempt to access beyond end of device [ 79.641840][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.641852][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.641873][ T7432] syz.5.537: attempt to access beyond end of device [ 79.641873][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.641883][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.641903][ T7432] syz.5.537: attempt to access beyond end of device [ 79.641903][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.641913][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.641932][ T7432] syz.5.537: attempt to access beyond end of device [ 79.641932][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.641943][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.641961][ T7432] syz.5.537: attempt to access beyond end of device [ 79.641961][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.641972][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.641989][ T7432] syz.5.537: attempt to access beyond end of device [ 79.641989][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.641999][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.642016][ T7432] syz.5.537: attempt to access beyond end of device [ 79.642016][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.642026][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.642042][ T7432] syz.5.537: attempt to access beyond end of device [ 79.642042][ T7432] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 79.642052][ T7432] Buffer I/O error on dev loop5, logical block 57847, async page read [ 79.771420][ T7438] overlayfs: failed to resolve './file1': -2 [ 79.778576][ T7437] fuse: Bad value for 'fd' [ 79.856249][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 79.894466][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 80.368772][ T7372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.437618][ T7447] fuse: fd is not a fuse device [ 80.496838][ T7454] loop5: detected capacity change from 0 to 1024 [ 80.534957][ T7456] loop1: detected capacity change from 0 to 8192 [ 80.535139][ T7454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.581660][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.625531][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.707316][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.759119][ T7464] loop1: detected capacity change from 0 to 256 [ 80.759566][ T7464] vfat: Unknown parameter '00000000000000000000' [ 80.783184][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.784812][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.785759][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.793291][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.797656][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.115397][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.186935][ T7471] loop2: detected capacity change from 0 to 128 [ 81.211607][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.285291][ T7489] loop2: detected capacity change from 0 to 2048 [ 81.300419][ T7489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.328986][ T7489] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 81.331149][ T7489] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 81.331172][ T7489] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.331172][ T7489] [ 81.331182][ T7489] EXT4-fs (loop2): Total free blocks count 0 [ 81.331190][ T7489] EXT4-fs (loop2): Free/Dirty block details [ 81.331217][ T7489] EXT4-fs (loop2): free_blocks=4096 [ 81.331239][ T7489] EXT4-fs (loop2): dirty_blocks=64 [ 81.331247][ T7489] EXT4-fs (loop2): Block reservation details [ 81.331253][ T7489] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 81.335992][ T7486] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 81.433215][ T24] net_ratelimit: 2 callbacks suppressed [ 81.433230][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.444096][ T12] bridge_slave_1: left allmulticast mode [ 81.444116][ T12] bridge_slave_1: left promiscuous mode [ 81.444208][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.452330][ T7496] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.456949][ T12] bridge_slave_0: left allmulticast mode [ 81.456966][ T12] bridge_slave_0: left promiscuous mode [ 81.457051][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.576350][ T7496] loop2: detected capacity change from 0 to 2048 [ 81.676461][ T7496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.686129][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.698664][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.897124][ T12] bond0 (unregistering): Released all slaves [ 81.965226][ T7497] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 16: comm syz.2.553: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 81.980106][ T7497] openvswitch: netlink: Missing key (keys=40, expected=100) [ 81.986872][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.554'. [ 82.030574][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.169258][ T7513] loop2: detected capacity change from 0 to 512 [ 82.196513][ T7513] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.555: iget: bad extended attribute block 134217728 [ 82.196534][ T7513] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.196679][ T7513] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.555: couldn't read orphan inode 15 (err -117) [ 82.196692][ T7513] loop2: lost filesystem error report for type 5 error -117 [ 82.201522][ T7513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.220302][ T7513] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.555: invalid indirect mapped block 234881024 (level 0) [ 82.227474][ T7513] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.555: invalid indirect mapped block 768 (level 1) [ 82.278374][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.358355][ T7466] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.358408][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.358468][ T7466] bridge_slave_0: entered allmulticast mode [ 82.358878][ T7466] bridge_slave_0: entered promiscuous mode [ 82.364058][ T7466] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.364083][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.364136][ T7466] bridge_slave_1: entered allmulticast mode [ 82.364648][ T7466] bridge_slave_1: entered promiscuous mode [ 82.378185][ T7466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.404724][ T7466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.418803][ T7466] team0: Port device team_slave_0 added [ 82.419525][ T7466] team0: Port device team_slave_1 added [ 82.690974][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.701828][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.701841][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.701858][ T7466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.702467][ T7466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.702474][ T7466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.703692][ T7466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.758212][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz.7.560'. [ 82.774056][ T4403] 8021q: adding VLAN 0 to HW filter on device eth8 [ 82.795426][ T7541] netlink: 'syz.1.561': attribute type 29 has an invalid length. [ 82.860876][ T7466] hsr_slave_0: entered promiscuous mode [ 82.861223][ T7466] hsr_slave_1: entered promiscuous mode [ 82.861490][ T7466] debugfs: 'hsr0' already exists in 'hsr' [ 82.861501][ T7466] Cannot create hsr debugfs directory [ 82.878628][ T4714] Bluetooth: hci1: command tx timeout [ 82.892296][ T12] hsr_slave_0: left promiscuous mode [ 82.893611][ T12] hsr_slave_1: left promiscuous mode [ 82.893883][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.893893][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.895191][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.895201][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.132020][ T12] veth1_macvtap: left promiscuous mode [ 83.132052][ T12] veth0_macvtap: left promiscuous mode [ 83.132101][ T12] veth1_vlan: left promiscuous mode [ 83.132136][ T12] veth0_vlan: left promiscuous mode [ 83.236420][ T7559] netlink: 52 bytes leftover after parsing attributes in process `syz.2.565'. [ 83.238928][ T7560] input: syz1 as /devices/virtual/input/input6 [ 83.358644][ T12] team0 (unregistering): Port device team_slave_1 removed [ 83.371326][ T12] team0 (unregistering): Port device team_slave_0 removed [ 83.479874][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.564'. [ 83.494439][ T7566] tipc: Started in network mode [ 83.494457][ T7566] tipc: Node identity ac1414aa, cluster identity 4711 [ 83.495961][ T7566] tipc: New replicast peer: 172.20.20.187 [ 83.496556][ T7566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.496760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.497140][ T7566] tipc: Enabled bearer , priority 10 [ 83.536692][ T30] audit: type=1807 audit(83.520:5): UNKNOWN=m res=0 [ 83.536720][ T30] audit: type=1802 audit(83.520:6): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.5.570" res=0 errno=0 [ 83.612335][ T7466] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 83.632663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.632876][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.661641][ T7466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.666002][ T7466] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 83.753357][ T7370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.782560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.782849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.914621][ T7466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.914970][ T7466] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 83.919694][ T7466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.921873][ T7583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.571'. [ 83.922007][ T7466] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 83.936477][ T7466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.018538][ T7466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.029734][ T7466] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.031488][ T3277] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.031513][ T3277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.041875][ T7599] set_capacity_and_notify: 3 callbacks suppressed [ 84.041885][ T7599] loop1: detected capacity change from 0 to 2048 [ 84.042226][ T7599] ext4: Unknown parameter 'noacl' [ 84.054334][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.054359][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.260765][ T4403] 8021q: adding VLAN 0 to HW filter on device eth9 [ 84.541557][ T9] tipc: Node number set to 2886997162 [ 84.559494][ T7567] ima: policy update failed [ 84.559832][ T30] audit: type=1802 audit(84.550:7): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.5.570" res=0 errno=0 [ 84.591180][ T7466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.754624][ T7466] veth0_vlan: entered promiscuous mode [ 84.762582][ T7466] veth1_vlan: entered promiscuous mode [ 84.787420][ T7466] veth0_macvtap: entered promiscuous mode [ 84.790482][ T7466] veth1_macvtap: entered promiscuous mode [ 84.815475][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.824863][ T7466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.891062][ T4403] 8021q: adding VLAN 0 to HW filter on device eth10 [ 84.891623][ T5409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.891638][ T5409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.923239][ T5409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.923255][ T5409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.926408][ T7667] netlink: 64 bytes leftover after parsing attributes in process `syz.7.579'. [ 84.943804][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.943835][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.943852][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.943867][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.952922][ T4714] Bluetooth: hci1: command tx timeout [ 85.454271][ T4403] 8021q: adding VLAN 0 to HW filter on device eth11 [ 85.484133][ T7694] loop7: detected capacity change from 0 to 8192 [ 85.574404][ T7701] loop5: detected capacity change from 0 to 1024 [ 85.574731][ T7701] EXT4-fs: Ignoring removed oldalloc option [ 85.574741][ T7701] EXT4-fs: Ignoring removed orlov option [ 85.588581][ T7701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.640440][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.936854][ T7720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.584'. [ 86.103248][ T7714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.587'. [ 86.104229][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.587'. [ 86.135010][ T7714] netlink: 72 bytes leftover after parsing attributes in process `syz.5.587'. [ 86.177210][ T7732] bond1: entered promiscuous mode [ 86.178862][ T7732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 86.280047][ T7740] loop8: detected capacity change from 0 to 1024 [ 86.288570][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.592'. [ 86.349026][ T50] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.362252][ T7740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.383255][ T7741] macvlan2: entered promiscuous mode [ 86.383270][ T7741] macvlan2: entered allmulticast mode [ 86.383747][ T7741] bond1: entered promiscuous mode [ 86.385024][ T7741] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.472639][ C0] net_ratelimit: 18 callbacks suppressed [ 86.472654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.472957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.647650][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.649500][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.651021][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.652058][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.652284][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.680540][ T7741] bond1: left promiscuous mode [ 86.729453][ T7466] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.786077][ T50] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.797966][ T7770] loop5: detected capacity change from 0 to 512 [ 86.879045][ T50] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.892762][ T7758] vhci_hcd vhci_hcd.0: Expecting SOCK_STREAM - found 2 [ 86.927243][ T7780] netlink: 396 bytes leftover after parsing attributes in process `syz.5.600'. [ 86.959513][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.028345][ T50] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.035507][ T4714] Bluetooth: hci1: command tx timeout [ 87.069155][ T7791] loop2: detected capacity change from 0 to 256 [ 87.070915][ T7791] FAT-fs (loop2): bogus sectors per cluster 30 [ 87.070933][ T7791] FAT-fs (loop2): Can't find a valid FAT filesystem [ 87.106247][ T7795] loop2: detected capacity change from 0 to 256 [ 87.116123][ T7372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.512914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.513188][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.615527][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.626891][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.637259][ T50] bond0 (unregistering): Released all slaves [ 87.640489][ T50] bond1 (unregistering): (slave veth3): Releasing backup interface [ 87.640502][ T50] veth3: left promiscuous mode [ 87.653597][ T50] bond1 (unregistering): Released all slaves [ 87.671378][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.673618][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.673684][ T7749] bridge_slave_0: entered allmulticast mode [ 87.674127][ T7749] bridge_slave_0: entered promiscuous mode [ 87.682765][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.682816][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.682878][ T7749] bridge_slave_1: entered allmulticast mode [ 87.683300][ T7749] bridge_slave_1: entered promiscuous mode [ 87.707223][ T50] tipc: Disabling bearer [ 87.708099][ T50] tipc: Left network mode [ 87.746742][ T7749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.747721][ T7749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.766462][ T7833] loop5: detected capacity change from 0 to 512 [ 87.778103][ T7833] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.609: iget: bad i_size value: 38620345925642 [ 87.778127][ T7833] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 87.778359][ T7833] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.609: couldn't read orphan inode 15 (err -117) [ 87.778378][ T7833] loop5: lost filesystem error report for type 5 error -117 [ 87.779476][ T7833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.810242][ T61] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm kworker/u8:4: bg 0: block 5: invalid block bitmap [ 87.812370][ T61] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28 [ 87.812386][ T61] EXT4-fs (loop5): This should not happen!! Data will be lost [ 87.812386][ T61] [ 87.812393][ T61] EXT4-fs (loop5): Total free blocks count 0 [ 87.812400][ T61] EXT4-fs (loop5): Free/Dirty block details [ 87.812417][ T61] EXT4-fs (loop5): free_blocks=0 [ 87.812432][ T61] EXT4-fs (loop5): dirty_blocks=1 [ 87.812437][ T61] EXT4-fs (loop5): Block reservation details [ 87.812443][ T61] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 87.830843][ T7749] team0: Port device team_slave_0 added [ 87.831751][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.838551][ T7749] team0: Port device team_slave_1 added [ 87.840245][ T7810] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 87.970604][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.970618][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.970629][ T7749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.971742][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.971758][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.971773][ T7749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.121870][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.122003][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.122073][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.122159][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.143772][ T4403] 8021q: adding VLAN 0 to HW filter on device eth13 [ 88.146449][ T7749] hsr_slave_0: entered promiscuous mode [ 88.147127][ T7749] hsr_slave_1: entered promiscuous mode [ 88.147363][ T7749] debugfs: 'hsr0' already exists in 'hsr' [ 88.147374][ T7749] Cannot create hsr debugfs directory [ 88.172399][ T7857] loop1: detected capacity change from 0 to 4096 [ 88.200123][ T7857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.268078][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.369915][ T7875] FAULT_INJECTION: forcing a failure. [ 88.369915][ T7875] name fail_futex, interval 1, probability 0, space 0, times 0 [ 88.369935][ T7875] CPU: 0 UID: 0 PID: 7875 Comm: syz.1.616 Not tainted syzkaller #0 PREEMPT [ 88.369944][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.369949][ T7875] Call trace: [ 88.369952][ T7875] show_stack+0x2c/0x3c (C) [ 88.369970][ T7875] __dump_stack+0x30/0x40 [ 88.369980][ T7875] dump_stack_lvl+0xd8/0x12c [ 88.369990][ T7875] dump_stack+0x1c/0x28 [ 88.369999][ T7875] should_fail_ex+0x418/0x58c [ 88.370009][ T7875] should_fail+0x14/0x24 [ 88.370018][ T7875] get_futex_key+0x1ec/0x12b0 [ 88.370028][ T7875] futex_wait_setup+0x58/0x674 [ 88.370036][ T7875] __futex_wait+0x108/0x25c [ 88.370045][ T7875] futex_wait+0x108/0x2c0 [ 88.370054][ T7875] do_futex+0x320/0x378 [ 88.370062][ T7875] __arm64_sys_futex+0x2e4/0x418 [ 88.370071][ T7875] invoke_syscall+0x98/0x244 [ 88.370080][ T7875] el0_svc_common+0xec/0x23c [ 88.370090][ T7875] do_el0_svc+0x4c/0x5c [ 88.370099][ T7875] el0_svc+0x60/0x1d8 [ 88.370108][ T7875] el0t_64_sync_handler+0x44/0x104 [ 88.370117][ T7875] el0t_64_sync+0x198/0x19c [ 88.421504][ T50] hsr_slave_0: left promiscuous mode [ 88.422416][ T50] hsr_slave_1: left promiscuous mode [ 88.425186][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.425199][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.427972][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.427985][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.671998][ T50] veth1_macvtap: left promiscuous mode [ 88.672032][ T50] veth0_macvtap: left promiscuous mode [ 88.672082][ T50] veth1_vlan: left promiscuous mode [ 88.672120][ T50] veth0_vlan: left promiscuous mode [ 88.712936][ T4714] Bluetooth: hci4: command tx timeout [ 88.858284][ T50] team0 (unregistering): Port device team_slave_1 removed [ 88.878483][ T50] team0 (unregistering): Port device team_slave_0 removed [ 88.987680][ T4403] 8021q: adding VLAN 0 to HW filter on device eth12 [ 89.114016][ T4714] Bluetooth: hci1: command tx timeout [ 89.332662][ T7908] __nla_validate_parse: 2 callbacks suppressed [ 89.332679][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.620'. [ 89.409057][ T7749] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 89.431760][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.432089][ T7749] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 89.437742][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.442186][ T7749] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 89.448266][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.448578][ T7749] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 89.454762][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.562824][ T7749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.590399][ T7749] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.597261][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.597295][ T5409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.600959][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.600983][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.618057][ T7749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.618076][ T7749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.632417][ T7937] loop8: detected capacity change from 0 to 512 [ 89.720909][ T6530] IPVS: starting estimator thread 0... [ 89.818797][ T4403] 8021q: adding VLAN 0 to HW filter on device eth15 [ 89.827953][ T7953] IPVS: using max 60 ests per chain, 144000 per kthread [ 89.864200][ T7749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.898701][ T4714] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 89.904952][ T7976] fuse: Unknown parameter 'ĺ_em0x0000000000000004' [ 89.947580][ T7986] loop8: detected capacity change from 0 to 256 [ 89.951079][ T7986] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 90.013198][ T7749] veth0_vlan: entered promiscuous mode [ 90.015448][ T7749] veth1_vlan: entered promiscuous mode [ 90.030462][ T7749] veth0_macvtap: entered promiscuous mode [ 90.031586][ T7749] veth1_macvtap: entered promiscuous mode [ 90.043073][ T7749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.045414][ T7749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.064004][ T3005] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.064034][ T3005] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.064054][ T3005] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.064072][ T3005] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.316994][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.317013][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.325984][ T4403] 8021q: adding VLAN 0 to HW filter on device eth14 [ 90.328658][ T3277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.328670][ T3277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.445336][ T8005] loop9: detected capacity change from 0 to 8192 [ 90.668422][ C1] vcan0: j1939_tp_rxtimer: 0x0000000041a8985f: rx timeout, send abort [ 90.668527][ C1] vcan0: j1939_xtp_rx_abort_one: 0x0000000060094a05: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.710612][ T8024] Injecting memory failure for pfn 0x13913c at process virtual address 0x20002000 [ 90.717108][ T8024] Memory failure: 0x13913c: recovery action for clean LRU page: Recovered [ 90.717188][ T8024] Injecting memory failure for pfn 0x11f654 at process virtual address 0x20003000 [ 90.717263][ T8024] Memory failure: 0x11f654: recovery action for clean LRU page: Recovered [ 90.717308][ T8024] Injecting memory failure for pfn 0x11f207 at process virtual address 0x20004000 [ 90.717381][ T8024] Memory failure: 0x11f207: recovery action for clean LRU page: Recovered [ 90.717436][ T8024] Injecting memory failure for pfn 0x11bf7e at process virtual address 0x20005000 [ 90.717533][ T8024] Memory failure: 0x11bf7e: recovery action for clean LRU page: Recovered [ 90.721793][ T8024] Injecting memory failure for pfn 0x11dc29 at process virtual address 0x20002000 [ 90.724537][ T8024] Memory failure: 0x11dc29: recovery action for clean LRU page: Recovered [ 90.724597][ T8024] Injecting memory failure for pfn 0x14970e at process virtual address 0x20003000 [ 90.727213][ T8024] Memory failure: 0x14970e: recovery action for clean LRU page: Recovered [ 90.727251][ T8024] Injecting memory failure for pfn 0x1227e0 at process virtual address 0x20004000 [ 90.727398][ T8024] Memory failure: 0x1227e0: recovery action for clean LRU page: Recovered [ 90.727433][ T8024] Injecting memory failure for pfn 0x11f396 at process virtual address 0x20005000 [ 90.727483][ T8024] Memory failure: 0x11f396: recovery action for clean LRU page: Recovered [ 90.923406][ T8045] loop1: detected capacity change from 0 to 8192 [ 90.947146][ T8048] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 90.947748][ T8047] rnbd_client L127: Can't parse path ip:127.0.: -22 [ 91.008446][ T8050] 9p: Could not find request transport: íƒÂno=ãá²å’3ßÚ¡ÛDæ+õ£©t"M®¬ñT­Ñ#\ÿÿIg¡ízUï3#8O [ 91.168463][ C1] vcan0: j1939_tp_rxtimer: 0x0000000041a8985f: abort rx timeout. Force session deactivation [ 91.444156][ T4714] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 91.672632][ C0] net_ratelimit: 36 callbacks suppressed [ 91.672648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.672890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.926609][ T8088] loop1: detected capacity change from 0 to 512 [ 91.940012][ T8088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.977168][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.993659][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.019956][ T8093] loop2: detected capacity change from 0 to 4096 [ 92.030237][ T8093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.030258][ T8093] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.033973][ T8093] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 92.034007][ T8093] System zones: 0-5 [ 92.035918][ T8093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.048756][ T8093] EXT4-fs error (device loop2): __ext4_new_inode:1083: comm syz.2.660: reserved inode found cleared - inode=18 [ 92.071913][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.157706][ T8101] loop2: detected capacity change from 0 to 8192 [ 92.552077][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.582179][ T8117] tipc: Started in network mode [ 92.582195][ T8117] tipc: Node identity 4, cluster identity 4711 [ 92.582203][ T8117] tipc: Node number set to 4 [ 92.655689][ T6530] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.712702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.712914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.732333][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.737638][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.740804][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.741226][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.741439][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.799498][ T8119] loop5: detected capacity change from 0 to 2048 [ 93.141812][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.300370][ T8155] xt_hashlimit: overflow, try lower: 241/0 [ 93.496840][ T8161] loop2: detected capacity change from 0 to 8192 [ 93.592804][ T7370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.732145][ T8178] bond1: option ad_select: invalid value (252) [ 93.741554][ T8178] bond1 (unregistering): Released all slaves [ 93.752634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.753195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.957529][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.679'. [ 94.225911][ T8209] loop5: detected capacity change from 0 to 256 [ 94.251400][ T8209] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 94.265986][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.266060][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.266124][ T8130] bridge_slave_0: entered allmulticast mode [ 94.266568][ T8130] bridge_slave_0: entered promiscuous mode [ 94.267556][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.267612][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.267664][ T8130] bridge_slave_1: entered allmulticast mode [ 94.268174][ T8130] bridge_slave_1: entered promiscuous mode [ 94.275539][ T8130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.276502][ T8130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.285663][ T8130] team0: Port device team_slave_0 added [ 94.293143][ T8130] team0: Port device team_slave_1 added [ 94.318527][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.318540][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.318556][ T8130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.323182][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.323194][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.323212][ T8130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.364319][ T8216] mmap: syz.8.682 (8216) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.370923][ T8130] hsr_slave_0: entered promiscuous mode [ 94.372455][ T8130] hsr_slave_1: entered promiscuous mode [ 94.378634][ T8130] debugfs: 'hsr0' already exists in 'hsr' [ 94.378647][ T8130] Cannot create hsr debugfs directory [ 94.556599][ T8221] binder: 8220:8221 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 94.556617][ T8221] binder: 8221 RLIMIT_NICE not set [ 94.682285][ T8224] netlink: 68 bytes leftover after parsing attributes in process `syz.2.686'. [ 94.784011][ T4883] binder: undelivered death notification, 0000000000000000 [ 94.789124][ T6530] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.904956][ T8232] can0: slcan on ttyS3. [ 94.946808][ T4714] Bluetooth: hci4: command tx timeout [ 95.078165][ T8232] can0 (unregistered): slcan off ttyS3. [ 95.142457][ T5409] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 95.237321][ T6530] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.260222][ T8246] xt_cgroup: invalid path, errno=-2 [ 95.332320][ T6530] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.454811][ T8259] loop8: detected capacity change from 0 to 256 [ 95.508186][ T8267] overlay: filesystem on ./bus not supported [ 95.568032][ T6530] bridge_slave_1: left allmulticast mode [ 95.568055][ T6530] bridge_slave_1: left promiscuous mode [ 95.568151][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.571537][ T6530] bridge_slave_0: left allmulticast mode [ 95.571550][ T6530] bridge_slave_0: left promiscuous mode [ 95.571617][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.621591][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.693'. [ 95.758456][ T4714] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 96.059046][ T6530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.096070][ T6530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.106981][ T6530] bond0 (unregistering): Released all slaves [ 96.123834][ T8301] netlink: 16 bytes leftover after parsing attributes in process `syz.8.696'. [ 96.128536][ T8130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.137081][ T8130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.137431][ T8130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.147609][ T8130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.147971][ T8130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.165751][ T8130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.166119][ T8130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.170489][ T8289] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.177853][ T8130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.181055][ T30] audit: type=1326 audit(96.170:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.181075][ T30] audit: type=1326 audit(96.170:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.181336][ T30] audit: type=1326 audit(96.170:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.181353][ T30] audit: type=1326 audit(96.170:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.182221][ T30] audit: type=1326 audit(96.170:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=235 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.209183][ T30] audit: type=1326 audit(96.200:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.209208][ T30] audit: type=1326 audit(96.200:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.209812][ T30] audit: type=1326 audit(96.200:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.209833][ T30] audit: type=1326 audit(96.200:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.210118][ T30] audit: type=1326 audit(96.200:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8296 comm="syz.5.698" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffffaef79368 code=0x7ffc0000 [ 96.279088][ T8130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.294661][ T8130] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.335648][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.335680][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.347838][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.347863][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.619038][ T6530] hsr_slave_0: left promiscuous mode [ 96.619338][ T6530] hsr_slave_1: left promiscuous mode [ 96.619597][ T6530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.619607][ T6530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.619913][ T6530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.619922][ T6530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.634193][ T6530] veth1_macvtap: left promiscuous mode [ 96.634225][ T6530] veth0_macvtap: left promiscuous mode [ 96.634280][ T6530] veth1_vlan: left promiscuous mode [ 96.634316][ T6530] veth0_vlan: left promiscuous mode [ 96.718661][ T4883] net_ratelimit: 17 callbacks suppressed [ 96.718676][ T4883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.838744][ T6530] team0 (unregistering): Port device team_slave_1 removed [ 96.859875][ T6530] team0 (unregistering): Port device team_slave_0 removed [ 96.872658][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.872832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.931143][ T8130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.952632][ T4714] Bluetooth: hci4: command tx timeout [ 96.955352][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 96.994713][ T8378] loop2: detected capacity change from 0 to 512 [ 97.092228][ T8378] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -ENXIO [ 97.171007][ T8393] loop1: detected capacity change from 0 to 8192 [ 97.344603][ T8130] veth0_vlan: entered promiscuous mode [ 97.357008][ T8130] veth1_vlan: entered promiscuous mode [ 97.645978][ T8130] veth0_macvtap: entered promiscuous mode [ 97.660766][ T8130] veth1_macvtap: entered promiscuous mode [ 97.696066][ T8130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.708714][ T8130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.757785][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.768545][ T6530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.775048][ T6530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.775198][ T6530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.786555][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.812083][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.812100][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.841500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.841515][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.860404][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.912675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.912948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.977403][ T8417] loop4: detected capacity change from 0 to 512 [ 98.129661][ T8429] loop4: detected capacity change from 0 to 256 [ 98.224494][ T8378] loop2: detected capacity change from 0 to 1024 [ 98.224859][ T8378] EXT4-fs: Ignoring removed bh option [ 98.228215][ T8378] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 98.251704][ T8378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.351037][ T8449] loop1: detected capacity change from 0 to 512 [ 98.376256][ T8452] netlink: 5 bytes leftover after parsing attributes in process `syz.4.717'. [ 98.376546][ T8452] netlink: 5 bytes leftover after parsing attributes in process `syz.4.717'. [ 98.376601][ T8452] netlink: 5 bytes leftover after parsing attributes in process `syz.4.717'. [ 98.376650][ T8452] netlink: 5 bytes leftover after parsing attributes in process `syz.4.717'. [ 98.376703][ T8452] netlink: 5 bytes leftover after parsing attributes in process `syz.4.717'. [ 98.376749][ T8452] netlink: 5 bytes leftover after parsing attributes in process `syz.4.717'. [ 98.379617][ T8449] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 98.381062][ T8449] EXT4-fs (loop1): 1 truncate cleaned up [ 98.381495][ T8449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.401353][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.432287][ T4722] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.854820][ T8483] loop8: detected capacity change from 0 to 512 [ 98.945460][ T8483] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.962604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.972608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.987442][ T8484] loop2: detected capacity change from 0 to 512 [ 99.005323][ T8483] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 99.014835][ T8484] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 99.032786][ T4714] Bluetooth: hci4: command tx timeout [ 99.049150][ T8492] vxcan3: entered promiscuous mode [ 99.049163][ T8492] vxcan3: entered allmulticast mode [ 99.528626][ T8492] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 99.557188][ T7466] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.766417][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.032971][ T8550] loop2: detected capacity change from 0 to 256 [ 100.077630][ T8550] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.151383][ T8561] tmpfs: Bad value for 'mpol' [ 100.359956][ T8589] could not allocate digest TFM handle sha512-generic [ 100.518229][ T8608] set_capacity_and_notify: 1 callbacks suppressed [ 100.518243][ T8608] loop8: detected capacity change from 0 to 512 [ 100.555302][ T8608] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.737: corrupted in-inode xattr: invalid ea_ino [ 100.555327][ T8608] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.555495][ T8608] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.737: couldn't read orphan inode 15 (err -117) [ 100.555509][ T8608] loop8: lost filesystem error report for type 5 error -117 [ 100.556154][ T8608] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.557155][ T8608] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.737: deleted inode referenced: 15 [ 100.615997][ T8630] loop1: detected capacity change from 0 to 8192 [ 100.646398][ T8623] __nla_validate_parse: 63 callbacks suppressed [ 100.646414][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.739'. [ 100.659253][ T8623] erspan0: entered promiscuous mode [ 100.665667][ T8623] erspan0: left promiscuous mode [ 100.731070][ T8648] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 100.817202][ T7466] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.997576][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.997610][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.997629][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.997644][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.025879][ T8677] loop5: detected capacity change from 0 to 512 [ 101.026692][ T8677] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.061960][ T8677] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4223: comm syz.5.748: Allocating blocks 41-42 which overlap fs metadata [ 101.061983][ T8677] loop5: lost filesystem error report for type 5 error -117 [ 101.062542][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 101.062556][ C0] EXT4-fs (loop5): initial error at time 101: ext4_mb_mark_diskspace_used:4223 [ 101.062573][ C0] EXT4-fs (loop5): last error at time 101: ext4_mb_mark_diskspace_used:4223 [ 101.066177][ T8677] EXT4-fs (loop5): Remounting filesystem read-only [ 101.066712][ T8677] EXT4-fs (loop5): 1 truncate cleaned up [ 101.067149][ T8677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.137977][ T4714] Bluetooth: hci4: command tx timeout [ 101.167352][ T8688] loop8: detected capacity change from 0 to 128 [ 101.369595][ T8688] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.385947][ T8688] netlink: 192 bytes leftover after parsing attributes in process `syz.8.750'. [ 101.430404][ T7466] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.441784][ T8696] loop1: detected capacity change from 0 to 8192 [ 101.581987][ T4714] Bluetooth: hci0: unexpected cc 0x2005 length: 4 > 1 [ 101.582012][ T4714] Bluetooth: hci0: unexpected event for opcode 0x2005 [ 101.742772][ T8731] loop2: detected capacity change from 0 to 1024 [ 101.743296][ T8731] ext4: Unknown parameter '' [ 101.875479][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.929941][ T8756] loop2: detected capacity change from 0 to 512 [ 101.930345][ T8756] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.931891][ T8756] EXT4-fs: test_dummy_encryption requires encrypt feature [ 101.974345][ T8759] loop5: detected capacity change from 0 to 8 [ 101.988993][ T8759] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 101.989006][ T8759] unable to read xattr id index table [ 101.989641][ T8759] unable to read fragment index table [ 102.066766][ T8770] loop5: detected capacity change from 0 to 512 [ 102.082633][ C0] net_ratelimit: 62 callbacks suppressed [ 102.082646][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.083079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.105305][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.761'. [ 102.111595][ T8770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.116631][ T8775] loop4: detected capacity change from 0 to 512 [ 102.187088][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 102.187107][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 102.187126][ T8769] netlink: 'syz.2.762': attribute type 13 has an invalid length. [ 102.244146][ T7466] overlayfs: failed lookup in lower (newroot/37, name='file0', err=-40): overlapping layers [ 102.244235][ T7466] overlayfs: failed lookup in lower (newroot/37, name='file0', err=-40): overlapping layers [ 102.333883][ T8792] binder: BC_ACQUIRE_RESULT not supported [ 102.333894][ T8792] binder: 8766:8792 ioctl c0306201 20000300 returned -22 [ 102.390441][ T8794] ext4: Unknown parameter 'ªªªªªª' [ 102.553369][ T7372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.693856][ T6530] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.693884][ T6530] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.756275][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.758247][ T4721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.758918][ T4721] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.759347][ T4721] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.760090][ T4721] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.815780][ T6530] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.815809][ T6530] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.923804][ T6530] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.923834][ T6530] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.943488][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.971128][ T5095] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.056848][ T6530] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.056878][ T6530] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.122573][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.123724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.405349][ T8861] EXT4-fs: Ignoring removed bh option [ 103.420229][ T8861] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.451370][ T8861] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 103.513180][ T4806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.537206][ T6530] bridge_slave_1: left allmulticast mode [ 103.537228][ T6530] bridge_slave_1: left promiscuous mode [ 103.537312][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.543234][ T6530] bridge_slave_0: left allmulticast mode [ 103.543255][ T6530] bridge_slave_0: left promiscuous mode [ 103.543324][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.828771][ T7372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.856771][ T868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.895122][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'. [ 103.895396][ T8878] new mount options do not match the existing superblock, will be ignored [ 103.944693][ T6530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.976039][ T6530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.995059][ T6530] bond0 (unregistering): Released all slaves [ 104.025956][ T8872] bond1: option min_links: invalid value (18446744073709551614) [ 104.025971][ T8872] bond1: option min_links: allowed values 0 - 2147483647 [ 104.026847][ T8872] bond1 (unregistering): Released all slaves [ 104.045895][ T8879] bond1: option min_links: invalid value (18446744073709551614) [ 104.045910][ T8879] bond1: option min_links: allowed values 0 - 2147483647 [ 104.048398][ T8879] bond1 (unregistering): Released all slaves [ 104.152786][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.153265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.162820][ T8900] usb usb1: usbfs: process 8900 (syz.1.777) did not claim interface 5 before use [ 104.205240][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.205281][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.205366][ T8828] bridge_slave_0: entered allmulticast mode [ 104.205825][ T8828] bridge_slave_0: entered promiscuous mode [ 104.217034][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.219248][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.219321][ T8828] bridge_slave_1: entered allmulticast mode [ 104.219762][ T8828] bridge_slave_1: entered promiscuous mode [ 104.334055][ T8916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.781'. [ 104.345539][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.346447][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.394484][ T8828] team0: Port device team_slave_0 added [ 104.395252][ T8828] team0: Port device team_slave_1 added [ 104.608180][ T8935] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.608202][ T8935] EXT4-fs (loop2): DAX unsupported by block device. [ 104.673886][ T8933] pimreg3: entered allmulticast mode [ 104.678391][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.678401][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.678419][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.679090][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 104.690065][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.690076][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.690096][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.793057][ T4721] Bluetooth: hci1: command tx timeout [ 104.812139][ T8828] hsr_slave_0: entered promiscuous mode [ 104.813429][ T8828] hsr_slave_1: entered promiscuous mode [ 104.813634][ T8828] debugfs: 'hsr0' already exists in 'hsr' [ 104.813645][ T8828] Cannot create hsr debugfs directory [ 104.840685][ T6530] hsr_slave_0: left promiscuous mode [ 104.844409][ T6530] hsr_slave_1: left promiscuous mode [ 104.845959][ T6530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.845974][ T6530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.847539][ T6530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.847555][ T6530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.871383][ T6530] veth1_macvtap: left promiscuous mode [ 104.871418][ T6530] veth0_macvtap: left promiscuous mode [ 104.871485][ T6530] veth1_vlan: left promiscuous mode [ 104.871519][ T6530] veth0_vlan: left promiscuous mode [ 105.136625][ T6530] team0 (unregistering): Port device team_slave_1 removed [ 105.141710][ T6530] team0 (unregistering): Port device team_slave_0 removed [ 105.323800][ T8921] pimreg3: left allmulticast mode [ 105.434865][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'. [ 105.434888][ T9039] netlink: 108 bytes leftover after parsing attributes in process `syz.2.791'. [ 105.437944][ T9039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'. [ 105.499864][ T9041] netlink: 'syz.1.792': attribute type 4 has an invalid length. [ 105.504437][ T8828] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 105.509510][ T8828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.509537][ T8828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.565530][ T9039] set_capacity_and_notify: 4 callbacks suppressed [ 105.565544][ T9039] loop2: detected capacity change from 0 to 512 [ 105.677265][ T8828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.677292][ T8828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.775372][ T8828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.775399][ T8828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.868650][ T8828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.868677][ T8828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.000288][ T8828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.004767][ T8828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.011086][ T8828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.016751][ T8828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.022796][ T8828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.027304][ T8828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.027618][ T8828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.028556][ T8828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.058318][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.066232][ T8828] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.067953][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.067982][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.069452][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.069477][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.137443][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2 [ 106.223417][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.234589][ T8828] veth0_vlan: entered promiscuous mode [ 106.245130][ T8828] veth1_vlan: entered promiscuous mode [ 106.261072][ T8828] veth0_macvtap: entered promiscuous mode [ 106.262378][ T8828] veth1_macvtap: entered promiscuous mode [ 106.268367][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.273361][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.324251][ T4403] 8021q: adding VLAN 0 to HW filter on device eth3 [ 106.334034][ T3135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.334113][ T8977] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.334138][ T8977] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.334155][ T8977] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.354424][ T8977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.354441][ T8977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.357109][ T9178] loop4: detected capacity change from 0 to 4096 [ 106.366196][ T9178] EXT4-fs (loop4): Test dummy encryption mode enabled [ 106.371872][ T8977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.371887][ T8977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.378450][ T9178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.420683][ T9178] overlayfs: failed to resolve './bus': -2 [ 106.438323][ T8130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.727584][ T9202] loop4: detected capacity change from 0 to 1024 [ 106.739211][ T9202] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 106.748580][ T9202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.884305][ T4721] Bluetooth: hci1: command tx timeout [ 107.056974][ T8130] EXT4-fs error (device loop4): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /16/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=16777218, rec_len=196620, size=1024 fake=1 [ 107.063839][ T8130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.073597][ T4403] 8021q: adding VLAN 0 to HW filter on device eth16 [ 107.105224][ T9231] loop4: detected capacity change from 0 to 128 [ 107.105547][ T9231] vfat: Unknown parameter 't' [ 107.575614][ T9255] loop5: detected capacity change from 0 to 2048 [ 107.632448][ T9255] __nla_validate_parse: 2 callbacks suppressed [ 107.632463][ T9255] netlink: 84 bytes leftover after parsing attributes in process `syz.5.813'. [ 107.786781][ T4403] 8021q: adding VLAN 0 to HW filter on device eth18 [ 107.798238][ T9281] loop3: detected capacity change from 0 to 1024 [ 107.865812][ T9281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.893710][ T9281] overlayfs: failed to resolve '/G˽âf¿þöéy¢E›­)þ6¸­¿6´s‘Á¤q¾v¦½Û¿Åý?íOÞÊç™û‹eLÌΞ‹èOòÓÙâåã ï-óeùlÿ>Ðúøß]¼'‹ÿÁˆÈvâ‡"âáˆx¤¨û£ñXDX&ÆŸ_X9þH;Ôþ"&[žÿnìÿMí¿úDωŸ¾_jûÿ¯ýç©ábI~þ[A«êd§‹æ [ 107.893710][ T9281] ®åo': -2 [ 108.184301][ T9291] netlink: 16 bytes leftover after parsing attributes in process `syz.5.817'. [ 108.216869][ T8828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.327601][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 108.448187][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.450327][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.659717][ T9314] loop3: detected capacity change from 0 to 1024 [ 108.679191][ T4403] 8021q: adding VLAN 0 to HW filter on device eth17 [ 108.704978][ T9314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.768358][ T9309] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: block 3: comm syz.3.820: lblock 3 mapped to illegal pblock 3 (length 3) [ 108.772862][ T9309] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 108.772885][ T9309] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.772885][ T9309] [ 108.800285][ T8828] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /7/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 108.802141][ T8828] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 108.816855][ T8828] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 108.817252][ T8828] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 108.817805][ T8828] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 108.820031][ T8828] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 108.820353][ T8828] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 108.821322][ T8828] EXT4-fs error (device loop3): ext4_readdir:280: inode #11: block 37: comm syz-executor: path /7/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 108.821563][ T8828] EXT4-fs error (device loop3): ext4_empty_dir:3127: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 108.952718][ T4721] Bluetooth: hci1: command tx timeout [ 109.140513][ T4403] 8021q: adding VLAN 0 to HW filter on device eth19 [ 109.680445][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.832'. [ 109.766913][ T9373] gre1: left promiscuous mode [ 109.776649][ T9373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.781046][ T7371] syz2: Port: 1 Link ACTIVE [ 109.781660][ T8968] ip6_tunnel: M xmit: Local address not yet configured! [ 109.969960][ T9381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.833'. [ 110.073036][ T9373] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20000 [ 110.074806][ T9385] loop1: detected capacity change from 0 to 512 [ 110.079221][ T9385] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.091876][ T9385] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.091889][ T9385] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 110.098289][ T9385] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.835: attempt to clear invalid blocks 2 len 1 [ 110.098308][ T9385] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 110.098519][ T9385] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 110.098835][ T9385] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.835: invalid indirect mapped block 1819239214 (level 0) [ 110.098854][ T9385] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 110.098987][ T9385] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.835: invalid indirect mapped block 1819239214 (level 1) [ 110.099003][ T9385] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 110.100496][ T9385] EXT4-fs (loop1): 1 truncate cleaned up [ 110.100947][ T9385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.139412][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.158469][ T7370] syz2: Port: 1 Link DOWN [ 110.248677][ T9394] loop5: detected capacity change from 0 to 512 [ 110.249046][ T9394] EXT4-fs: Ignoring removed oldalloc option [ 110.249069][ T9394] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 110.273489][ T9397] Bluetooth: MGMT ver 1.23 [ 110.285072][ T9396] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 110.285624][ T9397] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 110.324655][ T9402] netlink: 124 bytes leftover after parsing attributes in process `syz.5.840'. [ 110.359721][ T9401] tipc: New replicast peer: 255.255.255.255 [ 110.360157][ T9401] tipc: Enabled bearer , priority 10 [ 110.883634][ T9427] netlink: 36 bytes leftover after parsing attributes in process `syz.2.845'. [ 110.884265][ T9427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.845'. [ 110.913604][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 110.914629][ T9432] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 111.116348][ T9447] net_ratelimit: 5 callbacks suppressed [ 111.116362][ T9447] ip_tables: iptables: counters copy to user failed while replacing table [ 111.168344][ T9449] syzkaller0: entered promiscuous mode [ 111.168361][ T9449] syzkaller0: entered allmulticast mode [ 111.177926][ T9449] netlink: 260 bytes leftover after parsing attributes in process `syz.2.851'. [ 111.180910][ T9449] loop2: detected capacity change from 0 to 512 [ 111.238138][ T263] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 111.238166][ T263] EXT4-fs (loop3): This should not happen!! Data will be lost [ 111.238166][ T263] [ 111.243655][ T8828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.345456][ T2950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.406592][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.407401][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.407754][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.408061][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.408292][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.441487][ T2950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.495896][ T9462] loop2: detected capacity change from 0 to 1024 [ 111.496748][ T9462] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 111.497435][ T9462] JBD2: no valid journal superblock found [ 111.501732][ T9462] EXT4-fs (loop2): Could not load journal inode [ 111.509424][ T9458] hsr_slave_0: left promiscuous mode [ 111.509919][ T9458] hsr_slave_1: left promiscuous mode [ 111.564595][ T2950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.597555][ T9458] bond0: entered promiscuous mode [ 111.597572][ T9458] bond_slave_0: entered promiscuous mode [ 111.597653][ T9458] bond_slave_1: entered promiscuous mode [ 111.606546][ T9458] gretap0: entered promiscuous mode [ 111.606939][ T9458] dummy0: entered promiscuous mode [ 111.614858][ T9458] debugfs: 'hsr0' already exists in 'hsr' [ 111.614870][ T9458] Cannot create hsr debugfs directory [ 111.745865][ T9470] loop4: detected capacity change from 0 to 4096 [ 111.748278][ T9470] EXT4-fs: quotafile must be on filesystem root [ 111.763055][ T2950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.880209][ T9482] netlink: 'syz.5.861': attribute type 1 has an invalid length. [ 111.917840][ T9482] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.920181][ T9482] netlink: 'syz.5.861': attribute type 1 has an invalid length. [ 111.928261][ T9483] bond2: (slave veth3): Enslaving as an active interface with a down link [ 111.929604][ T9487] veth1_macvtap: left promiscuous mode [ 111.929623][ T9487] macsec0: entered promiscuous mode [ 111.932080][ T9487] bond2: (slave macsec0): Error -34 calling dev_set_mtu [ 111.978271][ T9483] bond2: (slave veth5): Enslaving as an active interface with a down link [ 112.041072][ T9495] netlink: 'syz.5.864': attribute type 3 has an invalid length. [ 112.084248][ T9501] netlink: 'syz.5.864': attribute type 3 has an invalid length. [ 112.134747][ T2950] bridge_slave_1: left allmulticast mode [ 112.134770][ T2950] bridge_slave_1: left promiscuous mode [ 112.134862][ T2950] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.135901][ T2950] bridge_slave_0: left allmulticast mode [ 112.135911][ T2950] bridge_slave_0: left promiscuous mode [ 112.135966][ T2950] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.153501][ T4721] Bluetooth: hci0: unexpected event for opcode 0x200c [ 112.249500][ T2950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.283854][ T2950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.323396][ T2950] bond0 (unregistering): Released all slaves [ 112.362644][ T9455] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.362681][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.362742][ T9455] bridge_slave_0: entered allmulticast mode [ 112.363203][ T9455] bridge_slave_0: entered promiscuous mode [ 112.364024][ T9455] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.364045][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.364097][ T9455] bridge_slave_1: entered allmulticast mode [ 112.364518][ T9455] bridge_slave_1: entered promiscuous mode [ 112.371076][ T9455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.371986][ T9455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.408740][ T9455] team0: Port device team_slave_0 added [ 112.409482][ T9455] team0: Port device team_slave_1 added [ 112.453437][ T9514] loop4: detected capacity change from 0 to 1024 [ 112.466859][ T9514] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.470874][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.470884][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.470901][ T9455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.471367][ T9514] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 1: comm syz.4.868: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.471386][ T9514] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 112.471501][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.471509][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.471524][ T9455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.471574][ T9514] EXT4-fs (loop4): Remounting filesystem read-only [ 112.471584][ T9514] __quota_error: 30 callbacks suppressed [ 112.471590][ T9514] Quota error (device loop4): write_blk: dquota write failed [ 112.471601][ T9514] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 112.471667][ T9514] EXT4-fs (loop4): 1 orphan inode deleted [ 112.472079][ T9514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.560138][ T9528] loop2: detected capacity change from 0 to 256 [ 112.563591][ T9455] hsr_slave_0: entered promiscuous mode [ 112.565065][ T9455] hsr_slave_1: entered promiscuous mode [ 112.565649][ T9455] debugfs: 'hsr0' already exists in 'hsr' [ 112.565664][ T9455] Cannot create hsr debugfs directory [ 112.584495][ T8130] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.793089][ T9550] __nla_validate_parse: 4 callbacks suppressed [ 112.793105][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.873'. [ 112.871343][ T9554] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.895712][ T9554] loop4: detected capacity change from 0 to 128 [ 112.954349][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.959422][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.969989][ T4403] 8021q: adding VLAN 0 to HW filter on device eth20 [ 113.009665][ T2950] hsr_slave_0: left promiscuous mode [ 113.011095][ T2950] hsr_slave_1: left promiscuous mode [ 113.011432][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.011445][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.011915][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.011924][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.016712][ T2950] veth1_macvtap: left promiscuous mode [ 113.016740][ T2950] veth0_macvtap: left promiscuous mode [ 113.016789][ T2950] veth1_vlan: left promiscuous mode [ 113.016851][ T2950] veth0_vlan: left promiscuous mode [ 113.157189][ T2950] team0 (unregistering): Port device team_slave_1 removed [ 113.161569][ T2950] team0 (unregistering): Port device team_slave_0 removed [ 113.250667][ T9565] batman_adv: batadv0: Adding interface: syzkaller0 [ 113.250682][ T9565] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.250702][ T9565] batman_adv: batadv0: Interface activated: syzkaller0 [ 113.270607][ T9559] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 113.278427][ T9559] batman_adv: batadv0: Removing interface: syzkaller0 [ 113.435529][ T4721] Bluetooth: hci1: command tx timeout [ 113.578746][ T9586] loop2: detected capacity change from 0 to 1024 [ 113.594802][ T9586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.600522][ T9589] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 113.601199][ T9589] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 113.601213][ T9589] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.601213][ T9589] [ 113.601221][ T9589] EXT4-fs (loop2): Total free blocks count 0 [ 113.601228][ T9589] EXT4-fs (loop2): Free/Dirty block details [ 113.601235][ T9589] EXT4-fs (loop2): free_blocks=20480 [ 113.601257][ T9589] EXT4-fs (loop2): dirty_blocks=80 [ 113.601263][ T9589] EXT4-fs (loop2): Block reservation details [ 113.601268][ T9589] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 113.601526][ T9586] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 113.647059][ T4403] 8021q: adding VLAN 0 to HW filter on device eth21 [ 113.804462][ T2950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.845830][ T9455] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.859620][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 113.860761][ T9455] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.872430][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.875243][ T4714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.882622][ T4714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.884217][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 113.889255][ T4714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.889485][ T4714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.890159][ T9455] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.964230][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 113.964600][ T9455] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.986466][ T9455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.072667][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 114.296617][ T2950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.396982][ T2950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.404453][ T9625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.884'. [ 114.429320][ T9455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.438015][ T4403] 8021q: adding VLAN 0 to HW filter on device eth23 [ 114.439831][ T9455] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.464232][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.464265][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.464821][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.464841][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.497125][ T2950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.757653][ T30] audit: type=1326 audit(114.750:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.2.888" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85179368 code=0x7ffc0000 [ 114.757678][ T30] audit: type=1326 audit(114.750:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.2.888" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85179368 code=0x7ffc0000 [ 114.760761][ T30] audit: type=1326 audit(114.750:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.2.888" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffff851577d0 code=0x7ffc0000 [ 114.760783][ T30] audit: type=1326 audit(114.750:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.2.888" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff85157830 code=0x7ffc0000 [ 114.760799][ T30] audit: type=1326 audit(114.750:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.2.888" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff85179368 code=0x7ffc0000 [ 114.761375][ T30] audit: type=1326 audit(114.750:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.2.888" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffff851577d0 code=0x7ffc0000 [ 114.761442][ T30] audit: type=1326 audit(114.750:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.2.888" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff85157830 code=0x7ffc0000 [ 114.761460][ T30] audit: type=1326 audit(114.750:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9651 comm="syz.2.888" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff85179368 code=0x7ffc0000 [ 114.804721][ T2950] bridge_slave_1: left allmulticast mode [ 114.804800][ T2950] bridge_slave_1: left promiscuous mode [ 114.805374][ T2950] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.885542][ T2950] bridge_slave_0: left allmulticast mode [ 114.886187][ T2950] bridge_slave_0: left promiscuous mode [ 114.892895][ T2950] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.125868][ T2950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.149144][ T2950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.175789][ T2950] bond0 (unregistering): Released all slaves [ 115.250537][ T9675] loop2: detected capacity change from 0 to 2048 [ 115.267864][ T9675] loop2: p1 < > p4 [ 115.267864][ T9675] p4: [ 115.270534][ T9675] loop2: p4 size 722688 extends beyond EOD, truncated [ 115.512670][ T4714] Bluetooth: hci1: command tx timeout [ 115.531691][ T9678] netlink: 'syz.2.890': attribute type 28 has an invalid length. [ 115.539898][ T4403] 8021q: adding VLAN 0 to HW filter on device eth22 [ 115.716875][ T9455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.817762][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.817795][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.817862][ T9599] bridge_slave_0: entered allmulticast mode [ 115.818301][ T9599] bridge_slave_0: entered promiscuous mode [ 115.843986][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.844014][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.844069][ T9599] bridge_slave_1: entered allmulticast mode [ 115.846799][ T9599] bridge_slave_1: entered promiscuous mode [ 115.892460][ T9599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.912673][ T4714] Bluetooth: hci4: command tx timeout [ 115.914571][ T9599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.065493][ T9599] team0: Port device team_slave_0 added [ 116.095974][ T9740] loop1: detected capacity change from 0 to 128 [ 116.097610][ T9599] team0: Port device team_slave_1 added [ 116.100383][ T9740] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.121373][ T9455] veth0_vlan: entered promiscuous mode [ 116.142161][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.142182][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.142196][ T9599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.173740][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.173752][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.173770][ T9599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.211511][ T9455] veth1_vlan: entered promiscuous mode [ 116.220517][ T2950] hsr_slave_0: left promiscuous mode [ 116.220801][ T2950] hsr_slave_1: left promiscuous mode [ 116.221062][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.221073][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.221403][ T2950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.221412][ T2950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.241883][ T2950] veth1_macvtap: left promiscuous mode [ 116.241912][ T2950] veth0_macvtap: left promiscuous mode [ 116.241959][ T2950] veth1_vlan: left promiscuous mode [ 116.241995][ T2950] veth0_vlan: left promiscuous mode [ 116.542630][ T9740] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 116.548442][ T9740] fscrypt: Adiantum using blk-crypto-fallback [ 116.574717][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.606449][ T9770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.898'. [ 116.639010][ T2950] team0 (unregistering): Port device team_slave_1 removed [ 116.646999][ T2950] team0 (unregistering): Port device team_slave_0 removed [ 116.707604][ T9599] hsr_slave_0: entered promiscuous mode [ 116.708765][ T9599] hsr_slave_1: entered promiscuous mode [ 116.708980][ T9599] debugfs: 'hsr0' already exists in 'hsr' [ 116.709069][ T9599] Cannot create hsr debugfs directory [ 116.728679][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.728699][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.729374][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.729385][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.750688][ T9455] veth0_macvtap: entered promiscuous mode [ 116.759063][ T9455] veth1_macvtap: entered promiscuous mode [ 116.815141][ T9455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.817002][ T9455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.930306][ T8970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.930381][ T8970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.930409][ T8970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.930417][ T8970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.930527][ T8970] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.930929][ T8970] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.934787][ T8970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.934797][ T8970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.042350][ T9804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.902'. [ 117.058454][ T9797] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 117.194517][ T9804] netlink: 44 bytes leftover after parsing attributes in process `syz.1.902'. [ 117.194538][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'. [ 117.194549][ T9804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.902'. [ 117.519171][ T9826] ------------[ cut here ]------------ [ 117.519190][ T9826] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x100c/0x1b10, CPU#1: syz.5.905/9826 [ 117.522360][ T9826] Modules linked in: [ 117.523086][ T9826] CPU: 1 UID: 0 PID: 9826 Comm: syz.5.905 Not tainted syzkaller #0 PREEMPT [ 117.524717][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 117.526635][ T9826] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 117.528106][ T9826] pc : mac80211_hwsim_tx+0x100c/0x1b10 [ 117.529157][ T9826] lr : mac80211_hwsim_tx+0x100c/0x1b10 [ 117.530191][ T9826] sp : ffff8000929e6a00 [ 117.530961][ T9826] x29: ffff8000929e6b60 x28: dfff800000000000 x27: 0000000000000000 [ 117.532654][ T9826] x26: 0000000000000000 x25: ffff0000f8cc3538 x24: ffff0000f8cc7b00 [ 117.534186][ T9826] x23: ffff0000f59aec70 x22: 000000006d537749 x21: 1ffff0001253cd84 [ 117.535713][ T9826] x20: dfff800000000000 x19: ffff0000d7922a00 x18: 0000000000000000 [ 117.537224][ T9826] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 117.538733][ T9826] x14: 000000000099490c x13: 0000000000000002 x12: 0000000000000000 [ 117.540276][ T9826] x11: 0000000000000000 x10: ffff0000f8cc32a0 x9 : 0000000000000200 [ 117.541769][ T9826] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 117.543269][ T9826] x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff800082eb1384 [ 117.544795][ T9826] x2 : 0000000000000000 x1 : ffff0000ce395880 x0 : 0000000000000000 [ 117.546242][ T9826] Call trace: [ 117.546838][ T9826] mac80211_hwsim_tx+0x100c/0x1b10 (P) [ 117.547908][ T9826] ieee80211_tx_frags+0x2f4/0x6d8 [ 117.548905][ T9826] __ieee80211_xmit_fast+0x7ac/0x17bc [ 117.549941][ T9826] ieee80211_mesh_xmit_fast+0x8e0/0xc84 [ 117.550933][ T9826] __ieee80211_subif_start_xmit+0x438/0xfcc [ 117.552003][ T9826] ieee80211_subif_start_xmit+0xe8/0x45c [ 117.553084][ T9826] dev_hard_start_xmit+0x1dc/0x794 [ 117.554053][ T9826] __dev_queue_xmit+0xed4/0x2a9c [ 117.554977][ T9826] packet_xmit+0x6c/0x314 [ 117.555796][ T9826] packet_sendmsg+0x2eac/0x3de4 [ 117.556698][ T9826] __sock_sendmsg+0xc8/0x17c [ 117.557519][ T9826] sock_write_iter+0x220/0x310 [ 117.558349][ T9826] vfs_write+0x51c/0xa0c [ 117.559144][ T9826] ksys_write+0x12c/0x228 [ 117.559918][ T9826] __arm64_sys_write+0x84/0x98 [ 117.560764][ T9826] invoke_syscall+0x98/0x244 [ 117.561615][ T9826] el0_svc_common+0xec/0x23c [ 117.562432][ T9826] do_el0_svc+0x4c/0x5c [ 117.563218][ T9826] el0_svc+0x60/0x1d8 [ 117.563956][ T9826] el0t_64_sync_handler+0x44/0x104 [ 117.564863][ T9826] el0t_64_sync+0x198/0x19c [ 117.565672][ T9826] irq event stamp: 1567 [ 117.566435][ T9826] hardirqs last enabled at (1566): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 117.568333][ T9826] hardirqs last disabled at (1567): [] el1_brk64+0x20/0x54 [ 117.569907][ T9826] softirqs last enabled at (1562): [] __alloc_skb+0x1c0/0x610 [ 117.571529][ T9826] softirqs last disabled at (1564): [] __dev_queue_xmit+0x1fc/0x2a9c [ 117.573331][ T9826] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 117.604400][ T4714] Bluetooth: hci1: command tx timeout [ 117.959275][ T8980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.039827][ T8980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.117843][ T8980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.177685][ T8980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.359015][ T8980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.369331][ T8980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.375252][ T8980] bond0 (unregistering): Released all slaves [ 118.378328][ T8980] bond1 (unregistering): Released all slaves [ 118.441314][ T8980] tipc: Disabling bearer [ 118.442421][ T8980] tipc: Left network mode [ 118.704978][ T8980] hsr_slave_0: left promiscuous mode [ 118.705226][ T8980] hsr_slave_1: left promiscuous mode [ 118.707841][ T8980] veth1_macvtap: left promiscuous mode [ 118.707867][ T8980] veth0_macvtap: left promiscuous mode [ 118.707913][ T8980] veth1_vlan: left promiscuous mode [ 118.707960][ T8980] veth0_vlan: left promiscuous mode [ 118.806805][ T8980] team0 (unregistering): Port device team_slave_1 removed [ 118.810528][ T8980] team0 (unregistering): Port device team_slave_0 removed [ 118.862314][ T4403] 8021q: adding VLAN 0 to HW filter on device eth5 [ 118.946647][ T8980] IPVS: stop unused estimator thread 0... [ 118.999226][ T4403] 8021q: adding VLAN 0 to HW filter on device eth6 [ 119.017046][ T8980] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.101898][ T8980] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.132960][ T4403] 8021q: adding VLAN 0 to HW filter on device eth4 [ 119.175090][ T8980] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.224417][ T8980] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.255115][ T4403] 8021q: adding VLAN 0 to HW filter on device eth7 [ 119.329709][ T8980] bridge_slave_1: left allmulticast mode [ 119.329729][ T8980] bridge_slave_1: left promiscuous mode [ 119.329803][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.331432][ T8980] bridge_slave_0: left allmulticast mode [ 119.331444][ T8980] bridge_slave_0: left promiscuous mode [ 119.331506][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.340037][ T8980] bridge_slave_1: left allmulticast mode [ 119.340053][ T8980] bridge_slave_1: left promiscuous mode [ 119.340117][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.341100][ T8980] bridge_slave_0: left allmulticast mode [ 119.341111][ T8980] bridge_slave_0: left promiscuous mode [ 119.341167][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.409999][ T8980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.421933][ T8980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.443513][ T8980] bond0 (unregistering): Released all slaves [ 119.471415][ T8980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.485610][ T8980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.503854][ T8980] bond0 (unregistering): Released all slaves [ 119.842057][ T8980] hsr_slave_0: left promiscuous mode [ 119.842292][ T8980] hsr_slave_1: left promiscuous mode [ 119.848375][ T8980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.849186][ T8980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.861154][ T8980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.861171][ T8980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.867211][ T8980] hsr_slave_0: left promiscuous mode [ 119.867610][ T8980] hsr_slave_1: left promiscuous mode [ 119.867877][ T8980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.868259][ T8980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.875000][ T8980] veth1_macvtap: left promiscuous mode [ 119.875046][ T8980] veth0_macvtap: left promiscuous mode [ 119.875099][ T8980] veth1_vlan: left promiscuous mode [ 119.875136][ T8980] veth0_vlan: left promiscuous mode [ 119.980043][ T8980] team0 (unregistering): Port device team_slave_1 removed [ 119.991488][ T8980] team0 (unregistering): Port device team_slave_0 removed [ 120.093011][ T8980] team0 (unregistering): Port device team_slave_1 removed [ 120.096642][ T8980] team0 (unregistering): Port device team_slave_0 removed [ 121.006457][ T4403] 8021q: adding VLAN 0 to HW filter on device eth8 [ 121.126214][ T4403] 8021q: adding VLAN 0 to HW filter on device eth9 [ 121.239190][ T4403] 8021q: adding VLAN 0 to HW filter on device eth10 [ 121.460328][ T4403] 8021q: adding VLAN 0 to HW filter on device eth11 [ 121.571966][ T4403] 8021q: adding VLAN 0 to HW filter on device eth24 [ 121.687698][ T4403] 8021q: adding VLAN 0 to HW filter on device eth26 [ 122.448235][ T4403] 8021q: adding VLAN 0 to HW filter on device eth25 [ 122.563349][ T4403] 8021q: adding VLAN 0 to HW filter on device eth27 [ 122.712590][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 125.913198][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.913231][ T1594] ieee802154 phy1 wpan1: encryption failed: -22