last executing test programs: 1m53.004279386s ago: executing program 2 (id=43): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f0000000440)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_lower}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}, 0x1, 0x21a, &(0x7f0000000180)="$eJzs3bFqU1EYB/AvbaqlIOkgFEXwiotTaCruEVEQCgqSwc1iU5QkFgwE2qHVyZfQV9DRVXAQV19ABKmCi906CJF6Y2NL2kRqcov9/ZZ8JOd/z3cuIYcMObl3rlFbXG4ubW5uxORkLvLlKMdWLqZjLMYj9SQAgP/JVrsd39uprHsBAEbD/g8Ax8+A+//tEbYEAAzZwN//x0bWEgAwZHfutnNplUxGNJ61Kq1K+pg+e3UpHkY9qjEbhfgR0d6R1jduzl+fTbZ9mY5KY72TX29VxnfnS1GI6d75UpLanZ+IqU7+41RUYy4Kcbp3fq5n/kRcuvjH/MUoxIf7sRz1WIztbDe/VkqSa7fm9+RP/hoHAAAAAAAAAAAAAAAAAAAAAADDUEx29Dy/p1jc7/U0n56vk4/+5wPtPZ8nH2fz2a4dAAAAAAAAAAAAAAAAAAAAjormymptoV6vPj6oePT+5dt+YwYscp15D3udwxenLnx+vv+Yp39zf/5t8eZ8lrdlwOLdxoMzl5szV45KPyurtYmD3lrfChFDmv1Vpmv/veq+g2delBder336OuiVM/gwAgAAAAAAAAAAAAAAAACAY677o9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT//394RdZrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwEAAP//Rp2fMw==") r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000100)={0x3, 0x8, '\x00', 0x1, &(0x7f0000000000)=[0x0]}) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002abd70000000000000000000000000000000000000000001fc02000000000000000000000000000100000a000000000000009a88426982623ce2080e53909837788cdeb7f6c0d492cf7d0e36be395a7411319f796d5df652f6f942227617a488f30f8f127f90210a2eddcf411979e545ca9f279027790e0952930f6ecb18698683713b5ed3a14973f03fb2e1678e61e9784f278e6892400ffa57cc98c520643c1325dbc43b0956bc98324ec9bdfac68e67b712ff7c231c430b641d07c2cf98ae86372f46dfdbba7d05000000c089ec92eae79407", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff0000000000200000000000000000000000000000000000002f00000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000000000000001000000003c00000002000000ac1414bb00000000000000000000000006000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) 1m52.816657241s ago: executing program 2 (id=49): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000700)=@unspec, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x840) ioctl$BLKSECTGET(r5, 0x1267, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8010) 1m52.389489765s ago: executing program 2 (id=52): unshare(0x22020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x2000}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000180)}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0xa, 0x0, 0x85, 0x0, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000500)='./file2\x00', 0x12be91c, &(0x7f00000003c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@data_writeback}, {@dax_inode}, {@delalloc}, {@errors_remount}, {@usrquota}, {@usrjquota}, {@nodelalloc}, {@dax, 0x32}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x38, 0x63, 0x61, 0x35, 0x38, 0x61, 0x39], 0x2d, [0x32, 0x31, 0x36, 0x31], 0x2d, [0x33, 0x37, 0x5f, 0x34], 0x2d, [0x32, 0x65, 0x34, 0x92], 0x2d, [0xe, 0x3, 0x63, 0x32, 0x63, 0x61, 0x37, 0x39]}}}]}, 0x1d, 0x4e8, &(0x7f0000000a40)="$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") ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r5, 0x40109441, &(0x7f0000000000)={0x5, 0x0, 0x7}) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000002300)={&(0x7f0000000180)=@isdn={0x22, 0x3, 0x7, 0xfa, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="50cda1e5d21148ba3dd8d0fbc24fbd96afb851e5757b77f95dd307389ef47ea0a43773bfc2f82a9fb71963ca188c3854d4d759106382ba9562104816607d30ff6f50a95c3498d433466c4340c8ad3e071ecf42cf0f18e8be9172d6d38e093ef3857a2cd2a016899a2ca23ab3e3d250", 0x6f}, {&(0x7f0000000300)="d922a5d89a604e23ad953d710b42d9ba67c3d6887fafa21a", 0x18}], 0x2, &(0x7f0000000f40)=[{0x10, 0x116, 0x83}, {0x1010, 0x11, 0x401, "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"}, {0x28, 0x104, 0x7, "4c923c89e5e32337aad8c30047b1cb4c0f0e89ff0978015a"}, {0xa0, 0x117, 0x5, "f41a4a3481010641cfb99bacf83f18c383b70b9812d7588ce6f5eea1f1f5f120b8d85019c2073bdb2cd645a242ca67b0d05d234162273e197893ec5e6f8a3572a9ff91c4ab25f8ef7c70788575403c2f80cb86fbf7bbb27d41c6590e76b01cd84aaab69cfb124e5e810524f9c14cf74a60dd9159409d3ccb62caaccefca7f9db4b725f3f2daf2e3cc3a01a29"}, {0xc8, 0xff, 0x6, "9246358472a0b2812197d9fd41c84b0ef78ea8523c0d1e2e876c2679a134fec8bd5dc22d0e6b94474922cbdeb236647cadf43cab067fcd8752025585a98e1ec26bf548383b250c2a55af05d5c965517f5cf39197ebe206c34f8e5c30848184dc15c162d93b33d0f4344c12a561335b6b6276ceaa97f45f1c3b57765e5c5959fcb8c610ef1f3a089ecb9c9f568998037df9ac3fb8c3800e2d66c0695e1da6ad311bf47d05d8368ace37a8dae5aeeee942a234dc86004a5f"}, {0xc0, 0x10e, 0x8, "3f387d9175f89435507ecc1671c3f658ff623f27ab48fb3d69248d3e827dd3aede4d000f33ff4f6f80ede30335678c94ce25b81c5a59807d236cbcbd91395c0960be018b04785afe8cf5e8f9c00906bf16840964b93b0fd266543ef5436560842ab74bebe78b31e8594f525c9a60bfa935e106dcd50b8cb3c104a1f8657f08de3f55bee4dc2ffb56941d4de360c6a75ed8d6f49bd03fdfd5840ec159abc57aa8eba2de1da9c6f0ba99"}, {0x48, 0xff, 0xb79a, "762ca11a36400a63578daade50ca8d77c45781fd93be377249a5a9555a6646be467a647d542da6d1c4d1d10f134bb64ba48c96c8"}, {0x50, 0x117, 0x4, "21dc3fc068252e419acd372b3baa8f058bca40eab70cd909a044ec30bda9397b4b40e891a36efda9eb47a0533519cb01d38d83e795795eaaaaf3808fcb77e3d0"}, {0xa8, 0x111, 0x40, "4252cd027f0fe717e2b581b6cc81e53342c733f9258587eda3ac3e4bcd1925faba809286ba8802505044a2e765a9247997e231eb0f79b290f09966c38a5604deadd5b157fe1300315126a243a8f86910c7ef167c8711f93c0575a7fb2cd0798876bc6819dc174d5ad051396dcde5f9c10da415ec6a5bcd126fa2099b67dec9c47d1e504d1228630696e435470f5d0c7866a3cce3"}], 0x13b0}, 0x4000005) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000080000000400000021000000b4000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) accept4(r7, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x0) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f00000000c0)={0x3, @meta={0x53353543, 0xa570d6b, 0x4a43, 0xe72c, 0x4aef7995}}) ioctl$OCFS2_IOC_UNRESVSP64(r6, 0x4030582b, &(0x7f0000000380)={0x2, 0x1, 0x400, 0x6, 0x3, 0x6}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000640)="3f8b749f49c5cd1f06d2dad26eabdc9d0bd607332ee57071e9d5156af87ee4c196fd01000000000000008724d411ac84d016e354a0e2824179d51d8c4ff24c0ed24bafa2ce69948792a2bc108492348f6c8b15c45362c4c3608099d48efaaf4495aa5d7d172929b4b796a9e96ffd87ce061f3606bc03ec23d5275dd3d0a001e1", 0xb47, r8}, 0x38) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b25db1f302de337c0004060000000000bf8506000000000000005f44e4ce2d715f2828"], 0xe0}], 0x1}, 0x40040) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r10) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r13, r15, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x500, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x5, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1}}}}}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r11, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x8c, r11, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x50}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x8c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) 1m52.236772077s ago: executing program 2 (id=55): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@inode_readahead_blks}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@orlov}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x42, 0x1b6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x30925) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000}, 0x40040) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r6, 0xc138fd0f, &(0x7f0000000000)="0400000000000000000000003801") syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x0) close_range(r0, r0, 0x0) 1m51.17523373s ago: executing program 2 (id=69): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}}, 0x20004800) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x18, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r5) wait4(0x0, 0x0, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa0801, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x8f) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) mount$tmpfs(0x0, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', &(0x7f00000001c0), 0x2000001, &(0x7f0000000200)=ANY=[]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x47a5d8a476852fbe}, 0x40480d0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="218d3dd50f004b0400000000e6ff00007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080008008100", @ANYRES8=0x0], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8810) sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8843}, 0x10) 1m50.911536638s ago: executing program 2 (id=75): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0xfffffe00, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x15}, @multicast2}, 0x10) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @mcast1, 0x3}, {0xa, 0x4e20, 0x0, @private1, 0x8}, r2, 0x3}}, 0x48) 1m50.860792957s ago: executing program 32 (id=75): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0xfffffe00, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x15}, @multicast2}, 0x10) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @mcast1, 0x3}, {0xa, 0x4e20, 0x0, @private1, 0x8}, r2, 0x3}}, 0x48) 1m39.861859128s ago: executing program 1 (id=253): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0x9, [{0x6, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}}) syz_open_dev$video(0x0, 0x7, 0x51) 1m38.955868781s ago: executing program 1 (id=273): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900000073797a3100000000050005000a00000012000300686173683a6e65742c706f7274000000b4dae82b7a9e579456c9a826ce4ea8642e39a48dfb137262a6d09b5fd00fc9b8079e06531ff7950bf06010a39716f439c11b"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0xc8, 0x16, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x88, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xecac}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x1fc, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_USERDATA={0x102, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x3e, 0x6, "fc72bc335fd8a0c8435b5edc7a4fd29fc5b05a595349b4afca2dcb15ac906fe6557727500b41bd440c00ac8cdf03b670ff5447eee7989133b946"}, @NFTA_TABLE_USERDATA={0x82, 0x6, "e23d24e022212955bea5e2c23f2fa87b31eb094e2dbc52c646318617fbd58b236a8c9a57a229d7d1ea161bedd0563275e73f56cf23f692285cdf9d08c4b843ebca4d2d47a82023ceb9d8330a4e5df6dd50b12453676e7aa6b035292f337c3440842e8a7ff85de29f0ef45a86a2a9622c4b90e7aa28af827d1417b1fd517d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2ec}, 0x1, 0x0, 0x0, 0xc4}, 0x814) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000001740000014001680100001800c000900030000800800000014000300626f6e6430"], 0x50}, 0x1, 0x0, 0x0, 0x20040801}, 0x2c040004) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000700)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)="f2a76f5a0c7e7556485489be8c0cea171918091d5403e2224b1caf69c921046031f4fc2345e9735c49b0c3d65f052153d8eb55a80cd743634818f4a36985fa65fc", 0x41}, {&(0x7f0000000800)}, {&(0x7f0000000840)="c33d2343c2de208e54387dbba691e1d43b1278432f5be1fa522a19614a08c05b691b53baea56cef7d84da9acec56cf3cae12996a88f9b176453b0c7eac22665a6d0ea80bc6412a8a0ecafdfec0c93fd2bd4e9b5a5520025f095e1b5dcddc24", 0x5f}, {&(0x7f00000008c0)="96876ebb0e531f18ae6c8490e25fcf5c216ced94ac4d27023be9642f1b0db93ef424c9edf0d2c73e74a3e907110d486644073c0786c645108f318405d444ccaf52f2db49fefddb1e8661af75f5a5bfe602502fa2aaec8cc82fac3f2147298202335ed78798b01402dcac59544173a2dd421a21cc0aafe5de0ea5258dc50bdbc9e08963328431531c55623a2a950d9b6b0da84f3cda161f53d55d12dc6bb0e32c8b745280e3d5cc04c2f9e25dc3f0147307500fd88bb1fd3b8df4e2f79d", 0xbd}, {&(0x7f0000000980)="1e78f0bb3be4b1c32a6ea939f058ec9cd599b82593855b8dcb8be91037f15dd768570f6abbf0a5edb73e6ab6709316c0d5ef3c4c58266099ee688b5a20e1fc951f8570710ed3b53cd4029d23ab48a600e5f3660bc4d30b620478b9b1d78a7ff22bdb45209efbaa1ddf8b9b8982827b34e4a55af21c244efb7ff9d274860a6a", 0x7f}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a80)="70a73cdac26cb0fcf44e2d660a8d474f7b04dd3d820317e83b88531c9ba83a0e2ac6ea464972b59ae0", 0x29}, {&(0x7f0000000ac0)="a03fbadfb124bbc0942bf42721bd0ce0e7a467eef4ab510506003e9c7284be138370472bf2217a6270d0c6bc87613f20", 0x30}, {&(0x7f0000000b00)="4f373e9781f7ca307994f0f8d4ee0d0c25c774741c0660d21a3969fcc5dd1bc3a3ca", 0x22}, {&(0x7f0000000b40)="49e6d9bf6ead2f884111c09c15a5bf4db393ac4ca29d60abf8bd47e75e46e37397c1539a3a76cc0bc0956420edee75baae111634d03a0397ce5ddaad5edd5494f96d2e5bf474d94fe1516c60fdcf9e1e0b5e7e1563fabad04934029c20b40ff0cf89ed869c185cb3d4f697e337b69b8cad01e3f090243faae6847d2bee4cfa3fc21146445906855b73fef697878b0509b6e71d1eb98bd69b2118e066682a7061cd6462e6455cf540b047f5", 0xab}, {&(0x7f0000000c00)="af4f7564806fd9d5fdcb1d9012821e26c7a4c7a6383d8d65c449e86d6bacff83ddd60bda440a4bc477995d816e234a79822ad8667585a38ab16fc37f2eaf1767ebd6a23ef3b27bc74fcf5c86be2027a320cd7047d474f77b831e91e8caa882d8bb6a390ff2b4", 0x66}, {&(0x7f0000000d00)="92bbc64213b96b07fa7848a048b7af45b0e7d3d4663a33a4f550037137c6c6ea1f8ba46a3125afe8581772022ba7d88a1270590fd7e9ec", 0x37}], 0x6}}, {{&(0x7f0000000dc0)=@l2={0x1f, 0x7, @none, 0x7}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000e40)="389472f6ddba5e2aec40f901067b4b5e05706c1d8fe73dd1eef506431e95fab065137cf63eabdec4dcb4859ae3f343da788bf5cd82d1acd35b8da22d622fc41e9f7e3ca6e5ecebc96da32a13a5eee2d870373a614e43a080f1f14bd8f8e6fca3bd7a58be3ab4607e9e1f99184eb1a36893b7c0e07696dc543b5e9f43bbd73959782b8126a5d1ea2727b6042def4eb00ef6a64c17fd8e597502ad344958d9d48b7df8ef0f16666f44e264b5f9656ef532045c", 0xb2}, {&(0x7f0000000f00)="d7bf53d3dec16a77ab65394763bb0303f2343433cd77ca3f0528a9f6d01bf20a230ca4d1b49bc0807c0628be9bd82d97c932a599cceeb8ea8c3c94a39e682e33fdd9ed2e971b1e6556fe6e0b9b2fdacbb94bc3e376f2db0448590812e48c303dc518a40d60d8ba54a0b5c12b10310182b0d42c47a9a41759526634b4fde1dad1ec0abb1971aef2c93fe7b7b3c86d473ae2cf7c717a9900ac7792bed970c871a9820da0d85d72b3012c8bfb35240c30f8327a561c7d9e4dbce87720e36860dc3b65a2ad78dee2ab5f930aa9edef2bbed70e1e675a45158660da90c42f144c9a060c3a149789846990d6930d033657940d609fbf25512398c9", 0xf8}, {&(0x7f0000001000)="89491580219885950b862c5b32a3fc5af64d44d82fa5d64230a9ea9caf81f729b0e1c03d71263dadb75ea6de40c4a8b25b66939a21b93a7390a857dab432f8ce778ef75febb8f0d6c6673d368d5f84b818c22f50f8db7fb2a898d02b111ae04ea69d57f51cde73b6cbddee3a7c4d00094ec3cb6005a4ff4b4903b0db2c8c677cab4a9bd56cb4d584149fc1161a84f93fbfc76e3be9a9d5f68e51fd46828a1afaa47cd28a7d5806f8bab9d295b71729cb524c66a52c07acf9e0d25e792e4c8b906ba1419b173504694c22c0bce3b699dd33605f9f8819297f62fd78c59ea26d8235e3bcad9084e179f5fc7377b524f930426cba3286f2d5a7b7c19c2a5773af04453d98a6d7ade090b071291b7fc66b7023e1074f34821623b5a59f7a0cd50c8f12b62dbb6e0bfa12a1d0eda673e8da70543207660e5c4e6464bc8b962cf1d39f58a87e90287a2f3d21c4f2b0b489be76c6679d0ec55afcd33a7c60a3a58391881483852828b82f52916a0347d6765327b161a15ae85113a78442a82d40a4f6f7d969b6d5831149d100e5c4315833b426188477339f9f5a6f500358aba356199ddd27f5a138c396048eaa70629d81f82596d3579e44c81bea6eac95d6dd10203cafdf7da46a44acba5ab98cb319e40eb6a19da3c44cec614b13f0391a0e4aeb4edb153a308c92d543f010f042058559204aa32af790600053f48efd1fef48e2d2a00add64b49392ae0429759d56e36ee428516e90d85204fc0d4fbfe603f7e64ed884be42b4d72f8f029750fe0d177ffa7e3d7404c98c725458b6564d8004ad0a84a1cc0e724870e5ede8251c6cc0fed7d5af3c8bf1c73a558f445dbc77673248bfdce8bea74af0085966d89246a1de87d5595bb4cefefb60fc7b06b2c9cea00408729e138025ffcb052a20e8f2e956525d6c04d78fbe85d97a58bf796351012cb40fe362eb8f7520d68d39e60b280e315f0d78ee7db8753f9d5fd5817c7dd09ec3edc9747cb77ee6c85ce71123de1a6f007a4083486a90f5be0a94b9408161ba003d721078217076ebd407549e0889aa15495024d962896395ed5773cc1f7ffe9d1d2da84f9758ba0dc624b4361914351f06b00a6b618d738163a2a3eae174da866aed86c6ddbc511fce0ca29c9dd51aae3823475cde56918d7a5deea07b99b5dd3bea0588ab066751cb2d0c727934ef763fd4520048f027a78a127d8f1cc444156e561439d158eac6b85fdd82e2d8562ac62c1d40bd6ea5aef8e1e5685231f03e0314cabfc9119c30ea22799ba43ef43610d9ad6fcf8a638791c14dd9c688affadbfd2c52befca69e6d08740222c7c894511ea8bde863b09c3630df699cb023b4e435a0a6ac0a07a9a0a7acf7d0a481ff6547b1c5905f0329708a27b51ad5f3d9b650c394913c91da823bedecf4a7793e777011b0d290c1794380abaab8a567d20beb89e77066170d0550f4f5c44516d2f5bb72706b81c767a29d02c55756c4149daa1b4f171be72c0d17bc88f89715772a2e39722829cf4259e81aed87ebb02fe968b0d9322247a27dbd6274fa9be45808337b6589fefbf64eea1d55554cd4fa54a389e693f7f5511c276960fd01ec9583ff2e673ece663a859f63d56931b1dae909e1f46f4d703dfef7effce84cb02eb307de57321e69528737a37d48aec296031e4bf6dfb5774cadad2e0dd89d5e5f3666eef48c138bebfc2980dc346a87a57c10c5f3adf1bc1774c977804724867c1099049fa10c0783af52707a97d5adf49e78c8d7c55c642e4a597c110c6c3260dd8edf821a6ab7e99afc9f3eee215c8921d95ca125f3674eb3298bd3b8e905744bf968415daf0376e387cd71c56309039c69382aef5249244eb3c0e0dfc7563f5420f386df0dd9f2c1c7573ee9b29752ea3aa75be39f14a449ad8723773201fa800d42126395b835f9f18982f4f9390286b08212be430bc11a0321376a8a6cdbab5e0fea73077858f4c0124ad4d887578209c50c238fee3446283b01aa83dfe9fe3066c04b01daeb9aed986a959d2aeb19b890895e996f348094aa1db13824016b551f94e6075c025f2a3d4ad21cb2ccb54ba0c04c77da444bd9ac62b48b954ed299508262539fb5f85a32c9b138628991db58cdb03d3df1a528ee14b88c0bbdcd4be8976129e3f6ef98324299bc660d5d0ae09e7ec10925f20efec206b7b5ada7ca974504d6909e7f92932884db9ee9aaeca0154c6458a31d8f7f9e1647636e4a4d2fc989f37cbaae7669dbb5d3a00c8f18b484c371e75c2daeb44ce662f10fc2fcea7aeba4185825f5573fc8de050ce50af4b2787aa3bd85ede64ec70acb2fbef921ee9385abae5e1cc9788d2e9f0986c6ad26055b348670b1480ae2e950b286bc7cee35f3d1471d6115c3ec5bb3c952ae0a98e393a357a8fc6193067af6331e941e19875990be1f9eeaff69863279a5f43cb38cdb59792ac88b3b4bbfb136cbe4b2de8fb2b15fe3aeaf159465657e57b48ec0d0d3909eade7561a16626715916f328aeb1990c52948a636c37b230edc1941c74cd87591a31da60be0f71b9d744cfe6db209ac054e72ea332d8d5d32be6cbe4536c1ee0567f713da4c0b58af82ae8b422254e708f68d091773c33b01e71324f425ee21c7132b877647e7337e9a6f9acfef7a5a8158cdeca36d42ec13e91f9d106e52f3cc82b1c81029cd5250064e4b52617cf08645535fabb1d10d6798f6231141ddaaf9621ffda940e36df329794d8d34df4df64ec7ef32bd7a3b3aed2d17608d4a981bf4a4848df6ed5634d694c16d2d9bc89c48327e558c3f7c7de4a1a6dd5d931babc240d55489d662ddd7b4deb0bb05334d3a3c136013d316344090f0d66d7de7f8881fb05999744e64afbd74dac1aabe2a8c4552ebb8404d80cd22f990245a4e1059d365586ee87d8e64fcad27cfa9dbd4bbe168782793c3d1e9140c4be48c4df8dffbd59fbec2db2fcc0eef2098d677e75f99c0c512ae95ea8adb7b3c7f5f468d31e4a2c2a47f81084ccfab851d09e4115f466e2132aef591887b0e1990f89f4d90578ff35b23f093dd8064a2e7fff0735e15d94debc7b7fc3ca66398b6ba1f0e15c5f175f2143f58b5c8c0ad04bd975870cbfab27ce0f0fd0cdefe10fe1b3b7ba40213d595af89fe36d8a70304a6a2bd104ce44d6bfbfa3c3ecb463ae8d1594e892f814660586f3b7605903a62094179c88bb9628328dfe9a485dbe30bef8ba4fe8347f54963859cf1bd7f26c93fc404599ee29cb54c3da013ba56586e64016727edd85866ae746c15ec3c81e9b5196eae43d3cfdea1612282a1af3a022823059d471cb338d9c98eb59bf39bfd96ec30a78e106904244133e45bcfbff3297525cfb5b4d7277ac32759bc66665610246fd6d71b653dc88d5d218e97f75e939a882e05514e184d4b69dd87e8c0233dfdeebf7b8abc80b856ae009cc59b64d604586a71f0265844763aabc8e886ec9ec2169c1fdc64392d16276bdabde59b2584ab83f8424299b05f8b6da7aded8b599d944891a6811881c2721ed4e91656f872256ed95c0d1bbe4b008a891da8b6d8579ea1e8da33176dc007319a16d1180d03a399c535f946f11c0863f2120fc258e5da6bedb5056f859d73ca081d0d70615ab9a9dd2bd88a0b801335d42884f336004a9aa5436598e32c580ebcc99a140460dbae83985ca5417f39d761516a3f36755d42b0a72f874e0e0a1fa6716119e58e744f57e8aadd5388f0f159369069b254016b21a16c1874fb9149534d8bc1a5217e433b2f8a4dba56f259cfb666a13a685669977e79e1db1f347ee9d2cd4d7035dcea941a497f5be822bdefbc5e72dcbd64f22b3603d4ee2e0016260468e6322cf3fb3ee181e3ba3663f61660dbef8036e3f2f11974f08f41e8077bc03ee52ba62eebd88401a40815a0f38276d115476bd13b482648d5d3bb88a6ee22d362d6e76c63925ecd4857c675d0f2481a8eb065736f9477b1da37ee29e76102112bfed38adc7fc34bb4f984d44b720c22b4131f6b058e2b96d48447bfde7b0e10554c858a791beba4bd071ea35d9ef72ca3567e286768e61b85852a23beb3445c5acada74e189a6f1930cebffc79fcc3ba0dde9e81232f39df61af49cab47b1a4f56b197bef4379071a8ce1107d85d43740da13cfc2160b0e2bafddd9930909b98fc43f059d854ab652ab6ad4d07185d0643aa1dc6afbfd1f6dc08fcc7d8cafb087e7018c1aa6025d7d981588bd7c8d5a780ba202ca17a41f49711757f18d0ebf6e890865e9434032c23cf81e6ff03ce37be21a65a9759505b9fab6153cb91edba71a9fd6422b6e7f8c4c0d66508e740e7224ec838c40f797fb5e7e32508dd8e340135be96cb1d611623ac25cd0944e8e6ac9921c1c8300dbcc776ca2a83488621a27388e44629c46551f84d248fc23c4e9aceb2773544f03117d0f503e74700f39a6fa18ee9c622c0ca28d8d15d1c307b440a44662978f1577317fb508e4ac3d9dfb9793c53e0b7ea9772e2970d3cba4daf6b5b42133a912eb47e4efcd471fe83ca0b6c1535a73b14fabe8b53ae57348f0042282b545b5d10561b5897b42d39eb5f3aef13352a5db72f6b18025b41d1862dce96caebb121ad2782a5edb0a074eff9989e63efaa1f2d9a0637127a7f4b0f9d6e071fc68bd210de171770842bd8a54b1bf04fac4be1461a21d7404f91790b7647e9201792e436dbb4d248d55f75b419e18e8c16ec1da5131c17549b069c76477f74ddb8526c6a0a322c9d791d234b910f77df4a184a4e4e21760251f059da986f873d76baa711911a82bc16bcf859ad0194fbad121975ad7f3df42868ffebf9e1a6aac664e3d63fbcb74ef18e2ee0688ca81c525e2430ffb05cb2714066050bc669c21f1d5df02f0360da57ee320f160802fd00cd7661909ea428dc573c33fbac91e2a3a75f93679cea7687f41ce13cb79040b5b3648def0607c29487d737c9fdbc12427f09cf567925cc7d65812837c57d8b027c32da7b389a8e4af42482913694bfd4908cda2b779f77a3060837439dc7ef7471e10cc78b641e88e1322c4f68d29fff8e32cd5f06e9b00b4a99f78b9f1983803d7acdc83430aa11aaf6f66e4a1e3ff668d0a4b6989b203576fd7516cdde1911bb7e80399c292b914754e16d476a0f38aa63e9f9af7531943faacb7495c3b9f45ea37bd2777f8ba357942aa8753a58fb1681df5d90a436d1a6ad0121b88861c8377b07726579c093da64db799a4e604c501afba7c9eadffb0762188894baaffbd372aff87c37f09c943cccddc87f3831f10e9e4285928b7fdd4ac6939d3b7ba8c67829cc407e4792b87f60eb811db9b9b71ad795ea66960d5851a6e1333a1002fa5991324900230937b33083931780c5939ae748ba256ef04987ee8e0d4bda571fb58788b6cb4ddee78508897bb91c3ac19247182023183bb2dc81673e8c17ca5d356228770944f1ecc0c7c61259f544b1ea92407e11e15a969af09efcadfdda05967aaafdab15af70769ae31ded9494f3dc5ca7410cbd5779ec9ffd5d97065b29e07e0bc0ffc4d31d3b11136db5db5ce8958f30b4b054db190bbe1c2701513518bb94fb64e53f4d6e1ce470969630c424a18549af02f2ddc71605dae179988896ae591d2dcc3cc054d20a780fd2215aa2f503ca7b284ead94fde9ce62b41c4a5b66ac1d7089baf47fc944b83a3801d08caca7d6738f6fd5c1a8e7ed939d7017ede81a97e29cd7d6736d6d7d5b05592d50fa88a4a31358113b46c9389680185e3c053b85fce301b63c7d739b2fefff71b6a31d14732", 0x1000}, {&(0x7f0000002000)="bd8c1c019bc6edf9f4f814d2fe2b7a012faa68f2350ce86d41c9bdb5e4386a", 0x1f}, {&(0x7f0000002040)="89d33ad6c71878c55caeb0c6ce57f192c2723bc829e66efb1e24a755e1bb7b7ca28ab0d521685f0a3d80b6f95ae89a63c08dffd96848de74f74e5710b0f7d14b6a02cf13618c7a66dc3615ec1ffd21f7", 0x50}, {&(0x7f00000020c0)="6f7ba15bd722d96951ab64ae333b24ebfb7fc42b4db2162caa43a22b8835d44f0a232ec709808826f507c7b2056903bc9c6800e1ed77b3a06cba641bf966ef8cbbf32cc2ac44cb1b76b619170fb0d309bf0395b941f1d5044234a4a9d22723c03e9c022d99fd482c297df488be5f227faf13ca000e2f4dca3afec5e081491b7cec2195cca57b1188852ef00f30110c6ab88c5e9d06f5d92cac00bc15cb442ddd37625fa76d", 0xa5}], 0x6, &(0x7f0000002200)=[{0x50, 0x118, 0x1, "8e0655ed4db814cce5da3a8abb4c463001c7ed51ff04a0ca66d5da729730e139243ee6868bd985445a0c03145d1c73823a8cd08c40b239b587b1b0d6"}], 0x50}}], 0x3, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r6) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x850) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000023c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4200014}, 0xc, &(0x7f0000000800)={&(0x7f0000000280)={0x30, r7, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x5, @bearer=@l2={'ib', 0x3a, 'wlan0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) tee(r1, r5, 0x5, 0xc) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r9, r11, 0x16, 0x0, @void}, 0x10) setsockopt$packet_int(r8, 0x107, 0x18, &(0x7f0000000180)=0x19ca, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) 1m38.756921432s ago: executing program 1 (id=279): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x450942, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) pipe2$9p(&(0x7f0000000140), 0x0) madvise(&(0x7f0000a7c000/0x3000)=nil, 0x3000, 0x4) sendfile(r0, r1, 0x0, 0x7) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) pwrite64(r2, &(0x7f0000000100)='y', 0x1, 0x1000) socket$netlink(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x0, 0x5004) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x119) setsockopt$sock_int(r6, 0x1, 0x5, 0x0, 0x0) r9 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) fsmount(r9, 0x0, 0x0) 1m37.887796112s ago: executing program 1 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) openat(r0, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) (fail_nth: 5) 1m37.844505275s ago: executing program 1 (id=303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xf89, 0x8, {}, {0xee01}, 0x6, 0x1}) mount$overlay(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000140), 0xa0811, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './sys/bus/usb/drivers/usbip-host'}}, {@uuid_auto}, {@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, 'match_busid'}}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './sys'}}], [{@subj_user={'subj_user', 0x3d, '-{[\xa5}\xbf:+'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '#$i/!)'}}, {@pcr={'pcr', 0x3d, 0xe}}, {@uid_gt={'uid>', r0}}, {@seclabel}, {@dont_measure}]}) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r2 = semget(0x1, 0x5, 0x6b4) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$SEM_STAT_ANY(r2, 0x4, 0x14, &(0x7f00000002c0)=""/14) openat(r1, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) 1m37.736837473s ago: executing program 1 (id=306): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x100e000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@random="f0ca43c9b981", @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @loopback, @local, @multicast1}}}}, &(0x7f0000000400)={0x0, 0x4, [0x1dc, 0xa23, 0xf5, 0x33b]}) (async) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@random="f0ca43c9b981", @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @loopback, @local, @multicast1}}}}, &(0x7f0000000400)={0x0, 0x4, [0x1dc, 0xa23, 0xf5, 0x33b]}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r2, 0x107, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000094) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r2, 0x107, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000094) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x501400, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000003200), 0x0, 0x2000) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) (async) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x200200, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@random="e904a200", @link_local, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x27, 0x4b, [@multicast1, @multicast2, @local, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @rand_addr=0x64010100, @broadcast, @empty]}, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0x7, [{@remote, 0x2}]}, @timestamp_addr={0x44, 0x4, 0x44, 0x1, 0xa}, @timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x4}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) fadvise64(r5, 0x200, 0x12e, 0x2) (async) fadvise64(r5, 0x200, 0x12e, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x10004, 0xfe, 0x2, 0x9, 0x8a, 0xb4, 0x6, 0x5, 0x67fe, 0x3, 0x800, 0x2, 0x115, 0x8, 0x10, 0x401, 0x5ed, 0x80000000, 0x11190, 0x7f, 0x1, 0x7, 0x7, 0x7, 0x2, 0x1, 0x3ff, 0xa9, 0x9, 0x4, 0x8, 0x2]}) 1m29.459355789s ago: executing program 3 (id=389): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x1, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000010000)="$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") ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, 0xfffffffffffffffe) 1m28.616039211s ago: executing program 3 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ed000061fb3e2ddf33c9c8b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xfffffffffffffd72, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) openat(r4, &(0x7f0000000100)='match_busid\x00', 0x505102, 0x114) 1m28.540118501s ago: executing program 3 (id=396): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffa, 0x4b, 0x0, 0x0) 1m28.491647101s ago: executing program 3 (id=397): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10008, &(0x7f0000000380)={[{@noload}, {@test_dummy_encryption}, {@prjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@usrjquota}, {@nodiscard}]}, 0x1, 0x4eb, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x6, 0x5, 0xffff2d3a, 0xffffff01, 0xe, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x800003ff, 0xc, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x7c, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000001, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfdfffffe, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x5c000000, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x319, 0x9, 0x5, 0x7fff, 0x80000000, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x218, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x8, 0xac8, 0xbf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x4, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa620, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0xfc, 0x60000047, 0xb2, 0x8, 0x6, 0x225, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x9, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r4, &(0x7f0000000180)=0x5, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(0xffffffffffffffff, 0x3b87, &(0x7f0000000240)={0x18, 0x1, 0x0, 0x0, 0x0, 0x6}) r5 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r5, &(0x7f0000000000)=""/77, 0x4d) getrusage(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m28.312593882s ago: executing program 3 (id=400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000920100cbb700ff2a1dbeab5640d20000004c00ed6a619f087b4ea613951d913c498516f86b13293b5770ea05a0174c332ce725bc351820d1c30085639940000000b8360a6398bcf5063ef0f5560b0ed39638b7ac32c26bf60c10868ec5d38ea585a692b25e7534c8ae8b4a42a0101a070633fc2ce9210e6bd11e66a6c596ef4f615af03a39957389000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000000000000000000005000"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1m27.857759592s ago: executing program 3 (id=402): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x5048, 0x1, 0x2}, 0x18, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x4d) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa000004424203"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) mount$tmpfs(0x0, &(0x7f0000000540)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[]) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x21, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x2008000) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000180)="19ebf225951cf199c45c7d331252dbffba", 0x11}, {&(0x7f00000002c0)="d9999871daa764a8da3a3a2df6e50940cae7c97c0354d3c5bbcda9b6f43a1d08d39dfe0b90606cbf57df0f4c5e9a46723e48722c72a7923d8be90c37554dfb50570741b7cb82c3b060d0f915a376ad0a98f8d05686a88a4c21bb526d846f237cee19c8ec0dcd62828a164e78db0677357c328dc3b44ad2d1eaadcfde9030eff4799e70e1cb61f741ab58bd7424b01935dc3128f3d7c8041aab1b9a789c2018852ce1b424f7d858dab667659b32dd34215f527e9740337681dc529f50c68617b8ca8315e019f5874a3fc7", 0xca}, {&(0x7f00000003c0)="e48b591eb43ce220ede54cb19fcde81b550e871d93eb8ebd40f2f7b7a0a040b030063e9e10f6717606fbcd043eb2e88be4aef61b6f229dd0b9c9dab2d2ead3f05b2caf6f2d96bae2b95536f9a8fdd6b27c230e79435e3d6889f4", 0x5a}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x501080, 0xfb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f00000000c0)=0x4) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000240)={0x0, 0x5}, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x8132, 0x820105, 0xfffffffe, 0x3, 0x7, "001221d608f5000004b5060080c90a80800100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xd) setns(0xc9, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000055708f7748c953ee0d0d00f68e91ab006c00000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010067656e65766500001400028008000100030000000500040005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 1m27.806455212s ago: executing program 33 (id=402): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000200)={0x5048, 0x1, 0x2}, 0x18, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x4d) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="7d041816be2cb54fa0aaaa000004424203"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) mount$tmpfs(0x0, &(0x7f0000000540)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[]) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0xb4, 0x30, 0x48b, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x21, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x2008000) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000180)="19ebf225951cf199c45c7d331252dbffba", 0x11}, {&(0x7f00000002c0)="d9999871daa764a8da3a3a2df6e50940cae7c97c0354d3c5bbcda9b6f43a1d08d39dfe0b90606cbf57df0f4c5e9a46723e48722c72a7923d8be90c37554dfb50570741b7cb82c3b060d0f915a376ad0a98f8d05686a88a4c21bb526d846f237cee19c8ec0dcd62828a164e78db0677357c328dc3b44ad2d1eaadcfde9030eff4799e70e1cb61f741ab58bd7424b01935dc3128f3d7c8041aab1b9a789c2018852ce1b424f7d858dab667659b32dd34215f527e9740337681dc529f50c68617b8ca8315e019f5874a3fc7", 0xca}, {&(0x7f00000003c0)="e48b591eb43ce220ede54cb19fcde81b550e871d93eb8ebd40f2f7b7a0a040b030063e9e10f6717606fbcd043eb2e88be4aef61b6f229dd0b9c9dab2d2ead3f05b2caf6f2d96bae2b95536f9a8fdd6b27c230e79435e3d6889f4", 0x5a}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x501080, 0xfb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f00000000c0)=0x4) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000240)={0x0, 0x5}, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x8132, 0x820105, 0xfffffffe, 0x3, 0x7, "001221d608f5000004b5060080c90a80800100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xd) setns(0xc9, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000000055708f7748c953ee0d0d00f68e91ab006c00000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010067656e65766500001400028008000100030000000500040005000000"], 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 1m22.680417598s ago: executing program 34 (id=306): r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x100e000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@random="f0ca43c9b981", @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @loopback, @local, @multicast1}}}}, &(0x7f0000000400)={0x0, 0x4, [0x1dc, 0xa23, 0xf5, 0x33b]}) (async) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@random="f0ca43c9b981", @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @loopback, @local, @multicast1}}}}, &(0x7f0000000400)={0x0, 0x4, [0x1dc, 0xa23, 0xf5, 0x33b]}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r2, 0x107, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000094) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, r2, 0x107, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:tmpfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0xc1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000094) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x501400, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000003200), 0x0, 0x2000) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) (async) ioctl$RNDADDENTROPY(r4, 0x40085203, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x200200, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@random="e904a200", @link_local, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}, @noop, @ssrr={0x89, 0x27, 0x4b, [@multicast1, @multicast2, @local, @empty, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @rand_addr=0x64010100, @broadcast, @empty]}, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0x7, [{@remote, 0x2}]}, @timestamp_addr={0x44, 0x4, 0x44, 0x1, 0xa}, @timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x4}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) fadvise64(r5, 0x200, 0x12e, 0x2) (async) fadvise64(r5, 0x200, 0x12e, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x10004, 0xfe, 0x2, 0x9, 0x8a, 0xb4, 0x6, 0x5, 0x67fe, 0x3, 0x800, 0x2, 0x115, 0x8, 0x10, 0x401, 0x5ed, 0x80000000, 0x11190, 0x7f, 0x1, 0x7, 0x7, 0x7, 0x2, 0x1, 0x3ff, 0xa9, 0x9, 0x4, 0x8, 0x2]}) 4.625427497s ago: executing program 7 (id=578): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$ptp(r1, &(0x7f0000000040)=""/11, 0xb) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) 4.583168775s ago: executing program 7 (id=579): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000085}, 0x80) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000007000000080004007f800001080005007f000001"], 0x30}}, 0x0) 4.465375774s ago: executing program 7 (id=581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time\x00', 0x275a, 0x0) fstat(r1, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl802154(&(0x7f0000017540), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) bind$xdp(r3, &(0x7f0000000100), 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1f, 0x10000000000000, 0xffffffffffffff12, 0x784, 0x8000000000000000, 0x8020000000006, 0xfffffffffffffffe, 0x1000000000000000}, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r7, r9, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r10 = socket$inet(0x2, 0x3, 0x4) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x1c0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x20, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$AUDIT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) 4.289466384s ago: executing program 7 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = io_uring_setup(0x31a6, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x14, 0xffffffffffffffff, 0x1) r1 = userfaultfd(0x80001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r3, 0x1, 0x70bd2d, 0x2000000, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x2000000, 0x0, 0x200008c0}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x24084080}, 0x4410) bind(r7, &(0x7f0000000300)=@hci={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000400)="2b00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f000002a000/0x1000)=nil, 0x1000}, 0x1}) setrlimit(0xb, &(0x7f0000000000)={0x1, 0x3}) 4.271181963s ago: executing program 7 (id=587): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0x2a, 0x1}}}}, 0x16) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="022a000a0006000500150102000000"], 0xf) 4.237440527s ago: executing program 7 (id=588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x3, 0x0, 0x0, 0x5, 0x1, 0xc}]}, {0x0, [0x30, 0x5f, 0x61, 0x3e]}}, 0x0, 0x2a, 0x0, 0x1, 0xa295}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="61202a3a2a206d001c15af052f1d66c6017d89c35168434ec6c4d94949708511db1c2c13b421d18c50dc99ca7e6281c1938279ad5e0903a5c4193a368406c4e6304ca425181e81ae5c9bf15dba885021e6f7273d806085e2fa2a10d300238704338f6453bf8b4ac726eb7322a424621ab5648f5e71b62f6df3"], 0x8) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe8800000000000000000000e2ffff00ac14142500000000000000000000000000020000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sync() r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xb8, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000001, 0x80000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 3.139331007s ago: executing program 4 (id=602): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000fdd7e944bf73704030000000000000000581beba66854d59930adb2d249d684302b"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.862395183s ago: executing program 4 (id=609): sendmsg$alg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000340)={0x0, 0xebb9, 0x8, 0x3, 0xd5}, 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000390400e5fffffadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01980400419a04002c00128008000100736974002000028008000300ac1414bb14000b0000000000000000000000ffffe0000001"], 0x4c}}, 0x0) 2.777082834s ago: executing program 4 (id=612): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0xc1aa, 0x80) ioctl$DVB_DVR_DMX_REQBUFS(r0, 0xc0086f3c, &(0x7f0000000040)={0x4f, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4d}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f00000001c0)={0x3, 0x1, 0x2, {0xfdb, 0x4, 0x6, 0x4f}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0x4, 0x7, {0x0}, {0xee00}, 0x3dda, 0x7fff}) syz_clone3(&(0x7f00000006c0)={0x400, &(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0), {0x3b}, &(0x7f0000000500)=""/83, 0x53, &(0x7f0000000580)=""/230, &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x3}, 0x58) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000740)={0x4, 0xd43f, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5, 0x3}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000880)={0x10800000, &(0x7f0000000200)=0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280), {0x3e}, &(0x7f00000002c0)=""/87, 0x57, &(0x7f0000000340)=""/129, &(0x7f0000000800)=[r3, r4, 0x0, r5, r6], 0x5, {r7}}, 0x58) r9 = socket$rxrpc(0x21, 0x2, 0x3) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000900)={0x1, 0x3}, 0x8) r10 = pidfd_getfd(r8, r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000009c0)={'tunl0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x700, 0x8000, 0x0, 0x8, {{0xa, 0x4, 0x2, 0x1, 0x28, 0x67, 0x0, 0x3, 0x4, 0x0, @empty, @private=0xa010102, {[@generic={0x86, 0x10, "4fe5edf5c4afc77dcac03f02819e"}, @generic={0x88, 0x3, 'H'}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a00)={r10, r11, 0x25, 0x15, @void}, 0x10) r12 = syz_open_dev$dri(&(0x7f0000000a40), 0x7fff, 0x20001) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r10, 0xc0186445, &(0x7f0000000a80)={0x3, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(r12, 0xc010644d, &(0x7f0000000b00)={r13, 0x0, &(0x7f0000000ac0)='\x00'}) gettid() umount2(&(0x7f0000000b40)='./file0\x00', 0x2) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000c40)={0x1, 0x0, &(0x7f0000000c00)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r12, 0xc02064b9, &(0x7f0000000d00)={&(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000000fc0)={&(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[{}, {}, {}, {}], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x7}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r12, 0xc05064a7, &(0x7f00000012c0)={&(0x7f0000001040)=[0x0, 0x0], &(0x7f0000001080)=[{}, {}, {}, {}, {}, {}], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f00000013c0)={&(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, 0xb0b0b0b0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r12, 0xc05064a7, &(0x7f0000001640)={&(0x7f0000001400)=[0x0, 0x0, 0x0], &(0x7f0000001440)=[{}, {}, {}, {}, {}], &(0x7f00000015c0)=[0x0], &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r12, 0xc03864bc, &(0x7f0000001a40)={0x200, 0x3, &(0x7f0000000d40)=[r14, r15, r16], 0xffffffffffffffff, &(0x7f00000019c0)=[r17, r18, r19, r20, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[0x1, 0xe9, 0x3, 0x3, 0x4, 0x10], 0x0, 0x2}) 2.673564787s ago: executing program 4 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000027c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@newtaction={0x14, 0x1e, 0x109, 0x70bd2b}, 0x14}, 0x1, 0x2b1e}, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r4, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) 1.671446679s ago: executing program 4 (id=622): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0000000c0000007dbcaf52ef19ca2a1b524bd8881004001000000000000000000f0400000000005f0000000000000000000000005c7d4ead685f794871f9b687288996ac4d8927f23d48343c36fbcc7ec85b94533c4248194164b1222d7b9debb9f01f783109bd52f22ab20701925516b05cf1"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xd, 0x10, &(0x7f00000001c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x3f}, 0x94) socket$kcm(0x29, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) openat(r0, &(0x7f0000000100)='./file1\x00', 0x48480, 0x3) fcntl$setlease(r5, 0x400, 0x0) acct(&(0x7f0000000140)='./file1\x00') fcntl$getflags(r5, 0x401) 1.545159209s ago: executing program 0 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x3ff, 0xc96f, 0x4, 0x10, 0x3, 0x3, 0x6, 0x7ff}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001040000", @ANYRES32=0x0, @ANYBLOB="80c20000000000001400030076657468305f746f5f626f6e6400000008002900e1900400"], 0x3c}}, 0x0) r2 = getpid() r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f00000024c0)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="5308fe8e4c", 0x5}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x10, 0x204, 0x6, 0x80, 0x0}, &(0x7f0000000100)=0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000d80)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x90, 0x2, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x401}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfcec}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_ZONE={0xfffffffffffffe96, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_HELP_NAME={0x8, 0x6, 'RAS\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x8005}, 0x8884) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xbe9b, 0x471, 0x4, 0x4, 0xe2, 0x6, 0xf8}, 0x9c) sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(0x0, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket(0x21, 0x4, 0x80000000) 1.205592819s ago: executing program 5 (id=627): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @mcast1, 0xfffffffb}, 0x1c, 0x0}, 0x3404c8c4) 1.180088219s ago: executing program 5 (id=628): socket$kcm(0xa, 0x2, 0x0) memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000600)={r1, r1, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f000000d700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x81}}], 0x1, 0x880) getpriority(0x1, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x10022, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/91) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [@hopopts={0x11}], "fafb17c103001c193eb4c625f48ce6b9"}}}}}}}, 0x0) 787.150468ms ago: executing program 4 (id=637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200480e4}, 0x20000010) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f00000000c0)={0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xffff) fstat(r2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x18008, &(0x7f00000004c0)={[{@redirect_dir_off}]}) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x724d, @empty, 0xb}, 0x6e) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}}, 0x24000040) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="2b75646d61202d68756765746c62202b6d656d6f7279202d6465f669636573202d6e65745f636c73200072646d61202d64657669636573204c7c73f42ccffc8d0640ec8392ce0c8ac6d859920b96e2bed90f3ab85c1f9a2f373cec4dc619e8ddaf05bf5805b059629bc8f3e7327adc5738cc5b0f5a413c0b172928cd7218f6d38fa98e4af0d536407e05959091e28c77d2cdc2ed3ed5da58a8a8f0c6b4088dc314d2394b2f1b5c86ba75f0a99679251605bc69b5bf6bb8"], 0x38) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_PRINT_DEBUG(r6, 0xab06) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000040)=0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000080)={r0}) ioctl$DVB_DVR_DMX_EXPBUF(r5, 0xc00c6f3e, &(0x7f0000000280)={0xffffffff, 0x80000, r8}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4000000100001fd070000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000000000005000700a100000005000a00000000000500080000000000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 622.880379ms ago: executing program 0 (id=641): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000180)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0x5, 0x6, 0x52, 0x1}, {0x7, 0x6, 0x1, 0x5}, {0x1f0, 0x5, 0x6, 0x1ff}, {0x9, 0x4, 0x3, 0x6}, {0x0, 0x8, 0x8, 0x7}, {0x1, 0xf4, 0x3, 0x8}, {0x6d37, 0x0, 0xf, 0xe}]}) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @initdev}, &(0x7f0000000280)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000400)=""/190, 0xbe, 0x0, &(0x7f00000004c0)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) 588.87895ms ago: executing program 0 (id=642): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x709d29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x5}]}}]}, 0x38}}, 0x4048000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, &(0x7f0000000dc0)) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x7, 0x4450290}) 509.193723ms ago: executing program 0 (id=644): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000500)=@v1={0x0, @aes128, 0x3, @desc3}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$MEMWRITE(0xffffffffffffffff, 0xc0304d18, &(0x7f0000000080)={0x800, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000ffd000/0x2000)=nil) close(0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 440.155012ms ago: executing program 0 (id=647): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) r1 = syz_open_dev$rtc(&(0x7f00000000c0), 0x800, 0x80040) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000240)={0xe, 0x19, 0x0, 0x6, 0x5, 0x2, 0x6, 0x44}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0xffff8001, 0x0) listen(r0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) r7 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f00000001c0)={0x40, 0x64737664, 0x1, @stepwise={0x2, 0x4, 0x3, 0x3ff, 0x81, 0x7}}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000c40, &(0x7f00000002c0), 0x1, 0x532, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) syz_io_uring_submit(r5, r6, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r4, 0x1000001, 0xfffffffa, 0x4b, 0x0, 0x0) 333.477156ms ago: executing program 6 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x71) fchdir(r2) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) unlinkat(r2, &(0x7f0000002280)='./file1\x00', 0x0) r3 = socket$inet6(0xa, 0xe, 0x8001) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r4 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x2000f75) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c837365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000000200)="3c9c20523ded4c0f106ae6b96d6b7c81dd12652802946ac25759763c968d6b9e50a9ffdca850ab65da37d03cd977de1c00849b4b64b7f7d8087576752468d6d010dc4dbf741ef8a0ac3f7f5e5a9ca0d96399660a17960c45137169f24f0bbf258dc68d62291617bf96648992ea261cf1b85662010d9fefdcd72730abce7bd15e6bbbdf23709fc161f43e02c77839c6208e381a4cdead31a44bebe16f240c5658b177618b38905afa550955915a3effef2f37ca73fd99586ab777695fd6f4c223424d7927d0cf9fed3985d7e188fbe0d97f6903dbc6cfd5c7cb90baf93c4cf5a0096139b6e461ebdf826e1c6e59f1cf82256df35eef636d26afd07f2787cacd2575c7551d67039fd61470b15523ac8f032cb142f71939bc376bc75864ebce299982b4e521521f3f25d44651157e00a6d1098df73a002bb65403a1dc9f2d4082d9cdb81380a9776e6bc1009c6b2e95f5f0a726e0a0e821cf577ee471373261bc251a77fdb7900e6b063d5f8f2ae455f013ac763150215c641b3ed93b3cae765b9074e2779a0ec7431b042ec0c7245e83f5bc7b203f01e989c8659117e19bcb272190bd22758963988e62c315a27e7a894749c552d59c307e4f1de677c59912227ef4ff00168b1bedf09cb5e8498e8926e286eb3ac3f27e2b3a551a0554c1963b976e0875913d0b139b1fef3b856452f493a26858ce54aea75418798cf70287f9c0572341edbe66ab66e862bff4184906daa99eb484ba9a8fe9c6f2b94b5a2519bb0d2816bc597a692ae91e089c3f922c6992fdf0a45ffa2d4555493b4e2ad45b92bd98bc1ea9cd7b46e0d6aa2611734a314602587c7348cd6cb2b6207da9bbc6318dc7791d8d3530dfc1649edea2aee299387f9f004cfbd1c260b49c26b850f341bcab52d9a0cdc13e530f1614b48d935c140f2ddb5206a04c917aa4e530fa2f93d2093b955dfa893508e5f0717e3ba58bbbf7c83a0b96a9ab00ccb564ae3da0160ed6277bebb4f014b4a77862ebb503dbd456010eb67bf8c518cc60b6c460e7929d650faa63b3e0207857e17d8e88b7cacf8854543f6eaf5f86015f6091baaaa50a03f3915eaea9fc5e6e0be736017628f721963f8716d162dd52c295e8da6d492722c685535a87c96f9dd341463aff98241003dc8b2e4135bba31745e9353235caccb3d4064adaafb371b79540f95681ffb1f6ac8116f42a175ffd31f1df99c0f89b20c07f121fe1dc630b432a39bef3e3cfbf92574a6c9ca71ac889adcc47644e1ea0f11f8c21a509b1ca1b275e21fdceb3e553045721c4e030ae4454376660142890d753c072624c2ee5d27a25ebd6b9b2a923b62c510719791c22d33a61c002b8af5948779ce70b90f69aba9f504c8d3f2649d74fd02feeefe327d9474677be4bf110d6fa97fdf4d89484154755a30dbea41194ec7c46b28f397c49b5aa4888f1fedeb7d7fd12229ba4dedb1a02f46a5cd990c1dcfec6e3d533a4f9587f6a28f838225b74076e18c69b501f0ebdf33562e6b9047f94dde375f295d782d16da09aa141e79fc96124f7297b97ddc8d59e239a0783ad9ef3294068b91c3ab9ada4419fb4132c7ddd8dd653167af8b9435fad20db5a0ffce5d496ae656843f4cb1bf98c190dc17555bbafb7081cd935d9623ec2ffec4dd176ef4400f4ef83f0df958bd18e21809e019b8a57bfb89f68ac636da4041f202d24186dab8f8d4157789e32d03759e70c136bb758bfd1b5d49a3fa1b9fb551939fc9ba7b7afeaaee00cf7e019c716998e233e040498b46ca35a87ec2743167646287898bdc47f44da28ad4853020b1d22852ca201b7b8ef41653f502b09756183fdded700521b7b3110ca92d8c545b2f1b26d5c371f5afd3353c12a06ef9e533a1f3b787c5fb107a05b58440d4a6de49f0c34c4f2801d8e4ca1f6f5eee0af97ff50628457ba364283d2d992b4f9b62daafc6135279ebb9263b0cf3b8026cbe58f5b2f4f6c3cf1e841e16525327335e2d86c83a8d7f59f67db18db1fd518474ef630f9d2f4a03d4f0f00a61513c849c6fc85e7a7da40ed4604f0908c3852a515aab56198bc489f51606148832d24163e020a8723b0d6c84b343a485ec52882c584b32e3441058c181a22b8e093d88776bf43ae66c3de0d0babafc0dd341e1f385d6e54ec4959cf1accb88318c37a0488d893575e6a38ea6b1b94da576b0a2f5d253bff49c5d4f21aaf441deeaa748011488e8ed571baf16cc8bf50f1dcaf1415e1dfa251831166a075f19fb33adde935512ef8cffc91a607abad19fd56a137ea2b519c6d413b36c7d6d592f4d4a6b8ada921ec066233d53836ed2fb22275d6b4f38dd295da21f73afd8ba9075edb9ad253a721caa08c4aaedb77434cdf37f3c9bfbce1753dae7771d57cb37d60bdb711b01a27224e8c7e0624ae23401d9676e8b926c55061f67aa7f4a9312f414c7f23f2388cb4af37405994bf0e685f88341224d6a036891919bc175033d477d2e9f71b3f62e53d5ddfc1f27c607adf802659ecae88ae5ab362fdeb413a926c559ebd39f9f8abac01f938c62f25281ce29b32acf10003edf87941e3bac7ab8fc5f23b7091f25708968ac6b4eee6d7eaff8dba0ee43645845c68d179bf9f6ab9f348a3391fe4a7e9387d0afbfdddc6f65053305ec9c6b6947cd6812f58f66dff62be596f57f49e25fa2a772d1626befe49083cab88f9ec597eae0748018007776728c76761e90ab4341e2b8ebeb6aff6fc2fd4f28f1f9d295193eb0a34bc50974c1c93d6f480d3f65b3dc412cc72a25e1054b661139f7fdd84ce01d8fd40d73ad4c420e51b5bedee1c89dd58c3e5b1560c310e7e2287f8f0a01f823bfae541db946b0d7ea87e772b2881f5d5f36f09ecbf21df27151257857badefc198927343294623ded45662ef48f966ee7bce73e5116b49739a92b5f34c5359990fb3524c33219d3c3414b1d9b643ae7b2c188cd3118a76ee9ec5335c95afa5e96ccf7ab072754dfebd4afa2492681480399cd388d82ba6118d0c2d00b9534ac27e15a141fbd92cc4b52730ee7fe7f1150ab062772fbfe4956ea0ba731814dabc4a05d0327f5b51ca395e6ba74aeb76c698f35db68c7d09a70ab26d1b1bd5941d2d72f08ce0328002ea5e1c2fd0583e99233112f1ce3647e47362c20f2c231499a5c1474917bdfed84d1a02b2b2bd05ef07b0624d1089b7aeb7b0350ee656876901ca438df1df85b6a0ec27843b4ffaf97e47c478cf5e2bc95f1dbc26a39a56718970d0c7a4d1d1fa4f3760e30381d19de5d9b00aba120049a424b7586aefed101fab0fc064355e81ff4f41ec33a5e818a87712db81454574dc6b9dcaf2725bfeaf00905fbc09a6b6518303913b56a12149e7affad6cb62fc866ba5ad868f5356bbcc08292796659f0a38b92ffaf21a79e7a63283dc2d851ec5b8152868c0cbacdcb53f276a6a307587c5a951fedfc9c9a221efd0c03a6a35017ee3c70f1c64366603ad50ff2fb6298cb29ca59825d191fbf46941e0109049c9a0f399055187968f903174b028a59ed91188bc3aa3502bbf64bf9151536987d13a738060ba0607700e27ca75d8f11897c1656a2d11e54620b0c140bcc5d114d53e16791726592fb5cfde119462341f4a3313186467ac23e42bcfe01c5b33e499ce14e5b20559cfddbc1385cedaf71ba49113d3e24847b0f5d1011bf173b48009f840e10cb6e0e3fdea52a7468ec4edf35396c64ce7484e6eb9ed4f809b31bbc8a8097e3e2b1839b4bd2bbf40f9aa3652e85aeda6ed7dcf242fb11a94710a0031bf2b0683538c292d3af365a57a69ba327692cb6c163cf7c4698851b2e158cf3abb223e00a3c835981cd261460e382780fca37530249c9ed33a8b857ba6414336bab255f8e2e750a79c36641a0dd54671f98f7280f7679147f108603394bd143f9385a0d114609b308f973feca21ea2e53de1bd6bd7809efacdc5b4487f7ffbca05dd803fc12e13b8103da1723cc8bc73f26de7d256bf7d60c7c1ac47dc47a7810c43403b780052e42b74e69e1a3380fe9b80c7a2b7f4617f4009230e8688afccd99ff92a69b1487b385ef2fb7729546c317d7b3106af5f2ac26222057158240bb07a3a61a359d1bf3e809220529580f3298b0dff10c8fe1265c8e5ea41424e5a0941c5dc94fd9d7a33ef1550f3f30a4f73ac5fab6b6c34a03f1575abebee4625d041843ec815ecf854c8455a5897a9533e4d5e95a1c5121d4716a82da80abe9325a92904837a586adb63b31ce0464b7cf0e9ac48125ccef7da201292a02b9aff8622f8334ca34447861873cb640a44dae8e5837f9add02bd1f5f577957d82021c805f1d9d00de7a1a71dc5e3fea80bad67aa76a51053290821521eb20385925d668c733859ed4e0d923c72d4ed7a20b90ac87de48ba4bfb6a3bcc63907a205bb721ce181a9bf6470a70b7ffbff9f20703243cd0a10afd1f93c781ab8cc8cff9283aa94a28a35642e09d3f7843a91a2581fc8dea10dc63efd8e1e9ded53372f4e080e3d1258e0a5ba26ea97c0e25de7df6ddd230d2345f36e7c4fe1890473fc029055b8158c4f691ef3e65c0370d8e299bc978e6c861683a5e6a448e18b145f515cbc8b89addb7ad0482057a1d8df5da6ee12501782529e871cf6f82427e0780ba8f66c00d43b8a09ea3fc58cfc5a5e1191528f0e6f4368add0d8ca5424334500fc26e52648d0761e8f81a666b27f581cc43d3515766ee0212d2d996b2442dfc660bca3598c61fac63e866c2b8749f78cecd90c6aa0eb344016f36f079202b9b43eaa9a924427d44f4de3a96957aa87429c2f88b80247b931355b53fe7bfb69264eb2838e392368e236ddeb578188fff1006a7ceb6207962cf0b61bd3cbe213ae9b5f0357a160aa697275bdb821d436cbcfcfb1f406ba5fe6c449f81d49912ac17f66088dbf6cc02ccc6e4a58b258e02e7f0b86bfc5eb792c8115ecce5c95e49213f6f831c658d6c12678c59b760b0888dd6abb9c51aceedf982e0a99e4263966e7b3efe4141fcdd2763146eb183130ebb708a2d86c09dcc91f60ebb07b427f2f53169057235c3cbc75153323ebcd86834d5abb87eb5bedbd3537af4e7070127ec5ee42b98fced9bc84e14a7ab170becfaf0d05b6b55b58d4e650190d5722497daee40c580ee433bb5889bed411d7dca299c12a347046e4f4afa55d014178cc4f488d0958c6e9e9614ffa3f51a687a9d1d0c45794e1632b8934558feedc13e5667e73a3d6d8b1152968628b084eec9b1d7719438ffb61164e2638afc45a2790a8e7b0505ab46b2a07f14345f8bc6a025c054c71183d9165fda5e72717e5b1ea63d814ae11f5291a82ff799a265ffeed035af29706f7045565e0c36519d2a65a10971a7c147cf76614c92feeedf6cb06a7440bc01229088e492158bb4b5f1533c040701e2e27d627cfb07b645c895ddc3bc6e182176ea7012261bef6be384a1fe33fd9e46962652b36dd8dd9872dcd1700901605c40b2e56f5b37d06715b297c67c61c0ed9f240644314acdd1567b533dbcf3ef37c9c7692039323dde20756d7d8c87fe87304e6657475550b0f809994918d7da380c7a70a178fe9666494854d0a8e741de4f5dc296a10a1801738d49fd23f8ade43c20cf12c1cd8691d0a08a0dac811ab87b6cfb16431d0a2076ee16a2cd8706952a26d9d60634441c1f42690500e88dbaa3ca5739cdb903ea9a0e4a3ebcd55ff10188c550a381a4c650972ad89635d493966a16ec8da9d7b87ed087129df490f83cedcdd2b5dc24c377e208d850e4c987f7fea345bb86cb16da33f43b3ccc62fe31aa102a9e49d49c0f16eeff031bf12496f4469289a26596dca40d3fd4dfa7535155145c365e826bdad6734ffb47ffb1ae4d900cd27fa691ea28b15346f68f47ae2ce0a83a3005d5858e6e587f1609517d8d9330718c647c9b08dd925338406d4cef2a39bab25a37c8092185a7fcf36324fa0648ff8da6317d55355fd18932ad3404eb010bb29aed83982514eb74be3ec28f5c84ab6dbac7bf4e7aa399cf2461bce9bc4600a8ed1e37f3a31b2bae2c92f3c8ccfec5aa296e8499ef76014661dbd0d672fa8f16b7e1bbc864b215e702cd7c12eb5be6dc3239b52a59025a2a7ed459b7def94018a62d5ae7eb059d930a4c3eef8e3ce6ea3bb09a2817c92d28065d610e4e8d943df84961e8ea31cc77bd8250d352302227ec3a9bfdf7249e2c9c6094dc5a949ec003f2c1325506b17ca0ef12d7c650ef253d51d89b40f790b7492252273220225e245c833d64c55a48d971c510a9dbaff075ce7b53422ab68747703bed9fb94c60f857f14d07119fe17ee693af929802885acd14a9893a87085944260a596180cff4bbe4151ba1b19266c1d13a491c5bc983f158d6d5d218cabc78063baf95b6e93beb3d1cbbf72b984664b01330f39b5169d517d13cbbe2f5d6290d746a45fd5c0072a6e96a885d5324b139937d23f4a7282b7ef5c598aac3cb4eee4b25ad296d7e12ea3f27f58374d2ea4154ce22065a391d0b718aa89c9438346318c584613b065af2f32d18b1bae2aa17b8480c3698188257bc2797172c78bf0b163405c1d6fe4cd1c6c68d5a72c032dabbb8e84e767882d34854e30b4264dddcd0ba7c3d03f8b543d16391dc6a4f4110f57ceda8ed64fe9087789191cd471b1bd53b3825749c84e55a425546b7bbde748270296bb207d50bfe7cdbe13734d04ba7fbd8e684f435a397f9747286b9f791b6172bd12761dee4a56852a830ea14eeb1d2834c51af097fc72f44f8122c2a05996c21222b55d6f41abf0f3f7bf58343da4cebb5f59921ee4956e4b8e6690b2313cd59d3939d8dc7ec394c01800058b614a478d69f84abc3941ab10d69029dce4acfd11ae4252d5154d2c1b4b7d68fd3fd9adedaf3686110be8cb656b9373bfd30178b3e9a998ae4d2793e6f1386b3809ab2d712ee89d45abc6e3d8e19e9e4c1f6621ad20410b3772ac920a7c94729eab9b508f0e493d36abe5df286158ea3cd5b1da16668b482dd5baa90c9d2b7a05f6f73012ba136d6e78ab935094f4f97ee7e156d6001bf2872dc7ee081e31850badf171ee96fa4c91751053e58822657a811f8db0e23e6ccd0e48f8a3bcbb90c2ec3e83989f583e51c496ac29b81b2af25988d8283c2201a6cc1f1e5cc4f926817a542b8821a8347140b2c4ef0ae629922e6625f7400b2bddb6783eded022a9f157c754e29c85f71a2d38dfade7851d182ff2100425a80ed829966238bc9e108d97dd086ba46cf623a0d5c0e5a0b1c86a304f1363034d880425d7a6fbc3ce234a0678604e74f0d40744f6ac68183d4b0570dbeb77e3b19f8ca204519015968d83ff7a39b8840170ae29f205c957ab3887eb8dbcb5339f1af44f566fa96be59f1bc82ef7edc6cb3b7860a746c4bac8ccf68a76bb9a934238e830f11d05171fe5aae1273d7446e5e80ff3959c9535215f30c63c7559561f288116c441080cd6ff338628e35eef6d92aae44866be47b0cda019bb18126fef4247c94db0c8fd29cde7460d0b2f710471564af2738ad782e16ea97cebe6a89ef8f3590d71d86257eae312ebf48e478366645c4ebf664a709bc553ca846758ba734170b26363bb88d408365827d61e16400b4b1de6e45a7e3e692459ef2b2002dc37cf91c8b8a5f8e6060fff0a72bd966b6c999322356154805586db159a874ccc52cbd9b6c5681ec8ad50b768546f2e6dd9ce4d1528203f73712ffd8be7fad6d786fc560e5047c0a87860987a6bebb9b025dd1bbbda3cdea5731c41e2e1975f7a889ff38d38fd2601d5a1b7e8ea833188e3af14caffa4b66c041103d55eb5511c5bbb85a0192aa7bf0acb17cb84a29456d466f6eda261f612d5e4603e4aea389b68648d5503e9c1b5c3984acdd325dc5dbaf35d9e44bdf7a8b4c89ce30b4b648b9e1d38fa91bc5c8d8f601a6b82e1f42f6e04acf3f9fac8d26b03a09bd7cdb35175ad55f17b22db328803d66324c0970c38d81cdc1b7ee67a2d910e8064f81fbc0d2a6a7aaade8000b8be4fe111d354731cea9380d39ece8b146d34f74b7ee87322e4d772f3570a46d81cdbbeb21f7f66fa8baa869e4b8637f8a061bb8efd7e06966f3186d1c730cc0a4f38683054f1fa775bbd3cae02102ad9c773fb7eb874bed5fd84167fa86029abeb7d9056d26b66bf7f4c5ba675482c71b08d2ecb9b23bd2be801a4df9531396c7f4bbb59602500464dc04ff7c5622eaa9887ccff24bd88a52ad69f58880012db03dc4d051626b1fb0faa510fccb6b73f3953e461165dc58eac1063b664a2a18adc06102af134737f34bace2fb21b8d54cbd674c1a10a75463345b4ffd0f9fb5894e6ff8b455f5d35bd1313392cef7c4c441ce8d21302dfd58688e5d9454bcdc03a9c3ef269697506ff9ef4522cc0efa935aa368aafcc48cc2a5b6be32a89b29d0062c33ecfe44dd070a43ebc63f3cf99a3a142176c93c1d7acef0d42261f8f6d50c837d9a43e8951b35516e050069af0633e6388323029c9092475e1a7e81639d9d2e5b81424e1576920b977d329b5b087011718a39ebd31983512c4c43df67c2919e29ef909fc8c79fe2ac41e08a269690a32b63037abfc9d5b1196b86edb8e4312f3b8b8d4e265c0e6b0db372d742f1ce5bde46490af51ee9ce24e36ce8b59f7213e68929e4174a2760f076cd1a7b38db164c67c0e902f05d4d3f8d77225586b975a1655f7decedfb8d331e9c4e0c8c2c21217fdfae1b2149612ef0eaf71bcd23224cda2d0ee00955d1ea88a56f508923ffa2fb1aeba4f4fc4a02c187fdf3b4d791d5566acfdf4b63e9c3990f12059fa2562206098967cd36f06c502ae79cb99f4880a8c28a14d207bd12c30f9604bb3bb2e00f46151bf5940445036dda64c135d8af713b033fd836ed11d64a18846c62fdb1310821901d18b45b337970a9949dc1ed45d4afb3596dde4a7df1c009f6cbdffd0f1f4eb12f1a1d23b87a72baf07b9d90913a7e247a2023e91ab2c77aae0e9d666593b61d85facac3c8f50cb4f2e9e4a435897623f3ce626edd98b50ca2a764756a438a63e26fe480bc5eb7c54ddf055cc985b051dbde037967ed3de9d08b2db79701608bdd2bb06d8471075dcd76d1422e4b3b221ec687b73056b74ff69e395da32447278dc9b6e499abeca743d4c0d2ae2cc3c0e1b253862cd22f4266e922d1c255fa755899d3d277ef04f55170e389b4c4f14e2c0ef58d9d9058e4f5122d96250d7f66288bdbac3959a6e674b51b0802cb451faf40376cf00022672766fc96e229d63d1fee5310fec48ee58b76a6d98770452b3a472ce5c20ca58e14538e961fb7dd969865e15be4c1ea65153c1d3e021f88fdc7630045b6db7d1f5b92b2fbbb1fcbd1c2175e8f6a5d00dce1400a34e3982f0115f60c4c4df2e0dfde764b10f08958ddf6955c8c5e7e287dc4328a00b74addb10a73131ff3bfd9779f23901ec8407369460d0d3f04f53b6445def63b7b19d8a38dab779ea3dd7bfc7cb74506358b23e0c190da6e306a4ade9a2dff29d4703ec25058d0034c5a84ef97a1120050155f29579b27f4fb7c400d1628e7b4312082e870e5cce27eb5eb811182a2535962e022979d2df66884ac2608175ef7b333ed88bbfa66644198ba201a74581612fe604a0bf952f8e4edf3e73eb93c52f1a1f91190f9a1ec2010ca2e97d1a8acd310d802522ab38d10b9995f2d6ce43758a9ccafae4578b45b7ad69590d81c1c84172b7e81cbb813b381304e5524323436be4fa418af2924c972d17d3fdef13b3d15384c29da414fb5ce9c757d905380f5904ca24bd4dfda8e1e782f39a42f8920060c0ccb17a6db8a767ac9e33cb431593674ed9969f617f1cc6fe972e3455bdf31276eae587f3083a0826ed6516b7a8fabbf27bf23ffb806e566ed75fe93597d5ed4113244e98c61f42fd2ceacfdeb9610673b075b148fe23956109843e07ec5a1bc6004214351537613b8f7f2c4c0ae9484fee92f446e5d2fc4a2b44175022c0a5b7b4272df00002e4ffdf4eb56f632e6bf41fc6f8f7fcb04306ac0619b0eb8fc2751bb64cc29db25162baf8b6b5d61d45f041157b8412d699e8e615af31944d80fe52b89e1a21df2615b4abbe02ee7d936cacec938a813e5f867b541cb245e0cfb5f826bc017e958686ce3e6b888ab8230629356c0134c5b5cb0d8fc267338c336d5082d20c49c68739d6b56d22198a903c36fdb6d5db70785c65ca6286f4125083704e7f9607502a951297d1838f40e424d54ba94cd33748050d511625bf3d889a5bd0bb04e263f633b200fff5aa45b0fde945554ed4c3b7bcef65ecbb63c0979bd48149a19851d9dabff8e8f5b889e453a1b8bcff72ecf6280703cf90a5bc285469fc39d74c897fe5ec0a36b49825adcbbd412861b5a951dd7af16ebb70b921006ed14647afc1b115683a815dc3f4bd4983778573aefc6a637ae41dec4c041f6f6914f4e10c5c98fa6a5c052b64d3260cbef91fe234ac8127bcfa2c2031d581332c411b22d8617cd2720e1a4ccd6571e8c593457e038b387004e9c839b998384829d46e3d0ccd5ba8a1dcd338f1cf572e52a80e17c4f72fe147587735648b417858f27ef10eef745dafa9eea5f2d80c920d62e0cc2e3567fe9302ab8554e3c4a6c17a5fa5a8bcffa0df138a257fc308ad57a9ce63e6cae6e9cdf4f991f50a057daf64b20ef53b7056efbba8024eca0f703273e3c9be5e4f7008f44da6e9cb00cf3828acc53a7b12e48e1dbb778b61aea347a8f7b945a3f85745d640ce8a8567c0f00cdaef81f8a77ec849d0281c772cd276201a446a4522ba99a7426db7debabe8c98ad9aaa0f37fae2a73127d594540e015d5ad9b409a7c33e82ad27ec0a8ada34ece920e518ab6175726a904f9ccaa1fa243918d31b6728d88cbf05db8fda8d9f1155e23054eef268bb9f9f57fe887a5da5588013a6b642bd500d678671ceaae7f0c22ff7ea0ce48c055a65b2f7f8ee65ec7c00306d75efb2cb5b3385c18e05b9c9645f62b5bc363cfe8a363d77e9eedc2d7c936b5e880c30a17abdb2b33059302ab5182a6e04bc9f3a16121c86463c7a66398d7e6d98d62152429c149f4d7fbeb109eb19e8f36208d977dde6cdefd61ae2747ffc83812035a4427ab513fb0a7402adda1d3bd6aa5745cbea133a835006455aafb239b497e3b40533e8b3120053bfc2b296441fe2b2829dfbf79c325b7648981f87a1383efeb137d7e4fee9bd0a3a34a76334ee94ce7436454c99d6471c5c4e9fc937f62553e32dda49709d3873416be8da8430d0635ae982f999d95e04248504de9bb769d786a8eba4766ef18e528765dcaca0209ec27c713aac7d8da406d3f7db7812c8dfb9268b3a342b252f810e5461ac40e8fecc182898f7aa5398fe4867eb9a25c01f053843ce76c013c24a6b8861c60629e803da6b8d09e182013e417a0f5a614b1416707b9e5dfe9f2ef957487cf3cb477f0ff8347521325be19f7d382080e78764b35eccc0ab73b15179881d3cfb246033bfcac13ebdc153b3426694a40325a49f50d7c1f519b733b4b8544fea238fa4528bb654fef724447337888011e500", 0x2000, &(0x7f0000002c00)={&(0x7f00000022c0)={0x50, 0x0, 0x0, {0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/../file0\x00', 0x0, 0x2000) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='FROZEN\x00', 0x7) r7 = inotify_init1(0x80800) inotify_add_watch(r7, &(0x7f0000002200)='./file0/file0/../file0\x00', 0xb2000880) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) close(r3) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1, 0x8, 0x800}, 0x20) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e60, 0x80000, @mcast1, 0xfffffffb}, 0x1c, 0x0}, 0x3404c8c4) 329.291636ms ago: executing program 0 (id=650): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x246, &(0x7f0000000700)="$eJzs3UFoFFcYB/BvZnebJtmWtL0UCm2hlNIGQnor9JJeWgiUEEoptIWUUnppSYSY4C3x5MWDnlVy8hLEm9Gj5BK8KIKnqDnEi6DBg8GDHlZmJ5FoVhQn2VHn94PZnZl9b743zP7f7mWYACprICJGIqIWEYMR0YiIZGeDz/NlYGtzoXdlIqLV+uVe0m6Xb+e2+/VHxHxEfBcRy2kS/9UjZpf+WH+w+tNXR2caX55e+r23qye5ZWN97efNU2NHzo1+O3vl2p2xJEai+dR57b2kw756EvHhfhR7TST1skfAyxg/dPZ6lvuPIuKLdv4bkUZ+8Y5Nv7PciG9OPq/v8btXP+nmWIG912o1st/A+RZQOWlENCNJhyIiX0/ToaH8P/yNWl/6/9T0wcF/p2Ym/yl7pgL2SjNi7ccLPef7n8n/7Vqef+DtleX/1/HFm9n6Zq3s0QDdlOV/8K+5r+OV8p/uy5iA7iiWf+BNJv9QXfIP1SX/UF3yD9Ul/1Bd8g9V8F7HvfIP1SX/UF078w8AVEurp+w7kIGylD3/AAAAAAAAAAAAAAAAAAAAuy30rkxsL92qeelExMYPEVHvVL+29ZTBd9uvffeTrNkTSd6tkD8/K3iAgs6UfPf1+7fKrX/503Lrz01GzB+OiOF6fff3Lyn8lMsPXvB54++CBQr6/rdy6z9aLLf+6GrExWz+Ge40/6Txcfu98/zTzK5fwfoHHhY8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3zOAAA//+Hwm04") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) setresgid(0xee00, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000440)=[{{0x0, 0xfffffffffffffd94, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0xfffbff80, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x30}}, 0x4080) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711026000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r7 = userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c9d048c8cf3ecb8519bb1200ff7f0800b80009007f090000d000022a0d6cc6e329c786b5cee02d67785aed3fcf9131a8b7a9fc42d3d3ca3415699b56cacd34c9329bea7c000fc575516a186789e2aac85a377a90"], 0x1f) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @local, 0x0, 0x6, 0x0, 0x100, 0x5}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000d00)={'gre0\x00', &(0x7f0000000c00)={'erspan0\x00', 0x0, 0x20, 0x7800, 0x7, 0x400, {{0x15, 0x4, 0x2, 0x18, 0x54, 0x68, 0x0, 0xfe, 0x4, 0x0, @remote, @multicast1, {[@lsrr={0x83, 0x1b, 0xea, [@dev={0xac, 0x14, 0x14, 0x16}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp={0x44, 0x8, 0x22, 0x0, 0xe, [0x7]}, @end, @timestamp_prespec={0x44, 0x14, 0x35, 0x3, 0x9, [{@private=0xa010101, 0x8001}, {@local, 0xf16923c}]}, @rr={0x7, 0x7, 0x6d, [@multicast1]}, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000d40)={'veth1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000f00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x124, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="7c0236fa07c6c7d5"}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@generic={&(0x7f0000000c80)='.\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a04000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 299.406728ms ago: executing program 6 (id=651): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x200, 0x1, 0x24}, 0x18) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8840}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x1, 0x4}, {0x8, 0x5}}}}, 0x11) recvmmsg(r1, &(0x7f00000091c0)=[{{0x0, 0x0, &(0x7f0000007600)=[{&(0x7f0000006580)=""/4062, 0xfde}, {&(0x7f0000000080)=""/115, 0x73}], 0x2}, 0xfffffff7}], 0x1, 0x40002000, 0x0) 225.645529ms ago: executing program 5 (id=652): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1010410, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@noquota}]}, 0x0, 0x76a, &(0x7f0000000fc0)="$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") r0 = socket$inet_sctp(0x2, 0xf, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xffffffa5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x7fff, 0x2}, 0x8) 225.271798ms ago: executing program 6 (id=653): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x1000001, 0xfffffffa, 0x4b, 0x0, 0x0) (fail_nth: 3) 221.634597ms ago: executing program 5 (id=654): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, 0xfffffffffffffffe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xffffffff) ioctl$TIOCSLCKTRMIOS(r1, 0x80047437, 0x0) 184.664915ms ago: executing program 5 (id=655): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="01990000419a04004c0012800b000100697036746e6c00003c000280060010000200000014000300fe8000000000000000000000000000aa080008002e0000001400020000000000000000000000ffffac1e0101"], 0x6c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) 149.48689ms ago: executing program 6 (id=656): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='comm\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 126.611258ms ago: executing program 6 (id=657): r0 = syz_open_procfs$userns(0x0, &(0x7f0000001640)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000080, &(0x7f0000000440)=ANY=[@ANYBLOB='noswap,mpol=interleave']) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x20000}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) setns(0xc9, 0x0) r6 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x541b, 0x0) syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r1, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x70, &(0x7f0000000680)={0x8a, 0x1, {0x0, 0x9, 0x4, 0xc, 0xd, 0x8}, {}, {}, {0x0, 0x0, 0x2}}}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400a8, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.047032ms ago: executing program 6 (id=658): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket(0x1e, 0x4, 0x0) keyctl$session_to_parent(0x12) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x13}, @hci_ev_le_conn_complete={{}, {0x0, 0x2a, 0x1}}}}, 0x16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x805, 0x2, 0xa77}}, @func_proto]}}, 0x0, 0x3e}, 0x28) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="032a000a00060005001f5ab42d0000"], 0xf) 0s ago: executing program 5 (id=659): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r2, 0x2000000, 0xfffffffa, 0x4b, 0x0, 0x0) kernel console output (not intermixed with test programs): 288] loop3: p145 size 150994944 extends beyond EOD, truncated [ 44.791144][ T6288] loop3: p146 size 722688 extends beyond EOD, truncated [ 44.791512][ T6288] loop3: p147 size 150994944 extends beyond EOD, truncated [ 44.791829][ T6288] loop3: p148 size 722688 extends beyond EOD, truncated [ 44.794451][ T6288] loop3: p149 size 150994944 extends beyond EOD, truncated [ 44.794915][ T6288] loop3: p150 size 722688 extends beyond EOD, truncated [ 44.795891][ T6288] loop3: p151 size 150994944 extends beyond EOD, truncated [ 44.797008][ T6288] loop3: p152 size 722688 extends beyond EOD, truncated [ 44.798190][ T6288] loop3: p153 size 150994944 extends beyond EOD, truncated [ 44.799875][ T6288] loop3: p154 size 722688 extends beyond EOD, truncated [ 44.801495][ T6288] loop3: p155 size 150994944 extends beyond EOD, truncated [ 44.803755][ T6288] loop3: p156 size 722688 extends beyond EOD, truncated [ 44.806852][ T6288] loop3: p157 size 150994944 extends beyond EOD, truncated [ 44.817870][ T6288] loop3: p158 size 722688 extends beyond EOD, truncated [ 44.819890][ T6288] loop3: p159 size 150994944 extends beyond EOD, truncated [ 44.825788][ T6288] loop3: p160 size 722688 extends beyond EOD, truncated [ 44.827575][ T6288] loop3: p161 size 150994944 extends beyond EOD, truncated [ 44.830236][ T6288] loop3: p162 size 722688 extends beyond EOD, truncated [ 44.832288][ T6288] loop3: p163 size 150994944 extends beyond EOD, truncated [ 44.839633][ T6288] loop3: p164 size 722688 extends beyond EOD, truncated [ 44.841358][ T6288] loop3: p165 size 150994944 extends beyond EOD, truncated [ 44.843120][ T6288] loop3: p166 size 722688 extends beyond EOD, truncated [ 44.844835][ T6288] loop3: p167 size 150994944 extends beyond EOD, truncated [ 44.846618][ T6288] loop3: p168 size 722688 extends beyond EOD, truncated [ 44.848354][ T6288] loop3: p169 size 150994944 extends beyond EOD, truncated [ 44.850192][ T6288] loop3: p170 size 722688 extends beyond EOD, truncated [ 44.851907][ T6288] loop3: p171 size 150994944 extends beyond EOD, truncated [ 44.859799][ T6288] loop3: p172 size 722688 extends beyond EOD, truncated [ 44.860591][ T6288] loop3: p173 size 150994944 extends beyond EOD, truncated [ 44.861269][ T6288] loop3: p174 size 722688 extends beyond EOD, truncated [ 44.861622][ T6288] loop3: p175 size 150994944 extends beyond EOD, truncated [ 44.861923][ T6288] loop3: p176 size 722688 extends beyond EOD, truncated [ 44.863288][ T6288] loop3: p177 size 150994944 extends beyond EOD, truncated [ 44.863750][ T6288] loop3: p178 size 722688 extends beyond EOD, truncated [ 44.864183][ T6288] loop3: p179 size 150994944 extends beyond EOD, truncated [ 44.865822][ T6288] loop3: p180 size 722688 extends beyond EOD, truncated [ 44.868154][ T6288] loop3: p181 size 150994944 extends beyond EOD, truncated [ 44.870600][ T6288] loop3: p182 size 722688 extends beyond EOD, truncated [ 44.872390][ T6288] loop3: p183 size 150994944 extends beyond EOD, truncated [ 44.874583][ T6288] loop3: p184 size 722688 extends beyond EOD, truncated [ 44.877036][ T6288] loop3: p185 size 150994944 extends beyond EOD, truncated [ 44.883440][ T6288] loop3: p186 size 722688 extends beyond EOD, truncated [ 44.884787][ T6288] loop3: p187 size 150994944 extends beyond EOD, truncated [ 44.885479][ T6288] loop3: p188 size 722688 extends beyond EOD, truncated [ 44.886457][ T6288] loop3: p189 size 150994944 extends beyond EOD, truncated [ 44.887115][ T6288] loop3: p190 size 722688 extends beyond EOD, truncated [ 44.892698][ T6288] loop3: p191 size 150994944 extends beyond EOD, truncated [ 44.895003][ T6288] loop3: p192 size 722688 extends beyond EOD, truncated [ 44.897335][ T6288] loop3: p193 size 150994944 extends beyond EOD, truncated [ 44.899992][ T6288] loop3: p194 size 722688 extends beyond EOD, truncated [ 44.902307][ T6324] overlay: Unknown parameter 'uid' [ 44.902525][ T6288] loop3: p195 size 150994944 extends beyond EOD, truncated [ 44.905535][ T6288] loop3: p196 size 722688 extends beyond EOD, truncated [ 44.911344][ T6288] loop3: p197 size 150994944 extends beyond EOD, truncated [ 44.912369][ T6288] loop3: p198 size 722688 extends beyond EOD, truncated [ 44.914969][ T6288] loop3: p199 size 150994944 extends beyond EOD, truncated [ 44.917155][ T6288] loop3: p200 size 722688 extends beyond EOD, truncated [ 44.920618][ T6288] loop3: p201 size 150994944 extends beyond EOD, truncated [ 44.922777][ T6288] loop3: p202 size 722688 extends beyond EOD, truncated [ 44.924517][ T6288] loop3: p203 size 150994944 extends beyond EOD, truncated [ 44.926829][ T6288] loop3: p204 size 722688 extends beyond EOD, truncated [ 44.929940][ T6288] loop3: p205 size 150994944 extends beyond EOD, truncated [ 44.931017][ T6288] loop3: p206 size 722688 extends beyond EOD, truncated [ 44.932649][ T6288] loop3: p207 size 150994944 extends beyond EOD, truncated [ 44.933545][ T6288] loop3: p208 size 722688 extends beyond EOD, truncated [ 44.935194][ T6288] loop3: p209 size 150994944 extends beyond EOD, truncated [ 44.936598][ T6288] loop3: p210 size 722688 extends beyond EOD, truncated [ 44.939835][ T6288] loop3: p211 size 150994944 extends beyond EOD, truncated [ 44.940781][ T6288] loop3: p212 size 722688 extends beyond EOD, truncated [ 44.941189][ T6288] loop3: p213 size 150994944 extends beyond EOD, truncated [ 44.941679][ T6288] loop3: p214 size 722688 extends beyond EOD, truncated [ 44.944231][ T6288] loop3: p215 size 150994944 extends beyond EOD, truncated [ 44.945375][ T6288] loop3: p216 size 722688 extends beyond EOD, truncated [ 44.946544][ T6288] loop3: p217 size 150994944 extends beyond EOD, truncated [ 44.948034][ T6288] loop3: p218 size 722688 extends beyond EOD, truncated [ 44.949237][ T6288] loop3: p219 size 150994944 extends beyond EOD, truncated [ 44.960593][ T6288] loop3: p220 size 722688 extends beyond EOD, truncated [ 44.962332][ T6288] loop3: p221 size 150994944 extends beyond EOD, truncated [ 44.964581][ T6288] loop3: p222 size 722688 extends beyond EOD, truncated [ 44.966196][ T6288] loop3: p223 size 150994944 extends beyond EOD, truncated [ 44.967902][ T6288] loop3: p224 size 722688 extends beyond EOD, truncated [ 44.969882][ T6288] loop3: p225 size 150994944 extends beyond EOD, truncated [ 44.971692][ T6288] loop3: p226 size 722688 extends beyond EOD, truncated [ 44.974303][ T6288] loop3: p227 size 150994944 extends beyond EOD, truncated [ 44.976360][ T6288] loop3: p228 size 722688 extends beyond EOD, truncated [ 44.977915][ T6288] loop3: p229 size 150994944 extends beyond EOD, truncated [ 44.981071][ T6288] loop3: p230 size 722688 extends beyond EOD, truncated [ 44.982992][ T6288] loop3: p231 size 150994944 extends beyond EOD, truncated [ 44.984984][ T6288] loop3: p232 size 722688 extends beyond EOD, truncated [ 44.989497][ T6288] loop3: p233 size 150994944 extends beyond EOD, truncated [ 44.993150][ T6288] loop3: p234 size 722688 extends beyond EOD, truncated [ 44.995938][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.997945][ T6288] loop3: p235 size 150994944 extends beyond EOD, truncated [ 45.009217][ T6288] loop3: p236 size 722688 extends beyond EOD, truncated [ 45.011028][ T6288] loop3: p237 size 150994944 extends beyond EOD, truncated [ 45.015936][ T6288] loop3: p238 size 722688 extends beyond EOD, truncated [ 45.017689][ T6288] loop3: p239 size 150994944 extends beyond EOD, truncated [ 45.019639][ T6288] loop3: p240 size 722688 extends beyond EOD, truncated [ 45.022756][ T6288] loop3: p241 size 150994944 extends beyond EOD, truncated [ 45.028129][ T6288] loop3: p242 size 722688 extends beyond EOD, truncated [ 45.039304][ T6288] loop3: p243 size 150994944 extends beyond EOD, truncated [ 45.039758][ T6288] loop3: p244 size 722688 extends beyond EOD, truncated [ 45.040080][ T6288] loop3: p245 size 150994944 extends beyond EOD, truncated [ 45.040400][ T6288] loop3: p246 size 722688 extends beyond EOD, truncated [ 45.040728][ T6288] loop3: p247 size 150994944 extends beyond EOD, truncated [ 45.041031][ T6288] loop3: p248 size 722688 extends beyond EOD, truncated [ 45.041346][ T6288] loop3: p249 size 150994944 extends beyond EOD, truncated [ 45.041689][ T6288] loop3: p250 size 722688 extends beyond EOD, truncated [ 45.044952][ T6288] loop3: p251 size 150994944 extends beyond EOD, truncated [ 45.045416][ T6288] loop3: p252 size 722688 extends beyond EOD, truncated [ 45.045864][ T6288] loop3: p253 size 150994944 extends beyond EOD, truncated [ 45.046277][ T6288] loop3: p254 size 722688 extends beyond EOD, truncated [ 45.050491][ T6288] loop3: p255 size 150994944 extends beyond EOD, truncated [ 45.199894][ T6350] __nla_validate_parse: 156 callbacks suppressed [ 45.200455][ T6350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.331'. [ 45.209182][ T4708] Bluetooth: hci5: command 0x1003 tx timeout [ 45.209254][ T4709] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 45.381421][ T6355] FAULT_INJECTION: forcing a failure. [ 45.381421][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.381466][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.4.332 Tainted: G L syzkaller #0 PREEMPT [ 45.381483][ T6355] Tainted: [L]=SOFTLOCKUP [ 45.381486][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 45.381491][ T6355] Call trace: [ 45.381494][ T6355] show_stack+0x2c/0x3c (C) [ 45.381513][ T6355] __dump_stack+0x30/0x40 [ 45.381527][ T6355] dump_stack_lvl+0xd8/0x12c [ 45.381537][ T6355] dump_stack+0x1c/0x28 [ 45.381546][ T6355] should_fail_ex+0x41c/0x590 [ 45.381560][ T6355] should_fail+0x14/0x24 [ 45.381569][ T6355] should_fail_usercopy+0x20/0x30 [ 45.381579][ T6355] _inline_copy_from_user+0x3c/0x174 [ 45.381590][ T6355] ____sys_sendmsg+0x254/0x6c8 [ 45.381598][ T6355] ___sys_sendmsg+0x198/0x224 [ 45.381606][ T6355] __sys_sendmsg+0x158/0x204 [ 45.381614][ T6355] __arm64_sys_sendmsg+0x88/0x9c [ 45.381622][ T6355] invoke_syscall+0x98/0x244 [ 45.381633][ T6355] el0_svc_common+0xec/0x23c [ 45.381642][ T6355] do_el0_svc+0x4c/0x5c [ 45.381652][ T6355] el0_svc+0x64/0x260 [ 45.381661][ T6355] el0t_64_sync_handler+0x44/0x104 [ 45.381670][ T6355] el0t_64_sync+0x198/0x19c [ 45.430524][ T5127] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.796743][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.884159][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.952884][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.969963][ T4708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.970698][ T4708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.971002][ T4708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.971331][ T4708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.971559][ T4708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.013136][ T5161] udevd[5161]: inotify_add_watch(7, /dev/loop3p42, 10) failed: No such file or directory [ 46.017719][ T5320] udevd[5320]: inotify_add_watch(7, /dev/loop3p32, 10) failed: No such file or directory [ 46.020952][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.022833][ T6346] udevd[6346]: inotify_add_watch(7, /dev/loop3p34, 10) failed: No such file or directory [ 46.025801][ T5323] udevd[5323]: inotify_add_watch(7, /dev/loop3p36, 10) failed: No such file or directory [ 46.028508][ T4691] udevd[4691]: inotify_add_watch(7, /dev/loop3p33, 10) failed: No such file or directory [ 46.032657][ T6345] udevd[6345]: inotify_add_watch(7, /dev/loop3p38, 10) failed: No such file or directory [ 46.032744][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop3p41, 10) failed: No such file or directory [ 46.040366][ T5326] udevd[5326]: inotify_add_watch(7, /dev/loop3p37, 10) failed: No such file or directory [ 46.048550][ T5324] udevd[5324]: inotify_add_watch(7, /dev/loop3p35, 10) failed: No such file or directory [ 46.082007][ T4708] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.082790][ T4708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.083097][ T4708] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.084127][ T4708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.088708][ T4708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.251866][ T13] bridge_slave_1: left allmulticast mode [ 46.251907][ T13] bridge_slave_1: left promiscuous mode [ 46.251996][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.264292][ T13] bridge_slave_0: left allmulticast mode [ 46.264324][ T13] bridge_slave_0: left promiscuous mode [ 46.264416][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.443156][ T6398] loop5: detected capacity change from 0 to 2048 [ 46.461455][ T6398] loop5: p1 p4 [ 46.461455][ T6398] p1: [ 46.481986][ T6398] loop5: p4 size 589824 extends beyond EOD, truncated [ 46.508179][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.343'. [ 46.537326][ T4340] loop5: p1 p4 [ 46.537326][ T4340] p1: [ 46.543754][ T4340] loop5: p4 size 589824 extends beyond EOD, truncated [ 46.578252][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.585508][ T6401] loop3: detected capacity change from 0 to 128 [ 46.604513][ T6401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 46.604572][ T6401] System zones: 1-3, 19-19, 35-36 [ 46.605163][ T6401] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 46.611650][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.640697][ T13] bond0 (unregistering): Released all slaves [ 46.644191][ T6398] veth0_macvtap: left promiscuous mode [ 46.674563][ T6398] netlink: 'syz.5.343': attribute type 1 has an invalid length. [ 46.674598][ T6398] netlink: 'syz.5.343': attribute type 2 has an invalid length. [ 46.780566][ T6406] 9pnet: p9_errstr2errno: server reported unknown error  [ 46.808479][ T6365] wg1 speed is unknown, defaulting to 1000 [ 46.888801][ T6378] wg1 speed is unknown, defaulting to 1000 [ 47.059965][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.5.345'. [ 47.157929][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6 [ 47.338616][ T13] hsr_slave_0: left promiscuous mode [ 47.340987][ T13] hsr_slave_1: left promiscuous mode [ 47.342400][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.344004][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.347838][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.349147][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.353670][ T13] veth1_macvtap: left promiscuous mode [ 47.354174][ T13] veth0_macvtap: left promiscuous mode [ 47.354221][ T13] veth1_vlan: left promiscuous mode [ 47.354256][ T13] veth0_vlan: left promiscuous mode [ 47.364437][ T4713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.393164][ T6429] ip_tables: iptables: counters copy to user failed while replacing table [ 47.470379][ T13] team0 (unregistering): Port device team_slave_1 removed [ 47.474328][ T13] team0 (unregistering): Port device team_slave_0 removed [ 47.633548][ T6441] FAULT_INJECTION: forcing a failure. [ 47.633548][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 47.633582][ T6441] CPU: 1 UID: 0 PID: 6441 Comm: syz.5.348 Tainted: G L syzkaller #0 PREEMPT [ 47.633598][ T6441] Tainted: [L]=SOFTLOCKUP [ 47.633603][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.633609][ T6441] Call trace: [ 47.633613][ T6441] show_stack+0x2c/0x3c (C) [ 47.633632][ T6441] __dump_stack+0x30/0x40 [ 47.633645][ T6441] dump_stack_lvl+0xd8/0x12c [ 47.633655][ T6441] dump_stack+0x1c/0x28 [ 47.633665][ T6441] should_fail_ex+0x41c/0x590 [ 47.633677][ T6441] should_failslab+0xc4/0x120 [ 47.633688][ T6441] __kmalloc_cache_noprof+0x94/0x5fc [ 47.633696][ T6441] smk_fetch+0xa4/0x154 [ 47.633706][ T6441] smack_d_instantiate+0x6d4/0x7a0 [ 47.633714][ T6441] security_d_instantiate+0xf8/0x1dc [ 47.633723][ T6441] d_splice_alias_ops+0x74/0x358 [ 47.633733][ T6441] d_splice_alias+0x2c/0x3c [ 47.633740][ T6441] kernfs_iop_lookup+0x1d8/0x210 [ 47.633750][ T6441] lookup_open+0x6a8/0x1180 [ 47.633758][ T6441] path_openat+0x50c/0x18f4 [ 47.633767][ T6441] do_file_open+0x1c8/0x2e8 [ 47.633775][ T6441] do_sys_openat2+0x114/0x1e8 [ 47.633785][ T6441] do_sys_open+0xb0/0xe0 [ 47.633794][ T6441] __arm64_sys_openat+0xa8/0xc4 [ 47.633804][ T6441] invoke_syscall+0x98/0x244 [ 47.633813][ T6441] el0_svc_common+0xec/0x23c [ 47.633823][ T6441] do_el0_svc+0x4c/0x5c [ 47.633833][ T6441] el0_svc+0x64/0x260 [ 47.633842][ T6441] el0t_64_sync_handler+0x44/0x104 [ 47.633850][ T6441] el0t_64_sync+0x198/0x19c [ 47.652064][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.652124][ T6365] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.652188][ T6365] bridge_slave_0: entered allmulticast mode [ 47.652656][ T6365] bridge_slave_0: entered promiscuous mode [ 47.653617][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.653663][ T6365] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.653721][ T6365] bridge_slave_1: entered allmulticast mode [ 47.654147][ T6365] bridge_slave_1: entered promiscuous mode [ 47.662916][ T6365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.664018][ T6365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.670207][ T6365] team0: Port device team_slave_0 added [ 47.671352][ T6365] team0: Port device team_slave_1 added [ 47.677219][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.677228][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.677241][ T6365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.677792][ T6365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.677798][ T6365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.677812][ T6365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.687534][ T6365] hsr_slave_0: entered promiscuous mode [ 47.687844][ T6365] hsr_slave_1: entered promiscuous mode [ 47.766305][ T6454] FAULT_INJECTION: forcing a failure. [ 47.766305][ T6454] name failslab, interval 1, probability 0, space 0, times 0 [ 47.766347][ T6454] CPU: 0 UID: 0 PID: 6454 Comm: syz.5.350 Tainted: G L syzkaller #0 PREEMPT [ 47.766364][ T6454] Tainted: [L]=SOFTLOCKUP [ 47.766369][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.766376][ T6454] Call trace: [ 47.766380][ T6454] show_stack+0x2c/0x3c (C) [ 47.766399][ T6454] __dump_stack+0x30/0x40 [ 47.766411][ T6454] dump_stack_lvl+0xd8/0x12c [ 47.766421][ T6454] dump_stack+0x1c/0x28 [ 47.766431][ T6454] should_fail_ex+0x41c/0x590 [ 47.766442][ T6454] should_failslab+0xc4/0x120 [ 47.766458][ T6454] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 47.766467][ T6454] kmemdup_noprof+0x44/0x8c [ 47.766475][ T6454] ip6_opt_dup+0x54/0x88 [ 47.766485][ T6454] ip6_setup_cork+0x63c/0xbe0 [ 47.766493][ T6454] ip6_append_data+0x154/0x270 [ 47.766501][ T6454] l2tp_ip6_sendmsg+0xf98/0x1528 [ 47.766509][ T6454] inet_sendmsg+0xb4/0xd8 [ 47.766517][ T6454] __sock_sendmsg+0xc8/0x17c [ 47.766526][ T6454] ____sys_sendmsg+0x3d0/0x6c8 [ 47.766534][ T6454] ___sys_sendmsg+0x198/0x224 [ 47.766542][ T6454] __sys_sendmsg+0x158/0x204 [ 47.766550][ T6454] __arm64_sys_sendmsg+0x88/0x9c [ 47.766559][ T6454] invoke_syscall+0x98/0x244 [ 47.766568][ T6454] el0_svc_common+0xec/0x23c [ 47.766578][ T6454] do_el0_svc+0x4c/0x5c [ 47.766588][ T6454] el0_svc+0x64/0x260 [ 47.766597][ T6454] el0t_64_sync_handler+0x44/0x104 [ 47.766606][ T6454] el0t_64_sync+0x198/0x19c [ 47.787866][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.787896][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.787955][ T6378] bridge_slave_0: entered allmulticast mode [ 47.788382][ T6378] bridge_slave_0: entered promiscuous mode [ 47.789128][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.789150][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.789206][ T6378] bridge_slave_1: entered allmulticast mode [ 47.789614][ T6378] bridge_slave_1: entered promiscuous mode [ 47.796450][ T6378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.797829][ T6378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.820783][ T6378] team0: Port device team_slave_0 added [ 47.823082][ T6378] team0: Port device team_slave_1 added [ 47.831708][ T13] IPVS: stop unused estimator thread 0... [ 47.861559][ T6460] ip_tables: iptables: counters copy to user failed while replacing table [ 47.871783][ T6460] use of bytesused == 0 is deprecated and will be removed in the future, [ 47.871812][ T6460] use the actual size instead. [ 47.873153][ T6365] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.885504][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.885531][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.885546][ T6378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.886164][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.886172][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.886185][ T6378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.919998][ T6378] hsr_slave_0: entered promiscuous mode [ 47.921527][ T6378] hsr_slave_1: entered promiscuous mode [ 47.922912][ T6378] debugfs: 'hsr0' already exists in 'hsr' [ 47.924054][ T6378] Cannot create hsr debugfs directory [ 47.953414][ T6365] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.990691][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.353'. [ 48.009321][ T4709] Bluetooth: hci0: command tx timeout [ 48.013915][ T6365] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.017236][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5 [ 48.081495][ T6365] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.136127][ T6493] netlink: 164 bytes leftover after parsing attributes in process `syz.5.356'. [ 48.140215][ T6493] loop5: detected capacity change from 0 to 8 [ 48.147805][ T6493] SQUASHFS error: Failed to read block 0x7000000000001e8: -5 [ 48.147847][ T6493] unable to read xattr id index table [ 48.195050][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4 [ 48.214218][ T4709] Bluetooth: hci1: command tx timeout [ 48.253448][ T6365] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 48.257733][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.258173][ T6365] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 48.266405][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.270793][ T6365] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 48.273607][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.275955][ T6365] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 48.522521][ T6365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.577068][ T6517] binder: 6516:6517 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 48.632527][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.637279][ T6365] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.648738][ T6365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.651164][ T6365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.662854][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.662912][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.666773][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.666811][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.832973][ T6533] loop3: detected capacity change from 0 to 512 [ 48.835817][ T6533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.035648][ T6533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.148226][ T6365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.255473][ T6557] block nbd5: NBD_DISCONNECT [ 49.421634][ T6378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.423128][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.423432][ T6378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.424376][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.424670][ T6378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.425622][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.425902][ T6378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.426772][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.497103][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.561995][ T6573] bridge0: port 3(netdevsim0) entered blocking state [ 49.562055][ T6573] bridge0: port 3(netdevsim0) entered disabled state [ 49.562148][ T6573] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 49.568751][ T6573] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 49.570110][ T6573] bridge0: port 3(netdevsim0) entered blocking state [ 49.570152][ T6573] bridge0: port 3(netdevsim0) entered forwarding state [ 49.571998][ T6578] FAULT_INJECTION: forcing a failure. [ 49.571998][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 49.572018][ T6578] CPU: 1 UID: 0 PID: 6578 Comm: syz.5.362 Tainted: G L syzkaller #0 PREEMPT [ 49.572030][ T6578] Tainted: [L]=SOFTLOCKUP [ 49.572034][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 49.572039][ T6578] Call trace: [ 49.572042][ T6578] show_stack+0x2c/0x3c (C) [ 49.572061][ T6578] __dump_stack+0x30/0x40 [ 49.572072][ T6578] dump_stack_lvl+0xd8/0x12c [ 49.572082][ T6578] dump_stack+0x1c/0x28 [ 49.572091][ T6578] should_fail_ex+0x41c/0x590 [ 49.572102][ T6578] should_failslab+0xc4/0x120 [ 49.572114][ T6578] kmem_cache_alloc_node_noprof+0x98/0x604 [ 49.572125][ T6578] __alloc_skb+0x1f0/0x610 [ 49.572134][ T6578] alloc_skb_with_frags+0xb8/0x690 [ 49.572144][ T6578] sock_alloc_send_pskb+0x740/0x850 [ 49.572155][ T6578] __ip6_append_data+0x2810/0x38c8 [ 49.572164][ T6578] ip6_append_data+0x100/0x270 [ 49.572172][ T6578] l2tp_ip6_sendmsg+0xf98/0x1528 [ 49.572181][ T6578] inet_sendmsg+0xb4/0xd8 [ 49.572188][ T6578] __sock_sendmsg+0xc8/0x17c [ 49.572196][ T6578] ____sys_sendmsg+0x3d0/0x6c8 [ 49.572204][ T6578] ___sys_sendmsg+0x198/0x224 [ 49.572212][ T6578] __sys_sendmsg+0x158/0x204 [ 49.572220][ T6578] __arm64_sys_sendmsg+0x88/0x9c [ 49.572229][ T6578] invoke_syscall+0x98/0x244 [ 49.572239][ T6578] el0_svc_common+0xec/0x23c [ 49.572248][ T6578] do_el0_svc+0x4c/0x5c [ 49.572258][ T6578] el0_svc+0x64/0x260 [ 49.572267][ T6578] el0t_64_sync_handler+0x44/0x104 [ 49.572276][ T6578] el0t_64_sync+0x198/0x19c [ 49.590542][ T6378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.593748][ T6378] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.616408][ T4978] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.616473][ T4978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.617055][ T4978] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.617074][ T4978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.646603][ T6378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.647572][ T6584] netlink: 'syz.5.363': attribute type 10 has an invalid length. [ 49.664068][ T6584] syz_tun: entered promiscuous mode [ 49.666559][ T6584] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 49.685595][ T6365] veth0_vlan: entered promiscuous mode [ 49.722700][ T6365] veth1_vlan: entered promiscuous mode [ 49.731194][ T6365] veth0_macvtap: entered promiscuous mode [ 49.733559][ T6365] veth1_macvtap: entered promiscuous mode [ 49.743866][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.752322][ T6365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.757618][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.796747][ T4978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.797030][ T4978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.798036][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.798051][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.801410][ T4978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.807220][ T6584] syzkaller0: entered promiscuous mode [ 49.807267][ T6584] syzkaller0: entered allmulticast mode [ 49.812643][ T6584] netlink: 168 bytes leftover after parsing attributes in process `syz.5.363'. [ 49.817894][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.817932][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.967359][ T6378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.996940][ T6378] veth0_vlan: entered promiscuous mode [ 50.008160][ T6627] team0: Device wg0 is of different type [ 50.012351][ T6627] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 50.013389][ T6378] veth1_vlan: entered promiscuous mode [ 50.028131][ T6635] loop4: detected capacity change from 0 to 128 [ 50.033345][ T6635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 50.033410][ T6635] System zones: 1-3, 19-19, 35-36 [ 50.033971][ T6635] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 50.039217][ T6627] netlink: 16 bytes leftover after parsing attributes in process `syz.5.369'. [ 50.054765][ T6378] veth0_macvtap: entered promiscuous mode [ 50.062673][ T6378] veth1_macvtap: entered promiscuous mode [ 50.089470][ T4709] Bluetooth: hci0: command tx timeout [ 50.094793][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.105510][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.169500][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.169519][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.176350][ T6643] loop3: detected capacity change from 0 to 512 [ 50.177857][ T6643] EXT4-fs: Ignoring removed nobh option [ 50.190481][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190636][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.190847][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.194735][ T6652] trusted_key: encrypted_key: insufficient parameters specified [ 50.202866][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.204308][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.204895][ T6652] trusted_key: encrypted_key: insufficient parameters specified [ 50.210484][ T6643] EXT4-fs (loop3): filesystem is read-only [ 50.222491][ T30] audit: type=1326 audit(50.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6651 comm="syz.5.372" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa57782e8 code=0x0 [ 50.227451][ T1147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.240624][ T6663] loop3: detected capacity change from 0 to 512 [ 50.253158][ T4709] Bluetooth: hci1: command tx timeout [ 50.365324][ T6690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.375'. [ 50.388859][ T6693] loop3: detected capacity change from 0 to 8 [ 50.394693][ T6693] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 50.394726][ T6693] unable to read xattr id index table [ 50.397472][ T6693] unable to read inode lookup table [ 50.432215][ T6695] [U] ^R [ 50.472778][ T6703] loop0: detected capacity change from 0 to 512 [ 51.105977][ T6365] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.282294][ T6739] FAULT_INJECTION: forcing a failure. [ 51.282294][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 51.282338][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: syz.4.385 Tainted: G L syzkaller #0 PREEMPT [ 51.282352][ T6739] Tainted: [L]=SOFTLOCKUP [ 51.282357][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 51.282362][ T6739] Call trace: [ 51.282365][ T6739] show_stack+0x2c/0x3c (C) [ 51.282385][ T6739] __dump_stack+0x30/0x40 [ 51.282399][ T6739] dump_stack_lvl+0xd8/0x12c [ 51.282409][ T6739] dump_stack+0x1c/0x28 [ 51.282418][ T6739] should_fail_ex+0x41c/0x590 [ 51.282430][ T6739] should_failslab+0xc4/0x120 [ 51.282441][ T6739] kmem_cache_alloc_node_noprof+0x98/0x604 [ 51.282453][ T6739] __alloc_skb+0x1f0/0x610 [ 51.282471][ T6739] alloc_skb_with_frags+0xb8/0x690 [ 51.282483][ T6739] sock_alloc_send_pskb+0x740/0x850 [ 51.282495][ T6739] __ip6_append_data+0x2810/0x38c8 [ 51.282506][ T6739] ip6_append_data+0x100/0x270 [ 51.282515][ T6739] l2tp_ip6_sendmsg+0xf98/0x1528 [ 51.282523][ T6739] inet_sendmsg+0xb4/0xd8 [ 51.282531][ T6739] __sock_sendmsg+0xc8/0x17c [ 51.282538][ T6739] ____sys_sendmsg+0x3d0/0x6c8 [ 51.282547][ T6739] ___sys_sendmsg+0x198/0x224 [ 51.282555][ T6739] __sys_sendmsg+0x158/0x204 [ 51.282563][ T6739] __arm64_sys_sendmsg+0x88/0x9c [ 51.282571][ T6739] invoke_syscall+0x98/0x244 [ 51.282582][ T6739] el0_svc_common+0xec/0x23c [ 51.282591][ T6739] do_el0_svc+0x4c/0x5c [ 51.282601][ T6739] el0_svc+0x64/0x260 [ 51.282611][ T6739] el0t_64_sync_handler+0x44/0x104 [ 51.282619][ T6739] el0t_64_sync+0x198/0x19c [ 51.350846][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.386'. [ 51.383186][ T6750] loop4: detected capacity change from 0 to 512 [ 51.403883][ T6750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.408059][ T6740] netlink: 7 bytes leftover after parsing attributes in process `syz.5.383'. [ 51.483171][ T6756] loop3: detected capacity change from 0 to 128 [ 51.487668][ T6756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 51.487724][ T6756] System zones: 1-3, 19-19, 35-36 [ 51.488344][ T6756] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 51.529255][ T6757] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.388: corrupted xattr block 6: invalid header [ 51.529584][ T6757] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.388: corrupted xattr block 6: invalid header [ 51.529774][ T6757] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.388: corrupted xattr block 6: invalid header [ 51.529933][ T6757] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.388: corrupted xattr block 6: invalid header [ 51.530210][ T6757] overlay: Unknown parameter 'hash' [ 51.640639][ T6723] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 51.769586][ T6723] usb 1-1: device descriptor read/64, error -71 [ 52.029197][ T6723] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 52.169265][ T4709] Bluetooth: hci0: command tx timeout [ 52.180285][ T6723] usb 1-1: device descriptor read/64, error -71 [ 52.191601][ T6762] TCP: TCP_TX_DELAY enabled [ 52.196101][ T6763] ublk_ctrl_add_dev: dev id not match 4294967295 8 [ 52.247926][ T6365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.248735][ T4713] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.286402][ T6767] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 52.300640][ T6723] usb usb1-port1: attempt power cycle [ 52.312295][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 52.329768][ T4709] Bluetooth: hci1: command tx timeout [ 52.360379][ T4709] Bluetooth: hci0: unexpected cc 0x2005 length: 5 > 1 [ 52.365915][ T6772] loop5: detected capacity change from 0 to 128 [ 52.381540][ T6772] EXT4-fs: Ignoring removed i_version option [ 52.382750][ T6772] ext4: Unknown parameter 'fowner<00000000000000000000' [ 52.386218][ T6779] loop3: detected capacity change from 0 to 512 [ 52.390877][ T6779] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 52.397243][ T6772] overlayfs: failed lookup in lower (newroot/70, name='file0', err=-40): overlapping layers [ 52.454356][ T6772] overlayfs: failed lookup in lower (newroot/70, name='file0', err=-40): overlapping layers [ 52.464045][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.398'. [ 52.492258][ T6784] FAULT_INJECTION: forcing a failure. [ 52.492258][ T6784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.495906][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.4.399 Tainted: G L syzkaller #0 PREEMPT [ 52.495932][ T6784] Tainted: [L]=SOFTLOCKUP [ 52.495937][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 52.495943][ T6784] Call trace: [ 52.495946][ T6784] show_stack+0x2c/0x3c (C) [ 52.495969][ T6784] __dump_stack+0x30/0x40 [ 52.495982][ T6784] dump_stack_lvl+0xd8/0x12c [ 52.495992][ T6784] dump_stack+0x1c/0x28 [ 52.496002][ T6784] should_fail_ex+0x41c/0x590 [ 52.496013][ T6784] should_fail+0x14/0x24 [ 52.496022][ T6784] should_fail_usercopy+0x20/0x30 [ 52.496032][ T6784] simple_read_from_buffer+0xc4/0x238 [ 52.496043][ T6784] proc_fail_nth_read+0x1a8/0x248 [ 52.496052][ T6784] vfs_read+0x230/0x8c8 [ 52.496062][ T6784] ksys_read+0x12c/0x228 [ 52.496072][ T6784] __arm64_sys_read+0x84/0x98 [ 52.496083][ T6784] invoke_syscall+0x98/0x244 [ 52.496093][ T6784] el0_svc_common+0xec/0x23c [ 52.496103][ T6784] do_el0_svc+0x4c/0x5c [ 52.496113][ T6784] el0_svc+0x64/0x260 [ 52.496122][ T6784] el0t_64_sync_handler+0x44/0x104 [ 52.496131][ T6784] el0t_64_sync+0x198/0x19c [ 52.542542][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542564][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542601][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542606][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542633][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542637][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542665][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542668][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542693][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542697][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542721][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542725][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542758][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542761][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542787][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542791][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542814][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542817][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542841][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542844][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542868][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542871][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542897][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542901][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542924][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542928][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542952][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542956][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.542979][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.542983][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543009][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543013][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543036][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543040][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543063][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543066][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543090][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543093][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543123][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543127][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543151][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543154][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543178][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543181][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543205][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543209][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543234][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543238][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543262][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543265][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543289][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543292][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543315][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543319][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543344][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543348][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543371][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543375][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.543398][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.543402][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.545759][ T6787] binder: BINDER_SET_CONTEXT_MGR already set [ 52.545766][ T6787] binder: 6786:6787 ioctl 4018620d 20000100 returned -16 [ 52.607748][ T6791] binder: 6786:6791 context manager tried to acquire desc 0 [ 52.607763][ T6791] binder: 6786:6791 ioctl c0306201 200004c0 returned -22 [ 52.607956][ T6792] binder: 6786:6792 got transaction to invalid handle, 1 [ 52.608003][ T6792] binder: 6786:6792 cannot find target node [ 52.608018][ T6792] binder: 6786:6792 transaction call to 0:0 failed 4/29201/-22, code 0 size 80-36 line 3252 [ 52.608299][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.608396][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.608719][ T6789] binder: BINDER_SET_CONTEXT_MGR already set [ 52.608725][ T6789] binder: 6786:6789 ioctl 4018620d 20004a80 returned -16 [ 52.608765][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.608824][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.608887][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.608942][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.608997][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.609051][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.609209][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.609265][ T6788] binder_alloc: binder_alloc_mmap_handler: 6786 20ffd000-21000000 already mapped failed -16 [ 52.649442][ T6723] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 52.669749][ T6723] usb 1-1: device descriptor read/8, error -71 [ 52.909144][ T6723] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 52.929614][ T6723] usb 1-1: device descriptor read/8, error -71 [ 53.054586][ T6723] usb usb1-port1: unable to enumerate USB device [ 53.092509][ T4708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.095325][ T4708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.097503][ T4708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.100218][ T4708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.102476][ T4708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.132545][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.228587][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.283408][ T6795] wg1 speed is unknown, defaulting to 1000 [ 53.318199][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.401684][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 53.406905][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 53.406949][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 53.407435][ T12] bridge0: port 3(netdevsim0) entered disabled state [ 53.414834][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.427152][ T6723] binder: undelivered TRANSACTION_ERROR: 29201 [ 53.494067][ T6817] Smack: duplicate mount options [ 53.509711][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.512104][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.512223][ T6795] bridge_slave_0: entered allmulticast mode [ 53.512710][ T6795] bridge_slave_0: entered promiscuous mode [ 53.518429][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.525760][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.525863][ T6795] bridge_slave_1: entered allmulticast mode [ 53.526319][ T6795] bridge_slave_1: entered promiscuous mode [ 53.541430][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.544854][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.589899][ T6795] team0: Port device team_slave_0 added [ 53.595703][ T6795] team0: Port device team_slave_1 added [ 53.615530][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.617532][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.623911][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.628189][ T12] bridge_slave_1: left allmulticast mode [ 53.628227][ T12] bridge_slave_1: left promiscuous mode [ 53.628314][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.632583][ T12] bridge_slave_0: left allmulticast mode [ 53.632611][ T12] bridge_slave_0: left promiscuous mode [ 53.632693][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.717614][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.724675][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.750148][ T12] bond0 (unregistering): Released all slaves [ 53.753533][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.754959][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.761233][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.793584][ T12] tipc: Disabling bearer [ 53.798788][ T12] tipc: Left network mode [ 53.803013][ T6795] hsr_slave_0: entered promiscuous mode [ 53.803356][ T6795] hsr_slave_1: entered promiscuous mode [ 53.803584][ T6795] debugfs: 'hsr0' already exists in 'hsr' [ 53.803595][ T6795] Cannot create hsr debugfs directory [ 53.840343][ T6843] netlink: 'syz.4.409': attribute type 1 has an invalid length. [ 53.858828][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.869357][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.409'. [ 53.902460][ T6843] bridge1: entered promiscuous mode [ 54.136925][ T6795] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.243372][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 54.245305][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5 [ 54.270388][ T12] hsr_slave_0: left promiscuous mode [ 54.271808][ T12] hsr_slave_1: left promiscuous mode [ 54.272122][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.272138][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.277460][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.277486][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.290110][ T12] veth1_macvtap: left promiscuous mode [ 54.291281][ T12] veth0_macvtap: left promiscuous mode [ 54.292497][ T12] veth1_vlan: left promiscuous mode [ 54.292556][ T12] veth0_vlan: left promiscuous mode [ 54.295655][ T6873] loop5: detected capacity change from 0 to 512 [ 54.297909][ T6873] EXT4-fs (loop5): Test dummy encryption mode enabled [ 54.297937][ T6873] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 54.302230][ T6873] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.413: bad orphan inode 131072 [ 54.302269][ T6873] loop5: lost filesystem error report for type 5 error -117 [ 54.302858][ T6873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.316721][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.409244][ T4708] Bluetooth: hci1: command tx timeout [ 54.412707][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.414'. [ 54.441205][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 54.448807][ T12] team0 (unregistering): Port device team_slave_1 removed [ 54.454099][ T12] team0 (unregistering): Port device team_slave_0 removed [ 54.486565][ T4978] smc: removing ib device syz1 [ 54.563281][ T6795] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.566374][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 54.566750][ T6795] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.570295][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 54.572684][ T6795] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.572787][ T9] wg1 speed is unknown, defaulting to 1000 [ 54.572809][ T9] syz1: Port: 1 Link DOWN [ 54.578785][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 54.687766][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.695596][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.697346][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.697395][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.711045][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.711095][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.957264][ T6917] : renamed from vlan0 (while UP) [ 54.967677][ T6921] overlayfs: failed lookup in lower (newroot/8, name='file1', err=-40): overlapping layers [ 55.000149][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.041936][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6 [ 55.061106][ T4708] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 55.131214][ T4708] Bluetooth: hci2: command tx timeout [ 55.147028][ T6941] set_capacity_and_notify: 1 callbacks suppressed [ 55.147071][ T6941] loop0: detected capacity change from 0 to 128 [ 55.172255][ T6795] veth0_vlan: entered promiscuous mode [ 55.174016][ T6795] veth1_vlan: entered promiscuous mode [ 55.234297][ T6795] veth0_macvtap: entered promiscuous mode [ 55.236994][ T6795] veth1_macvtap: entered promiscuous mode [ 55.247119][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.251120][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.305838][ T6949] netlink: 36 bytes leftover after parsing attributes in process `syz.5.424'. [ 55.310105][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.311005][ T6937] loop4: detected capacity change from 0 to 512 [ 55.311426][ T6937] ext4: Unknown parameter 'appraise' [ 55.315489][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.317734][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.321885][ T42] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.392493][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.392529][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.463115][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7 [ 56.521666][ T6971] vxcan3: entered promiscuous mode [ 56.522759][ T6971] vxcan3: entered allmulticast mode [ 56.617356][ T6980] loop4: detected capacity change from 0 to 4096 [ 56.620287][ T6980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.635470][ T4708] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 56.641930][ T6980] EXT4-fs (loop4): Test dummy encryption mode enabled [ 56.643901][ T6980] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 56.643968][ T6980] System zones: 0-5 [ 56.644958][ T6980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.665958][ T6986] : renamed from vlan0 (while UP) [ 56.693395][ T6365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.771138][ T6991] input: syz1 as /devices/virtual/input/input3 [ 57.209294][ T4709] Bluetooth: hci2: command tx timeout [ 57.759430][ T7012] Bluetooth: MGMT ver 1.23 [ 57.982134][ T7017] loop4: detected capacity change from 0 to 1024 [ 57.990958][ T7017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.103919][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.103956][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.103986][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.104002][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.104017][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.104031][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.104043][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.104056][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.104065][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.104073][ T6723] hid-generic 0005:10CF:0005.0001: unknown main item tag 0x0 [ 58.108716][ T6723] hid-generic 0005:10CF:0005.0001: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 58.136925][ T6941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.161555][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.163415][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.201992][ T4709] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 58.241772][ T4709] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.243513][ T4709] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.245263][ T4709] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.247628][ T4709] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.257498][ T4709] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 58.271175][ T7030] 9p: Bad value for 'rfdno' [ 58.356945][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 58.361523][ T7044] loop6: detected capacity change from 0 to 512 [ 58.361915][ T7044] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.370759][ T7044] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.427119][ T7044] Quota error (device loop6): v2_read_file_info: Free block number 4294508544 out of range (1, 6). [ 58.427250][ T7044] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.427487][ T7044] EXT4-fs (loop6): mount failed [ 58.537073][ T4709] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 58.556294][ T7063] loop6: detected capacity change from 0 to 512 [ 58.583175][ T7063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.608197][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.608290][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.608400][ T7027] bridge_slave_0: entered allmulticast mode [ 58.611081][ T7027] bridge_slave_0: entered promiscuous mode [ 58.613269][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.613307][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.613440][ T7027] bridge_slave_1: entered allmulticast mode [ 58.613869][ T7027] bridge_slave_1: entered promiscuous mode [ 58.645198][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.651213][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.707250][ T7027] team0: Port device team_slave_0 added [ 58.708052][ T7027] team0: Port device team_slave_1 added [ 58.725217][ T7079] loop0: detected capacity change from 0 to 512 [ 58.731373][ T7079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.737629][ T7079] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:107: comm syz.0.457: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3 [ 58.743534][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.743558][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.743589][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.744133][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.744140][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.744155][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.758628][ T7027] hsr_slave_0: entered promiscuous mode [ 58.773574][ T7027] hsr_slave_1: entered promiscuous mode [ 58.773802][ T7027] debugfs: 'hsr0' already exists in 'hsr' [ 58.773814][ T7027] Cannot create hsr debugfs directory [ 58.788467][ T7079] sctp: [Deprecated]: syz.0.457 (pid 7079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 58.788467][ T7079] Use struct sctp_sack_info instead [ 58.824888][ T6378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.835698][ T6365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.897271][ T6795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.933323][ T7090] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 58.998404][ T7027] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 59.074361][ T7027] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.078891][ T7027] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 59.083627][ T7027] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.085669][ T7027] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 59.088771][ T7027] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.098003][ T7027] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 59.103033][ T7027] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.127406][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.127479][ T7027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.127579][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.127617][ T7027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.171012][ T7137] netlink: 36 bytes leftover after parsing attributes in process `syz.6.467'. [ 59.178334][ T7027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.185975][ T2755] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.187591][ T2755] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.198699][ T7027] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.202329][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.202376][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.214588][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.214636][ T7109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.222578][ T7139] netlink: 52 bytes leftover after parsing attributes in process `syz.5.466'. [ 59.231472][ T7027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.275103][ T4800] kernel read not supported for file /tomoyo/domain_policy (pid: 4800 comm: kworker/1:3) [ 59.289394][ T4708] Bluetooth: hci2: command tx timeout [ 59.402061][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.417190][ T7174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.417414][ T7174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.424122][ T7177] loop6: detected capacity change from 0 to 1024 [ 59.428713][ T7177] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.443419][ T7177] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.470: Invalid block bitmap block 0 in block_group 0 [ 59.447087][ T7177] loop6: lost filesystem error report for type 5 error -117 [ 59.449216][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 59.449241][ C0] EXT4-fs (loop6): initial error at time 59: ext4_read_block_bitmap_nowait:487 [ 59.449266][ C0] EXT4-fs (loop6): last error at time 59: ext4_read_block_bitmap_nowait:487 [ 59.459718][ T7177] Quota error (device loop6): write_blk: dquota write failed [ 59.461765][ T7177] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 59.461832][ T7177] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.470: Failed to acquire dquot type 0 [ 59.461852][ T7177] loop6: lost filesystem error report for type 5 error -117 [ 59.467475][ T7177] EXT4-fs error (device loop6): ext4_free_blocks:6719: comm syz.6.470: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.474229][ T7177] loop6: lost filesystem error report for type 5 error -117 [ 59.477740][ T7177] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.470: Invalid inode bitmap blk 0 in block_group 0 [ 59.483784][ T7177] loop6: lost filesystem error report for type 5 error -117 [ 59.485861][ T7177] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem [ 59.488946][ T7177] loop6: lost filesystem error report for type 5 error -117 [ 59.488966][ T7109] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-7 [ 59.488999][ T7109] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:19: Failed to release dquot type 0 [ 59.489012][ T7109] loop6: lost filesystem error report for type 5 error -117 [ 59.496067][ T7177] EXT4-fs (loop6): 1 orphan inode deleted [ 59.496585][ T7177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.522865][ T6795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.542880][ T7027] veth0_vlan: entered promiscuous mode [ 59.561792][ T7027] veth1_vlan: entered promiscuous mode [ 59.585380][ T7027] veth0_macvtap: entered promiscuous mode [ 59.594744][ T7027] veth1_macvtap: entered promiscuous mode [ 59.608541][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.613839][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.685558][ T2755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.685602][ T2755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.694414][ T7199] nvmet: adding nsid 1 to subsystem testnqn [ 59.706310][ T7199] nvmet: failed to open block device (null): (-22) [ 59.706863][ T7199] netlink: 96 bytes leftover after parsing attributes in process `syz.6.472'. [ 59.707344][ T7107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.707354][ T7107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.710808][ T2755] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.711078][ T2755] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.711095][ T2755] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.711110][ T2755] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.784423][ T7206] loop6: detected capacity change from 0 to 256 [ 59.961894][ T7226] netlink: 280 bytes leftover after parsing attributes in process `syz.5.479'. [ 59.961934][ T7226] netlink: 280 bytes leftover after parsing attributes in process `syz.5.479'. [ 59.967956][ T4708] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 60.047733][ T7232] fuse: Unknown parameter '' [ 60.082247][ T7229] netlink: 24 bytes leftover after parsing attributes in process `syz.4.478'. [ 60.085984][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 60.139867][ T7241] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.210235][ T7252] loop5: detected capacity change from 0 to 128 [ 60.330092][ T4708] Bluetooth: hci5: command tx timeout [ 60.484409][ T7252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 60.487319][ T7252] System zones: 1-3, 19-19, 35-36 [ 60.524471][ T7252] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 60.564025][ T7252] FAULT_INJECTION: forcing a failure. [ 60.564025][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.567378][ T7252] CPU: 1 UID: 0 PID: 7252 Comm: syz.5.483 Tainted: G L syzkaller #0 PREEMPT [ 60.567397][ T7252] Tainted: [L]=SOFTLOCKUP [ 60.567401][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.567407][ T7252] Call trace: [ 60.567411][ T7252] show_stack+0x2c/0x3c (C) [ 60.567434][ T7252] __dump_stack+0x30/0x40 [ 60.567446][ T7252] dump_stack_lvl+0xd8/0x12c [ 60.567460][ T7252] dump_stack+0x1c/0x28 [ 60.567470][ T7252] should_fail_ex+0x41c/0x590 [ 60.567482][ T7252] should_fail+0x14/0x24 [ 60.567492][ T7252] should_fail_usercopy+0x20/0x30 [ 60.567503][ T7252] _inline_copy_from_user+0x3c/0x174 [ 60.567515][ T7252] fscrypt_ioctl_get_key_status+0xf8/0x4d8 [ 60.567525][ T7252] ext4_ioctl+0x16a8/0x4430 [ 60.567536][ T7252] __arm64_sys_ioctl+0x154/0x1cc [ 60.567547][ T7252] invoke_syscall+0x98/0x244 [ 60.567557][ T7252] el0_svc_common+0xec/0x23c [ 60.567567][ T7252] do_el0_svc+0x4c/0x5c [ 60.567577][ T7252] el0_svc+0x64/0x260 [ 60.567586][ T7252] el0t_64_sync_handler+0x44/0x104 [ 60.567595][ T7252] el0t_64_sync+0x198/0x19c [ 60.767837][ T7259] loop7: detected capacity change from 0 to 128 [ 60.802927][ T7259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 60.802979][ T7259] System zones: 1-3, 19-19, 35-36 [ 60.803546][ T7259] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 60.980705][ T7268] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 61.057125][ T5127] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.110224][ T7268] bond1: entered promiscuous mode [ 61.110463][ T7268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.112933][ T7270] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 61.112946][ T7270] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 61.112954][ T7270] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 61.156789][ T7279] FAULT_INJECTION: forcing a failure. [ 61.156789][ T7279] name failslab, interval 1, probability 0, space 0, times 0 [ 61.161787][ T7279] CPU: 1 UID: 0 PID: 7279 Comm: syz.5.494 Tainted: G L syzkaller #0 PREEMPT [ 61.161817][ T7279] Tainted: [L]=SOFTLOCKUP [ 61.161821][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.161827][ T7279] Call trace: [ 61.161831][ T7279] show_stack+0x2c/0x3c (C) [ 61.161853][ T7279] __dump_stack+0x30/0x40 [ 61.161866][ T7279] dump_stack_lvl+0xd8/0x12c [ 61.161876][ T7279] dump_stack+0x1c/0x28 [ 61.161886][ T7279] should_fail_ex+0x41c/0x590 [ 61.161897][ T7279] should_failslab+0xc4/0x120 [ 61.161908][ T7279] kmem_cache_alloc_noprof+0x94/0x5d4 [ 61.161920][ T7279] seq_open+0x60/0x13c [ 61.161930][ T7279] kernfs_fop_open+0x414/0x994 [ 61.161941][ T7279] do_dentry_open+0x5c4/0xfc0 [ 61.161950][ T7279] vfs_open+0x44/0x2dc [ 61.161959][ T7279] path_openat+0x1084/0x18f4 [ 61.161968][ T7279] do_file_open+0x1c8/0x2e8 [ 61.161976][ T7279] do_sys_openat2+0x114/0x1e8 [ 61.161986][ T7279] do_sys_open+0xb0/0xe0 [ 61.161995][ T7279] __arm64_sys_openat+0xa8/0xc4 [ 61.162004][ T7279] invoke_syscall+0x98/0x244 [ 61.162014][ T7279] el0_svc_common+0xec/0x23c [ 61.162024][ T7279] do_el0_svc+0x4c/0x5c [ 61.162034][ T7279] el0_svc+0x64/0x260 [ 61.162043][ T7279] el0t_64_sync_handler+0x44/0x104 [ 61.162052][ T7279] el0t_64_sync+0x198/0x19c [ 61.352656][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.353497][ T7297] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 61.369258][ T4708] Bluetooth: hci2: command tx timeout [ 61.526804][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.503'. [ 61.565881][ T7027] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.657473][ T7319] loop6: detected capacity change from 0 to 128 [ 61.671004][ T7319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 61.671052][ T7319] System zones: 1-3, 19-19, 35-36 [ 61.671570][ T7319] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 61.687854][ T7326] FAULT_INJECTION: forcing a failure. [ 61.687854][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 61.690251][ T7319] FAULT_INJECTION: forcing a failure. [ 61.690251][ T7319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.690269][ T7319] CPU: 0 UID: 0 PID: 7319 Comm: syz.6.502 Tainted: G L syzkaller #0 PREEMPT [ 61.690280][ T7319] Tainted: [L]=SOFTLOCKUP [ 61.690284][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.690289][ T7319] Call trace: [ 61.690292][ T7319] show_stack+0x2c/0x3c (C) [ 61.690310][ T7319] __dump_stack+0x30/0x40 [ 61.690323][ T7319] dump_stack_lvl+0xd8/0x12c [ 61.690333][ T7319] dump_stack+0x1c/0x28 [ 61.690342][ T7319] should_fail_ex+0x41c/0x590 [ 61.690356][ T7319] should_fail+0x14/0x24 [ 61.690365][ T7319] should_fail_usercopy+0x20/0x30 [ 61.690375][ T7319] simple_read_from_buffer+0xc4/0x238 [ 61.690387][ T7319] proc_fail_nth_read+0x1a8/0x248 [ 61.690397][ T7319] vfs_read+0x230/0x8c8 [ 61.690407][ T7319] ksys_read+0x12c/0x228 [ 61.690417][ T7319] __arm64_sys_read+0x84/0x98 [ 61.690427][ T7319] invoke_syscall+0x98/0x244 [ 61.690437][ T7319] el0_svc_common+0xec/0x23c [ 61.690452][ T7319] do_el0_svc+0x4c/0x5c [ 61.690461][ T7319] el0_svc+0x64/0x260 [ 61.690472][ T7319] el0t_64_sync_handler+0x44/0x104 [ 61.690480][ T7319] el0t_64_sync+0x198/0x19c [ 61.696210][ T4708] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 61.720850][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.5.507 Tainted: G L syzkaller #0 PREEMPT [ 61.720880][ T7326] Tainted: [L]=SOFTLOCKUP [ 61.720884][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.720891][ T7326] Call trace: [ 61.720895][ T7326] show_stack+0x2c/0x3c (C) [ 61.720918][ T7326] __dump_stack+0x30/0x40 [ 61.720930][ T7326] dump_stack_lvl+0xd8/0x12c [ 61.720940][ T7326] dump_stack+0x1c/0x28 [ 61.720950][ T7326] should_fail_ex+0x41c/0x590 [ 61.720961][ T7326] should_failslab+0xc4/0x120 [ 61.720972][ T7326] __kmalloc_cache_noprof+0x94/0x5fc [ 61.720980][ T7326] kernfs_fop_open+0x5d4/0x994 [ 61.720990][ T7326] do_dentry_open+0x5c4/0xfc0 [ 61.721000][ T7326] vfs_open+0x44/0x2dc [ 61.721009][ T7326] path_openat+0x1084/0x18f4 [ 61.721018][ T7326] do_file_open+0x1c8/0x2e8 [ 61.721026][ T7326] do_sys_openat2+0x114/0x1e8 [ 61.721036][ T7326] do_sys_open+0xb0/0xe0 [ 61.721045][ T7326] __arm64_sys_openat+0xa8/0xc4 [ 61.721054][ T7326] invoke_syscall+0x98/0x244 [ 61.721064][ T7326] el0_svc_common+0xec/0x23c [ 61.721074][ T7326] do_el0_svc+0x4c/0x5c [ 61.721084][ T7326] el0_svc+0x64/0x260 [ 61.721094][ T7326] el0t_64_sync_handler+0x44/0x104 [ 61.721102][ T7326] el0t_64_sync+0x198/0x19c [ 61.755980][ T7331] loop4: detected capacity change from 0 to 8192 [ 61.814491][ T7331] Dev loop4: RDB in block 1 has bad checksum [ 61.881151][ T7338] FAULT_INJECTION: forcing a failure. [ 61.881151][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 61.881194][ T7338] CPU: 0 UID: 0 PID: 7338 Comm: syz.0.514 Tainted: G L syzkaller #0 PREEMPT [ 61.881214][ T7338] Tainted: [L]=SOFTLOCKUP [ 61.881220][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.881227][ T7338] Call trace: [ 61.881231][ T7338] show_stack+0x2c/0x3c (C) [ 61.881252][ T7338] __dump_stack+0x30/0x40 [ 61.881265][ T7338] dump_stack_lvl+0xd8/0x12c [ 61.881277][ T7338] dump_stack+0x1c/0x28 [ 61.881288][ T7338] should_fail_ex+0x41c/0x590 [ 61.881301][ T7338] should_failslab+0xc4/0x120 [ 61.881314][ T7338] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 61.881328][ T7338] __d_alloc+0x50/0x690 [ 61.881337][ T7338] d_alloc_pseudo+0x2c/0xd8 [ 61.881346][ T7338] alloc_path_pseudo+0xe8/0x1d4 [ 61.881355][ T7338] alloc_file_pseudo+0xb0/0x198 [ 61.881364][ T7338] sock_alloc_file+0xb4/0x1ac [ 61.881373][ T7338] __sys_socket+0x90/0xec [ 61.881382][ T7338] __arm64_sys_socket+0x84/0x9c [ 61.881391][ T7338] invoke_syscall+0x98/0x244 [ 61.881403][ T7338] el0_svc_common+0xec/0x23c [ 61.881415][ T7338] do_el0_svc+0x4c/0x5c [ 61.881426][ T7338] el0_svc+0x64/0x260 [ 61.881437][ T7338] el0t_64_sync_handler+0x44/0x104 [ 61.881453][ T7338] el0t_64_sync+0x198/0x19c [ 62.008651][ T6795] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.419127][ T4708] Bluetooth: hci5: command tx timeout [ 62.570302][ T4355] block nbd1: Possible stuck request 000000000e925a7e: control (read@0,1024B). Runtime 30 seconds [ 62.571162][ T4355] block nbd1: Possible stuck request 0000000065551b7f: control (read@1024,1024B). Runtime 30 seconds [ 62.571181][ T4355] block nbd1: Possible stuck request 00000000273115bf: control (read@2048,1024B). Runtime 30 seconds [ 62.571192][ T4355] block nbd1: Possible stuck request 00000000f2bb1ce6: control (read@3072,1024B). Runtime 30 seconds [ 64.494028][ T865] cfg80211: failed to load regulatory.db [ 64.501816][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.501868][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.504767][ T4708] Bluetooth: hci5: command tx timeout [ 66.569430][ T4708] Bluetooth: hci5: command tx timeout [ 89.209496][ T4709] Bluetooth: hci3: command 0x0406 tx timeout [ 92.660550][ T4355] block nbd1: Possible stuck request 000000000e925a7e: control (read@0,1024B). Runtime 60 seconds [ 92.660591][ T4355] block nbd1: Possible stuck request 0000000065551b7f: control (read@1024,1024B). Runtime 60 seconds [ 92.660619][ T4355] block nbd1: Possible stuck request 00000000273115bf: control (read@2048,1024B). Runtime 60 seconds [ 92.660637][ T4355] block nbd1: Possible stuck request 00000000f2bb1ce6: control (read@3072,1024B). Runtime 60 seconds [ 93.098367][ T4340] udevd[4340]: worker [4694] /devices/virtual/block/nbd1 is taking a long time [ 122.730152][ T4355] block nbd1: Possible stuck request 000000000e925a7e: control (read@0,1024B). Runtime 90 seconds [ 122.730197][ T4355] block nbd1: Possible stuck request 0000000065551b7f: control (read@1024,1024B). Runtime 90 seconds [ 122.730229][ T4355] block nbd1: Possible stuck request 00000000273115bf: control (read@2048,1024B). Runtime 90 seconds [ 122.730248][ T4355] block nbd1: Possible stuck request 00000000f2bb1ce6: control (read@3072,1024B). Runtime 90 seconds [ 125.929775][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.929823][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.724550][ T7409] FAULT_INJECTION: forcing a failure. [ 132.724550][ T7409] name failslab, interval 1, probability 0, space 0, times 0 [ 132.724590][ T7409] CPU: 0 UID: 0 PID: 7409 Comm: syz.5.517 Tainted: G L syzkaller #0 PREEMPT [ 132.724609][ T7409] Tainted: [L]=SOFTLOCKUP [ 132.724614][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 132.724621][ T7409] Call trace: [ 132.724624][ T7409] show_stack+0x2c/0x3c (C) [ 132.724646][ T7409] __dump_stack+0x30/0x40 [ 132.724660][ T7409] dump_stack_lvl+0xd8/0x12c [ 132.724672][ T7409] dump_stack+0x1c/0x28 [ 132.724684][ T7409] should_fail_ex+0x41c/0x590 [ 132.724697][ T7409] should_failslab+0xc4/0x120 [ 132.724710][ T7409] kmem_cache_alloc_noprof+0x94/0x5d4 [ 132.724723][ T7409] vm_area_dup+0x34/0x5c8 [ 132.724733][ T7409] __split_vma+0x1a8/0x83c [ 132.724745][ T7409] vma_modify+0x1290/0x18f0 [ 132.724756][ T7409] vma_modify_flags_uffd+0x230/0x2d8 [ 132.724767][ T7409] userfaultfd_register_range+0x328/0x4d8 [ 132.724779][ T7409] userfaultfd_register+0x880/0xacc [ 132.724789][ T7409] userfaultfd_ioctl+0x234/0x5f4 [ 132.724799][ T7409] __arm64_sys_ioctl+0x154/0x1cc [ 132.724813][ T7409] invoke_syscall+0x98/0x244 [ 132.724825][ T7409] el0_svc_common+0xec/0x23c [ 132.724837][ T7409] do_el0_svc+0x4c/0x5c [ 132.724848][ T7409] el0_svc+0x64/0x260 [ 132.724859][ T7409] el0t_64_sync_handler+0x44/0x104 [ 132.724869][ T7409] el0t_64_sync+0x198/0x19c [ 132.781794][ T7413] loop0: detected capacity change from 0 to 8192 [ 132.801357][ T7413] syz.0.515: attempt to access beyond end of device [ 132.801357][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.801474][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.801989][ T7413] syz.0.515: attempt to access beyond end of device [ 132.801989][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.802005][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.802026][ T7413] syz.0.515: attempt to access beyond end of device [ 132.802026][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.802037][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.802056][ T7413] syz.0.515: attempt to access beyond end of device [ 132.802056][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.802066][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.802084][ T7413] syz.0.515: attempt to access beyond end of device [ 132.802084][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.802095][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.802112][ T7413] syz.0.515: attempt to access beyond end of device [ 132.802112][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.802122][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.802139][ T7413] syz.0.515: attempt to access beyond end of device [ 132.802139][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.802149][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.802166][ T7413] syz.0.515: attempt to access beyond end of device [ 132.802166][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.802176][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.802193][ T7413] syz.0.515: attempt to access beyond end of device [ 132.802193][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.802203][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.802220][ T7413] syz.0.515: attempt to access beyond end of device [ 132.802220][ T7413] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 132.802230][ T7413] Buffer I/O error on dev loop0, logical block 57847, async page read [ 132.814671][ T4708] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 132.919997][ T7422] : renamed from vlan0 (while UP) [ 133.020124][ T7430] block nbd7: NBD_DISCONNECT [ 133.321811][ T7436] FAULT_INJECTION: forcing a failure. [ 133.321811][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 133.321852][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.7.526 Tainted: G L syzkaller #0 PREEMPT [ 133.321868][ T7436] Tainted: [L]=SOFTLOCKUP [ 133.321871][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 133.321877][ T7436] Call trace: [ 133.321880][ T7436] show_stack+0x2c/0x3c (C) [ 133.321899][ T7436] __dump_stack+0x30/0x40 [ 133.321913][ T7436] dump_stack_lvl+0xd8/0x12c [ 133.321925][ T7436] dump_stack+0x1c/0x28 [ 133.321936][ T7436] should_fail_ex+0x41c/0x590 [ 133.321950][ T7436] should_failslab+0xc4/0x120 [ 133.321964][ T7436] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 133.321978][ T7436] __d_alloc+0x50/0x690 [ 133.321988][ T7436] d_alloc+0x54/0x17c [ 133.321996][ T7436] efivarfs_create_dentry+0x194/0x2fc [ 133.322010][ T7436] efivarfs_callback+0x10c/0x170 [ 133.322022][ T7436] efivar_init+0x210/0x400 [ 133.322035][ T7436] efivarfs_fill_super+0x280/0x2d8 [ 133.322047][ T7436] vfs_get_super+0xb8/0x148 [ 133.322057][ T7436] get_tree_single+0x30/0x40 [ 133.322067][ T7436] efivarfs_get_tree+0x28/0x38 [ 133.322079][ T7436] vfs_get_tree+0x90/0x28c [ 133.322088][ T7436] fc_mount+0x24/0xac [ 133.322099][ T7436] do_new_mount+0x2a4/0x538 [ 133.322109][ T7436] path_mount+0x5f0/0xa88 [ 133.322120][ T7436] do_mount+0xe8/0x148 [ 133.322130][ T7436] __arm64_sys_mount+0x33c/0x388 [ 133.322141][ T7436] invoke_syscall+0x98/0x244 [ 133.322154][ T7436] el0_svc_common+0xec/0x23c [ 133.322165][ T7436] do_el0_svc+0x4c/0x5c [ 133.322177][ T7436] el0_svc+0x64/0x260 [ 133.322188][ T7436] el0t_64_sync_handler+0x44/0x104 [ 133.322198][ T7436] el0t_64_sync+0x198/0x19c [ 133.345396][ T7439] FAULT_INJECTION: forcing a failure. [ 133.345396][ T7439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.345415][ T7439] CPU: 0 UID: 0 PID: 7439 Comm: syz.6.527 Tainted: G L syzkaller #0 PREEMPT [ 133.345427][ T7439] Tainted: [L]=SOFTLOCKUP [ 133.345430][ T7439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 133.345435][ T7439] Call trace: [ 133.345437][ T7439] show_stack+0x2c/0x3c (C) [ 133.345461][ T7439] __dump_stack+0x30/0x40 [ 133.345473][ T7439] dump_stack_lvl+0xd8/0x12c [ 133.345484][ T7439] dump_stack+0x1c/0x28 [ 133.345495][ T7439] should_fail_ex+0x41c/0x590 [ 133.345506][ T7439] should_fail+0x14/0x24 [ 133.345515][ T7439] should_fail_usercopy+0x20/0x30 [ 133.345525][ T7439] simple_read_from_buffer+0xc4/0x238 [ 133.345535][ T7439] proc_fail_nth_read+0x1a8/0x248 [ 133.345544][ T7439] vfs_read+0x230/0x8c8 [ 133.345555][ T7439] ksys_read+0x12c/0x228 [ 133.345565][ T7439] __arm64_sys_read+0x84/0x98 [ 133.345575][ T7439] invoke_syscall+0x98/0x244 [ 133.345585][ T7439] el0_svc_common+0xec/0x23c [ 133.345595][ T7439] do_el0_svc+0x4c/0x5c [ 133.345604][ T7439] el0_svc+0x64/0x260 [ 133.345614][ T7439] el0t_64_sync_handler+0x44/0x104 [ 133.345622][ T7439] el0t_64_sync+0x198/0x19c [ 133.549284][ T7443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.936299][ T7455] FAULT_INJECTION: forcing a failure. [ 133.936299][ T7455] name failslab, interval 1, probability 0, space 0, times 0 [ 133.936347][ T7455] CPU: 0 UID: 0 PID: 7455 Comm: syz.7.533 Tainted: G L syzkaller #0 PREEMPT [ 133.936363][ T7455] Tainted: [L]=SOFTLOCKUP [ 133.936367][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 133.936373][ T7455] Call trace: [ 133.936377][ T7455] show_stack+0x2c/0x3c (C) [ 133.936397][ T7455] __dump_stack+0x30/0x40 [ 133.936410][ T7455] dump_stack_lvl+0xd8/0x12c [ 133.936422][ T7455] dump_stack+0x1c/0x28 [ 133.936433][ T7455] should_fail_ex+0x41c/0x590 [ 133.936452][ T7455] should_failslab+0xc4/0x120 [ 133.936466][ T7455] kmem_cache_alloc_noprof+0x94/0x5d4 [ 133.936480][ T7455] mas_alloc_nodes+0x234/0x2d8 [ 133.936494][ T7455] mas_preallocate+0x43c/0x6e8 [ 133.936502][ T7455] __split_vma+0x298/0x83c [ 133.936514][ T7455] vma_modify+0x1290/0x18f0 [ 133.936525][ T7455] vma_modify_flags_uffd+0x230/0x2d8 [ 133.936536][ T7455] userfaultfd_register_range+0x328/0x4d8 [ 133.936548][ T7455] userfaultfd_register+0x880/0xacc [ 133.936558][ T7455] userfaultfd_ioctl+0x234/0x5f4 [ 133.936568][ T7455] __arm64_sys_ioctl+0x154/0x1cc [ 133.936581][ T7455] invoke_syscall+0x98/0x244 [ 133.936593][ T7455] el0_svc_common+0xec/0x23c [ 133.936605][ T7455] do_el0_svc+0x4c/0x5c [ 133.936616][ T7455] el0_svc+0x64/0x260 [ 133.936626][ T7455] el0t_64_sync_handler+0x44/0x104 [ 133.936636][ T7455] el0t_64_sync+0x198/0x19c [ 133.957475][ T7457] loop5: detected capacity change from 0 to 512 [ 133.964532][ T7459] loop4: detected capacity change from 0 to 512 [ 133.967843][ T7459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e02c, mo2=0002] [ 133.967910][ T7459] System zones: 1-12 [ 133.984966][ T7459] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.536: missing EA_INODE flag [ 133.985019][ T7459] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 133.989088][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 133.989122][ C0] EXT4-fs (loop4): initial error at time 133: ext4_xattr_inode_iget:437: inode 12 [ 133.989156][ C0] EXT4-fs (loop4): last error at time 133: ext4_xattr_inode_iget:437: inode 12 [ 133.992918][ T7459] EXT4-fs (loop4): Remounting filesystem read-only [ 133.993011][ T7459] EXT4-fs (loop4): 1 orphan inode deleted [ 133.993423][ T7459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.003200][ T7457] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.016799][ T4709] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 134.024949][ T7467] team0 (unregistering): Port device team_slave_0 removed [ 134.028280][ T7467] team0 (unregistering): Port device team_slave_1 removed [ 134.037414][ T7468] FAULT_INJECTION: forcing a failure. [ 134.037414][ T7468] name failslab, interval 1, probability 0, space 0, times 0 [ 134.037453][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.0.534 Tainted: G L syzkaller #0 PREEMPT [ 134.037477][ T7468] Tainted: [L]=SOFTLOCKUP [ 134.037481][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 134.037488][ T7468] Call trace: [ 134.037492][ T7468] show_stack+0x2c/0x3c (C) [ 134.037513][ T7468] __dump_stack+0x30/0x40 [ 134.037527][ T7468] dump_stack_lvl+0xd8/0x12c [ 134.037539][ T7468] dump_stack+0x1c/0x28 [ 134.037550][ T7468] should_fail_ex+0x41c/0x590 [ 134.037563][ T7468] should_failslab+0xc4/0x120 [ 134.037577][ T7468] kmem_cache_alloc_noprof+0x94/0x5d4 [ 134.037590][ T7468] mas_alloc_nodes+0x234/0x2d8 [ 134.037605][ T7468] mas_preallocate+0x43c/0x6e8 [ 134.037613][ T7468] __split_vma+0x298/0x83c [ 134.037625][ T7468] vma_modify+0x1290/0x18f0 [ 134.037635][ T7468] vma_modify_flags_uffd+0x230/0x2d8 [ 134.037647][ T7468] userfaultfd_register_range+0x328/0x4d8 [ 134.037659][ T7468] userfaultfd_register+0x880/0xacc [ 134.037669][ T7468] userfaultfd_ioctl+0x234/0x5f4 [ 134.037679][ T7468] __arm64_sys_ioctl+0x154/0x1cc [ 134.037693][ T7468] invoke_syscall+0x98/0x244 [ 134.037705][ T7468] el0_svc_common+0xec/0x23c [ 134.037717][ T7468] do_el0_svc+0x4c/0x5c [ 134.037729][ T7468] el0_svc+0x64/0x260 [ 134.037738][ T7468] el0t_64_sync_handler+0x44/0x104 [ 134.037749][ T7468] el0t_64_sync+0x198/0x19c [ 134.044690][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.085667][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.539'. [ 134.183588][ T7479] FAULT_INJECTION: forcing a failure. [ 134.183588][ T7479] name failslab, interval 1, probability 0, space 0, times 0 [ 134.187116][ T7479] CPU: 1 UID: 0 PID: 7479 Comm: syz.5.542 Tainted: G L syzkaller #0 PREEMPT [ 134.187138][ T7479] Tainted: [L]=SOFTLOCKUP [ 134.187143][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 134.187150][ T7479] Call trace: [ 134.187154][ T7479] show_stack+0x2c/0x3c (C) [ 134.187179][ T7479] __dump_stack+0x30/0x40 [ 134.187193][ T7479] dump_stack_lvl+0xd8/0x12c [ 134.187205][ T7479] dump_stack+0x1c/0x28 [ 134.187217][ T7479] should_fail_ex+0x41c/0x590 [ 134.187230][ T7479] should_failslab+0xc4/0x120 [ 134.187243][ T7479] __kmalloc_noprof+0x108/0x6c8 [ 134.187252][ T7479] __d_alloc+0xb4/0x690 [ 134.187261][ T7479] d_alloc+0x54/0x17c [ 134.187270][ T7479] efivarfs_create_dentry+0x194/0x2fc [ 134.187284][ T7479] efivarfs_callback+0x10c/0x170 [ 134.187296][ T7479] efivar_init+0x210/0x400 [ 134.187308][ T7479] efivarfs_fill_super+0x280/0x2d8 [ 134.187321][ T7479] vfs_get_super+0xb8/0x148 [ 134.187331][ T7479] get_tree_single+0x30/0x40 [ 134.187340][ T7479] efivarfs_get_tree+0x28/0x38 [ 134.187352][ T7479] vfs_get_tree+0x90/0x28c [ 134.187361][ T7479] fc_mount+0x24/0xac [ 134.187371][ T7479] do_new_mount+0x2a4/0x538 [ 134.187381][ T7479] path_mount+0x5f0/0xa88 [ 134.187392][ T7479] do_mount+0xe8/0x148 [ 134.187402][ T7479] __arm64_sys_mount+0x33c/0x388 [ 134.187413][ T7479] invoke_syscall+0x98/0x244 [ 134.187425][ T7479] el0_svc_common+0xec/0x23c [ 134.187437][ T7479] do_el0_svc+0x4c/0x5c [ 134.187448][ T7479] el0_svc+0x64/0x260 [ 134.187464][ T7479] el0t_64_sync_handler+0x44/0x104 [ 134.187480][ T7479] el0t_64_sync+0x198/0x19c [ 134.190160][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.544'. [ 134.192898][ T6365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.509648][ T4708] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 134.936983][ T7503] syz_tun: entered allmulticast mode [ 135.233826][ T7511] loop0: detected capacity change from 0 to 512 [ 135.241290][ T7509] loop7: detected capacity change from 0 to 512 [ 135.243318][ T7511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.277471][ T7509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.332183][ T6378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.371590][ T7520] loop4: detected capacity change from 0 to 8 [ 135.374184][ T7027] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.393545][ T7495] syz_tun: left allmulticast mode [ 135.487908][ T7533] overlayfs: failed to resolve './file0': -2 [ 135.510745][ T4708] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 135.528420][ T7538] FAULT_INJECTION: forcing a failure. [ 135.528420][ T7538] name failslab, interval 1, probability 0, space 0, times 0 [ 135.528469][ T7538] CPU: 0 UID: 0 PID: 7538 Comm: syz.0.556 Tainted: G L syzkaller #0 PREEMPT [ 135.528484][ T7538] Tainted: [L]=SOFTLOCKUP [ 135.528488][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 135.528494][ T7538] Call trace: [ 135.528497][ T7538] show_stack+0x2c/0x3c (C) [ 135.528518][ T7538] __dump_stack+0x30/0x40 [ 135.528531][ T7538] dump_stack_lvl+0xd8/0x12c [ 135.528543][ T7538] dump_stack+0x1c/0x28 [ 135.528554][ T7538] should_fail_ex+0x41c/0x590 [ 135.528567][ T7538] should_failslab+0xc4/0x120 [ 135.528580][ T7538] __kmalloc_noprof+0x108/0x6c8 [ 135.528589][ T7538] __d_alloc+0xb4/0x690 [ 135.528598][ T7538] d_alloc+0x54/0x17c [ 135.528607][ T7538] efivarfs_create_dentry+0x194/0x2fc [ 135.528621][ T7538] efivarfs_callback+0x10c/0x170 [ 135.528633][ T7538] efivar_init+0x210/0x400 [ 135.528645][ T7538] efivarfs_fill_super+0x280/0x2d8 [ 135.528658][ T7538] vfs_get_super+0xb8/0x148 [ 135.528667][ T7538] get_tree_single+0x30/0x40 [ 135.528677][ T7538] efivarfs_get_tree+0x28/0x38 [ 135.528689][ T7538] vfs_get_tree+0x90/0x28c [ 135.528698][ T7538] fc_mount+0x24/0xac [ 135.528708][ T7538] do_new_mount+0x2a4/0x538 [ 135.528719][ T7538] path_mount+0x5f0/0xa88 [ 135.528729][ T7538] do_mount+0xe8/0x148 [ 135.528739][ T7538] __arm64_sys_mount+0x33c/0x388 [ 135.528750][ T7538] invoke_syscall+0x98/0x244 [ 135.528762][ T7538] el0_svc_common+0xec/0x23c [ 135.528774][ T7538] do_el0_svc+0x4c/0x5c [ 135.528786][ T7538] el0_svc+0x64/0x260 [ 135.528797][ T7538] el0t_64_sync_handler+0x44/0x104 [ 135.528807][ T7538] el0t_64_sync+0x198/0x19c [ 135.607769][ T7548] loop4: detected capacity change from 0 to 1024 [ 135.614762][ T7548] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 135.614832][ T7548] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 135.617864][ T7548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.630701][ T7547] netlink: 'syz.5.562': attribute type 4 has an invalid length. [ 135.656985][ T7547] syzkaller1: entered promiscuous mode [ 135.657020][ T7547] syzkaller1: entered allmulticast mode [ 135.675309][ T7547] loop5: detected capacity change from 0 to 512 [ 135.681238][ T7547] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.712049][ T7547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.731841][ T7564] tipc: Started in network mode [ 135.731878][ T7564] tipc: Node identity e6a9f3db407a, cluster identity 4711 [ 135.732028][ T7564] tipc: Enabled bearer , priority 0 [ 135.738453][ T7569] binder: 7568:7569 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 135.740748][ T7569] loop7: detected capacity change from 0 to 128 [ 135.752983][ T7564] syzkaller0: entered promiscuous mode [ 135.753019][ T7564] syzkaller0: entered allmulticast mode [ 135.758120][ T7564] tipc: Resetting bearer [ 135.761540][ T7563] tipc: Resetting bearer [ 135.779831][ T7563] tipc: Disabling bearer [ 135.793945][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.796302][ T7571] loop7: detected capacity change from 0 to 256 [ 135.797679][ T7571] vfat: Unknown parameter 'f[hMƔˏY56Ж6wbTIRM*o#|/WD?ț(z%Kd [ 135.797679][ T7571] #0ڊD' [ 135.976679][ T7581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.570'. [ 135.988037][ T7588] ext4: Unknown parameter 'rootcontext' [ 136.015217][ T7588] 9p: Bad value for 'wfdno' [ 136.143107][ T4709] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 136.238303][ T7618] FAULT_INJECTION: forcing a failure. [ 136.238303][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 136.242461][ T7618] CPU: 1 UID: 0 PID: 7618 Comm: syz.7.578 Tainted: G L syzkaller #0 PREEMPT [ 136.242488][ T7618] Tainted: [L]=SOFTLOCKUP [ 136.242493][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.242499][ T7618] Call trace: [ 136.242503][ T7618] show_stack+0x2c/0x3c (C) [ 136.242524][ T7618] __dump_stack+0x30/0x40 [ 136.242538][ T7618] dump_stack_lvl+0xd8/0x12c [ 136.242550][ T7618] dump_stack+0x1c/0x28 [ 136.242562][ T7618] should_fail_ex+0x41c/0x590 [ 136.242575][ T7618] should_failslab+0xc4/0x120 [ 136.242588][ T7618] __kmalloc_cache_noprof+0x94/0x5fc [ 136.242597][ T7618] genl_start+0x1b4/0x614 [ 136.242609][ T7618] __netlink_dump_start+0x390/0x6f8 [ 136.242618][ T7618] genl_family_rcv_msg_dumpit+0x1a8/0x28c [ 136.242630][ T7618] genl_rcv_msg+0x404/0x620 [ 136.242640][ T7618] netlink_rcv_skb+0x238/0x414 [ 136.242650][ T7618] genl_rcv+0x38/0x50 [ 136.242660][ T7618] netlink_unicast+0x600/0x7f8 [ 136.242669][ T7618] netlink_sendmsg+0x648/0x948 [ 136.242678][ T7618] __sock_sendmsg+0xc8/0x17c [ 136.242688][ T7618] ____sys_sendmsg+0x3d0/0x6c8 [ 136.242698][ T7618] ___sys_sendmsg+0x198/0x224 [ 136.242707][ T7618] __sys_sendmsg+0x158/0x204 [ 136.242717][ T7618] __arm64_sys_sendmsg+0x88/0x9c [ 136.242727][ T7618] invoke_syscall+0x98/0x244 [ 136.242738][ T7618] el0_svc_common+0xec/0x23c [ 136.242750][ T7618] do_el0_svc+0x4c/0x5c [ 136.242762][ T7618] el0_svc+0x64/0x260 [ 136.242773][ T7618] el0t_64_sync_handler+0x44/0x104 [ 136.242783][ T7618] el0t_64_sync+0x198/0x19c [ 136.394638][ T6365] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.442504][ T7642] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 136.447161][ T7640] netlink: 260 bytes leftover after parsing attributes in process `syz.5.582'. [ 136.469916][ T7642] veth2: entered allmulticast mode [ 136.481525][ T7642] bond2: (slave veth3): Enslaving as an active interface with a down link [ 136.615805][ T4708] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 136.662792][ T7657] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.088201][ T7729] FAULT_INJECTION: forcing a failure. [ 137.088201][ T7729] name failslab, interval 1, probability 0, space 0, times 0 [ 137.088242][ T7729] CPU: 0 UID: 0 PID: 7729 Comm: syz.0.592 Tainted: G L syzkaller #0 PREEMPT [ 137.088261][ T7729] Tainted: [L]=SOFTLOCKUP [ 137.088266][ T7729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 137.088272][ T7729] Call trace: [ 137.088276][ T7729] show_stack+0x2c/0x3c (C) [ 137.088297][ T7729] __dump_stack+0x30/0x40 [ 137.088312][ T7729] dump_stack_lvl+0xd8/0x12c [ 137.088323][ T7729] dump_stack+0x1c/0x28 [ 137.088335][ T7729] should_fail_ex+0x41c/0x590 [ 137.088347][ T7729] should_failslab+0xc4/0x120 [ 137.088360][ T7729] __kmalloc_cache_noprof+0x94/0x5fc [ 137.088369][ T7729] sctp_auth_shkey_create+0x84/0x188 [ 137.088381][ T7729] sctp_endpoint_new+0x388/0x860 [ 137.088394][ T7729] sctp_init_sock+0x684/0x11ec [ 137.088406][ T7729] sctp_v6_init_sock+0x20/0x80 [ 137.088418][ T7729] inet6_create+0xb4c/0xfc8 [ 137.088426][ T7729] __sock_create+0x31c/0x670 [ 137.088436][ T7729] __sys_socket_create+0xc0/0x11c [ 137.088451][ T7729] __sys_socket+0x44/0xec [ 137.088461][ T7729] __arm64_sys_socket+0x84/0x9c [ 137.088471][ T7729] invoke_syscall+0x98/0x244 [ 137.088484][ T7729] el0_svc_common+0xec/0x23c [ 137.088495][ T7729] do_el0_svc+0x4c/0x5c [ 137.088506][ T7729] el0_svc+0x64/0x260 [ 137.088517][ T7729] el0t_64_sync_handler+0x44/0x104 [ 137.088527][ T7729] el0t_64_sync+0x198/0x19c [ 137.106936][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.5.591'. [ 137.160705][ T7685] cgroup: fork rejected by pids controller in /syz6 [ 137.565718][ T7742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 137.660193][ T7758] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.596'. [ 137.671529][ T7761] EXT4-fs: Ignoring removed i_version option [ 137.678721][ T7761] EXT4-fs (loop0): 1 orphan inode deleted [ 137.682554][ T7761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.684063][ T7762] syzkaller0: entered promiscuous mode [ 137.684077][ T7762] syzkaller0: entered allmulticast mode [ 137.685401][ T7762] tipc: Started in network mode [ 137.685416][ T7762] tipc: Node identity f2bc953980b1, cluster identity 4711 [ 137.686313][ T7762] tipc: Enabled bearer , priority 0 [ 137.696409][ T7760] tipc: Resetting bearer [ 137.712342][ T7760] tipc: Disabling bearer [ 137.726086][ T6378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.740570][ T7772] netlink: 'syz.4.602': attribute type 39 has an invalid length. [ 137.799618][ T7777] FAULT_INJECTION: forcing a failure. [ 137.799618][ T7777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.799654][ T7777] CPU: 0 UID: 0 PID: 7777 Comm: syz.0.603 Tainted: G L syzkaller #0 PREEMPT [ 137.799672][ T7777] Tainted: [L]=SOFTLOCKUP [ 137.799675][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 137.799680][ T7777] Call trace: [ 137.799684][ T7777] show_stack+0x2c/0x3c (C) [ 137.799703][ T7777] __dump_stack+0x30/0x40 [ 137.799717][ T7777] dump_stack_lvl+0xd8/0x12c [ 137.799727][ T7777] dump_stack+0x1c/0x28 [ 137.799737][ T7777] should_fail_ex+0x41c/0x590 [ 137.799751][ T7777] should_fail+0x14/0x24 [ 137.799760][ T7777] should_fail_usercopy+0x20/0x30 [ 137.799771][ T7777] _inline_copy_from_user+0x3c/0x174 [ 137.799781][ T7777] copy_msghdr_from_user+0xb8/0x194 [ 137.799791][ T7777] ___sys_sendmsg+0x14c/0x224 [ 137.799799][ T7777] __sys_sendmsg+0x158/0x204 [ 137.799807][ T7777] __arm64_sys_sendmsg+0x88/0x9c [ 137.799816][ T7777] invoke_syscall+0x98/0x244 [ 137.799826][ T7777] el0_svc_common+0xec/0x23c [ 137.799836][ T7777] do_el0_svc+0x4c/0x5c [ 137.799845][ T7777] el0_svc+0x64/0x260 [ 137.799855][ T7777] el0t_64_sync_handler+0x44/0x104 [ 137.799863][ T7777] el0t_64_sync+0x198/0x19c [ 137.834970][ T7779] netlink: 32 bytes leftover after parsing attributes in process `syz.0.604'. [ 137.837683][ T7779] fuse: Bad value for 'fd' [ 137.862681][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 137.867534][ T7782] set_capacity_and_notify: 3 callbacks suppressed [ 137.867772][ T7782] loop0: detected capacity change from 0 to 256 [ 137.927046][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 137.978091][ T7788] loop0: detected capacity change from 0 to 128 [ 137.997978][ T7788] netlink: 'syz.0.607': attribute type 2 has an invalid length. [ 138.173488][ T7815] loop5: detected capacity change from 0 to 1024 [ 138.199607][ T7819] netlink: 'syz.6.618': attribute type 1 has an invalid length. [ 138.255455][ T7822] loop6: detected capacity change from 0 to 512 [ 138.284558][ T7822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.295672][ T7822] EXT4-fs error (device loop6): ext4_get_first_dir_block:3539: inode #12: comm syz.6.618: Directory hole found for htree leaf block 0 [ 138.300680][ T7822] EXT4-fs (loop6): Remounting filesystem read-only [ 138.302955][ T7822] netlink: 'syz.6.618': attribute type 21 has an invalid length. [ 138.304846][ T7822] netlink: 'syz.6.618': attribute type 7 has an invalid length. [ 138.340586][ T7826] macsec1: entered promiscuous mode [ 138.817374][ T7830] loop0: detected capacity change from 0 to 512 [ 138.821602][ T7830] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 138.835298][ T7830] EXT4-fs (loop0): orphan cleanup on readonly fs [ 138.837177][ T7830] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.620: iget: bogus i_mode (5) [ 138.840942][ T7830] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.842269][ T7830] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.620: couldn't read orphan inode 15 (err -117) [ 138.847355][ T7830] loop0: lost filesystem error report for type 5 error -117 [ 138.848767][ T7830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 138.861717][ T6378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.208372][ T6795] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.234313][ T2755] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.234334][ T2755] Quota error (device loop6): write_blk: dquota write failed [ 139.234342][ T2755] Quota error (device loop6): free_dqentry: Can't write quota data block 5 [ 139.289934][ T7836] netlink: 'syz.0.621': attribute type 30 has an invalid length. [ 139.296915][ T7836] 9pnet_fd: Insufficient options for proto=fd [ 139.303096][ T7838] loop5: detected capacity change from 0 to 1024 [ 139.303503][ T7838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.324449][ T7838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.577379][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.625'. [ 139.581272][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.5.624'. [ 139.582020][ T7856] xt_cgroup: no path or classid specified [ 139.621460][ T7858] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 139.623849][ T5127] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.701829][ T7862] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 139.760934][ T7867] netlink: 'syz.6.629': attribute type 22 has an invalid length. [ 139.762928][ T7867] netlink: 44 bytes leftover after parsing attributes in process `syz.6.629'. [ 139.765347][ T7867] netlink: 'syz.6.629': attribute type 22 has an invalid length. [ 139.767813][ T7867] netlink: 44 bytes leftover after parsing attributes in process `syz.6.629'. [ 139.905837][ T30] audit: type=1107 audit(139.890:6): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='Z_;oFQɯ <žbh{J"Zk 1 [ 141.627731][ T4708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.630103][ T4708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.630456][ T4708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.630878][ T4708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.650996][ T7101] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.745607][ T7101] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.804444][ T7972] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.804532][ T7972] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.804594][ T7972] bridge_slave_0: entered allmulticast mode [ 141.805017][ T7972] bridge_slave_0: entered promiscuous mode [ 141.806215][ T7972] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.806266][ T7972] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.806357][ T7972] bridge_slave_1: entered allmulticast mode [ 141.806796][ T7972] bridge_slave_1: entered promiscuous mode [ 141.817330][ T7972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.818315][ T7972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.824824][ T7972] team0: Port device team_slave_0 added [ 141.825677][ T7972] team0: Port device team_slave_1 added [ 141.831695][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.831720][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.831753][ T7972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.833886][ T7972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.833896][ T7972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.833908][ T7972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.872528][ T7972] hsr_slave_0: entered promiscuous mode [ 141.872884][ T7972] hsr_slave_1: entered promiscuous mode [ 141.873079][ T7972] debugfs: 'hsr0' already exists in 'hsr' [ 141.873090][ T7972] Cannot create hsr debugfs directory [ 141.886741][ T7101] bridge_slave_1: left allmulticast mode [ 141.886778][ T7101] bridge_slave_1: left promiscuous mode [ 141.886880][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.889737][ T7101] bridge_slave_0: left allmulticast mode [ 141.889749][ T7101] bridge_slave_0: left promiscuous mode [ 141.889811][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.893858][ T7101] dvmrp0: left allmulticast mode [ 141.970812][ T7101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.985611][ T7101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.000125][ T7101] bond0 (unregistering): Released all slaves [ 142.067683][ T7972] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 142.084259][ T7972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 142.086212][ T7972] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 142.092131][ T7972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.093678][ T7101] tipc: Left network mode [ 142.096680][ T7972] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 142.112855][ T7972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.113213][ T7972] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 142.120024][ T7972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.152973][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.159045][ T7972] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.166675][ T3346] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.166729][ T3346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.167277][ T3346] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.167296][ T3346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.252145][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 142.381644][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.406089][ T7101] hsr_slave_0: left promiscuous mode [ 142.407562][ T7101] hsr_slave_1: left promiscuous mode [ 142.408816][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.408844][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.410947][ T7101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.410960][ T7101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.415040][ T7101] veth1_macvtap: left promiscuous mode [ 142.415065][ T7101] veth0_macvtap: left promiscuous mode [ 142.415117][ T7101] veth1_vlan: left promiscuous mode [ 142.415161][ T7101] veth0_vlan: left promiscuous mode [ 142.524091][ T7101] team0 (unregistering): Port device team_slave_1 removed [ 142.527919][ T7101] team0 (unregistering): Port device team_slave_0 removed [ 142.587285][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 142.648862][ T7972] veth0_vlan: entered promiscuous mode [ 142.651420][ T7972] veth1_vlan: entered promiscuous mode [ 142.658950][ T7972] veth0_macvtap: entered promiscuous mode [ 142.660499][ T7972] veth1_macvtap: entered promiscuous mode [ 142.664157][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.665391][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.668202][ T3346] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.674021][ T3346] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.720708][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.721280][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.725620][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.725664][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.741222][ T3346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.741249][ T3346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.792974][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 142.927373][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 143.689161][ T4708] Bluetooth: hci2: command tx timeout [ 145.779208][ T4708] Bluetooth: hci2: command tx timeout [ 147.849714][ T4708] Bluetooth: hci2: command tx timeout [ 148.489785][ T4708] Bluetooth: hci4: command 0x0406 tx timeout [ 149.939146][ T4709] Bluetooth: hci2: command tx timeout [ 152.809224][ T4355] block nbd1: Possible stuck request 000000000e925a7e: control (read@0,1024B). Runtime 120 seconds [ 152.809261][ T4355] block nbd1: Possible stuck request 0000000065551b7f: control (read@1024,1024B). Runtime 120 seconds [ 152.809273][ T4355] block nbd1: Possible stuck request 00000000273115bf: control (read@2048,1024B). Runtime 120 seconds [ 152.809285][ T4355] block nbd1: Possible stuck request 00000000f2bb1ce6: control (read@3072,1024B). Runtime 120 seconds [ 153.609773][ T4708] Bluetooth: hci3: command 0x0406 tx timeout [ 168.972694][ T4708] Bluetooth: hci1: command 0x0406 tx timeout [ 168.972708][ T4712] Bluetooth: hci0: command 0x0406 tx timeout [ 182.890372][ T4355] block nbd1: Possible stuck request 000000000e925a7e: control (read@0,1024B). Runtime 150 seconds [ 182.890414][ T4355] block nbd1: Possible stuck request 0000000065551b7f: control (read@1024,1024B). Runtime 150 seconds [ 182.890430][ T4355] block nbd1: Possible stuck request 00000000273115bf: control (read@2048,1024B). Runtime 150 seconds [ 182.890442][ T4355] block nbd1: Possible stuck request 00000000f2bb1ce6: control (read@3072,1024B). Runtime 150 seconds [ 187.381251][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.381304][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.649686][ T31] INFO: task syz.1.306:6170 blocked for more than 143 seconds. [ 204.649721][ T31] Tainted: G L syzkaller #0 [ 204.649741][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.649750][ T31] task:syz.1.306 state:D stack:0 pid:6170 tgid:6166 ppid:4717 task_flags:0x400140 flags:0x00800001 [ 204.649774][ T31] Call trace: [ 204.649782][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.649802][ T31] __schedule+0x1370/0x2d80 [ 204.649815][ T31] schedule+0x13c/0x20c [ 204.649827][ T31] schedule_preempt_disabled+0x18/0x2c [ 204.649840][ T31] __mutex_lock+0x4ec/0xf14 [ 204.649852][ T31] mutex_lock_nested+0x24/0x30 [ 204.649865][ T31] bdev_open+0xc4/0x880 [ 204.649882][ T31] blkdev_open+0x2d4/0x408 [ 204.649894][ T31] do_dentry_open+0x5c4/0xfc0 [ 204.649910][ T31] vfs_open+0x44/0x2dc [ 204.649923][ T31] path_openat+0x1084/0x18f4 [ 204.649937][ T31] do_file_open+0x1c8/0x2e8 [ 204.649950][ T31] do_sys_openat2+0x114/0x1e8 [ 204.649964][ T31] do_sys_open+0xb0/0xe0 [ 204.649978][ T31] __arm64_sys_openat+0xa8/0xc4 [ 204.649993][ T31] invoke_syscall+0x98/0x244 [ 204.650009][ T31] el0_svc_common+0xec/0x23c [ 204.650023][ T31] do_el0_svc+0x4c/0x5c [ 204.650037][ T31] el0_svc+0x64/0x260 [ 204.650050][ T31] el0t_64_sync_handler+0x44/0x104 [ 204.650063][ T31] el0t_64_sync+0x198/0x19c [ 204.650104][ T31] [ 204.650104][ T31] Showing all locks held in the system: [ 204.650115][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 204.650126][ T31] #0: ffff800088de2060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 204.650190][ T31] locks held by getty/4488: 2, on CPU#0: [ 204.650200][ T31] #0: ffff0000d13020a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 204.650245][ T31] #1: ffff8000925de2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 204.650291][ T31] locks held by udevd/4694: 1, on CPU#0: [ 204.650301][ T31] #0: ffff0000c821a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 204.650353][ T31] locks held by syz.1.306/6170: 1, on CPU#0: [ 204.650363][ T31] #0: ffff0000c821a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 204.650410][ T31] locks held by kworker/u8:12/7101: 2, last CPU#0: [ 204.650420][ T31] #0: ffff0000c4cb2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 204.650470][ T31] #1: ffff800093697c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 204.650521][ T31] locks held by syz.7.588/7668: 1, on CPU#0: [ 204.650530][ T31] #0: ffff0000c821a350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x214/0x3d4 [ 204.650573][ T31] [ 204.650579][ T31] ============================================= [ 204.650579][ T31] [ 204.650589][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 204.698471][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 204.700304][ T31] Tainted: [L]=SOFTLOCKUP [ 204.701083][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 204.702909][ T31] Call trace: [ 204.703495][ T31] show_stack+0x2c/0x3c (C) [ 204.704309][ T31] __dump_stack+0x30/0x40 [ 204.705109][ T31] dump_stack_lvl+0x30/0x12c [ 204.705912][ T31] dump_stack+0x1c/0x28 [ 204.706664][ T31] vpanic+0x594/0xaf8 [ 204.707410][ T31] vpanic+0x0/0xaf8 [ 204.708086][ T31] hung_task_panic+0x0/0x2c [ 204.708903][ T31] kthread+0x304/0x3d4 [ 204.709604][ T31] ret_from_fork+0x10/0x20 [ 204.710400][ T31] SMP: stopping secondary CPUs [ 204.711216][ T31] Kernel Offset: disabled [ 204.711994][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 204.713256][ T31] Memory Limit: none [ 205.117448][ T31] Rebooting in 86400 seconds..