last executing test programs: 6m32.17681713s ago: executing program 32 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r3 = syz_open_dev$evdev(&(0x7f0000002080), 0x2b, 0x44002) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000020c0)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0xc) r7 = getgid() sendmmsg$unix(r2, &(0x7f000000a440)=[{{&(0x7f0000000240)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f00000002c0)="b50fddd8fbcc58cb237b67491f8a05c99c44b4f91c24d322c0829e7c45e704615449e619fd140a58159a189c01e1b020333c6b112007b46a6c7fe57de428421d8bf09a30d4f04a9c00f951a3a2270b5e890927ed538cca2108e203c5c1fd8c2c2c7dd2f68c239b8c59fbd84a28b116ae107dc56982e15e78a2cc7b17db40ddb5b712d70b7306862dcf9a95f5738ed8665fd6e87570f9607ac294742c721755b2033fe86c1984ae365d1e5d57b62eaf", 0xaf}, {&(0x7f0000001040)="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", 0x1000}], 0x2, &(0x7f0000002200)=[@rights={{0x28, 0x1, 0x1, [r1, r3, r1, r1, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, r5, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}], 0x100, 0x8000}}, {{&(0x7f0000002300)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000002380)="04b818b31a4900d9bf245d8eb7cf454790c555a343df045d4da2a2f9bd599e30f368bec093512f5b28157fe2c02abd4a99c0c9fc3b82ef641595a878c4917090e8cb90443466083dab3558b6cd47801f8068f059e20391a2cc03073c3d3d1e513ab50185049dedf0d83ce49643e31938090e00213d4cd3866125d6000d10a244621928153dc2e322756248ce2bb043b3454aba37b03b32cc28d33d33f8655cd13e6e1a21e82e77519c", 0xa9}, {&(0x7f0000002440)="b9fbf3aa61f70f7082074f32f6bd81c5d5705dd91d420982c13c9c45c7fd565baf63d9cd4d046c4a9470440533aee9ff4ea0a1b15a79f4097303a7970bb9dfb74942d78b93a59582df1b52cdb668667db726b3d11fa34a7f8d3f95916eb611c7399ea3c0537e69ada67ccc26a89ada93ed032767e998b803f7c04fcb10cc979f13031630d484c1d218555e53", 0x8c}, {&(0x7f0000002500)="87a6dfae93bb4da8a4996cea745af797d8dbd130a5d419ef2d8012c76ea27e9dcdbd127efe3e0db60e3ee54c0eb751cd9bc67114", 0x34}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="79c2f371b734db74da095225643efcaa00", 0x11}, {&(0x7f0000003580)="dcd552a80cf03a01369b9e64760feceb4cea9dc04eadf24f0011eabe346d2a20ba5c9b7548679781d5283c9934173a998d6905b134350c7071c09fc5c7628a979135ee289c09783961a0d638e67c9cc8e6a14a4c6d975a6aee1d7fe2d49123b9bf22149b71bbc09613cd0e567b8dd09c56d6a8b70664430e401f7b6d6b6fa21a35b1340fe16326db54ebb31904989e9bc76ab61ec7b08382cb1b4082eb260a3e91041838dc", 0xa5}, {&(0x7f0000003640)="b9c4a8e973ece58bb7c2630265d7291ad8d38b01e4b7171d9c0091f21498bbf5e3478524cac9a65c5a355e58f9976b4c017127f53e9dd8b2af38fde95da05642b68be5d558ca6c4ebf00c7d52adc3a3492e18d074f812deba9c0c4ba82ae229e09190f5421b03d941c2dd718e8fab54a4421a040330c8e4dc362c639eea933f9f335af985688c40a1314da501e1d3b458d43e4cf69c00c60e98768425410fe6256c4136335ce2a97cec4dff111024632bc9d7ad0c292af2c8da8ddd6b95bb5af2350ea417e8b2ec63c5f6aefe00f0c07", 0xd0}], 0x7, &(0x7f00000037c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r6}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x110, 0x40011}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003900)="5cc2496bec543b83ce52ce00ff610ec610b2cc70dc2d7b4d9866bc11f12ac7508cbf7ce6efd86680fad492ee6176ca5c3f983afbeae59a10e4e73dcdc51c8e6dc9e405bba95afbe6ad7a1b6cf1a8f7bd88bcbacf758083dceff0202a2f0630cedf0c8067949acda3af6f3fca45949826ccdf544b9ef2126a9bf235aed9b5c096a650", 0x82}], 0x1, &(0x7f0000003b00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0, 0x4}}, {{&(0x7f0000003c00)=@abs={0x419abe7fb514cc41, 0x0, 0x4e23}, 0x6e, &(0x7f0000006300)=[{&(0x7f0000003c80)="69c65d0a251133915b9ebce35fd15b28dd2b702e96660129fec67bdcfc9309c67b19f8bbb9ee3d0e82a3f4f49a116cd32e5691647fe3797fe1efb6ac827c322fc7f33f29d6be65ec7d92eeb3b16bf1e2b6bd7599fbdf06e9e83fce855ce4689cb7b9eb6e261a816700a989c8646896dc1a430c555d45ba75e1cf1f7f8534345ca95a4d00b8ad681cdbf003c0983a", 0x8e}, {&(0x7f0000003d40)="b6a1e9c104a2d5a008a843ca6c1f470061ca39705811f1cfc7502e0d98b176543b8410fec6c2cc8ce5013382d7d8ec3fc610dc0a6c83ee0f9b8a2321286a768e4a5f083af3f0c0c4f95dd886c97bd56049025cacb6825b875af5845faa20732a274563bb3ebe792170d39e88f718b815e70757d6021ec886b128f70fc9341ecf8c8690d2d86a27a9c454ee416acdb002758b1ad18973b81a92f19755fd98c5092529f1c14d1dab0b4e45b9dc00110036d9ad0ed8fd218eb2f3290b8429b5815a8f8c16a62a916e360dc4ef44f847abd302aa978446", 0xd5}, {&(0x7f0000003e40)="65d41e1870d336315379a3e52041aa22fa446e8ebc4c07c8a94857374bb93c6503a59dc1641cf97c02170234b7a05484e3498739fd849a88cb7e400191f41214adf7a82650032c536b5b64f1ee96e54818b44626a01b92fa5b293d9b3f7b107637f56356921a26d51c39a8c47945f6f467c14b1f11b3815868067afa0b7d4fd5f2745ae558c19190c2de1ecf82fe9f949a7b73c7e7cbe9d19aa14ca013e25261249ae46b28ea4a01cf4dc4d101d419d3666de9f65ba8b7204d02621bd0ab2a6d0ada8b64751d8ae37c0ea8cfdc051639ea", 0xd1}, {&(0x7f0000004000)="325164e8261c585864fb4ca6f6fea65e4c8191258065e686e6f53bdf759d3fccf0b71e47b79ab127dabbed0cf3f124c1a02125d7433041fd857021364c42d1b122364e50290e3292232ec44e17efde80fb907a5d590dc83bb1ca9a2c1bb0281af493e3ecbc2cedc09aa41de67296faf32adf3b57fd65791f087add51e233548d8fecbae53fda827f7355968fd1e019aebd7c36d606b0868355b55de095b67b988beec480231cf2552d96", 0xaa}, {&(0x7f00000040c0)="275a8536608837f951c77e9ce11d587e363ec6049fc2f25bfb4f77e173ce66e4c9880b795e1f2455aa9f1362e06e3763581cbb44142a1111ab573155f0e4b55e8a8e1160d2360180553d550c907023cae36054e04b7ed4e6d8bb5f51378d702e6fa10dcaa67c8c2e8ad79716de1cbc7995869e760497792dd83ce8a4af7bed086cac08010f86abce476c8a910165b160e1328f8e50249a625e01ca703e8ab428e397ce49e73f747a1bcf80afce3a1293d0cbdf92fbc7530b68e6c65c3f7c8e55273451cf75ed7379d2d3175208da2bab61dbf33bd6b33d0194eac042784c4326004bc461c51d0e5fe2c0a2c01d7891d3406fd5fbc444df", 0xf7}, {&(0x7f0000006200)="d23c921a61863378dfb4856bc6972551a9f6811a03317f60570ad0e854b639535973aff5cb4f265d8fc930f32d4ebfec3d0dc7bce61b2bf028270c587b4d9345df8e7356a62dc7afaed66aea464aba70d1764ce44c76a9a9a0c5e22a9e08fa5048d25c66639824c8b91672dc40b305a73e5ef1cb28eca23688d8b477162e7b2aeb7a683f40575d00af89c10566c6f1a93dbdbe82e25af16208b1b82fd4ad31633d36bb6e708bec46a8ac1934a0a90b2eddd0867775f68b8eca20aed06691d374347bfc7431103a2f1761232047b9f1eeccbb981ef22b94f42409eebda40d2bf9add33f14ce1dcf22", 0xe8}], 0x6, &(0x7f000000a3c0)=[@rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4000}}], 0x4, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000001e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x11, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x16, r11}, 0xfffffffffffffea1) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000000c0)={@mcast2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x6, 0x100, 0x3, 0x80000102, r11}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000500)=ANY=[], 0x32600) 6m18.793721757s ago: executing program 3 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x500}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) 6m18.744338342s ago: executing program 3 (id=186): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000321, 0xc, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xe, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x4d}, 0x1, 0x0, 0x0, 0x240408a0}, 0xc890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000002000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 6m18.561389967s ago: executing program 3 (id=188): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0x40000000}, 0x0) 6m18.509270781s ago: executing program 3 (id=189): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xfffffd8c, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 27) 6m18.451867752s ago: executing program 3 (id=190): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000600)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711816000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) 6m17.388414028s ago: executing program 3 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000280)='\x00', 0x1}, {0x0}], 0x2, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}], 0x20}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x70, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1192}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) 6m15.641452951s ago: executing program 4 (id=211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f8000000160001000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000003200000000000000000000000000ffffac141429000300000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000035aee0ee611ecc0000000000000000000000000000000000004a0600000000000000000000000000000a000000000000000000000000fa88"], 0xf8}}, 0x0) 6m15.548700986s ago: executing program 4 (id=213): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0xffff7b6e, 0x4) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./bus\x00', 0x2, &(0x7f0000000d40)=ANY=[@ANYRES32], 0x1, 0x2f4, &(0x7f0000000d80)="$eJzs3L1rZFUUAPDzJvNJiqSwEsEpVrAxbLa1MCkiiKmUKfwADW4WlplhYQYGkhWHrfwbLPw/7OwFQfwPBAsrsXORwJX35jPzkWQXJruE36/J4dx73n3nvUdmYHj367e67YdP+o+efftH1OtZlA7iIJ5nsRulmEhjAQDcCc9Tin9e6vO9XNrUOQEAmzX3+V9ZM6W2nPpg06cFAGzQp599/vHh8fHRJ81mPaL7fSOyyP8OWqPxw0fxODpxGvdjJy5mvwWkFO88jUgffnR8FOVmbjfudYeDVl7Z/erX6dRqFPX7sRO7l+qLOK/fb47M1Q8HWfHNI8siHh/kJ/IgduKNufrfijgfP3qwoj5a1Xi3Pm4yX38vduL3b+JJdOJh8ZvGbP3vqtGIiH+ffpFPzuuz4aBVK+bNpK3bvjcAAAAAAAAAAAAAAAAAAAAAANxde82p3bjXzVOj/XdaWxfF+N6l8WJ/nVIxHvH3/IEW9gcapvhxsr/O/WazmbLRtOn+Po1yvFmO8itpGgAAAAAAAAAAAAAAAAAAAF4z/bPz9kmnc9rrn52XD0tRBNNMHjTGMzvLQ0vB+CX/6Wv9V07unPZqsXroYC7z9mjO9rrj1NavVVtosH3Sia1JO1nE4gH3f/myO83kTdyg5aVgUGlGrOmrCCpLmcbqyztcyPyXUkpZFvFC57MUVK67ldXrj7N99RL5Bf75h+332ifZddewPrlxP7Urs6Fq9PpnC/c0sqsXvbiUSTd4/G7WcnX8xNzoONsveVMmwft/jhYbZ7KVXaQsYpSpzA1VxkGse/zqL/Q8387/HwAAAAAAAAAAAAAAAAAAYGb0QnhEr79i8NmVpaWNnRQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LL+2Xn7pNM57c0FsZRZCIbx16h65ZyU0nCaqUav/6p7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O77PwAA//+QoV5s") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x208401, &(0x7f0000000440), 0x3, 0x572, &(0x7f00000006c0)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 6m14.488435211s ago: executing program 4 (id=217): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0xfe60, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 6m14.316875739s ago: executing program 4 (id=219): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2000048, &(0x7f0000000000), 0x1, 0x753, &(0x7f00000017c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setopts(0x4200, r0, 0x40058880000000, 0x100000) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x2, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000a00)={0x0, @bt={0x3, 0x7, 0x0, 0x2, 0x7f, 0x7, 0x100, 0x7, 0x6, 0x8001, 0x7799, 0x3, 0x8b, 0x9c6f, 0x8, 0x21, {0x3730}, 0x9, 0x4}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x7a8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x688, 0x2, [@TCA_BPF_ACT={0x684, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x120, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xe5, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437cedd6c47eeb235ad519ca418c057a0c2e2efdad1db459ffde7207d4b45"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x234, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @loopback, @rand_addr=0x64010100, 0xffffff00}}]}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x124, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x3, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x49, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd50dae93cd9061a328ed0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xe4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xa0, 0xb, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x6, 0x3, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x0, 0x37, 0x80000000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x965, 0x3, 0x6, 0x8, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x3, 0x1, 0x40, "2742528909000000ce0198666a0084feea0be6b8a80052d763e61f9d13f019e3"}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 6m13.181899602s ago: executing program 4 (id=222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x8, 0x830, 0x5, 0xffffffff}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8e3, 0x24fcdf45, 0xffffbb2f, 0x4, 0x2, 0x7}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d00000000000100eaffffff000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 6m12.312632009s ago: executing program 4 (id=225): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xfffffffeffffffff}, 0x2, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005b07e177ed"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000002000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 6m12.18166054s ago: executing program 33 (id=225): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xfffffffeffffffff}, 0x2, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005b07e177ed"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000002000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 6m2.324742807s ago: executing program 34 (id=195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r4, 0x0) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000280)='\x00', 0x1}, {0x0}], 0x2, &(0x7f00000003c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}], 0x20}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd8}}, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x70, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7fffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1192}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r7, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) 4m55.200320603s ago: executing program 0 (id=782): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r0, 0x560f, &(0x7f0000000000)) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f00000068c0)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=cp949,shortname=winnt,codepage=864,nonumtail=0,iocharset=cp85xlate=0,nonumtail=0,shortname=lower,uni_xlate=1,shortname=win95,shortname=win95,iocharset=iso8859-14,\x00\x00\x00\x00\x00\x00\x00'], 0x81, 0x29b, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, &(0x7f0000000280)=0x8) setresuid(0xee01, 0x0, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000000380)='./file1\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="020000000100040000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 4m54.260391996s ago: executing program 0 (id=790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400fff51000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000b0500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4m53.869039674s ago: executing program 0 (id=792): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x500, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000000000)={0x14}, 0x14) r1 = getgid() r2 = syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000080)='./file0\x00', 0x100010, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0xee01, @ANYBLOB="2c677278eaa29ccd663899f984d16964ff", @ANYRESDEC=r1, @ANYBLOB=',allow_other,allow_other,seclabel,fowner>', @ANYRESDEC, @ANYBLOB=',smackfstransmute=,\x00'], 0x1, 0x0, &(0x7f00000001c0)="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") syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x5, 0x1, 0x1}}, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x33, 0x0, 0x0, 0x0, "3e2804296306929bdb7884a5b6fd73c2b393131430b2f49db94ab1465cdad02efd28e81a2daf799c0c687114986ab72868523a324e280ecb423cfd355b92e957"}}}}, 0x0) openat(r2, &(0x7f00000002c0)='./file0\x00', 0x80, 0x40) 4m53.61763941s ago: executing program 0 (id=796): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000014c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001040)={[{@fat=@dmask={'dmask', 0x3d, 0xff}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@shortname_win95}, {@utf8no}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8no}]}, 0x7f, 0x2b4, &(0x7f0000001200)="$eJzs3c2KI1UUAOBT6Up3WoVk4UoEC3ThKszME3SQFgazUmqhGx2cHpAkDHQg4A9mZuVecOU7uPMBfAA3voELl4o7ZyGWJJXKf2cmkm5h5vs2dVL3nqpbh9s/BHLyyeuD3v2HwwePv/o1Go0kamdxFk+SaEUtKo8CAHiePCmK+LMoRaQ75x6vvEpr17w0AOCarP793+HoxpYEAFyzDz786L1Ot3v+fpY1IgbfjPIkymM53nkQn0U/LuJWNOPviGKujF+52z2PNMuqNwNGp5FHDD7+efa683vENP92NKO1nl+9o5BNxVuD8Sif3HlyrMdLSUSnSMopd6IZr0YU9ZhdpDy8e7d7fifbzI/8ON5+8/vZ+v+5iHY045dP42H04/70Eov8r29n2TvFd399WT5BHpGMR/nJdN5C4T8gAAAAAAAAAAAAAAAAAAAAAAAOpp3NtZb751TdANvt9fE0j/hjUOUv+gOdxbQ/0KzDz3ipv86tLMuqNj6jvB5lf580Xkuf0nAYAAAAAAAAAAAAAAAAAAAAXhDDz7/o3ev3Ly5Xgp+KSXC6c856kC6dqT7W//Ss7UHvh4j9s54liKPZ0vrJxi2SamiPC/54xdDJPgs73XbTqF1Vw7Qf5eK/3b8Ib+z7gM8etBZLrXZX714S88o/mlV3NauxfZMs7bpqG14Okz02ZLGldEdXZh0fqAjHL//X9NPYNjR54vq8mKtZjbVi1g/8k7ImOewvHgAAAAAAAAAAAAAAAAAAYMPiQ7/x28bg4/9lSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw4xbf/z8PorV+Zj0Yz5KnZ2q7J59cDrfctnXDjwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBz7t8AAAD//z5lUFw=") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) 4m53.566957371s ago: executing program 0 (id=797): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000003000000", @ANYRES32=0x0, @ANYBLOB="a181020020980000280012800b0001006d61637365630000180002800c0004000400000100c28000080005005a00000008000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x488d0}, 0x0) 4m53.461063633s ago: executing program 0 (id=799): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000010000000003000000611061000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000200)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, &(0x7f00000001c0)=[{&(0x7f00000000c0)={0x80, 0x10, 0x100, 0x70bd2c, 0x25dfdbff, "", [@nested={0x47, 0x55, 0x0, 0x1, [@typed={0x6, 0x6b, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0x10e, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="17488451ec508bf7176c4a11bbaa5d90116af39ebca7ad75754303d8a1341d6cd4d1cbf4a6ebd52374f50c8795005a1179edd8"]}, @generic="7ac4453c711179e5130eaf94c6fe01a4e86b99ce11755a4ef74e2181aa6f298984ff5172f5b9dbd8"]}, 0x80}, {&(0x7f0000000140)={0x68, 0x26, 0x2, 0x70bd28, 0x25dfdbfb, "", [@nested={0x56, 0x254, 0x0, 0x1, [@typed={0x10, 0xf6, 0x0, 0x0, @str='/dev/nullb0\x00'}, @generic="0abd43813c5a99270fe675e9b2a5549d7643c956cf3c8e6ad54c66c3d01abca8ce3958da20498b71b92b99ea600361a05ab071b29faf86003513acff687c6daadc15"]}]}, 0x68}], 0x2}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x32d52000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4m38.638001082s ago: executing program 35 (id=799): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000010000000003000000611061000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000200)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, &(0x7f00000001c0)=[{&(0x7f00000000c0)={0x80, 0x10, 0x100, 0x70bd2c, 0x25dfdbff, "", [@nested={0x47, 0x55, 0x0, 0x1, [@typed={0x6, 0x6b, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0x10e, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="17488451ec508bf7176c4a11bbaa5d90116af39ebca7ad75754303d8a1341d6cd4d1cbf4a6ebd52374f50c8795005a1179edd8"]}, @generic="7ac4453c711179e5130eaf94c6fe01a4e86b99ce11755a4ef74e2181aa6f298984ff5172f5b9dbd8"]}, 0x80}, {&(0x7f0000000140)={0x68, 0x26, 0x2, 0x70bd28, 0x25dfdbfb, "", [@nested={0x56, 0x254, 0x0, 0x1, [@typed={0x10, 0xf6, 0x0, 0x0, @str='/dev/nullb0\x00'}, @generic="0abd43813c5a99270fe675e9b2a5549d7643c956cf3c8e6ad54c66c3d01abca8ce3958da20498b71b92b99ea600361a05ab071b29faf86003513acff687c6daadc15"]}]}, 0x68}], 0x2}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x32d52000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4m18.344658752s ago: executing program 5 (id=1056): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xfffffffeffffffff}, 0x2, 0x6e6bc0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000010000000ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005b07e177ed"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200490087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) 4m18.276516042s ago: executing program 5 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) semop(0x0, &(0x7f00000000c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x2000000, @desc1}}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000002940)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/35, 0x23}, {&(0x7f0000001600)=""/183, 0xb7}, {&(0x7f00000016c0)=""/70, 0x46}, {&(0x7f0000001740)=""/74, 0x4a}, {&(0x7f00000017c0)=""/132, 0x84}, {&(0x7f0000001880)=""/89, 0x59}, {&(0x7f0000001900)=""/43, 0x2b}, {&(0x7f0000001940)=""/4096, 0x1000}], 0x9) sched_getaffinity(r3, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r7) r8 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) recvmmsg$unix(r7, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) 4m17.200839555s ago: executing program 5 (id=1066): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000100)={[{@rodir}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@nonumtail}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000380), 0x1, 0x590, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001700), 0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, 0x0, 0x0, &(0x7f000081b000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000e1000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffd6e, 0xfffffffffffffe48, 0x0, 0x0, 0x46, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000001300)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3004c8d1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x5, 0x1, [0x1]}, 0xa) 4m16.307520125s ago: executing program 5 (id=1073): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x7f) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xd}, &(0x7f00000002c0)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x6c, @private1, 0x8}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="901ec7b960241168696cbaea8c765524213142ba14840548d78821ac3a5ca62fe42d46506b0321f38882425191df755864508103e98ce6300739905823405a26cf1b711141b1f3731ed51103e9d5", 0x4e}], 0x1, &(0x7f0000000300)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @sndrcv={0x30, 0x84, 0x1, {0xf30f, 0x5447, 0x8207, 0x40000000, 0x4, 0x10001, 0x1000, 0x73, r1}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0xd8, 0x880}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x10, r3, 0x2000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20000880) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4m15.952238229s ago: executing program 5 (id=1077): r0 = socket$inet_udp(0x2, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x207, &(0x7f0000000000), 0x1, 0x471, &(0x7f0000000580)="$eJzs281vFOUfAPDv7G55h/bHD40gKopG4ktLCyoHL5qYeNDERA94rKUQZKGG1kRIY4sheDFREu7GxIuJf4EnT0Q9mXjFuyEhhgvoxTXDzizb7W7fdrtb3M8nGfo8u8/u8/3OzLPzzAwTQN86kP6TROyIiBsRMRgRhfoGW6tL2u7u7dmJv27PTiRRqbz7Z5J+LO7cnp3ImybZ3+3VSin9osLlJIaa9Dt94eKZ8XJ58nxWH5k5+9HI9IWLL54+O35q8tTkubFjx44eGX3l5bGXOpJnGtOdfZ9O7d/75vtX3544fvWDn7+vxlupXLt+eEEenTEQEbO1ddLomc521nM768pJqYeBsCqbI6KU7a03YjCKl3fV3huMNz7raXDAuqpUKpWx1m/PV4D/sCR6HQHQG/mBPj3/zZcuTT02hFuvVU+A0rzvZkv1nVJcytoMNJzfdtKBiDg+//fX6RIN11MAANbDj+n854Um87+hiIfr2u3K7g0NRcT/ImJ3RPw/IvZExENRbbslIh5ZZf8HGuqL5z+Fm2vLbGXS+d+r2b2thfO/2l2woWJW23kv/4Hk5Ony5OF0nZQiDsXA5rQ+2vTbk4j59O9vX7bqv37+ly5p//lcMIvjZmnzws+cGJ8ZbzvxzK1LEftKzfJPonQ/i9gbEfvW2Mfp577bv/CVYq20fP5L6MB9pso3Ec9Wt/98NOSfS5a+PzmyJcqTh0fyvWKxX3698k6r/tvKvwPS7b+t6f5fy38oqb9fO73oKzYt18eV3z9veU6z1v1/U/Legs4/GZ+ZOT8asSl5a/HrdRe483rePs3/0MHm43933F8Tj0ZEuhM/FhGPR8QTWexPRsRTEXFwifx/ev3pD9ee//pK859b1fZffaF45voPrfpf2fY/mlfuBbXc71/yT/XaxkoCbHf9AQAAwIOgEBE7IikM18qFwvBw9f/L74lthfLU9MzzJ6c+Pnei+ozAUAwU8itdg3XXQ0eza8N5fSyrz2X1I9l142vFrffqwxNT5RO9Th763PYW4z/1R7HX0QHrzvNa0L+Mf+hfax//fjngQbfMKC50Kw6g+xzFoX/Vjf+BvDDXo1iA7nL8h/5VG/9fraBx3eNejQ9vAg8ex3/oX8Y/9KV2nuvfEIX4NmLpNslGCXVVhS/a+XipCxFGYWOsqC4WxooRPQyjFCtsHBcqc2132utfJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74NwAA//+3Nu05") bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x10, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e001803010902"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r4, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x2000c004) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000001c0)={0xf5, 0x7ae36898, 0xf, 0x1}, 0x10) sendmsg$inet(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000003c0)="2d000000d3b0", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000024) 4m15.049241711s ago: executing program 5 (id=1085): getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4124010, 0xffffffffffffffff, 0x7fffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, r1, 0x762b3000) (async, rerun: 64) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffd}, 0xe) sendfile(r2, r4, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) (async, rerun: 64) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'c\xd8G\xcd2\xa4\xb7\xcb\x01\x93\xdd\xf2?\xed\xffK\x95'}, {0x20, '%[#{.'}, {0x20, '#! '}, {0x20, '$,+^'}]}, 0x2e) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x1, 0x5, 0x1}) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (rerun: 32) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) (async) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000002c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 32) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) (rerun: 32) prlimit64(r6, 0x7, &(0x7f0000000240)={0x200, 0xa926}, &(0x7f0000000280)) (async) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x555e}, 0x1c) 3m59.950969423s ago: executing program 36 (id=1085): getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4124010, 0xffffffffffffffff, 0x7fffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, r1, 0x762b3000) (async, rerun: 64) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 32) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffd}, 0xe) sendfile(r2, r4, 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) (async, rerun: 64) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'c\xd8G\xcd2\xa4\xb7\xcb\x01\x93\xdd\xf2?\xed\xffK\x95'}, {0x20, '%[#{.'}, {0x20, '#! '}, {0x20, '$,+^'}]}, 0x2e) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000040)={0x1, 0x5, 0x1}) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (rerun: 32) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) (async) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000002c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async, rerun: 32) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) (rerun: 32) prlimit64(r6, 0x7, &(0x7f0000000240)={0x200, 0xa926}, &(0x7f0000000280)) (async) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x555e}, 0x1c) 3m24.456468822s ago: executing program 8 (id=1426): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0x1, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x80003, 0x0) read$alg(r1, &(0x7f0000000100)=""/57, 0x39) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x7, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0x1, 0xfff}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x10, 0x80003, 0x0) (async) read$alg(r1, &(0x7f0000000100)=""/57, 0x39) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x7, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) 3m23.601036526s ago: executing program 8 (id=1432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) socket$inet(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000006000000010001000900000001000000", @ANYRES32, @ANYBLOB="bfa4e44813fa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000400)={{r1}, &(0x7f0000001780)=0x4, 0x0}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x6a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x8000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x10022, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100800000000007b019f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d533000000e00000010000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000027bd7000000a00000200000000000000000000005a001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000070000000000000003509fe8fd550bc7000004000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x158}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYRES16=r6], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x37}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x9) sendmsg$rds(0xffffffffffffffff, 0x0, 0x48800) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 3m22.789324464s ago: executing program 8 (id=1433): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000100)={[{@rodir}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@nonumtail}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000380), 0x1, 0x590, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, 0x0, 0x0, &(0x7f000081b000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000e1000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffd6e, 0xfffffffffffffe48, 0x0, 0x0, 0x46, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000001300)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3004c8d1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x5, 0x1, [0x1]}, 0xa) 3m21.89340083s ago: executing program 8 (id=1437): r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711026000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r1, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r1}}, 0x20) writev(r0, &(0x7f0000003a80)=[{&(0x7f0000000080)="60a37c55725a06e441eaac6a5cb832", 0xf}, {0x0}], 0x2) 3m21.813082068s ago: executing program 8 (id=1440): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000003c0)={{r0}, "1b54d5a551a797ef1f53139137b5fa52c2d4b5d163590ebb22ec8ad922bab7cc068deb3414bdb270b1ea539538bf402cbc5bbc0f00a15a2b00a33eaf6fc3f0e6b905222260965a295b71ec09e72b10f3753636850835e8e606f9ae43756d035b8f7e0b585a33c5d2ba8c08cf6563b7908f74470aa1cada11a6b34fbc9235f5163dbb0465090f24551f9580edfb65e0a9c7127c58c08a8ac488bc9c49dbbf29a82bc295a6b900ab841813f8021bf7c98d1fe12dc1298ef3ac20c615309c2566ce484e682faf990a13b5c4e037fc551c9b801cde50f7070674aad679c73dba510456500caa5bad424e598b52acec114ab774e3ca3502dbd587851636d1194a853bc89701cd7aeb5b610e121d4290deddf98c58d9d0431c8c502a1be180881a5d8c8fb2143fc066da8c587523f4ee2f9d2659994d5384b9ad80bf0d40f7437041436b5bc9784ceaf22d8e2df3f568fe3e05df3da1945b834c3e2a03abd018dbdbc411b1f5c860f421599de90bbe958c4aae7d1d68df37e19b0063cb481e7e6409ad85b089034dfb9ec104f82352367e1ed24d064573bc011e2f28368afb46a1b20efe3dee88f9ba07f00121915b43fa93b883dce1d0f43a96f553398324607c9be1aec056a2e945f3eb6308e9c0140702e4d6157dedee6bc3650fb472767a2edf4e51c1095ab435af42c9da0cc295de628ca6d94099c119a909bac2edc1a8da1311efab3b5bf118fe8c37e2ed4f0a228d18a5bf22437aabc7010bf91bd210bf942039ede31690346f2d1726f09610ad0fd504f2f57a0af105f7aaf3f3da1fc61b17fcc4970d5e3925bc54d3e96f4c66c9a428a73de1f46f68eb19ce2027cde59c5a5ab5e3f23bf3736b913d94e385132d9d98c78258226fb0434527c22d794c59503b69517c9cea514debb66081debe91c50842bf89a4a7279e6442a793152764d8d77029a609162b7aa1144072265694274434c3f7bde1a10deaaf6406c9475522368f353b03b90c50815b09e987180c2b55f6cbf86cc356999fb3c57cf60a1d409fdb7b87fc13c1e3fa8fa16ddc5bd7a760cd1acae53ffa37ff6523e782be868e4f3c7ff9996c9ec21cb2c408b8716732f21d6d64eae5c41f534d138a7570f0d6660eefd1dd84be7dc6ec3117282c5b153c183ddb1e97a9190391ee2d5161b26525109d50274d3f5f83fc9fe0ec697d8ffac7f999e833c1abd38ba403bad2a1913c2975b7cd4fd077fd3711b105aade28b23385270fc8449d8673bd1cfde29fbd4fad0642bffcfb08b9691cb05c1773b2e988bcd6364a6b115a2bada4f21f01fd21d2bb0c7396d5b5cc58381092542c44167804842a5655557d4ce5584d011ba6d839fd24ecde3a3ef7f56ef99313f5d33f9e6e6d1c9eba6f1cca7a874e91c592dcdef919f30b845a92c206fcfa14dc6a46e54e37891a42e91a858be80e8e69d5e54e551385ed2ffb5890c167e21576096b300c74343062f1fca0d62485545316f349bf56aaded028283d0d27917754c7ece4fbdd3da1e9cd323862ac45087aacd74673f210cdda72f40f53830bb4ee593f65aa5e6ad056f92170be48baff7b6d3b3623ebb2e7c0f88ec0dbaf2547ea47515e6def629550dc70190a21719acb1815954a165c7ff55bc47709ceca0cb8a4af45271033c4f3a6fcac433b77772e707680961a0f5c07bfe4439bfa0abcc429a55eb3af7bdc82ef84ec7f05f62eae87f9f96b40789ec1e692122f6a6b7b9eb46d5b921f939c228066b922e746ec63303c911b0b576eeba5267c4c5945df57ced59b689dc11ba9e99d3a561c235fecb4db6f8b584eb495e3fe5af7b13fa3b5ae0aa84613f426fa19abbd978bae3838ad99a06c102e4080e34d05895e3d927fa80cbe412c1a017870dceeb90331afb8f4a2676cf7f0fe84e45dd4a63f071dafdb7af11058310a04dad817f7d64192423d95bf5f43cb099373ace57976ba22316d8ba89a0dd176071346a14b501f151e515540304a73211216c8a131324eccb00830537068ad0599f8edb2a45a307d72deb54c964e5d732376a39c8d2fa5f4072837701a7e4ed008da4b894656cdac4d00531a1581fe4c538026959e84b0d55761ba7f217b08bc3b4859502e2d4d0b38ee61739e511c8ea5dbe9836a7fffba9e4db9f9675255c27f46d1d3213f7847dd78a090a8db3497d07641d54ae8704fa4022ddff4b6aea30a1230e3b345b35a498ee807cc32f22f65f20e19b62a9ea30b784c070d88aee8b09caec78cd7ef02245c8705d835379f5c0a32e2eab4180e1afed9f09ff51232e89f6ae8bcb4cd71f29429d005954660065c6a997edaebb89cad6da23393732dfa8f13830afeca0d3925b64bff45eca19e2f5153c8ddc874dd0a35501d6eeb5def454f2b4d773bc979874ea345813588778d084136b00f1ed6b1435fab011fb36d44e761e4482f2062435f5a5ccc660ec9969b26386b9db7f39e5fc10978164f28c39930b70f1f7bed6df705967dfafd1800bf621ff93a05afe8348884d2161035a1882cbfe1f72d2a15cd4f1377ae5c8263896cce2bfb3d7082d6544024b7b6865563c0db40171fd79efc99206c546f899c245f4d1fc0520eb7ea7b275fcf15afccac3101fd1702d4480a671264f79a8dd619fb21d2b747d1f9f8efa29950e188f94488ff0d1405c2f56e6549edaaa716e6f9619afc588320fd3d70e3f9bc417ab11902242d122465354dd9b261d3f41147949ce147914ab645e4f878194664117a1e0a57fa8c80687f72a1480e6c70414c19f56a5594eaa4f4795ffc778c3a624fa4ff177742515b6b70a3a2760ab226192960d79e6b618eeeecf9682d436d220f37e7765881bc0849de900c7d992966f165cb6306dccf831ec1686d448294f605b364bd5076ade36435cad7e1453987d83e165c64d6fe566185e8ce6147b737cdecd0c29bd7493ec49debd53e700b37acea01458b156f80921e1d14292890b8e3ed538d9b2af941702b88cd44ee74f0984f16b000b7b5508d4172ba682776e15eaa3a3a991994bf718aa0cbd7312157cacf8e716f5db907f0d5621bf791b4b946c9ada64d56a212080509a2d629213388cad02dc3d01e9cb23d5b62614a8490bf0f2174d14ab5a63d4bbc2dafb9a26e445d08bf7009a77e417011975a405410ac35d6aa37c7877fcec47ef442d79296cde923d90330dffec90ea43616a304423a9d345fa1aca4864539ec3f54cfe29d736300c43ecd5ec73e99fcfef8da886eb51cb3429ecf5656d2c207e9a3ccfa21fe47e915cc6e4d5f27c3e1cbf695b27d6e39225e8c853942b5bbe2b53470104dd2f3253c6053cbe79d85a764eb8e98cfd0dda211640703dc7797b59b0f27409177450d4dc7a0dae275f9af5ae354231679c50ef8a72de1ca1edc55e969c5aada6bcb786536d78a1795c6cac4828db776ba8baacf888e34570489f5cf70671a50dea617cc679f6559fc842c6972ebd9eddfbacbce45c6a466a61950c059fcd75aaabb30f32b191baf9e2ded567e91419bb2cd5c16d375cc9ceda6baff4101573a0a0ecfd202bbe784bc3fa878b0835143b0d00e51ec2796144ca2c0060a0ab54cd7d67f7cf0ec62e96a3db10685b8e15dbb7ebafb51be35de39dfe10a6b681cd587ab8608d689744ad031be7e75dd2e4ac5fe5e61581ecab9d0ca6657d5a9bccca7ce10c1c9ed14272eaf240ff8a1921f84b96a7dbd1d5b14c62e9124fd14f489349b40a8ee348b219de004f91ea31d4644dc035dc375843e173fd090a01ddbfb548f2273cfa684435006aab73020fc78c73b8e133d7f154eb4819b09348ec46461bcd136e5f70fc676229e1ff8011ffd3e3233b2f760e0d58485517057e6dc723df66acc85fa1632a818d4b9e8d0dd3604e4f5ca0cbfd88d3a3ff8c5879fe80c6b413fcc738d7dbc7150c2b190f5bb9d04b7b51d29a5cdf089c6e27ea1d2b6da0e81fdd2210ac44852a80421508e9b755cf84a51c6a693a034276a61bf272726bac43d2b04f83d774f4b763c4bc079c90a5d56becf5d09430e4e2601560874fc34e9d86191371c94c774007dfbdaebf669dc2db26d6d7359611bee78dfdb3e0583857ea84a1ce49aaec32c89ff8682aaa6e8dede78448b5de4a5c9a8c619c51b8d2df1d0cc10d4ab02f80bc725539a4a3476eeaff908e939ff32bcde27416dcf6cec77ef670867b3d45be58797cd5d954104ce353de8d4875e2bbdae46389297434b7ffb52d14256ce33df35c57bfc55384bee12fa67c5340ffd023d7e92aa48027c4a2ba197d76e5304047b523e16a3971511c85ba8e58145671f3319aa469a431b841cbc8efec974b62f54697ac09694da504298c6716b62a2685e1e28e845308deb766ae25632cd227de8f200c3daf417da11a0d0952a1e094ab83da2fb83d7da2f5879b7e2c682b7c6d685a84b25cc423bc489274c6936877b0b87b027c3cde8581e9ecf57de9613217331c138f9833e80cf6780fb1d7990cd97f21c5c0a562cf1b468ed8e5b8fa3233f85f5638b1aec8f49ee97c9a4766950e170e21f42184537b79c0d3018e92342b480b961f289d66a350cc21d2de1667fe39b8c57923181acbc6ac90a72676225db52647fd77447a94270d7105a969fc48052a17751e55bbfbeb97eaa153bb9b4325e7b0a7283919088abb6e68bf0ef0e380917a37860684cf6c06b6f5ba4e386173538a884cc77cd7b7d9d64834fc627873a45ecfd8cffa6d63daff91984365b502efb5fec2a2658f835426f9071c5e70588db0d2e1c33e34d9e1e8c077ae1bbdaadf940ff3a8cf758fd46a76b8c653567a93b8359a7c9145dce4d6f9e113ba9cb99232684bb17391fc4316f8c060174e09b59e7f3bdc16984c8a4f84b69f0cc19576be56768acebc11271319da9b5a47a47faf19774f24e20800b2b901977e64cbc5cd8891f46f7a42510679233d79c2190bebfe477077fb552f15dcbf00df07f6a1e36fd7a0f602500f527ee17310becf517800d056518755344831253a166ead3edebabc8d30ab8c7a2b7aa48f798db73cb4b765efb80f791126abbe7d576a50667ade47c2e9e8ade94f2cd876191cd50c7d0ecd04b72204cc0f433b62efbec03379b25497a12a03d03e408168674dae3d94461697551fa900db1c39575413a449e7fa5442dfb3ff683a0d26e9914d485f393831abfa9b4e7fc101c22bcb99fe269d21833f70cad2340b9d2417a99c7f382695611a78da4011a633caf83e966e05e33db0a98d20a555dcf1654b3a90abb53efbc4197056478f437b4546f8c2922931fbddaafb6d748cd75621894826efde31fa572776496747deefda5544bcee2c8b84222f8d7e6354d0fd65bbea5e39bc7298d2a6bc4c8128f50b6913b7091e158a29af994af070d1de9f97ba483d7ccf32f03f0ff8ba6c6f7baa0cd8aac1895d4bed44dc9318dbaae3f4b2167b912325df9df6529ea0853e9075a30ad3de331cf9f44347a8ee3f75d1a8ad27baf4d8d7a8881800838cb1ee81920c2cab9d256ee4bc8f2fafdfdb17698a1b2a3ae4b52e716df0e9023bbaa65df44b5f5b1490d2e785ffbe73a26524b7f5fe24a44f3e4cf675e17dacd4a5d1d593d089dcbc8c2536e947c699fc3e671aad50297897242ee8d500eeee67028e26449f8108e5603fb52294838f003ab2060c4198ad73565a5ecc687ee0c8525b86b869dc15f1c912367dbbdac9729c8e309f4fe1934e628cabb76038b7da08b2d9878c727d7fd4e802e9139152cd63a442df96c36b5b78bd3f0168c47b5301338ae027161f03f33a57c4e4a"}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() fstat(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r3, &(0x7f0000001440)={0x9, 0x7fff, 0x1, 0x5}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800004}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(r5, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 3m20.625319468s ago: executing program 8 (id=1444): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'BLXRX\x10\xd15\x9c\xb60\xc0\x9f\x04\xb2f\x86\x85\x8f\x10\r\xb8\xc8\x12\x19\xbe\xe8\x89\xed:\x11\xc8\x86\x82\x9avV\xd6\n\x96\xf2\x8dgB\x1e?\x0e\xa4\x80\'\xe78\xce_L\xa2\x8b7~\xd8\xa3%Q*\xad\xc2g\x97^\xb1\x10\x1fE\xd3E1\x1e\xf8*\\i6\xe1\xab\xe6\"t\xf4\x8c\'Q\xd6\x9eCjqXt\x8f\xf9\xe2.rQ\xc7\xdcBB\xb9\x8e\xdd\xa3_>s\x98\xe6+\x83\xd9z#\x80\x14\xb4\xf2H\a\x1d\xbd\xd3\x8b\x8c_\x02\xe3\x84Y8\x1c\xe7\x06\xc4_\xd2\tF\x03\xe6Y\x025v\x81>\xdeG]\xdb\x91\x00\xa0\xd1\xe7S\xa1\x02\xfc'}]}, 0xb4) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r1, &(0x7f0000000040)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0xf07, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x20000404}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0xdffffff6}}], 0x18}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0xff00}, {&(0x7f00000001c0)="31020002", 0x12}, {&(0x7f0000000140)="683f0057954e8374745129caea99bc671e3d", 0x12}, {&(0x7f0000000240)="a492e95857d9dad0c70b72425db11aaf3ffd93dad703501bc83d", 0x1a}], 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x3) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 3m20.473515288s ago: executing program 37 (id=1444): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'BLXRX\x10\xd15\x9c\xb60\xc0\x9f\x04\xb2f\x86\x85\x8f\x10\r\xb8\xc8\x12\x19\xbe\xe8\x89\xed:\x11\xc8\x86\x82\x9avV\xd6\n\x96\xf2\x8dgB\x1e?\x0e\xa4\x80\'\xe78\xce_L\xa2\x8b7~\xd8\xa3%Q*\xad\xc2g\x97^\xb1\x10\x1fE\xd3E1\x1e\xf8*\\i6\xe1\xab\xe6\"t\xf4\x8c\'Q\xd6\x9eCjqXt\x8f\xf9\xe2.rQ\xc7\xdcBB\xb9\x8e\xdd\xa3_>s\x98\xe6+\x83\xd9z#\x80\x14\xb4\xf2H\a\x1d\xbd\xd3\x8b\x8c_\x02\xe3\x84Y8\x1c\xe7\x06\xc4_\xd2\tF\x03\xe6Y\x025v\x81>\xdeG]\xdb\x91\x00\xa0\xd1\xe7S\xa1\x02\xfc'}]}, 0xb4) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r1, &(0x7f0000000040)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0xf07, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x20000404}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0xdffffff6}}], 0x18}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0xff00}, {&(0x7f00000001c0)="31020002", 0x12}, {&(0x7f0000000140)="683f0057954e8374745129caea99bc671e3d", 0x12}, {&(0x7f0000000240)="a492e95857d9dad0c70b72425db11aaf3ffd93dad703501bc83d", 0x1a}], 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r0], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x3) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) 5.491693061s ago: executing program 7 (id=1564): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x44102) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000280)=0x8) setresuid(0xee01, 0x0, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000008d777686d9e099d9419f7da334dfff0010000000"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @loopback, 0x3}, 0x1c) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24004000) r8 = socket$inet6(0xa, 0x80001, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x1}}, {{0xa, 0x4e1e, 0x0, @empty, 0x8}}}, 0x108) 4.077255871s ago: executing program 7 (id=1579): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='westwood', 0x8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) lseek(r2, 0x9, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, 0x0) getsockopt$netlink(r6, 0x10e, 0xa, 0x0, &(0x7f0000001280)) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000d39d1a223b"], 0x50) 4.070550385s ago: executing program 9 (id=1582): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000000c0)=ANY=[]) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000440)='fuse\x00', 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800001, &(0x7f0000000c00)=ANY=[@ANYRES64=r6], 0x6, 0x2c9, &(0x7f0000000e80)="$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") ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x4745504d, 0x9, 0xb, [{0xfffffffe}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x6}], 0x0, 0x0, 0x0, 0x1, 0x5}}) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES64=r5, @ANYRES32=r4, @ANYBLOB="d2b14c455a438639e7d8b0907e5aa0bb83", @ANYRES16, @ANYRESOCT=r2], 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) recvmsg$can_j1939(r8, &(0x7f0000000800)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/77, 0x4d}, {&(0x7f0000000740)=""/94, 0x5e}], 0x2}, 0x12041) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='s\xf9d', &(0x7f0000000580)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x700, 0x700, 0x7, 0x2c, {{0x5, 0x4, 0x3, 0xc, 0x14, 0x67, 0x0, 0xd0, 0x2d, 0x0, @remote, @remote}}}}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000001010217000000000000005303663e0800140a00000008"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44804) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x20080814}, 0x4008094) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="c8000000180002002abd7000fcdbdf25020000f9ff02c8070002000008000100000000008c000880d352082b412e43a770a8c25cd341a918c3171f38030018689104a5747aa9b5455b862e018f5edcb9c8b0615d65d32c5da6b692738e285165cf88d1332da67f0eb7a0aac89b144a6eb6df87191eecb9b950f90ee7659dc30cf76f96af9f2a8e86a08e9896109560c853e1e2042fc0d600068eae37a0a115ac75e96c55ace883fb7441e2eed7c4c24d080002006401010108000400", @ANYRES32=r10, @ANYBLOB="02000300", @ANYRES32=r11, @ANYBLOB], 0xc8}}, 0x54) 3.945282478s ago: executing program 9 (id=1584): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8a) unshare(0x22020600) readlinkat(0xffffffffffffffff, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)=""/42, 0x2a) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000100)={0x0, 0x20, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer=suatic:0']) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000340)=@v3={0x3000000, [{0x267, 0x2}, {0x7, 0x7ff}], r2}, 0x18, 0x0) 3.91745328s ago: executing program 9 (id=1585): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa3000000000000070300"], 0x0}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 3.824117009s ago: executing program 9 (id=1586): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x3b, [0x7ffe, 0xc95a, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x7, 0x9, 0x63, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x0, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x170, 0xd, 0x80003d, 0x8f, 0x6, 0x10000006, 0xfffffc00, 0x5, 0x4, 0x8, 0x0, 0x20002, 0xffffffff, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x5, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x0, 0x0, 0x4, 0x5, 0x0, 0xe, 0xfa, 0x74, 0xea4, 0x0, 0xfffffff7, 0x5, 0x8000, 0x3, 0x400, 0x0, 0x6, 0x7, 0xff, 0x5, 0x5, 0x800, 0x4, 0x0, 0x0, 0x100002, 0xa, 0x4, 0x6, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x3, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x1, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800002, 0x200, 0x80, 0xf, 0x2, 0x9b8, 0x8d8d, 0xa2, 0x7, 0x53cf697b, 0x4, 0x65, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x7, 0xffffffff, 0x80000004, 0x8, 0x8, 0x5, 0xee1, 0xfffff000, 0xfffe, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x101, 0x6c1b, 0x9, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) pwritev(r0, &(0x7f0000000540)=[{0x0}], 0x1, 0x4, 0x3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}}) r1 = syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0xc3b0, 0x800, 0x1, 0x82}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x3f}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r1, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 3.687044361s ago: executing program 9 (id=1587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 3.05357324s ago: executing program 1 (id=1595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x0) close_range(r0, r0, 0x2) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x31, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001600)={{r3, &(0x7f0000000500)='wlan0\x00', 0x244002, &(0x7f0000000540)={@_ha_fsid={[0xe9e, 0xc]}, {0x12c5, 0x4, 0x123c000, 0x3}}, 0x6, &(0x7f0000000580), &(0x7f00000005c0)=0x4}, {[0x3, 0x80000001, 0x8]}, 0x3, 0x1000, &(0x7f0000000600)=""/4096}) r7 = openat(r6, &(0x7f0000001680)='./file1\x00', 0x40001, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f00000016c0)={@broadcast, @loopback}, &(0x7f0000001700)=0xc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) ioctl$RTC_PIE_ON(r7, 0x7005) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000001740)={0x2, 0x6, 0x4, 0x9, 0x5}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r7, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)='%pi6 \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000001a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x18, 0x13, &(0x7f0000001880)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xd2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @ldst={0x2, 0x3, 0x4, 0x1, 0x8, 0x40, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0xf8, 0x5, 0x4, 0x762, 0xffff6bbb}, @map_val={0x18, 0x5, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000001940)='syzkaller\x00', 0x8, 0x5e, &(0x7f0000001980)=""/94, 0x41100, 0x4, '\x00', r4, 0x0, r9, 0x8, &(0x7f0000001a40)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001a80)={0x5, 0xe, 0x100, 0x101}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001ac0)=[{0x5, 0x3, 0x8, 0x3}], 0x10, 0x4e72}, 0x94) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000001bc0)) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000001c80)={&(0x7f0000001c00)=[{0x1, 0xfffffbff, 0x1}, {0x6, 0xe1}, {0x5, 0x3, 0x1}, {0x1, 0x8000}, {0x8, 0x2, 0x2}], 0x5, 0x10, 0x80, 0x4}) sendmsg$key(r9, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x2, 0x18, 0x2, 0x2, 0xf, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_address={0x5, 0x7, 0x33, 0x100, 0x0, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xfffffffc}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x7fffffff, {0x6, 0x2b, 0x80, 0x40, 0x0, 0x4, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in=@dev={0xac, 0x14, 0x14, 0x1d}}}]}, 0x78}}, 0x800) sendmsg$NFT_BATCH(r7, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0xb4, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}]}, @NFTA_CHAIN_USERDATA={0xf, 0xc, "6f96e61bde3c8a2bf3679e"}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14}}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x4064) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000002180)={{r9, &(0x7f0000002000)='wlan0\x00', 0xc8440, &(0x7f0000002040)={@align, {0x7f, 0x2, 0x2, 0x3f}}, 0xa, &(0x7f0000002080), &(0x7f00000020c0)=0x5}, {[0xffff, 0x8, 0x8, 0x401]}, 0x400, 0x4b, &(0x7f0000002100)=""/75}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r11, 0x7c80, 0x0) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) setsockopt$inet6_int(r6, 0x29, 0x13, &(0x7f0000002200)=0x2, 0x4) ioctl$PPPIOCGIDLE(r9, 0x8010743f, &(0x7f0000002240)) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000002280)={0xa83f, r7, 0x80000}) getsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f00000022c0)={0x0, 0x5, 0xa, 0x9}, &(0x7f0000002300)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f0000002340)={0x1, 0x2, 0x202, 0xb0f5, 0xb2cf, 0x13cc59ae, 0x2, 0x4, r13}, &(0x7f0000002380)=0x20) 2.935826472s ago: executing program 1 (id=1597): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r1, 0xffffffffffffffff, 0x0) 2.82346578s ago: executing program 1 (id=1599): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa3000000000000070300"], 0x0}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 2.820402552s ago: executing program 7 (id=1600): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000f00), 0x1, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) sendto$inet(r5, &(0x7f0000000180), 0x0, 0x4884, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in6=@empty, 0x0, 0x8, 0x4e23, 0x3, 0xa, 0x50, 0x40, 0x3c}, {0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x6, 0x0, 0xe}, {0x0, 0xfffffffffffffffe, 0x101}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x0, 0x6c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r8, 0x80046402, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r7, 0x40046411, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x2, r10, r2}) 2.71264281s ago: executing program 7 (id=1601): prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40203, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r1, r0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\xd4\x9b'}, {0x20, '\x00\x00\x00\x00\x00\x00'}, {0x20, '/dev/iommu\x00'}], 0xa, "c702b13228da90372b3129a12291de960fbfd9f7b18e2f08b3f5cfe9dab5d7ee2c7e7ecd79dd9da6e6ccb33ce82a966163b35be87e86928aa6860014471d91052df3e52e7a64210be413269fb864bf5fc1beea7a2a4569e0412639bfbaee3c1cefe6eeab7692fea364f13e390d038d0633cf5259326ae3bf"}, 0x99) 2.711907809s ago: executing program 1 (id=1602): r0 = socket(0xa, 0x3, 0xff) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x3e4000}, {0x0, 0x0, 0x3e0000}], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90080) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f0000000540)={r3, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364987808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a7fcffc8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000440)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x5, 0x9}, 0x8) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x3}, 0x8) socket(0x5, 0xa, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) flistxattr(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) 2.21544684s ago: executing program 7 (id=1605): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") chdir(&(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x220000, 0x0, 0xfc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) 2.050885545s ago: executing program 6 (id=1608): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x7, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1805000008000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0xf0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x46, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xc08}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0xc840) 1.707731206s ago: executing program 1 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r1, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x5f7a011bf13b8d97}, 0x41) r2 = socket$inet6(0xa, 0x1, 0x40004) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x6, 0xb93, 0x4}) recvmsg$inet_nvme(r3, &(0x7f00000003c0)={&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f00000001c0)=""/237, 0xed}, {&(0x7f00000002c0)=""/56, 0x38}], 0x3, &(0x7f0000000340)=""/126, 0x7e}, 0x100) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) 1.707410038s ago: executing program 2 (id=1610): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) 1.685561257s ago: executing program 1 (id=1611): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x208401, &(0x7f0000000440), 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') 1.64123752s ago: executing program 6 (id=1612): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() fstat(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, r3, &(0x7f0000001440)={0x9, 0x7fff, 0x1, 0x5}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2000000a}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 1.593092515s ago: executing program 2 (id=1613): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f0000000100)={[{@rodir}, {@shortname_mixed}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@nonumtail}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000380), 0x1, 0x590, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001700), 0xffffffffffffffff) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, 0x0, 0x0, &(0x7f000081b000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000e1000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffd6e, 0xfffffffffffffe48, 0x0, 0x0, 0x46, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f0000001300)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3004c8d1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x5, 0x1, [0x1]}, 0xa) 1.584462934s ago: executing program 6 (id=1614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000340)=@un=@abs, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/23, 0x17}, {&(0x7f0000000400)=""/4, 0x4}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000880)=""/161, 0xa1}, {&(0x7f0000000700)=""/48, 0x30}], 0x7, &(0x7f00000007c0)=""/124, 0x7c}, 0x9}], 0x1, 0x2, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000640)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@dax_always}, {@nodelalloc}, {@norecovery}, {@data_journal}, {@usrquota}, {@noinit_itable}]}, 0x1, 0xbdb, &(0x7f00000023c0)="$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") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000240)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) (async) pwrite64(r3, &(0x7f00000002c0)="00000400e8514798c55b5f96faab7bf6f8d63969b676a6f011d1be751e7cc263e638dc20c3fb89bfaabce86d4a0327960000b486bd14bd35fca536dc3ff4ffef4d19cacc27672931165d850a00", 0x4d, 0x8008084c61) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.345453597s ago: executing program 6 (id=1615): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, 0x0, 0x4800) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="9feb010018000000000000005c0000005c00000005000000000000000400000d0000000010000000d00500000e00000002000000030000000200000009000000050000000400000000000010020000000000000000006452000000000100000002100000ffff0000050000000000000700000000005f611000"], &(0x7f0000001300)=""/160, 0x79, 0xa0, 0x0, 0x1, 0x10000}, 0x28) 1.325426518s ago: executing program 7 (id=1616): syz_open_dev$evdev(&(0x7f0000004ac0), 0x2, 0x100) syz_open_dev$usbfs(&(0x7f00000021c0), 0x90f7, 0x121080) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/13], 0x48) fchdir(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) 745.161259ms ago: executing program 2 (id=1617): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080)="cbd8af7d", &(0x7f0000000140)=@udp=r2, 0x1}, 0x20) 649.403929ms ago: executing program 2 (id=1618): r0 = socket(0x10, 0x803, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x5000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 633.996724ms ago: executing program 2 (id=1619): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x500) 590.137205ms ago: executing program 2 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket(0x2c, 0x3, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC=r2, @ANYRES8=r2, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$eJzs3UFrE1sUwPHTpq9JU9rkwePBe6AedKOb0MYPoEFaEANKbURdCFM70ZAxKTOhEhGTjbj1cxSX7gT1C3Qjbty7K4LgpgtxpDOTdtImTdqmSWr/Pyhz7px7uLdNWk4GZrpx9/WTYt5J5Y2KjMZURkXqsimS3IoCI8Fx1IvHJawulyZ/fDlz+979G5lsdm5BdT6zeDmtqtPn3j99/ub8x8rknbfT76Kynnyw8T39dX18/b+NX4uPC44WHC2VK2roUrlcMZYsU5cLTjGlessyDcfUQskx7aZ83iqvrFTVKC1PxVds03HUKFW1aFa1UtaKXVXjkVEoaSqV0qm4nG5jXczJrS0sGJm2aTfS0x3h2E20OmnbmXrrZG6tD3sCAABDZv/+3+/12/X/O93hQfr/fzv3/yLh/j8WLEL/3wP1plGH/h8nU615aNsZIx78/jaj/wcAAAAAAAAAAAAAAAAAAAAA4CTYdN2E67qJrWNwyhtHRSTm3wLujQe8TRyT8Ovvhr62X/9gvKvsyoC2ix4L3bgXE7FereZWc/7Rz2fyUhBLTJmRhPz03g8BP56/np2bUU9SPli1oL62motItFHfkGxVf/bvWb9em+v/knh4/bQk5J/W66db1o/LxQuh+pQk5NNDKYsly977eqf+xazqtZvZXfUT3jwAAAAAAP4EKd225/O7l/cmxGRv3q8PXR9wXbe23/WBXZ+vx+T/bh5RCQAAAAAAjsypPisalmXahwiiItJ5sjtyhCUOFriuSL/Wah9EZJCrtwuuisgQbKNfQUxE/DN6mPJv2+VdVbldzBkL/gPHcPx8OgeD/ssEAAAAoNd2mv4DFH1+eYw7AgAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9On2eWCN+XtSjcQ+5aHlIn3/BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAh8jsAAP//QNEWCQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 396.327919ms ago: executing program 6 (id=1621): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0xe939, r1, 0x80000}) r3 = memfd_secret(0x80000) timerfd_gettime(r3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r2}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x100000000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r4, 0x1000004, 0x0) 33.205087ms ago: executing program 6 (id=1622): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x1, 0x6}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_io_need_get_data_sqe={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x3, 0xc3a, 0xc86, 0x0}}) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040000}, 0x40080) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x2, 0x0, 0x1, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@generic={0x7, 0x2}, @timestamp_addr={0x44, 0xc, 0xc, 0x1, 0xf, [{@local, 0x8001}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 9 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900070073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e300000000000000000000000140000001100010000000000000000000000000aa645ca36bee6f4b33f84bcb77c0207e60cc79cdf7c9de59b4512fbab274aee329a9bbfa97322b639e321b145172eeb64f5624e09e42b94cabb28fb7c64db3832699ad0a4289dfe8e1ddc7e11ffbc0987d30ba81934"], 0xa4}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0xccce, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_clone3(&(0x7f0000000700)={0x2000, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), {0xa}, &(0x7f0000000400)=""/83, 0x53, &(0x7f00000005c0)=""/239, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000780)=r6) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x6, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) kernel console output (not intermixed with test programs): 2 Tainted: G L syzkaller #0 PREEMPT [ 144.815306][ T8200] Tainted: [L]=SOFTLOCKUP [ 144.815310][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 144.815315][ T8200] Call trace: [ 144.815318][ T8200] show_stack+0x2c/0x3c (C) [ 144.815343][ T8200] __dump_stack+0x30/0x40 [ 144.815355][ T8200] dump_stack_lvl+0xd8/0x12c [ 144.815366][ T8200] dump_stack+0x1c/0x28 [ 144.815375][ T8200] should_fail_ex+0x41c/0x590 [ 144.815386][ T8200] should_fail+0x14/0x24 [ 144.815393][ T8200] should_fail_usercopy+0x20/0x30 [ 144.815403][ T8200] simple_read_from_buffer+0xc4/0x238 [ 144.815412][ T8200] proc_fail_nth_read+0x1a8/0x248 [ 144.815420][ T8200] vfs_read+0x230/0x8c8 [ 144.815430][ T8200] ksys_read+0x12c/0x228 [ 144.815439][ T8200] __arm64_sys_read+0x7c/0x90 [ 144.815449][ T8200] invoke_syscall+0x98/0x244 [ 144.815459][ T8200] el0_svc_common+0xec/0x23c [ 144.815468][ T8200] do_el0_svc+0x4c/0x5c [ 144.815477][ T8200] el0_svc+0x64/0x260 [ 144.815485][ T8200] el0t_64_sync_handler+0x48/0x148 [ 144.815493][ T8200] el0t_64_sync+0x198/0x19c [ 144.966463][ T8187] nbd1: detected capacity change from 0 to 127 [ 144.987317][ T5713] block nbd1: Dead connection, failed to find a fallback [ 144.987357][ T5713] block nbd1: shutting down sockets [ 144.987415][ T5713] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987449][ T5713] Buffer I/O error on dev nbd1, logical block 0, async page read [ 144.987527][ T5713] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987542][ T5713] Buffer I/O error on dev nbd1, logical block 1, async page read [ 144.987576][ T5713] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987590][ T5713] Buffer I/O error on dev nbd1, logical block 2, async page read [ 144.987623][ T5713] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987636][ T5713] Buffer I/O error on dev nbd1, logical block 3, async page read [ 144.987679][ T5713] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987692][ T5713] Buffer I/O error on dev nbd1, logical block 0, async page read [ 144.987728][ T5713] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987741][ T5713] Buffer I/O error on dev nbd1, logical block 1, async page read [ 144.987774][ T5713] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987787][ T5713] Buffer I/O error on dev nbd1, logical block 2, async page read [ 144.987837][ T5713] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987850][ T5713] Buffer I/O error on dev nbd1, logical block 3, async page read [ 144.987888][ T5713] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987901][ T5713] Buffer I/O error on dev nbd1, logical block 0, async page read [ 144.987947][ T5713] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 144.987959][ T5713] Buffer I/O error on dev nbd1, logical block 1, async page read [ 144.988544][ T5713] ldm_validate_partition_table(): Disk read failed. [ 144.988985][ T5713] Dev nbd1: unable to read RDB block 0 [ 144.989420][ T5713] nbd1: unable to read partition table [ 145.088429][ T5713] ldm_validate_partition_table(): Disk read failed. [ 145.088837][ T5713] Dev nbd1: unable to read RDB block 0 [ 145.174228][ T8218] team0: Port device xfrm0 removed [ 145.174796][ T8218] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.176774][ T5713] nbd1: unable to read partition table [ 145.179681][ T5375] tipc: Resetting bearer [ 146.182170][ T8232] loop2: detected capacity change from 0 to 512 [ 146.528435][ T8232] bio_check_eod: 1 callbacks suppressed [ 146.528480][ T8232] syz.2.823: attempt to access beyond end of device [ 146.528480][ T8232] loop2: rw=0, sector=17179852714, nr_sectors = 1 limit=512 [ 146.528681][ T8232] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 146.528697][ T8232] FAT-fs (loop2): Filesystem has been set read-only [ 146.530158][ T8232] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 146.530503][ T8232] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 146.530808][ T8232] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 147.065176][ T8248] FAULT_INJECTION: forcing a failure. [ 147.065176][ T8248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.065214][ T8248] CPU: 1 UID: 0 PID: 8248 Comm: syz.5.829 Tainted: G L syzkaller #0 PREEMPT [ 147.065230][ T8248] Tainted: [L]=SOFTLOCKUP [ 147.065235][ T8248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 147.065242][ T8248] Call trace: [ 147.065245][ T8248] show_stack+0x2c/0x3c (C) [ 147.065268][ T8248] __dump_stack+0x30/0x40 [ 147.065282][ T8248] dump_stack_lvl+0xd8/0x12c [ 147.065292][ T8248] dump_stack+0x1c/0x28 [ 147.065301][ T8248] should_fail_ex+0x41c/0x590 [ 147.065313][ T8248] should_fail+0x14/0x24 [ 147.065321][ T8248] should_fail_usercopy+0x20/0x30 [ 147.065330][ T8248] _inline_copy_from_user+0x3c/0x174 [ 147.065340][ T8248] ____sys_sendmsg+0x254/0x6c8 [ 147.065347][ T8248] ___sys_sendmsg+0x198/0x224 [ 147.065354][ T8248] __sys_sendmsg+0x160/0x214 [ 147.065361][ T8248] __arm64_sys_sendmsg+0x80/0x94 [ 147.065368][ T8248] invoke_syscall+0x98/0x244 [ 147.065378][ T8248] el0_svc_common+0xec/0x23c [ 147.065388][ T8248] do_el0_svc+0x4c/0x5c [ 147.065397][ T8248] el0_svc+0x64/0x260 [ 147.065406][ T8248] el0t_64_sync_handler+0x48/0x148 [ 147.065413][ T8248] el0t_64_sync+0x198/0x19c [ 147.232117][ T8253] x_tables: unsorted entry at hook 1 [ 147.564876][ T8258] netlink: 40 bytes leftover after parsing attributes in process `syz.6.833'. [ 147.716597][ T8262] loop6: detected capacity change from 0 to 512 [ 147.732204][ T8262] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 147.732339][ T8262] EXT4-fs (loop6): orphan cleanup on readonly fs [ 147.732937][ T8262] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 147.732986][ T8262] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 147.733002][ T8262] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.835: Failed to acquire dquot type 1 [ 147.733021][ T8262] loop6: lost filesystem error report for type 5 error -5 [ 147.737246][ T8262] EXT4-fs (loop6): Remounting filesystem read-only [ 147.739685][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 147.739702][ C1] EXT4-fs (loop6): initial error at time 524452: ext4_acquire_dquot:7034 [ 147.739718][ C1] EXT4-fs (loop6): last error at time 524452: ext4_acquire_dquot:7034 [ 147.739790][ T8262] EXT4-fs (loop6): 1 truncate cleaned up [ 147.749007][ T8262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.806200][ T8269] syzkaller0: entered promiscuous mode [ 147.806236][ T8269] syzkaller0: entered allmulticast mode [ 147.856152][ T5733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.859172][ T8269] tipc: Enabled bearer , priority 0 [ 147.863228][ T8268] tipc: Resetting bearer [ 147.890700][ T8268] tipc: Disabling bearer [ 147.947862][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.7.840'. [ 148.243142][ T8282] loop2: detected capacity change from 0 to 256 [ 148.244942][ T8282] vfat: Unknown parameter 'nnonumtail' [ 148.255854][ T8282] loop2: detected capacity change from 0 to 1024 [ 148.261551][ T8282] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 148.709913][ T8291] tipc: Enabled bearer , priority 0 [ 148.712556][ T8291] syzkaller0: entered promiscuous mode [ 148.714702][ T8291] syzkaller0: entered allmulticast mode [ 148.723223][ T8291] tipc: Resetting bearer [ 148.750027][ T8284] loop6: detected capacity change from 0 to 1024 [ 148.750802][ T8284] journal_path: Lookup failure for './file0' [ 148.750817][ T8284] EXT4-fs: error: could not find journal device path [ 148.755688][ T8290] tipc: Resetting bearer [ 148.801132][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.843'. [ 148.843330][ T8290] tipc: Disabling bearer [ 149.251503][ T8303] FAULT_INJECTION: forcing a failure. [ 149.251503][ T8303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.251548][ T8303] CPU: 0 UID: 0 PID: 8303 Comm: syz.5.850 Tainted: G L syzkaller #0 PREEMPT [ 149.251564][ T8303] Tainted: [L]=SOFTLOCKUP [ 149.251568][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 149.251573][ T8303] Call trace: [ 149.251576][ T8303] show_stack+0x2c/0x3c (C) [ 149.251595][ T8303] __dump_stack+0x30/0x40 [ 149.251606][ T8303] dump_stack_lvl+0xd8/0x12c [ 149.251616][ T8303] dump_stack+0x1c/0x28 [ 149.251625][ T8303] should_fail_ex+0x41c/0x590 [ 149.251634][ T8303] should_fail+0x14/0x24 [ 149.251642][ T8303] should_fail_usercopy+0x20/0x30 [ 149.251651][ T8303] _copy_from_iter+0x424/0x1064 [ 149.251661][ T8303] ping_common_sendmsg+0xb4/0x29c [ 149.251671][ T8303] ping_v4_sendmsg+0x194/0x12fc [ 149.251679][ T8303] inet_sendmsg+0xb4/0xd8 [ 149.251688][ T8303] __sock_sendmsg+0xc8/0x138 [ 149.251698][ T8303] ____sys_sendmsg+0x3d0/0x6c8 [ 149.251705][ T8303] ___sys_sendmsg+0x198/0x224 [ 149.251711][ T8303] __sys_sendmsg+0x160/0x214 [ 149.251718][ T8303] __arm64_sys_sendmsg+0x80/0x94 [ 149.251725][ T8303] invoke_syscall+0x98/0x244 [ 149.251735][ T8303] el0_svc_common+0xec/0x23c [ 149.251744][ T8303] do_el0_svc+0x4c/0x5c [ 149.251754][ T8303] el0_svc+0x64/0x260 [ 149.251762][ T8303] el0t_64_sync_handler+0x48/0x148 [ 149.251769][ T8303] el0t_64_sync+0x198/0x19c [ 149.275856][ T8301] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 149.295571][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'. [ 149.634393][ T8310] tipc: Resetting bearer [ 149.635371][ T8310] tipc: Resetting bearer [ 149.939651][ T8325] bridge_slave_0: left allmulticast mode [ 149.943927][ T8325] bridge_slave_0: left promiscuous mode [ 149.945105][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.952751][ T8325] bridge_slave_1: left allmulticast mode [ 149.953902][ T8325] bridge_slave_1: left promiscuous mode [ 149.954897][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.986341][ T8325] bond0: (slave bond_slave_0): Releasing backup interface [ 150.056432][ T8325] bond0: (slave bond_slave_1): Releasing backup interface [ 150.082383][ T8325] team0: Port device team_slave_0 removed [ 150.087079][ T8325] team0: Port device team_slave_1 removed [ 150.088523][ T8325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.089805][ T8325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.091802][ T8325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.094164][ T8325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.096555][ T8325] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.099236][ T8328] tipc: Enabled bearer , priority 0 [ 150.100685][ T3682] tipc: Resetting bearer [ 150.421197][ T8333] FAULT_INJECTION: forcing a failure. [ 150.421197][ T8333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.424794][ T8333] CPU: 1 UID: 0 PID: 8333 Comm: syz.5.861 Tainted: G L syzkaller #0 PREEMPT [ 150.424814][ T8333] Tainted: [L]=SOFTLOCKUP [ 150.424818][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 150.424824][ T8333] Call trace: [ 150.424828][ T8333] show_stack+0x2c/0x3c (C) [ 150.424851][ T8333] __dump_stack+0x30/0x40 [ 150.424863][ T8333] dump_stack_lvl+0xd8/0x12c [ 150.424873][ T8333] dump_stack+0x1c/0x28 [ 150.424882][ T8333] should_fail_ex+0x41c/0x590 [ 150.424893][ T8333] should_fail+0x14/0x24 [ 150.424901][ T8333] should_fail_usercopy+0x20/0x30 [ 150.424910][ T8333] simple_read_from_buffer+0xc4/0x238 [ 150.424920][ T8333] proc_fail_nth_read+0x1a8/0x248 [ 150.424928][ T8333] vfs_read+0x230/0x8c8 [ 150.424941][ T8333] ksys_read+0x12c/0x228 [ 150.424951][ T8333] __arm64_sys_read+0x7c/0x90 [ 150.424961][ T8333] invoke_syscall+0x98/0x244 [ 150.424971][ T8333] el0_svc_common+0xec/0x23c [ 150.424980][ T8333] do_el0_svc+0x4c/0x5c [ 150.424990][ T8333] el0_svc+0x64/0x260 [ 150.424998][ T8333] el0t_64_sync_handler+0x48/0x148 [ 150.425005][ T8333] el0t_64_sync+0x198/0x19c [ 150.491117][ T8338] loop7: detected capacity change from 0 to 512 [ 150.520434][ T8338] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.526878][ T8337] bridge0: port 1(veth1_to_bridge) entered blocking state [ 150.526994][ T8337] bridge0: port 1(veth1_to_bridge) entered disabled state [ 150.527143][ T8337] veth1_to_bridge: entered allmulticast mode [ 150.530509][ T8337] veth1_to_bridge: entered promiscuous mode [ 150.532906][ T8337] bridge0: port 1(veth1_to_bridge) entered blocking state [ 150.532967][ T8337] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 150.620611][ T6065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.771569][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.865'. [ 151.207720][ T4835] tipc: Node number set to 448878991 [ 151.210318][ T8359] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 151.210342][ T8359] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 151.214442][ T8364] syzkaller1: entered promiscuous mode [ 151.214475][ T8364] syzkaller1: entered allmulticast mode [ 151.219950][ T8359] vhci_hcd vhci_hcd.0: Device attached [ 151.221371][ T8361] vhci_hcd: connection closed [ 151.222955][ T5272] vhci_hcd vhci_hcd.5: stop threads [ 151.222986][ T5272] vhci_hcd vhci_hcd.5: release socket [ 151.223016][ T5272] vhci_hcd vhci_hcd.5: disconnect device [ 151.322160][ T8366] xt_socket: unknown flags 0x4c [ 151.350303][ T8366] trusted_key: encrypted_key: master key parameter 'lave_1' is invalid [ 151.862178][ T8377] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.874094][ T8377] tipc: Enabling of bearer rejected, already enabled [ 152.166823][ T8384] loop2: detected capacity change from 0 to 512 [ 152.170142][ T8384] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.177617][ T8384] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 152.524101][ T8388] loop7: detected capacity change from 0 to 256 [ 152.528853][ T8388] vfat: Unknown parameter 'nnonumtail' [ 152.564026][ T8388] loop7: detected capacity change from 0 to 1024 [ 152.573587][ T8388] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 153.441084][ T4715] Bluetooth: hci1: command 0x0406 tx timeout [ 153.441145][ T4715] Bluetooth: hci2: command 0x0406 tx timeout [ 153.759395][ T8415] loop7: detected capacity change from 0 to 512 [ 153.774993][ T8415] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 153.775041][ T8415] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 153.775066][ T8415] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.882: Corrupt directory, running e2fsck is recommended [ 153.793134][ T8415] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 153.793227][ T8415] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.882: corrupted in-inode xattr: invalid ea_ino [ 153.793243][ T8415] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.804046][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 153.804080][ C0] EXT4-fs (loop7): initial error at time 524459: ext4_iget_extra_inode:5128: inode 15 [ 153.804113][ C0] EXT4-fs (loop7): last error at time 524459: ext4_iget_extra_inode:5128: inode 15 [ 153.808474][ T8415] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.882: couldn't read orphan inode 15 (err -117) [ 153.808498][ T8415] loop7: lost filesystem error report for type 5 error -117 [ 153.809149][ T8415] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.865280][ T6065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.934822][ T8426] lo speed is unknown, defaulting to 1000 [ 154.002242][ T8430] syzkaller0: entered promiscuous mode [ 154.002282][ T8430] syzkaller0: entered allmulticast mode [ 154.006922][ T8430] tipc: Enabled bearer , priority 0 [ 154.012435][ T8429] tipc: Resetting bearer [ 154.043517][ T8429] tipc: Disabling bearer [ 154.207781][ T8436] fuse: Unknown parameter 'group_Au!id' [ 154.441213][ T8451] netlink: 'syz.7.894': attribute type 4 has an invalid length. [ 154.528657][ T8455] FAULT_INJECTION: forcing a failure. [ 154.528657][ T8455] name failslab, interval 1, probability 0, space 0, times 0 [ 154.528697][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.2.896 Tainted: G L syzkaller #0 PREEMPT [ 154.528711][ T8455] Tainted: [L]=SOFTLOCKUP [ 154.528715][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 154.528720][ T8455] Call trace: [ 154.528724][ T8455] show_stack+0x2c/0x3c (C) [ 154.528745][ T8455] __dump_stack+0x30/0x40 [ 154.528757][ T8455] dump_stack_lvl+0xd8/0x12c [ 154.528766][ T8455] dump_stack+0x1c/0x28 [ 154.528776][ T8455] should_fail_ex+0x41c/0x590 [ 154.528786][ T8455] should_failslab+0xc4/0x120 [ 154.528794][ T8455] __kmalloc_cache_noprof+0x8c/0x624 [ 154.528803][ T8455] refill_pi_state_cache+0xa0/0x170 [ 154.528812][ T8455] futex_lock_pi+0x168/0x704 [ 154.528819][ T8455] do_futex+0x1e0/0x358 [ 154.528826][ T8455] __arm64_sys_futex+0x2dc/0x410 [ 154.528834][ T8455] invoke_syscall+0x98/0x244 [ 154.528844][ T8455] el0_svc_common+0xec/0x23c [ 154.528853][ T8455] do_el0_svc+0x4c/0x5c [ 154.528862][ T8455] el0_svc+0x64/0x260 [ 154.528871][ T8455] el0t_64_sync_handler+0x48/0x148 [ 154.528878][ T8455] el0t_64_sync+0x198/0x19c [ 154.580828][ T8458] loop7: detected capacity change from 0 to 256 [ 155.542640][ T8477] netlink: 220 bytes leftover after parsing attributes in process `syz.2.902'. [ 155.620477][ T8479] loop5: detected capacity change from 0 to 256 [ 155.622092][ T8479] vfat: Unknown parameter '' [ 155.644670][ T8479] loop5: detected capacity change from 0 to 1024 [ 155.752376][ T8479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 156.532573][ T8484] netlink: 'syz.2.904': attribute type 4 has an invalid length. [ 156.561438][ T5220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.642611][ T8494] loop2: detected capacity change from 0 to 256 [ 156.643040][ T8494] vfat: Unknown parameter 'nnonumtail' [ 156.644877][ T8496] loop6: detected capacity change from 0 to 512 [ 156.659808][ T8496] EXT4-fs (loop6): 1 truncate cleaned up [ 156.661052][ T8496] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.729561][ T8494] loop2: detected capacity change from 0 to 1024 [ 156.734479][ T8494] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 156.751067][ T8496] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.908: bg 0: block 7: invalid block bitmap [ 156.806466][ T8502] EXT4-fs (loop6): shut down requested (0) [ 157.149796][ T8506] loop5: detected capacity change from 0 to 512 [ 157.172602][ T5733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.186752][ T8506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.868106][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.870395][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.872668][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.875994][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.877872][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.052145][ T8522] lo speed is unknown, defaulting to 1000 [ 158.104886][ T5220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.412533][ T8548] loop2: detected capacity change from 0 to 128 [ 158.432143][ T8548] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.529846][ T8559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.563179][ T4706] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.582883][ T8564] loop6: detected capacity change from 0 to 512 [ 158.856352][ T8564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.006024][ T8579] netlink: 'syz.5.926': attribute type 8 has an invalid length. [ 159.006059][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.926'. [ 159.020068][ T8579] veth1_to_team: entered promiscuous mode [ 159.020537][ T8579] gretap0: entered promiscuous mode [ 159.025775][ T8581] loop2: detected capacity change from 0 to 512 [ 159.032996][ T8579] veth1_to_team: left promiscuous mode [ 159.038995][ T8579] gretap0: left promiscuous mode [ 159.044568][ T8581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.102850][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.105608][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.105725][ T8522] bridge_slave_0: entered allmulticast mode [ 159.106190][ T8522] bridge_slave_0: entered promiscuous mode [ 159.116001][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.121234][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.121425][ T8522] bridge_slave_1: entered allmulticast mode [ 159.121954][ T8522] bridge_slave_1: entered promiscuous mode [ 159.295270][ T8593] loop7: detected capacity change from 0 to 1024 [ 159.436626][ T8593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 159.922503][ T4711] Bluetooth: hci3: command tx timeout [ 159.930046][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.942702][ T8590] syzkaller0: entered promiscuous mode [ 159.942747][ T8590] syzkaller0: entered allmulticast mode [ 160.208404][ T6065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.273886][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.278936][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.7.930'. [ 160.317279][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.7.930'. [ 160.327865][ T8522] team0: Port device team_slave_0 added [ 160.330022][ T8601] FAULT_INJECTION: forcing a failure. [ 160.330022][ T8601] name failslab, interval 1, probability 0, space 0, times 0 [ 160.330054][ T8601] CPU: 1 UID: 0 PID: 8601 Comm: syz.7.930 Tainted: G L syzkaller #0 PREEMPT [ 160.330072][ T8601] Tainted: [L]=SOFTLOCKUP [ 160.330077][ T8601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 160.330082][ T8601] Call trace: [ 160.330085][ T8601] show_stack+0x2c/0x3c (C) [ 160.330105][ T8601] __dump_stack+0x30/0x40 [ 160.330116][ T8601] dump_stack_lvl+0xd8/0x12c [ 160.330126][ T8601] dump_stack+0x1c/0x28 [ 160.330135][ T8601] should_fail_ex+0x41c/0x590 [ 160.330146][ T8601] should_failslab+0xc4/0x120 [ 160.330154][ T8601] kmem_cache_alloc_noprof+0x8c/0x610 [ 160.330163][ T8601] __kernfs_new_node+0xec/0x814 [ 160.330171][ T8601] kernfs_new_node+0xe8/0x164 [ 160.330178][ T8601] __kernfs_create_file+0x60/0x2e0 [ 160.330187][ T8601] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 160.330195][ T8601] internal_create_group+0x550/0xb30 [ 160.330204][ T8601] internal_create_groups+0x64/0x138 [ 160.330213][ T8601] sysfs_create_groups+0x2c/0x3c [ 160.330222][ T8601] device_add_attrs+0x17c/0x4e8 [ 160.330231][ T8601] device_add+0x420/0x9f0 [ 160.330239][ T8601] netdev_register_kobject+0x168/0x2f4 [ 160.330248][ T8601] register_netdevice+0xd74/0x14b8 [ 160.330256][ T8601] veth_newlink+0x3b8/0x75c [ 160.330265][ T8601] rtnl_newlink_create+0x290/0x764 [ 160.330275][ T8601] rtnl_newlink+0xdc4/0x1144 [ 160.330284][ T8601] rtnetlink_rcv_msg+0x66c/0x9bc [ 160.330293][ T8601] netlink_rcv_skb+0x238/0x414 [ 160.330303][ T8601] rtnetlink_rcv+0x28/0x38 [ 160.330312][ T8601] netlink_unicast+0x600/0x7f8 [ 160.330321][ T8601] netlink_sendmsg+0x648/0x948 [ 160.330330][ T8601] __sock_sendmsg+0xc8/0x138 [ 160.330341][ T8601] ____sys_sendmsg+0x3d0/0x6c8 [ 160.330348][ T8601] ___sys_sendmsg+0x198/0x224 [ 160.330354][ T8601] __sys_sendmsg+0x160/0x214 [ 160.330361][ T8601] __arm64_sys_sendmsg+0x80/0x94 [ 160.330368][ T8601] invoke_syscall+0x98/0x244 [ 160.330378][ T8601] el0_svc_common+0xec/0x23c [ 160.330387][ T8601] do_el0_svc+0x4c/0x5c [ 160.330397][ T8601] el0_svc+0x64/0x260 [ 160.330405][ T8601] el0t_64_sync_handler+0x48/0x148 [ 160.330412][ T8601] el0t_64_sync+0x198/0x19c [ 160.394749][ T8522] team0: Port device team_slave_1 added [ 160.401169][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.421879][ T8603] loop5: detected capacity change from 0 to 256 [ 160.423314][ T8603] vfat: Unknown parameter 'nonumtail' [ 160.425981][ T8603] netlink: 'syz.5.931': attribute type 1 has an invalid length. [ 160.427278][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 160.473512][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.473559][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.474400][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.474415][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.474432][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.519574][ T8608] netlink: 20 bytes leftover after parsing attributes in process `syz.7.933'. [ 160.564845][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.606177][ T8522] hsr_slave_0: entered promiscuous mode [ 160.620480][ T8522] hsr_slave_1: entered promiscuous mode [ 160.620731][ T8522] debugfs: 'hsr0' already exists in 'hsr' [ 160.620750][ T8522] Cannot create hsr debugfs directory [ 160.741441][ T8618] netlink: 'syz.5.937': attribute type 4 has an invalid length. [ 160.969649][ T8625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.940'. [ 160.976624][ T8522] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 160.980820][ T8522] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.985011][ T8522] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 160.990876][ T8522] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.993309][ T8522] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 161.359930][ T8522] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.360430][ T8522] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 161.365400][ T8522] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.383057][ T8632] loop7: detected capacity change from 0 to 1024 [ 161.988107][ T4711] Bluetooth: hci3: command tx timeout [ 162.637175][ T8632] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.712056][ T8641] loop5: detected capacity change from 0 to 512 [ 162.730714][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.773425][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.775179][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.775204][ T5374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.778471][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.778514][ T4846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.786242][ T6065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.810522][ T8522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.812440][ T8522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.818446][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.943'. [ 162.830078][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.943'. [ 162.834773][ T8646] FAULT_INJECTION: forcing a failure. [ 162.834773][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 162.837382][ T8646] CPU: 0 UID: 0 PID: 8646 Comm: syz.7.943 Tainted: G L syzkaller #0 PREEMPT [ 162.837404][ T8646] Tainted: [L]=SOFTLOCKUP [ 162.837408][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 162.837413][ T8646] Call trace: [ 162.837417][ T8646] show_stack+0x2c/0x3c (C) [ 162.837441][ T8646] __dump_stack+0x30/0x40 [ 162.837454][ T8646] dump_stack_lvl+0xd8/0x12c [ 162.837466][ T8646] dump_stack+0x1c/0x28 [ 162.837477][ T8646] should_fail_ex+0x41c/0x590 [ 162.837488][ T8646] should_failslab+0xc4/0x120 [ 162.837498][ T8646] kmem_cache_alloc_noprof+0x8c/0x610 [ 162.837507][ T8646] __kernfs_new_node+0xec/0x814 [ 162.837516][ T8646] kernfs_new_node+0xe8/0x164 [ 162.837523][ T8646] __kernfs_create_file+0x60/0x2e0 [ 162.837531][ T8646] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 162.837540][ T8646] internal_create_group+0x550/0xb30 [ 162.837549][ T8646] internal_create_groups+0x64/0x138 [ 162.837558][ T8646] sysfs_create_groups+0x2c/0x3c [ 162.837567][ T8646] device_add_attrs+0x17c/0x4e8 [ 162.837576][ T8646] device_add+0x420/0x9f0 [ 162.837584][ T8646] netdev_register_kobject+0x168/0x2f4 [ 162.837593][ T8646] register_netdevice+0xd74/0x14b8 [ 162.837601][ T8646] veth_newlink+0x3b8/0x75c [ 162.837610][ T8646] rtnl_newlink_create+0x290/0x764 [ 162.837620][ T8646] rtnl_newlink+0xdc4/0x1144 [ 162.837629][ T8646] rtnetlink_rcv_msg+0x66c/0x9bc [ 162.837638][ T8646] netlink_rcv_skb+0x238/0x414 [ 162.837648][ T8646] rtnetlink_rcv+0x28/0x38 [ 162.837657][ T8646] netlink_unicast+0x600/0x7f8 [ 162.837666][ T8646] netlink_sendmsg+0x648/0x948 [ 162.837675][ T8646] __sock_sendmsg+0xc8/0x138 [ 162.837685][ T8646] ____sys_sendmsg+0x3d0/0x6c8 [ 162.837692][ T8646] ___sys_sendmsg+0x198/0x224 [ 162.837699][ T8646] __sys_sendmsg+0x160/0x214 [ 162.837706][ T8646] __arm64_sys_sendmsg+0x80/0x94 [ 162.837713][ T8646] invoke_syscall+0x98/0x244 [ 162.837722][ T8646] el0_svc_common+0xec/0x23c [ 162.837732][ T8646] do_el0_svc+0x4c/0x5c [ 162.837741][ T8646] el0_svc+0x64/0x260 [ 162.837750][ T8646] el0t_64_sync_handler+0x48/0x148 [ 162.837757][ T8646] el0t_64_sync+0x198/0x19c [ 162.839950][ T8641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.939962][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.7.945'. [ 163.088273][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.161443][ T8522] veth0_vlan: entered promiscuous mode [ 163.179409][ T8522] veth1_vlan: entered promiscuous mode [ 163.206854][ T8522] veth0_macvtap: entered promiscuous mode [ 163.209764][ T8522] veth1_macvtap: entered promiscuous mode [ 163.220552][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.227632][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.234557][ T39] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.234600][ T39] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.234621][ T39] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.234639][ T39] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.314521][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.314562][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.340776][ T6109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.340811][ T6109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.444276][ T8690] loop8: detected capacity change from 0 to 512 [ 163.528067][ T8690] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.872370][ T8700] overlayfs: failed to resolve './bus': -2 [ 163.941450][ T5220] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.955067][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.6.954'. [ 163.955107][ T8702] netlink: 'syz.6.954': attribute type 25 has an invalid length. [ 163.955118][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.954'. [ 163.967680][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.050976][ T8708] tmpfs: Bad value for 'mpol' [ 164.131821][ T8708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.150363][ T8708] erspan0: entered promiscuous mode [ 164.167673][ T4711] Bluetooth: hci3: command tx timeout [ 164.170320][ T867] lo speed is unknown, defaulting to 1000 [ 164.170501][ T867] sz1: Port: 1 Link ACTIVE [ 164.172539][ T26] lo speed is unknown, defaulting to 1000 [ 164.238804][ T3682] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.238875][ T3682] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.238903][ T3682] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.238930][ T3682] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.356467][ T8711] FAULT_INJECTION: forcing a failure. [ 164.356467][ T8711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.356509][ T8711] CPU: 0 UID: 0 PID: 8711 Comm: syz.6.957 Tainted: G L syzkaller #0 PREEMPT [ 164.356524][ T8711] Tainted: [L]=SOFTLOCKUP [ 164.356529][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 164.356535][ T8711] Call trace: [ 164.356539][ T8711] show_stack+0x2c/0x3c (C) [ 164.356558][ T8711] __dump_stack+0x30/0x40 [ 164.356570][ T8711] dump_stack_lvl+0xd8/0x12c [ 164.356580][ T8711] dump_stack+0x1c/0x28 [ 164.356589][ T8711] should_fail_ex+0x41c/0x590 [ 164.356600][ T8711] should_fail+0x14/0x24 [ 164.356608][ T8711] should_fail_usercopy+0x20/0x30 [ 164.356617][ T8711] simple_read_from_buffer+0xc4/0x238 [ 164.356627][ T8711] proc_fail_nth_read+0x1a8/0x248 [ 164.356634][ T8711] vfs_read+0x230/0x8c8 [ 164.356644][ T8711] ksys_read+0x12c/0x228 [ 164.356653][ T8711] __arm64_sys_read+0x7c/0x90 [ 164.356663][ T8711] invoke_syscall+0x98/0x244 [ 164.356673][ T8711] el0_svc_common+0xec/0x23c [ 164.356682][ T8711] do_el0_svc+0x4c/0x5c [ 164.356691][ T8711] el0_svc+0x64/0x260 [ 164.356699][ T8711] el0t_64_sync_handler+0x48/0x148 [ 164.356707][ T8711] el0t_64_sync+0x198/0x19c [ 164.746410][ T4411] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 60 seconds [ 164.807439][ T8728] loop5: detected capacity change from 0 to 256 [ 164.809093][ T8728] vfat: Unknown parameter 'nnonumtail' [ 164.890113][ T8728] loop5: detected capacity change from 0 to 1024 [ 164.897536][ T8728] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 164.901578][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.961'. [ 164.917841][ T8726] loop8: detected capacity change from 0 to 2048 [ 165.264309][ T8726] Alternate GPT is invalid, using primary GPT. [ 165.264682][ T8726] loop8: p2 p3 p7 [ 165.387699][ T8744] loop7: detected capacity change from 0 to 512 [ 165.442534][ T8744] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.709523][ T4339] Alternate GPT is invalid, using primary GPT. [ 165.709651][ T4339] loop8: p2 p3 p7 [ 165.778547][ T8755] loop8: detected capacity change from 0 to 256 [ 165.780305][ T8755] vfat: Unknown parameter 'nnonumtail' [ 166.123085][ T8755] loop8: detected capacity change from 0 to 1024 [ 166.130833][ T8755] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 166.192869][ T4711] Bluetooth: hci3: command tx timeout [ 166.205942][ T5713] udevd[5713]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 166.207724][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 166.213727][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 166.880724][ T6065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.914437][ T8769] loop2: detected capacity change from 0 to 8 [ 166.928681][ T8771] loop8: detected capacity change from 0 to 1024 [ 166.983816][ T8771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.311877][ T8784] loop2: detected capacity change from 0 to 256 [ 167.324111][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 167.331640][ T8785] tc_dump_action: action bad kind [ 167.341686][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 167.341726][ T8784] tc_dump_action: action bad kind [ 167.411669][ T8784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.501549][ T8794] netlink: 'syz.6.981': attribute type 4 has an invalid length. [ 168.084031][ T8807] loop7: detected capacity change from 0 to 128 [ 168.189570][ T8650] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 169.325294][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.325416][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.325507][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.325576][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.325647][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.325715][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.325780][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.325860][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.325926][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.325995][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326060][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326131][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326204][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326270][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326384][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326447][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326511][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326575][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326637][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326699][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326761][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326832][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326894][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.326962][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.327024][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.327085][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.327152][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.327212][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.327279][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.327338][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.327437][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.327496][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 169.327556][ T8821] IPv6: NLM_F_REPLACE set, but no existing node found! [ 170.192135][ T8826] overlayfs: missing 'lowerdir' [ 170.551574][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.665610][ T8830] netlink: 'syz.2.994': attribute type 4 has an invalid length. [ 170.669653][ T867] lo speed is unknown, defaulting to 1000 [ 170.669700][ T867] sz1: Port: 1 Link DOWN [ 170.669744][ T867] lo speed is unknown, defaulting to 1000 [ 170.791336][ T8836] netlink: 'syz.6.997': attribute type 16 has an invalid length. [ 170.792823][ T8836] netlink: 'syz.6.997': attribute type 17 has an invalid length. [ 170.841002][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.6.997'. [ 170.874489][ T8836] tipc: Resetting bearer [ 171.125199][ T8836] tipc: Resetting bearer [ 171.204850][ T8836] erspan0: entered promiscuous mode [ 171.309027][ T3682] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.309138][ T3682] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.310444][ T39] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.310491][ T39] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.310512][ T39] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.310530][ T39] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.335877][ T4835] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.780486][ T4835] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.825022][ T4793] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.911785][ T8875] Bluetooth: MGMT ver 1.23 [ 171.914070][ T8875] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 171.921675][ T8875] loop5: detected capacity change from 0 to 8 [ 171.935926][ T8875] Page size > filesystem block size (0). This is currently not supported! [ 171.984366][ T4793] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.001479][ T4793] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 172.188136][ T8892] loop2: detected capacity change from 0 to 256 [ 172.200036][ T8892] vfat: Unknown parameter 'nnonumtail' [ 172.224848][ T8892] loop2: detected capacity change from 0 to 1024 [ 172.277232][ T8892] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 172.884491][ T8920] xt_hashlimit: max too large, truncated to 1048576 [ 172.888485][ T8920] syz.5.1018 (8920): /proc/8918/oom_adj is deprecated, please use /proc/8918/oom_score_adj instead. [ 173.333261][ T8934] loop2: detected capacity change from 0 to 512 [ 173.333740][ T8934] EXT4-fs: Ignoring removed bh option [ 173.335683][ T8934] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 173.345289][ T8934] EXT4-fs (loop2): 1 truncate cleaned up [ 173.347222][ T8934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.522674][ T8941] IPVS: Error connecting to the multicast addr [ 174.777407][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.866458][ T6105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.884618][ T8957] netlink: 'syz.2.1028': attribute type 15 has an invalid length. [ 174.928730][ T8959] lo speed is unknown, defaulting to 1000 [ 175.096750][ T6105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.098836][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 175.158770][ T8969] Bluetooth: MGMT ver 1.23 [ 175.212961][ T6105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.357444][ T6105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.173397][ T8991] loop8: detected capacity change from 0 to 512 [ 176.173824][ T8991] EXT4-fs: Ignoring removed bh option [ 176.178173][ T8991] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 176.213022][ T8991] EXT4-fs (loop8): 1 truncate cleaned up [ 176.213499][ T8991] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.395043][ T9003] IPVS: Error connecting to the multicast addr [ 176.502484][ T9007] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1041'. [ 176.535729][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.653085][ T9014] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1045'. [ 176.666485][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1043'. [ 176.717268][ T9018] loop8: detected capacity change from 0 to 256 [ 177.611573][ T9045] netlink: 'syz.8.1052': attribute type 4 has an invalid length. [ 177.615071][ T9047] loop2: detected capacity change from 0 to 512 [ 177.615595][ T9047] EXT4-fs: Ignoring removed bh option [ 177.615900][ T9047] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 177.620516][ T9047] EXT4-fs (loop2): 1 truncate cleaned up [ 177.623778][ T9047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.078633][ T6105] bond1 (unregistering): (slave bridge3): Releasing active interface [ 178.088226][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1056'. [ 178.648975][ T6105] bond0 (unregistering): Released all slaves [ 178.651623][ T6105] bond1 (unregistering): Released all slaves [ 178.663028][ T9052] IPVS: Error connecting to the multicast addr [ 178.715669][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.737833][ T6105] tipc: Disabling bearer [ 178.750311][ T6105] tipc: Left network mode [ 178.783090][ C1] Unknown status report in ack skb [ 178.904357][ T4394] 8021q: adding VLAN 0 to HW filter on device eth12 [ 179.246676][ T9117] loop5: detected capacity change from 0 to 256 [ 179.248441][ T9117] vfat: Unknown parameter 'nnonumtail' [ 179.717890][ T4394] 8021q: adding VLAN 0 to HW filter on device eth13 [ 180.258863][ T9147] IPVS: Unknown mcast interface: vcan0 [ 180.359687][ T9159] netlink: 'syz.6.1074': attribute type 4 has an invalid length. [ 180.728299][ T9176] loop2: detected capacity change from 0 to 2048 [ 180.731220][ T9174] loop5: detected capacity change from 0 to 512 [ 180.739027][ T4394] 8021q: adding VLAN 0 to HW filter on device eth14 [ 180.742251][ T9174] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 180.746783][ T9174] EXT4-fs (loop5): orphan cleanup on readonly fs [ 180.748205][ T9174] EXT4-fs error (device loop5): __ext4_iget:5481: inode #11: block 8: comm syz.5.1077: invalid block [ 180.748225][ T9174] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 180.748552][ T9174] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1077: couldn't read orphan inode 11 (err -117) [ 180.748569][ T9174] loop5: lost filesystem error report for type 5 error -117 [ 180.752976][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 180.752996][ C1] EXT4-fs (loop5): initial error at time 1048774: __ext4_iget:5481: inode 11: block 8 [ 180.753018][ C1] EXT4-fs (loop5): last error at time 1048774: ext4_orphan_get:1402 [ 180.756492][ T9174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 180.761280][ T9174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.770616][ T9176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.797304][ T9174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.797510][ T9174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.867028][ T6105] hsr_slave_0: left promiscuous mode [ 180.868368][ T6105] hsr_slave_1: left promiscuous mode [ 180.874344][ T6105] veth1_macvtap: left promiscuous mode [ 180.875615][ T6105] veth0_macvtap: left promiscuous mode [ 180.876675][ T6105] veth1_vlan: left promiscuous mode [ 180.877515][ T6105] veth0_vlan: left promiscuous mode [ 180.943867][ T9190] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 180.943912][ T9190] overlayfs: failed to verify index dir 'upper' xattr [ 180.943917][ T9190] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 181.078340][ T4394] 8021q: adding VLAN 0 to HW filter on device eth15 [ 181.228778][ T9209] random: crng reseeded on system resumption [ 181.275112][ T9211] netlink: 'syz.6.1083': attribute type 3 has an invalid length. [ 181.412916][ T9227] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.730549][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.028556][ T867] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 182.031535][ T867] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.599436][ T9248] lo speed is unknown, defaulting to 1000 [ 182.816004][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 183.837807][ T9258] netlink: 182 bytes leftover after parsing attributes in process `syz.8.1094'. [ 184.765637][ T9282] syzkaller0: entered promiscuous mode [ 184.765671][ T9282] syzkaller0: entered allmulticast mode [ 185.596052][ T9282] tipc: Started in network mode [ 185.596090][ T9282] tipc: Node identity fe972b5d3874, cluster identity 4711 [ 185.596237][ T9282] tipc: Enabled bearer , priority 0 [ 185.599926][ T9280] tipc: Resetting bearer [ 185.616140][ T9280] tipc: Disabling bearer [ 185.871855][ T9303] loop2: detected capacity change from 0 to 512 [ 185.875164][ T9303] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 185.877438][ T9303] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 185.996046][ T9306] IPVS: Error connecting to the multicast addr [ 186.364080][ T9316] netlink: 'syz.8.1113': attribute type 11 has an invalid length. [ 186.562965][ T9320] loop8: detected capacity change from 0 to 512 [ 186.599269][ T9320] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1114: couldn't read orphan inode 26 (err -116) [ 186.602049][ T9320] loop8: lost filesystem error report for type 5 error -116 [ 186.603204][ T9320] EXT4-fs (loop8): Remounting filesystem read-only [ 186.604495][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 186.604509][ C0] EXT4-fs (loop8): initial error at time 1048780: ext4_orphan_get:1402 [ 186.604521][ C0] EXT4-fs (loop8): last error at time 1048780: ext4_orphan_get:1402 [ 186.612981][ T9320] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.615817][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.615846][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.652298][ T9320] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1114'. [ 186.672543][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.771484][ T9329] syzkaller0: entered promiscuous mode [ 186.771514][ T9329] syzkaller0: entered allmulticast mode [ 187.010040][ T9330] netlink: 'syz.2.1117': attribute type 4 has an invalid length. [ 187.062513][ T9334] syzkaller1: entered promiscuous mode [ 187.062550][ T9334] syzkaller1: entered allmulticast mode [ 188.152862][ T9344] netlink: 'syz.8.1121': attribute type 1 has an invalid length. [ 188.169030][ T9344] bond1: entered promiscuous mode [ 188.169228][ T9344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.174684][ T9347] tipc: Resetting bearer [ 188.202176][ T9347] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.217943][ T9344] vlan2: entered allmulticast mode [ 188.217976][ T9344] bond1: entered allmulticast mode [ 188.240391][ T9344] bond1: (slave bridge1): making interface the new active one [ 188.245904][ T9344] bridge1: entered promiscuous mode [ 188.246025][ T9344] bridge1: entered allmulticast mode [ 188.247838][ T9344] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 188.691179][ T4711] Bluetooth: hci4: command 0x0406 tx timeout [ 188.691299][ T4711] Bluetooth: hci0: command 0x0406 tx timeout [ 188.902316][ T9376] syzkaller0: entered promiscuous mode [ 188.902356][ T9376] syzkaller0: entered allmulticast mode [ 188.918529][ T9379] FAULT_INJECTION: forcing a failure. [ 188.918529][ T9379] name failslab, interval 1, probability 0, space 0, times 0 [ 188.918570][ T9379] CPU: 0 UID: 0 PID: 9379 Comm: syz.7.1132 Tainted: G L syzkaller #0 PREEMPT [ 188.918585][ T9379] Tainted: [L]=SOFTLOCKUP [ 188.918589][ T9379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 188.918594][ T9379] Call trace: [ 188.918597][ T9379] show_stack+0x2c/0x3c (C) [ 188.918617][ T9379] __dump_stack+0x30/0x40 [ 188.918631][ T9379] dump_stack_lvl+0xd8/0x12c [ 188.918641][ T9379] dump_stack+0x1c/0x28 [ 188.918650][ T9379] should_fail_ex+0x41c/0x590 [ 188.918661][ T9379] should_failslab+0xc4/0x120 [ 188.918671][ T9379] __kmalloc_node_track_caller_noprof+0x100/0x748 [ 188.918681][ T9379] kmemdup_noprof+0x44/0x8c [ 188.918690][ T9379] neigh_sysctl_register+0xc0/0x458 [ 188.918699][ T9379] addrconf_sysctl_register+0xb4/0x194 [ 188.918710][ T9379] ipv6_add_dev+0xa30/0x100c [ 188.918719][ T9379] addrconf_notify+0x4b8/0xbe8 [ 188.918728][ T9379] notifier_call_chain+0x1a4/0x624 [ 188.918738][ T9379] raw_notifier_call_chain+0x3c/0x50 [ 188.918747][ T9379] call_netdevice_notifiers_info+0xb8/0x120 [ 188.918756][ T9379] netif_set_mtu_ext+0x39c/0x574 [ 188.918763][ T9379] netif_set_mtu+0xc4/0x180 [ 188.918770][ T9379] dev_set_mtu+0x104/0x1f4 [ 188.918779][ T9379] dev_ifsioc+0x388/0xc74 [ 188.918787][ T9379] dev_ioctl+0x4a8/0xcf0 [ 188.918794][ T9379] sock_do_ioctl+0x198/0x254 [ 188.918802][ T9379] sock_ioctl+0x55c/0x7ec [ 188.918808][ T9379] __arm64_sys_ioctl+0x14c/0x1c4 [ 188.918818][ T9379] invoke_syscall+0x98/0x244 [ 188.918828][ T9379] el0_svc_common+0xec/0x23c [ 188.918838][ T9379] do_el0_svc+0x4c/0x5c [ 188.918847][ T9379] el0_svc+0x64/0x260 [ 188.918855][ T9379] el0t_64_sync_handler+0x48/0x148 [ 188.918863][ T9379] el0t_64_sync+0x198/0x19c [ 189.427380][ T9386] loop2: detected capacity change from 0 to 1024 [ 189.433131][ T4712] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 189.433335][ T4712] CPU: 0 UID: 0 PID: 4712 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT [ 189.433354][ T4712] Tainted: [L]=SOFTLOCKUP [ 189.433358][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 189.433363][ T4712] Workqueue: hci5 hci_rx_work [ 189.433382][ T4712] Call trace: [ 189.433385][ T4712] show_stack+0x2c/0x3c (C) [ 189.433401][ T4712] __dump_stack+0x30/0x40 [ 189.433414][ T4712] dump_stack_lvl+0xd8/0x12c [ 189.433426][ T4712] dump_stack+0x1c/0x28 [ 189.433437][ T4712] sysfs_warn_dup+0x9c/0xb8 [ 189.433449][ T4712] sysfs_create_dir_ns+0x190/0x1f4 [ 189.433460][ T4712] kobject_add_internal+0x290/0x6f0 [ 189.433472][ T4712] kobject_add_varg+0x9c/0xe8 [ 189.433482][ T4712] kobject_add+0x110/0x1c8 [ 189.433491][ T4712] device_add+0x394/0x9f0 [ 189.433501][ T4712] hci_conn_add_sysfs+0xbc/0x1e8 [ 189.433514][ T4712] le_conn_complete_evt+0xc68/0x10f8 [ 189.433526][ T4712] hci_le_conn_complete_evt+0x114/0x3d8 [ 189.433537][ T4712] hci_le_meta_evt+0x2b0/0x46c [ 189.433549][ T4712] hci_event_packet+0x4c0/0x9c8 [ 189.433560][ T4712] hci_rx_work+0x2f4/0xd78 [ 189.433570][ T4712] process_scheduled_works+0x788/0x10b8 [ 189.433581][ T4712] worker_thread+0x798/0xbd0 [ 189.433590][ T4712] kthread+0x304/0x3d4 [ 189.433599][ T4712] ret_from_fork+0x10/0x20 [ 189.433669][ T4712] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 189.433756][ T4712] Bluetooth: hci5: failed to register connection device [ 189.600890][ T9386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 189.888485][ T9391] bridge_slave_0: left allmulticast mode [ 189.888526][ T9391] bridge_slave_0: left promiscuous mode [ 189.893785][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.949058][ T9391] bridge_slave_1: left allmulticast mode [ 189.949094][ T9391] bridge_slave_1: left promiscuous mode [ 189.949179][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.963305][ T9391] bond0: (slave bond_slave_0): Releasing backup interface [ 189.973418][ T9396] netlink: 'syz.7.1137': attribute type 8 has an invalid length. [ 189.977342][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1137'. [ 189.989740][ T9391] bond0: (slave bond_slave_1): Releasing backup interface [ 190.539509][ T9391] team0: Port device team_slave_0 removed [ 190.545517][ T9391] team0: Port device team_slave_1 removed [ 190.547046][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.550012][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.552480][ T9391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.552509][ T9391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.556094][ T9391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.562195][ T9396] veth1_to_team: entered promiscuous mode [ 190.564951][ T9396] gretap0: entered promiscuous mode [ 190.568959][ T9396] veth1_to_team: left promiscuous mode [ 190.572463][ T9396] gretap0: left promiscuous mode [ 190.773115][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.927092][ T9417] syzkaller0: entered promiscuous mode [ 190.928241][ T9417] syzkaller0: entered allmulticast mode [ 190.946311][ T9417] tipc: Enabled bearer , priority 0 [ 190.947779][ T9416] tipc: Resetting bearer [ 190.953855][ T9416] tipc: Disabling bearer [ 191.598665][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1151'. [ 192.148989][ T9463] loop2: detected capacity change from 0 to 1024 [ 192.232888][ T9463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.937425][ T9468] netlink: 'syz.6.1157': attribute type 4 has an invalid length. [ 193.528485][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.130681][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1164'. [ 194.132367][ T9504] netlink: 'syz.6.1164': attribute type 25 has an invalid length. [ 194.133947][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1164'. [ 194.881755][ T4411] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 90 seconds [ 195.018140][ T9527] loop8: detected capacity change from 0 to 1024 [ 195.065017][ T9527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 195.508428][ T4721] Bluetooth: hci5: command 0x0406 tx timeout [ 196.018547][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.605724][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.608212][ T4721] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.609040][ T4721] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.610630][ T4721] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.610891][ T4721] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.831130][ T9568] lo speed is unknown, defaulting to 1000 [ 197.010751][ T9600] FAULT_INJECTION: forcing a failure. [ 197.010751][ T9600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.010789][ T9600] CPU: 0 UID: 0 PID: 9600 Comm: syz.8.1183 Tainted: G L syzkaller #0 PREEMPT [ 197.010816][ T9600] Tainted: [L]=SOFTLOCKUP [ 197.010820][ T9600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 197.010825][ T9600] Call trace: [ 197.010828][ T9600] show_stack+0x2c/0x3c (C) [ 197.010848][ T9600] __dump_stack+0x30/0x40 [ 197.010859][ T9600] dump_stack_lvl+0xd8/0x12c [ 197.010868][ T9600] dump_stack+0x1c/0x28 [ 197.010878][ T9600] should_fail_ex+0x41c/0x590 [ 197.010889][ T9600] should_fail+0x14/0x24 [ 197.010897][ T9600] should_fail_usercopy+0x20/0x30 [ 197.010906][ T9600] simple_read_from_buffer+0xc4/0x238 [ 197.010916][ T9600] proc_fail_nth_read+0x1a8/0x248 [ 197.010927][ T9600] vfs_read+0x230/0x8c8 [ 197.010937][ T9600] ksys_read+0x12c/0x228 [ 197.010946][ T9600] __arm64_sys_read+0x7c/0x90 [ 197.010956][ T9600] invoke_syscall+0x98/0x244 [ 197.010966][ T9600] el0_svc_common+0xec/0x23c [ 197.010975][ T9600] do_el0_svc+0x4c/0x5c [ 197.010984][ T9600] el0_svc+0x64/0x260 [ 197.010993][ T9600] el0t_64_sync_handler+0x48/0x148 [ 197.011000][ T9600] el0t_64_sync+0x198/0x19c [ 197.151055][ T9607] loop2: detected capacity change from 0 to 1024 [ 197.234602][ T9607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 197.417072][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.911881][ T9610] syzkaller0: entered promiscuous mode [ 197.911927][ T9610] syzkaller0: entered allmulticast mode [ 198.089538][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.124819][ T9620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1188'. [ 198.136924][ T9618] tipc: Enabled bearer , priority 0 [ 198.138770][ T9608] tipc: Resetting bearer [ 198.149314][ T9608] tipc: Disabling bearer [ 198.185477][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.195139][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.195321][ T9568] bridge_slave_0: entered allmulticast mode [ 198.203146][ T9568] bridge_slave_0: entered promiscuous mode [ 198.204037][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.213038][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.213193][ T9568] bridge_slave_1: entered allmulticast mode [ 198.213672][ T9568] bridge_slave_1: entered promiscuous mode [ 198.234053][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.237039][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.246103][ T9568] team0: Port device team_slave_0 added [ 198.248123][ T9568] team0: Port device team_slave_1 added [ 198.256960][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.258196][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.262743][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.265506][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.266950][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.271155][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.305489][ T9568] hsr_slave_0: entered promiscuous mode [ 198.306895][ T9568] hsr_slave_1: entered promiscuous mode [ 198.308486][ T9568] debugfs: 'hsr0' already exists in 'hsr' [ 198.310100][ T9568] Cannot create hsr debugfs directory [ 198.746649][ T4712] Bluetooth: hci2: command tx timeout [ 198.766738][ T9568] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 198.769278][ T9568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.769757][ T9568] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 198.771795][ T9568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.773950][ T9568] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 198.776174][ T9568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.778029][ T9568] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 198.782290][ T9568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.046647][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.046698][ T9568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.046787][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.046833][ T9568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.062767][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.067551][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.155147][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.162311][ T9568] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.164418][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.164469][ T5374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.172476][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.172521][ T4846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.595373][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.664224][ T9669] netlink: 'syz.2.1197': attribute type 21 has an invalid length. [ 199.664258][ T9669] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.811237][ T9568] veth0_vlan: entered promiscuous mode [ 200.105328][ T9568] veth1_vlan: entered promiscuous mode [ 200.130051][ T9568] veth0_macvtap: entered promiscuous mode [ 200.136862][ T9568] veth1_macvtap: entered promiscuous mode [ 200.149565][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.152717][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.224008][ T5374] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.224069][ T5374] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.224107][ T5374] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.224129][ T5374] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.288230][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.288267][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.328292][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.328332][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.417345][ T9687] loop9: detected capacity change from 0 to 256 [ 200.417727][ T9687] vfat: Unknown parameter '' [ 200.422205][ T9687] loop9: detected capacity change from 0 to 1024 [ 200.442694][ T9687] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 200.466589][ T9568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.560537][ T9696] loop5: detected capacity change from 0 to 7 [ 200.583422][ T9696] Dev loop5: unable to read RDB block 7 [ 200.583457][ T9696] loop5: AHDI p1 p2 p3 [ 200.583472][ T9696] loop5: partition table partially beyond EOD, truncated [ 200.583591][ T9696] loop5: p1 start 1818582900 is beyond EOD, truncated [ 200.583613][ T9696] loop5: p3 start 335544320 is beyond EOD, truncated [ 200.822727][ T4712] Bluetooth: hci2: command tx timeout [ 201.082344][ T9703] loop8: detected capacity change from 0 to 1024 [ 201.124851][ T9703] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.541626][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.622982][ T9724] loop8: detected capacity change from 0 to 256 [ 201.623507][ T9724] vfat: Unknown parameter '' [ 201.677077][ T9725] overlayfs: failed to resolve './file1': -2 [ 202.788078][ T9734] syzkaller1: entered promiscuous mode [ 202.788120][ T9734] syzkaller1: entered allmulticast mode [ 202.804832][ T9735] loop9: detected capacity change from 0 to 2048 [ 202.857747][ T4712] Bluetooth: hci2: command tx timeout [ 202.869787][ T9730] overlayfs: failed to resolve './bus': -2 [ 203.214195][ T9735] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.367533][ T9749] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 203.367573][ T9749] overlayfs: failed to verify index dir 'upper' xattr [ 203.367595][ T9749] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 203.390960][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1216'. [ 203.393627][ T9747] batadv0: entered promiscuous mode [ 203.657583][ T9568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.085647][ T9779] loop2: detected capacity change from 0 to 256 [ 204.104753][ T9779] vfat: Unknown parameter '' [ 204.112241][ T3682] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.170558][ T9779] loop2: detected capacity change from 0 to 1024 [ 204.184289][ T9783] syzkaller1: entered promiscuous mode [ 204.185286][ T9783] syzkaller1: entered allmulticast mode [ 204.187476][ T9779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 204.254944][ T3682] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.352361][ T3682] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.494924][ T3682] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.943332][ T4712] Bluetooth: hci2: command tx timeout [ 205.208076][ T3682] veth1_to_bridge: left allmulticast mode [ 205.208112][ T3682] veth1_to_bridge: left promiscuous mode [ 205.208229][ T3682] bridge0: port 1(veth1_to_bridge) entered disabled state [ 205.967425][ T3682] bond0 (unregistering): Released all slaves [ 205.969949][ T3682] bond1 (unregistering): Released all slaves [ 206.045446][ T9805] IPVS: Error connecting to the multicast addr [ 206.094513][ T4712] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 206.102409][ T3682] tipc: Disabling bearer [ 206.102497][ T3682] tipc: Disabling bearer [ 206.105042][ T3682] tipc: Left network mode [ 206.150122][ T9818] tipc: Resetting bearer [ 206.156239][ T9818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 207.144728][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.189729][ T9828] syzkaller0: entered promiscuous mode [ 207.191657][ T9828] syzkaller0: entered allmulticast mode [ 207.272247][ T9832] loop8: detected capacity change from 0 to 512 [ 207.301113][ T9832] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.332028][ T9846] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 207.341589][ T4394] 8021q: adding VLAN 0 to HW filter on device eth17 [ 207.414682][ T9846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.421396][ T9850] bond1: (slave veth0_to_bond): making interface the new active one [ 207.431885][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1242'. [ 207.433340][ T9850] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 207.433503][ T9828] tipc: Enabled bearer , priority 0 [ 207.436056][ T9822] tipc: Resetting bearer [ 207.436731][ T9856] netlink: 'syz.6.1242': attribute type 25 has an invalid length. [ 207.436753][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1242'. [ 207.446112][ T9822] tipc: Disabling bearer [ 207.547749][ T9846] bond1: entered promiscuous mode [ 207.547785][ T9846] veth0_to_bond: entered promiscuous mode [ 207.547951][ T9846] bond1: entered allmulticast mode [ 207.547966][ T9846] veth0_to_bond: entered allmulticast mode [ 207.576002][ T9864] netlink: 'syz.9.1246': attribute type 4 has an invalid length. [ 207.633626][ T9860] IPVS: Unknown mcast interface: vcan0 [ 207.814247][ T3682] hsr_slave_0: left promiscuous mode [ 207.816513][ T3682] hsr_slave_1: left promiscuous mode [ 207.841836][ T3682] veth1_macvtap: left promiscuous mode [ 207.841881][ T3682] veth0_macvtap: left promiscuous mode [ 207.841951][ T3682] veth1_vlan: left promiscuous mode [ 207.841977][ T3682] veth0_vlan: left promiscuous mode [ 208.146342][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.613887][ T9907] loop8: detected capacity change from 0 to 256 [ 208.622340][ T9907] vfat: Unknown parameter 'nnonumtail' [ 209.036389][ T4394] 8021q: adding VLAN 0 to HW filter on device eth18 [ 209.125993][ T9920] loop9: detected capacity change from 0 to 1024 [ 209.129645][ T9919] loop2: detected capacity change from 0 to 1024 [ 209.149888][ T9919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.156287][ T9920] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.281380][ T4394] 8021q: adding VLAN 0 to HW filter on device eth16 [ 209.372403][ T9568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.411895][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.454502][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1260'. [ 209.575975][ T9960] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 209.576001][ T9960] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 209.576073][ T9960] vhci_hcd vhci_hcd.0: Device attached [ 209.578979][ T9961] loop8: detected capacity change from 0 to 8 [ 209.579534][ T9961] Dev loop8: unable to read RDB block 8 [ 209.579549][ T9961] loop8: unable to read partition table [ 209.579717][ T9961] loop8: partition table beyond EOD, truncated [ 209.579727][ T9961] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 209.682458][ T9963] vhci_hcd: connection closed [ 209.719638][ T39] vhci_hcd vhci_hcd.9: stop threads [ 209.719834][ T39] vhci_hcd vhci_hcd.9: release socket [ 209.719851][ T39] vhci_hcd vhci_hcd.9: disconnect device [ 209.755570][ T9975] netlink: 'syz.2.1266': attribute type 3 has an invalid length. [ 209.755604][ T9975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1266'. [ 209.773846][ T4394] 8021q: adding VLAN 0 to HW filter on device eth19 [ 209.815567][ T9975] loop2: detected capacity change from 0 to 512 [ 209.818400][ T9975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 209.818474][ T9975] System zones: 1-12 [ 209.818616][ T9975] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1266: Directory hole found for htree index block 0 [ 209.818636][ T9975] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 209.820916][ T9975] EXT4-fs (loop2): Remounting filesystem read-only [ 209.821129][ T9975] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 209.821171][ T9975] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 209.821909][ T9975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.866359][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.025556][ T9992] loop2: detected capacity change from 0 to 256 [ 210.028991][ T9992] vfat: Unknown parameter 'nnonumtail' [ 210.441581][T10000] loop9: detected capacity change from 0 to 512 [ 210.454382][T10000] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.573580][T10012] netlink: 'syz.6.1276': attribute type 4 has an invalid length. [ 210.574924][T10012] netlink: 'syz.6.1276': attribute type 17 has an invalid length. [ 210.672780][T10014] syzkaller0: entered promiscuous mode [ 210.673883][T10014] syzkaller0: entered allmulticast mode [ 210.684419][T10014] tipc: Enabled bearer , priority 0 [ 210.686399][T10013] tipc: Resetting bearer [ 210.700198][T10013] tipc: Disabling bearer [ 210.764022][T10018] IPVS: set_ctl: invalid protocol: 0 172.30.0.9:20003 [ 211.212275][T10023] ubi0: attaching mtd0 [ 211.215495][T10023] ubi0: scanning is finished [ 211.215506][T10023] ubi0: empty MTD device detected [ 211.339088][T10023] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 211.339124][T10023] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 211.339157][T10023] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 211.339175][T10023] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 211.339193][T10023] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 211.339206][T10023] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 211.339217][T10023] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2105782917 [ 211.339229][T10023] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 211.340003][T10033] ubi0: background thread "ubi_bgt0d" started, PID 10033 [ 211.416715][ T9568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.568923][T10036] loop9: detected capacity change from 0 to 512 [ 211.570956][T10036] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 211.573308][T10036] EXT4-fs (loop9): can't mount with commit=, fs mounted w/o journal [ 212.030024][T10041] netlink: 'syz.6.1284': attribute type 8 has an invalid length. [ 212.473635][T10056] netlink: 'syz.2.1289': attribute type 8 has an invalid length. [ 212.473672][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 212.477853][T10056] veth1_to_team: entered promiscuous mode [ 212.479507][T10056] gretap0: entered promiscuous mode [ 212.480927][T10056] veth1_to_team: left promiscuous mode [ 212.483529][T10056] gretap0: left promiscuous mode [ 212.581346][T10065] loop8: detected capacity change from 0 to 1024 [ 212.604104][T10065] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.768983][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.300981][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1302'. [ 214.340648][T10102] netlink: 'syz.9.1303': attribute type 8 has an invalid length. [ 214.340683][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1303'. [ 214.350295][T10102] veth1_to_team: entered promiscuous mode [ 214.356288][T10102] gretap0: entered promiscuous mode [ 214.360192][T10102] veth1_to_team: left promiscuous mode [ 214.362482][T10102] gretap0: left promiscuous mode [ 215.602083][T10106] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1304'. [ 215.654259][T10110] futex_wake_op: syz.2.1304 tries to shift op by 32; fix this program [ 215.757685][T10123] loop8: detected capacity change from 0 to 1024 [ 215.795114][T10123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 216.725290][T10136] FAULT_INJECTION: forcing a failure. [ 216.725290][T10136] name failslab, interval 1, probability 0, space 0, times 0 [ 216.725330][T10136] CPU: 0 UID: 0 PID: 10136 Comm: syz.2.1310 Tainted: G L syzkaller #0 PREEMPT [ 216.725343][T10136] Tainted: [L]=SOFTLOCKUP [ 216.725348][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 216.725356][T10136] Call trace: [ 216.725359][T10136] show_stack+0x2c/0x3c (C) [ 216.725384][T10136] __dump_stack+0x30/0x40 [ 216.725396][T10136] dump_stack_lvl+0xd8/0x12c [ 216.725406][T10136] dump_stack+0x1c/0x28 [ 216.725415][T10136] should_fail_ex+0x41c/0x590 [ 216.725425][T10136] should_failslab+0xc4/0x120 [ 216.725433][T10136] __kmalloc_noprof+0x100/0x6f0 [ 216.725442][T10136] __register_sysctl_table+0x70/0xb4c [ 216.725452][T10136] register_net_sysctl_sz+0x354/0x3d0 [ 216.725462][T10136] __addrconf_sysctl_register+0x1fc/0x368 [ 216.725474][T10136] addrconf_sysctl_register+0x158/0x194 [ 216.725484][T10136] ipv6_add_dev+0xa30/0x100c [ 216.725493][T10136] addrconf_notify+0x4b8/0xbe8 [ 216.725502][T10136] notifier_call_chain+0x1a4/0x624 [ 216.725512][T10136] raw_notifier_call_chain+0x3c/0x50 [ 216.725520][T10136] call_netdevice_notifiers_info+0xb8/0x120 [ 216.725530][T10136] netif_set_mtu_ext+0x39c/0x574 [ 216.725538][T10136] netif_set_mtu+0xc4/0x180 [ 216.725545][T10136] dev_set_mtu+0x104/0x1f4 [ 216.725553][T10136] dev_ifsioc+0x388/0xc74 [ 216.725561][T10136] dev_ioctl+0x4a8/0xcf0 [ 216.725568][T10136] sock_do_ioctl+0x198/0x254 [ 216.725576][T10136] sock_ioctl+0x55c/0x7ec [ 216.725583][T10136] __arm64_sys_ioctl+0x14c/0x1c4 [ 216.725594][T10136] invoke_syscall+0x98/0x244 [ 216.725603][T10136] el0_svc_common+0xec/0x23c [ 216.725613][T10136] do_el0_svc+0x4c/0x5c [ 216.725622][T10136] el0_svc+0x64/0x260 [ 216.725629][T10136] el0t_64_sync_handler+0x48/0x148 [ 216.725637][T10136] el0t_64_sync+0x198/0x19c [ 216.919038][T10138] FAULT_INJECTION: forcing a failure. [ 216.919038][T10138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.919082][T10138] CPU: 0 UID: 0 PID: 10138 Comm: syz.2.1311 Tainted: G L syzkaller #0 PREEMPT [ 216.919099][T10138] Tainted: [L]=SOFTLOCKUP [ 216.919103][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 216.919110][T10138] Call trace: [ 216.919114][T10138] show_stack+0x2c/0x3c (C) [ 216.919134][T10138] __dump_stack+0x30/0x40 [ 216.919146][T10138] dump_stack_lvl+0xd8/0x12c [ 216.919156][T10138] dump_stack+0x1c/0x28 [ 216.919166][T10138] should_fail_ex+0x41c/0x590 [ 216.919176][T10138] should_fail+0x14/0x24 [ 216.919184][T10138] should_fail_usercopy+0x20/0x30 [ 216.919193][T10138] simple_read_from_buffer+0xc4/0x238 [ 216.919202][T10138] proc_fail_nth_read+0x1a8/0x248 [ 216.919210][T10138] vfs_read+0x230/0x8c8 [ 216.919219][T10138] ksys_read+0x12c/0x228 [ 216.919229][T10138] __arm64_sys_read+0x7c/0x90 [ 216.919238][T10138] invoke_syscall+0x98/0x244 [ 216.919248][T10138] el0_svc_common+0xec/0x23c [ 216.919257][T10138] do_el0_svc+0x4c/0x5c [ 216.919266][T10138] el0_svc+0x64/0x260 [ 216.919275][T10138] el0t_64_sync_handler+0x48/0x148 [ 216.919282][T10138] el0t_64_sync+0x198/0x19c [ 216.998476][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.715988][T10196] netlink: 'syz.6.1332': attribute type 11 has an invalid length. [ 217.970081][T10213] loop2: detected capacity change from 0 to 1024 [ 217.991690][T10213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.072045][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.092530][T10221] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1339'. [ 218.561042][T10234] loop8: detected capacity change from 0 to 8 [ 218.562938][T10234] squashfs: Unknown parameter '' [ 218.952611][T10239] bridge_slave_0: left allmulticast mode [ 218.952647][T10239] bridge_slave_0: left promiscuous mode [ 218.953704][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.958379][T10239] bridge_slave_1: left allmulticast mode [ 218.958410][T10239] bridge_slave_1: left promiscuous mode [ 218.958490][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.963295][T10239] bond0: (slave bond_slave_0): Releasing backup interface [ 218.998376][T10239] bond0: (slave bond_slave_1): Releasing backup interface [ 219.031031][T10239] team0: Port device team_slave_0 removed [ 219.033969][T10239] team0: Port device team_slave_1 removed [ 219.034292][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.034305][T10239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.037455][T10239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.037465][T10239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.040860][T10239] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.768231][T10199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.848575][T10289] loop8: detected capacity change from 0 to 512 [ 220.976544][T10289] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.236836][T10313] loop2: detected capacity change from 0 to 1024 [ 221.259028][T10313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 221.270152][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.926011][T10317] loop8: detected capacity change from 0 to 256 [ 221.926427][T10317] vfat: Unknown parameter 'nnonumtail' [ 222.030236][T10317] loop8: detected capacity change from 0 to 1024 [ 222.039421][T10317] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 222.277621][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.363005][T10329] ipip0: entered allmulticast mode [ 222.372287][T10329] team0: Port device ipip0 added [ 223.449325][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1366'. [ 223.449373][T10368] netlink: 'syz.2.1366': attribute type 25 has an invalid length. [ 223.449403][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 224.507524][ T4712] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 224.507788][ T4712] CPU: 1 UID: 0 PID: 4712 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT [ 224.507806][ T4712] Tainted: [L]=SOFTLOCKUP [ 224.507810][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 224.507816][ T4712] Workqueue: hci2 hci_rx_work [ 224.507836][ T4712] Call trace: [ 224.507839][ T4712] show_stack+0x2c/0x3c (C) [ 224.507857][ T4712] __dump_stack+0x30/0x40 [ 224.507869][ T4712] dump_stack_lvl+0xd8/0x12c [ 224.507881][ T4712] dump_stack+0x1c/0x28 [ 224.507894][ T4712] sysfs_warn_dup+0x9c/0xb8 [ 224.507906][ T4712] sysfs_create_dir_ns+0x190/0x1f4 [ 224.507917][ T4712] kobject_add_internal+0x290/0x6f0 [ 224.507934][ T4712] kobject_add_varg+0x9c/0xe8 [ 224.507945][ T4712] kobject_add+0x110/0x1c8 [ 224.507955][ T4712] device_add+0x394/0x9f0 [ 224.507966][ T4712] hci_conn_add_sysfs+0xbc/0x1e8 [ 224.507979][ T4712] le_conn_complete_evt+0xc68/0x10f8 [ 224.507990][ T4712] hci_le_conn_complete_evt+0x114/0x3d8 [ 224.508001][ T4712] hci_le_meta_evt+0x2b0/0x46c [ 224.508014][ T4712] hci_event_packet+0x4c0/0x9c8 [ 224.508025][ T4712] hci_rx_work+0x2f4/0xd78 [ 224.508035][ T4712] process_scheduled_works+0x788/0x10b8 [ 224.508046][ T4712] worker_thread+0x798/0xbd0 [ 224.508055][ T4712] kthread+0x304/0x3d4 [ 224.508064][ T4712] ret_from_fork+0x10/0x20 [ 224.508138][ T4712] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 224.508213][ T4712] Bluetooth: hci2: failed to register connection device [ 224.786492][T10387] loop2: detected capacity change from 0 to 256 [ 224.786955][T10387] vfat: Unknown parameter '' [ 224.865489][ T4411] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 120 seconds [ 224.880100][T10387] loop2: detected capacity change from 0 to 1024 [ 224.886667][T10387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 225.211973][T10390] netlink: 'syz.9.1370': attribute type 4 has an invalid length. [ 225.430873][T10334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.621564][T10406] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1376'. [ 225.818840][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1374'. [ 225.822863][ T4721] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 225.822899][ T4721] CPU: 1 UID: 0 PID: 4721 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT [ 225.822918][ T4721] Tainted: [L]=SOFTLOCKUP [ 225.822922][ T4721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 225.822928][ T4721] Workqueue: hci4 hci_rx_work [ 225.822952][ T4721] Call trace: [ 225.822955][ T4721] show_stack+0x2c/0x3c (C) [ 225.822973][ T4721] __dump_stack+0x30/0x40 [ 225.822987][ T4721] dump_stack_lvl+0xd8/0x12c [ 225.822999][ T4721] dump_stack+0x1c/0x28 [ 225.823013][ T4721] sysfs_warn_dup+0x9c/0xb8 [ 225.823027][ T4721] sysfs_create_dir_ns+0x190/0x1f4 [ 225.823038][ T4721] kobject_add_internal+0x290/0x6f0 [ 225.823052][ T4721] kobject_add_varg+0x9c/0xe8 [ 225.823062][ T4721] kobject_add+0x110/0x1c8 [ 225.823072][ T4721] device_add+0x394/0x9f0 [ 225.823083][ T4721] hci_conn_add_sysfs+0xbc/0x1e8 [ 225.823098][ T4721] le_conn_complete_evt+0xc68/0x10f8 [ 225.823110][ T4721] hci_le_conn_complete_evt+0x114/0x3d8 [ 225.823122][ T4721] hci_le_meta_evt+0x2b0/0x46c [ 225.823136][ T4721] hci_event_packet+0x4c0/0x9c8 [ 225.823150][ T4721] hci_rx_work+0x2f4/0xd78 [ 225.823159][ T4721] process_scheduled_works+0x788/0x10b8 [ 225.823171][ T4721] worker_thread+0x798/0xbd0 [ 225.823182][ T4721] kthread+0x304/0x3d4 [ 225.823191][ T4721] ret_from_fork+0x10/0x20 [ 225.823255][ T4721] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 225.823274][ T4721] Bluetooth: hci4: failed to register connection device [ 225.902199][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1374'. [ 226.461017][T10421] FAULT_INJECTION: forcing a failure. [ 226.461017][T10421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.461059][T10421] CPU: 1 UID: 0 PID: 10421 Comm: syz.8.1380 Tainted: G L syzkaller #0 PREEMPT [ 226.461073][T10421] Tainted: [L]=SOFTLOCKUP [ 226.461077][T10421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 226.461082][T10421] Call trace: [ 226.461085][T10421] show_stack+0x2c/0x3c (C) [ 226.461102][T10421] __dump_stack+0x30/0x40 [ 226.461113][T10421] dump_stack_lvl+0xd8/0x12c [ 226.461123][T10421] dump_stack+0x1c/0x28 [ 226.461132][T10421] should_fail_ex+0x41c/0x590 [ 226.461142][T10421] should_fail+0x14/0x24 [ 226.461150][T10421] should_fail_usercopy+0x20/0x30 [ 226.461158][T10421] _inline_copy_from_user+0x3c/0x174 [ 226.461167][T10421] move_addr_to_kernel+0x88/0x168 [ 226.461177][T10421] __sys_connect+0xd4/0x194 [ 226.461186][T10421] __arm64_sys_connect+0x7c/0x94 [ 226.461196][T10421] invoke_syscall+0x98/0x244 [ 226.461206][T10421] el0_svc_common+0xec/0x23c [ 226.461215][T10421] do_el0_svc+0x4c/0x5c [ 226.461224][T10421] el0_svc+0x64/0x260 [ 226.461233][T10421] el0t_64_sync_handler+0x48/0x148 [ 226.461240][T10421] el0t_64_sync+0x198/0x19c [ 226.537727][T10427] loop8: detected capacity change from 0 to 2048 [ 226.607318][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.623548][T10430] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1384'. [ 226.629558][T10430] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1384'. [ 226.635508][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1384'. [ 226.918696][T10437] netlink: 'syz.2.1383': attribute type 4 has an invalid length. [ 226.959880][T10441] syzkaller0: entered promiscuous mode [ 226.961069][T10441] syzkaller0: entered allmulticast mode [ 226.976772][T10441] tipc: Enabled bearer , priority 0 [ 226.978958][T10440] tipc: Resetting bearer [ 226.986635][T10440] tipc: Disabling bearer [ 227.421949][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 227.526512][T10453] loop9: detected capacity change from 0 to 7 [ 227.529422][ C0] blk_print_req_error: 138 callbacks suppressed [ 227.529458][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.529480][ C0] buffer_io_error: 138 callbacks suppressed [ 227.529492][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.535125][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.535156][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.538339][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.538367][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.541909][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.541940][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.545376][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.545402][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.548728][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.548754][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.552024][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.552050][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.552102][T10453] ldm_validate_partition_table(): Disk read failed. [ 227.556393][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.556420][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.559842][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.559866][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.563062][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 227.563088][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.567177][T10453] Dev loop9: unable to read RDB block 0 [ 227.568602][T10453] loop9: unable to read partition table [ 227.569999][T10453] loop9: partition table beyond EOD, truncated [ 227.571737][T10453] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 227.805503][T10457] IPVS: Error connecting to the multicast addr [ 227.931723][T10465] loop8: detected capacity change from 0 to 1024 [ 227.970895][T10465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.352300][ T8522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.514022][T10484] loop9: detected capacity change from 0 to 7 [ 228.517957][T10484] ldm_validate_partition_table(): Disk read failed. [ 228.518214][T10484] Dev loop9: unable to read RDB block 0 [ 228.518432][T10484] loop9: unable to read partition table [ 228.518499][T10484] loop9: partition table beyond EOD, truncated [ 228.518508][T10484] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 228.541438][T10482] loop8: detected capacity change from 0 to 8192 [ 228.809229][T10494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'. [ 228.890595][T10494] netlink: 'syz.2.1404': attribute type 4 has an invalid length. [ 229.521194][T10507] loop9: detected capacity change from 0 to 512 [ 229.532871][T10507] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.1408: corrupted in-inode xattr: invalid ea_ino [ 229.532923][T10507] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.533106][T10507] EXT4-fs (loop9): Remounting filesystem read-only [ 229.533685][T10507] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.540858][ T30] audit: type=1400 audit(1048823.461:96): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="min_batch_time" requested=x pid=10506 comm="syz.9.1408" name="/" dev="loop9" ino=2 [ 229.558574][ T9568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.588766][ T30] audit: type=1326 audit(1048823.501:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.9.1409" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b77b68 code=0x7ffc0000 [ 229.589355][ T30] audit: type=1326 audit(1048823.511:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.9.1409" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b77b68 code=0x7ffc0000 [ 229.594124][ T30] audit: type=1326 audit(1048823.511:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.9.1409" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b77b68 code=0x7ffc0000 [ 229.597638][ T30] audit: type=1326 audit(1048823.511:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.9.1409" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb0b77b68 code=0x7ffc0000 [ 229.597671][ T30] audit: type=1326 audit(1048823.511:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.9.1409" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b77b68 code=0x7ffc0000 [ 229.597688][ T30] audit: type=1326 audit(1048823.511:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.9.1409" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b77b68 code=0x7ffc0000 [ 229.597703][ T30] audit: type=1326 audit(1048823.511:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.9.1409" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b77b68 code=0x7ffc0000 [ 229.597718][ T30] audit: type=1326 audit(1048823.511:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.9.1409" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0b77b68 code=0x7ffc0000 [ 229.597734][ T30] audit: type=1326 audit(1048823.511:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10510 comm="syz.9.1409" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffffb0b77b68 code=0x7ffc0000 [ 229.667761][T10513] FAULT_INJECTION: forcing a failure. [ 229.667761][T10513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.667802][T10513] CPU: 0 UID: 0 PID: 10513 Comm: syz.9.1410 Tainted: G L syzkaller #0 PREEMPT [ 229.667816][T10513] Tainted: [L]=SOFTLOCKUP [ 229.667821][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 229.667827][T10513] Call trace: [ 229.667831][T10513] show_stack+0x2c/0x3c (C) [ 229.667849][T10513] __dump_stack+0x30/0x40 [ 229.667861][T10513] dump_stack_lvl+0xd8/0x12c [ 229.667870][T10513] dump_stack+0x1c/0x28 [ 229.667880][T10513] should_fail_ex+0x41c/0x590 [ 229.667890][T10513] should_fail+0x14/0x24 [ 229.667898][T10513] should_fail_usercopy+0x20/0x30 [ 229.667906][T10513] _inline_copy_from_user+0x3c/0x174 [ 229.667915][T10513] move_addr_to_kernel+0x88/0x168 [ 229.667929][T10513] __sys_connect+0xd4/0x194 [ 229.667939][T10513] __arm64_sys_connect+0x7c/0x94 [ 229.667949][T10513] invoke_syscall+0x98/0x244 [ 229.667959][T10513] el0_svc_common+0xec/0x23c [ 229.667968][T10513] do_el0_svc+0x4c/0x5c [ 229.667977][T10513] el0_svc+0x64/0x260 [ 229.667986][T10513] el0t_64_sync_handler+0x48/0x148 [ 229.667993][T10513] el0t_64_sync+0x198/0x19c [ 229.939473][ T4712] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 229.939700][ T4712] CPU: 0 UID: 0 PID: 4712 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT [ 229.939719][ T4712] Tainted: [L]=SOFTLOCKUP [ 229.939723][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 229.939728][ T4712] Workqueue: hci3 hci_rx_work [ 229.939748][ T4712] Call trace: [ 229.939751][ T4712] show_stack+0x2c/0x3c (C) [ 229.939771][ T4712] __dump_stack+0x30/0x40 [ 229.939784][ T4712] dump_stack_lvl+0xd8/0x12c [ 229.939795][ T4712] dump_stack+0x1c/0x28 [ 229.939807][ T4712] sysfs_warn_dup+0x9c/0xb8 [ 229.939819][ T4712] sysfs_create_dir_ns+0x190/0x1f4 [ 229.939830][ T4712] kobject_add_internal+0x290/0x6f0 [ 229.939843][ T4712] kobject_add_varg+0x9c/0xe8 [ 229.939852][ T4712] kobject_add+0x110/0x1c8 [ 229.939862][ T4712] device_add+0x394/0x9f0 [ 229.939873][ T4712] hci_conn_add_sysfs+0xbc/0x1e8 [ 229.939886][ T4712] le_conn_complete_evt+0xc68/0x10f8 [ 229.939898][ T4712] hci_le_conn_complete_evt+0x114/0x3d8 [ 229.939909][ T4712] hci_le_meta_evt+0x2b0/0x46c [ 229.939929][ T4712] hci_event_packet+0x4c0/0x9c8 [ 229.939941][ T4712] hci_rx_work+0x2f4/0xd78 [ 229.939951][ T4712] process_scheduled_works+0x788/0x10b8 [ 229.939962][ T4712] worker_thread+0x798/0xbd0 [ 229.939972][ T4712] kthread+0x304/0x3d4 [ 229.939981][ T4712] ret_from_fork+0x10/0x20 [ 229.940058][ T4712] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 229.940138][ T4712] Bluetooth: hci3: failed to register connection device [ 230.684099][T10538] loop9: detected capacity change from 0 to 256 [ 230.686993][T10538] vfat: Unknown parameter 'nnonumtail' [ 230.877009][T10545] FAULT_INJECTION: forcing a failure. [ 230.877009][T10545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.881159][T10545] CPU: 0 UID: 0 PID: 10545 Comm: syz.2.1422 Tainted: G L syzkaller #0 PREEMPT [ 230.881182][T10545] Tainted: [L]=SOFTLOCKUP [ 230.881186][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 230.881191][T10545] Call trace: [ 230.881194][T10545] show_stack+0x2c/0x3c (C) [ 230.881214][T10545] __dump_stack+0x30/0x40 [ 230.881225][T10545] dump_stack_lvl+0xd8/0x12c [ 230.881235][T10545] dump_stack+0x1c/0x28 [ 230.881244][T10545] should_fail_ex+0x41c/0x590 [ 230.881254][T10545] should_fail+0x14/0x24 [ 230.881262][T10545] should_fail_usercopy+0x20/0x30 [ 230.881270][T10545] simple_read_from_buffer+0xc4/0x238 [ 230.881280][T10545] proc_fail_nth_read+0x1a8/0x248 [ 230.881288][T10545] vfs_read+0x230/0x8c8 [ 230.881298][T10545] ksys_read+0x12c/0x228 [ 230.881307][T10545] __arm64_sys_read+0x7c/0x90 [ 230.881317][T10545] invoke_syscall+0x98/0x244 [ 230.881326][T10545] el0_svc_common+0xec/0x23c [ 230.881336][T10545] do_el0_svc+0x4c/0x5c [ 230.881345][T10545] el0_svc+0x64/0x260 [ 230.881354][T10545] el0t_64_sync_handler+0x48/0x148 [ 230.881361][T10545] el0t_64_sync+0x198/0x19c [ 231.153080][T10548] loop2: detected capacity change from 0 to 512 [ 231.168683][T10548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.672203][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.926965][T10579] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1432'. [ 233.329724][ T4721] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 233.641422][T10587] loop8: detected capacity change from 0 to 256 [ 233.644503][T10587] vfat: Unknown parameter 'nnonumtail' [ 234.421337][T10591] netlink: 'syz.7.1434': attribute type 1 has an invalid length. [ 234.442622][T10591] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.558396][T10591] bond1: entered promiscuous mode [ 234.558436][T10591] bond1: entered allmulticast mode [ 234.748008][T10610] loop9: detected capacity change from 0 to 256 [ 234.750537][T10610] vfat: Unknown parameter '' [ 234.780856][T10610] loop9: detected capacity change from 0 to 1024 [ 235.624368][T10610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 235.797660][ T9568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.998629][ T1253] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.254572][T10628] netlink: 'syz.6.1447': attribute type 5 has an invalid length. [ 236.333953][T10631] loop9: detected capacity change from 0 to 256 [ 236.335477][T10631] vfat: Unknown parameter 'nnonumtail' [ 236.355812][T10631] loop9: detected capacity change from 0 to 1024 [ 236.360774][ T1253] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.360781][T10631] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 236.728052][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.729232][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.729648][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.730029][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.730302][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.776581][ T1253] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.915691][ T1253] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.984069][T10632] lo speed is unknown, defaulting to 1000 [ 237.230942][T10658] loop9: detected capacity change from 0 to 128 [ 237.238880][T10658] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.246927][T10660] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1453'. [ 237.945304][ T1253] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 237.945341][ T1253] bridge1 (unregistering): left promiscuous mode [ 237.945448][ T1253] bridge1 (unregistering): left allmulticast mode [ 238.013622][ T1253] bond0 (unregistering): Released all slaves [ 238.019024][ T1253] bond1 (unregistering): Released all slaves [ 238.098031][ T1253] tipc: Left network mode [ 238.130519][ T9568] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 238.175168][T10683] loop2: detected capacity change from 0 to 512 [ 238.183850][T10684] loop9: detected capacity change from 0 to 1024 [ 238.184434][T10683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 238.184618][T10683] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 238.204121][T10684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.213495][T10684] overlayfs: failed to resolve './bus': -2 [ 238.291569][ T9568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.702935][T10708] loop9: detected capacity change from 0 to 256 [ 238.703471][T10708] vfat: Unknown parameter 'nnonumtail' [ 238.726232][T10708] loop9: detected capacity change from 0 to 1024 [ 238.728196][T10708] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 238.781105][ T4721] Bluetooth: hci0: command tx timeout [ 238.787789][T10712] netlink: 'syz.7.1460': attribute type 1 has an invalid length. [ 238.880165][ T4394] 8021q: adding VLAN 0 to HW filter on device eth20 [ 239.367603][T10733] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1469'. [ 239.466452][T10632] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.466868][T10632] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.468137][T10632] bridge_slave_0: entered allmulticast mode [ 239.468735][T10632] bridge_slave_0: entered promiscuous mode [ 239.470791][T10632] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.471302][T10632] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.471376][T10632] bridge_slave_1: entered allmulticast mode [ 239.475621][T10632] bridge_slave_1: entered promiscuous mode [ 239.665180][ T1253] hsr_slave_0: left promiscuous mode [ 239.667031][ T1253] hsr_slave_1: left promiscuous mode [ 239.697497][ T1253] veth1_macvtap: left promiscuous mode [ 239.697553][ T1253] veth0_macvtap: left promiscuous mode [ 239.697640][ T1253] veth1_vlan: left promiscuous mode [ 239.697744][ T1253] veth0_vlan: left promiscuous mode [ 240.217628][T10774] netlink: 'syz.7.1478': attribute type 1 has an invalid length. [ 240.224579][T10632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.238398][ T4394] 8021q: adding VLAN 0 to HW filter on device eth21 [ 240.250196][T10632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.255541][T10777] loop2: detected capacity change from 0 to 256 [ 240.275921][T10632] team0: Port device team_slave_0 added [ 240.278429][T10632] team0: Port device team_slave_1 added [ 240.301869][T10742] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 240.301935][T10742] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 240.314864][T10632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.314898][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.314936][T10632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.315651][T10632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.315713][T10632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.315730][T10632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.324242][T10777] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 240.324260][T10777] FAT-fs (loop2): Filesystem has been set read-only [ 240.324280][T10777] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 240.324312][T10777] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 240.324329][T10777] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 240.342078][T10742] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 240.342124][T10742] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.352047][T10742] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 240.353411][T10632] hsr_slave_0: entered promiscuous mode [ 240.355359][T10742] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 240.355397][T10742] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 240.360064][T10632] hsr_slave_1: entered promiscuous mode [ 240.361315][T10632] debugfs: 'hsr0' already exists in 'hsr' [ 240.362894][T10632] Cannot create hsr debugfs directory [ 240.366273][T10742] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 240.375625][T10742] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 240.378563][T10742] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 240.378603][T10742] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 240.383354][T10742] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 240.387715][T10742] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 240.397600][T10742] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.397649][T10742] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 240.411930][T10742] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 240.808553][T10795] netlink: 51 bytes leftover after parsing attributes in process `syz.9.1484'. [ 240.850702][T10804] loop9: detected capacity change from 0 to 512 [ 240.874220][T10804] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 240.882868][T10804] EXT4-fs (loop9): 1 truncate cleaned up [ 240.886153][T10804] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.950457][ T4394] 8021q: adding VLAN 0 to HW filter on device eth22 [ 240.979761][ T9568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.725841][T10834] loop2: detected capacity change from 0 to 512 [ 241.729961][ T4712] Bluetooth: hci1: command 0x0406 tx timeout [ 241.761858][T10834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.856519][ T4394] 8021q: adding VLAN 0 to HW filter on device eth23 [ 241.964113][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.015387][T10632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.022811][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.024070][T10632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.027006][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.027313][T10632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.031266][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.034403][T10632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.036452][T10632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.077049][T10632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.084356][T10632] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.087602][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.087649][ T5374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.094498][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.094545][ T6109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.108010][T10632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.222855][T10632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.237524][T10632] veth0_vlan: entered promiscuous mode [ 242.243001][T10632] veth1_vlan: entered promiscuous mode [ 242.255512][T10632] veth0_macvtap: entered promiscuous mode [ 242.259742][T10632] veth1_macvtap: entered promiscuous mode [ 242.263776][T10632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.266218][T10632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.269131][ T6109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.269230][ T6109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.269252][ T6109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.269266][ T6109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.295413][ T4846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.295442][ T4846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.305793][ T5374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.305824][ T5374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.350804][T10894] loop1: detected capacity change from 0 to 1024 [ 242.360653][T10894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.367668][ T4715] Bluetooth: hci4: command 0x0406 tx timeout [ 242.368796][ T4712] Bluetooth: hci5: command 0x0406 tx timeout [ 242.433571][T10894] overlayfs: workdir and upperdir must reside under the same mount [ 242.447559][ T4715] Bluetooth: hci2: command 0x0c1a tx timeout [ 242.448741][ T4712] Bluetooth: hci0: command 0x040f tx timeout [ 243.213659][T10632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.806533][ T4721] Bluetooth: hci1: command 0x0406 tx timeout [ 244.446084][ T4721] Bluetooth: hci5: command 0x0406 tx timeout [ 244.446093][ T4712] Bluetooth: hci4: command 0x0406 tx timeout [ 244.525987][ T4712] Bluetooth: hci0: command 0x040f tx timeout [ 244.526028][ T4712] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.263321][ T4339] udevd[4339]: worker [5704] /devices/virtual/block/nbd0 is taking a long time [ 246.524587][ T4721] Bluetooth: hci4: command 0x0406 tx timeout [ 246.524598][ T4712] Bluetooth: hci5: command 0x0406 tx timeout [ 246.614752][ T4712] Bluetooth: hci2: command 0x0c1a tx timeout [ 246.614791][ T4721] Bluetooth: hci0: command 0x040f tx timeout [ 247.894162][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.603161][ T4721] Bluetooth: hci5: command 0x0406 tx timeout [ 248.683118][ T4721] Bluetooth: hci0: command 0x040f tx timeout [ 248.694017][ T4721] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.761761][ T4721] Bluetooth: hci0: command 0x040f tx timeout [ 252.840469][ T4721] Bluetooth: hci0: command 0x040f tx timeout [ 254.920285][ T4414] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 150 seconds [ 284.992806][ T4414] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 180 seconds [ 285.322319][ T4339] udevd[4339]: worker [5704] /devices/virtual/block/nbd0 timeout; kill it [ 285.323115][ T4339] udevd[4339]: seq 13142 '/devices/virtual/block/nbd0' killed [ 293.938197][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 309.301534][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.048071][ T4414] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 210 seconds [ 345.114517][ T4414] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 240 seconds [ 370.701076][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 375.177481][ T4414] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 270 seconds [ 405.242953][ T4414] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 300 seconds [ 421.874013][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 426.096765][T11124] fuse: Unknown parameter 'fd0x0000000000000004' [ 426.756759][T11163] loop2: detected capacity change from 0 to 8192 [ 426.759687][T11163] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 426.764175][T11163] xt_addrtype: ipv6 does not support BROADCAST matching [ 426.983211][T11171] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1517'. [ 427.134377][T11182] lo speed is unknown, defaulting to 1000 [ 427.256221][T11190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1523'. [ 427.335423][T11197] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1527'. [ 427.351674][T11190] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1523'. [ 428.309825][T11206] syzkaller1: entered promiscuous mode [ 428.311594][T11206] syzkaller1: entered allmulticast mode [ 428.397697][T11210] loop2: detected capacity change from 0 to 128 [ 428.405029][T11210] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 428.422828][ T4706] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.507479][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 429.525171][T11146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.613735][T11230] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20004 [ 429.615731][T11230] loop2: detected capacity change from 0 to 512 [ 429.619151][T11230] EXT4-fs: Ignoring removed bh option [ 429.622072][T11225] lo speed is unknown, defaulting to 1000 [ 429.649616][T11230] EXT4-fs (loop2): orphan cleanup on readonly fs [ 429.649809][T11230] EXT4-fs (loop2): 1 truncate cleaned up [ 429.650609][T11230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 429.671181][T11230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.681074][T11233] loop9: detected capacity change from 0 to 8 [ 429.835368][T11223] lo speed is unknown, defaulting to 1000 [ 430.662471][T11279] bond1: entered allmulticast mode [ 430.775096][T11286] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1559'. [ 430.856107][T11290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1561'. [ 430.857717][T11290] netlink: 'syz.1.1561': attribute type 7 has an invalid length. [ 430.859326][T11290] netlink: 'syz.1.1561': attribute type 8 has an invalid length. [ 430.861314][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1561'. [ 430.900460][T11290] syz_tun: entered promiscuous mode [ 430.903281][T11290] batadv_slave_1: entered promiscuous mode [ 430.904674][T11290] batadv_slave_1: left promiscuous mode [ 430.906079][T11290] syz_tun: left promiscuous mode [ 430.940780][T11295] syzkaller1: entered promiscuous mode [ 430.940819][T11295] syzkaller1: entered allmulticast mode [ 431.585544][T11321] loop1: detected capacity change from 0 to 1024 [ 431.591463][T11321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 431.615902][T10632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.664554][T11326] dummy0: entered promiscuous mode [ 431.793025][T11325] dummy0: left promiscuous mode [ 432.195873][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.283551][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1578'. [ 432.464733][T11352] tmpfs: Bad value for 'mpol' [ 432.660746][T11350] tc_dump_action: action bad kind [ 433.036060][T11375] xt_hashlimit: size too large, truncated to 1048576 [ 433.163892][T11381] loop2: detected capacity change from 0 to 1024 [ 433.175438][T11381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.316183][T11386] bond1: entered allmulticast mode [ 433.451551][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.623968][T11401] loop2: detected capacity change from 0 to 4096 [ 433.651009][T11401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.748135][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.171006][T11423] loop2: detected capacity change from 0 to 1024 [ 434.181342][T11423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 434.214270][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.316617][T11428] loop2: detected capacity change from 0 to 1024 [ 434.337377][T11428] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.344671][T11428] EXT4-fs (loop2): Test dummy encryption mode enabled [ 434.346924][T11428] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 434.612746][T11428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.664610][T11428] VFS: Lookup of 'file0' in ext4 loop2 would have caused loop [ 434.675503][T11435] netlink: 'syz.6.1608': attribute type 1 has an invalid length. [ 434.697741][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.810709][T11447] loop2: detected capacity change from 0 to 256 [ 434.811133][T11447] vfat: Unknown parameter 'nnonumtail' [ 434.834420][T11447] loop2: detected capacity change from 0 to 1024 [ 434.835460][T11447] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 435.137985][T11449] loop1: detected capacity change from 0 to 1024 [ 435.219791][T11449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 435.496338][ T4414] block nbd0: Possible stuck request 0000000023305497: control (read@0,4096B). Runtime 330 seconds [ 435.853638][T11473] loop2: detected capacity change from 0 to 256 [ 435.891652][T11473] FAT-fs (loop2): Directory bread(block 64) failed [ 435.891713][T11473] FAT-fs (loop2): Directory bread(block 65) failed [ 435.891749][T11473] FAT-fs (loop2): Directory bread(block 66) failed [ 435.891762][T11473] FAT-fs (loop2): Directory bread(block 67) failed [ 435.891786][T11473] FAT-fs (loop2): Directory bread(block 68) failed [ 435.891797][T11473] FAT-fs (loop2): Directory bread(block 69) failed [ 435.891822][T11473] FAT-fs (loop2): Directory bread(block 70) failed [ 435.891833][T11473] FAT-fs (loop2): Directory bread(block 71) failed [ 435.891855][T11473] FAT-fs (loop2): Directory bread(block 72) failed [ 435.891865][T11473] FAT-fs (loop2): Directory bread(block 73) failed [ 436.595057][ T31] INFO: task udevd:5704 blocked in I/O wait for more than 143 seconds. [ 436.595137][ T31] Tainted: G L syzkaller #0 [ 436.595177][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 436.595208][ T31] task:udevd state:D stack:0 pid:5704 tgid:5704 ppid:4339 task_flags:0x400140 flags:0x00800019 [ 436.595358][ T31] Call trace: [ 436.595387][ T31] __switch_to+0x2b0/0x6e0 (T) [ 436.595433][ T31] __schedule+0x1c04/0x2db8 [ 436.595470][ T31] schedule+0x13c/0x20c [ 436.595506][ T31] io_schedule+0x1c/0xe0 [ 436.595542][ T31] folio_wait_bit_common+0x6b8/0xa30 [ 436.595577][ T31] do_read_cache_folio+0x23c/0x5a8 [ 436.595612][ T31] read_cache_folio+0x68/0x88 [ 436.595647][ T31] read_part_sector+0xcc/0x708 [ 436.595681][ T31] adfspart_check_POWERTEC+0x94/0x5b8 [ 436.595715][ T31] bdev_disk_changed+0x6c4/0x11ec [ 436.595749][ T31] blkdev_get_whole+0x15c/0x240 [ 436.595787][ T31] bdev_open+0x2b4/0x880 [ 436.595822][ T31] blkdev_open+0x2d4/0x408 [ 436.595855][ T31] do_dentry_open+0x5c4/0xfb8 [ 436.595892][ T31] vfs_open+0x44/0x2dc [ 436.595931][ T31] path_openat+0x22d4/0x2b88 [ 436.595966][ T31] do_file_open+0x1c8/0x2e8 [ 436.595999][ T31] do_sys_openat2+0x114/0x1e8 [ 436.596035][ T31] do_sys_open+0xac/0xdc [ 436.596070][ T31] __arm64_sys_openat+0xa0/0xbc [ 436.596105][ T31] invoke_syscall+0x98/0x244 [ 436.596142][ T31] el0_svc_common+0xec/0x23c [ 436.596178][ T31] do_el0_svc+0x4c/0x5c [ 436.596214][ T31] el0_svc+0x64/0x260 [ 436.596248][ T31] el0t_64_sync_handler+0x48/0x148 [ 436.596281][ T31] el0t_64_sync+0x198/0x19c [ 436.603295][ T31] [ 436.603295][ T31] Showing all locks held in the system: [ 436.603367][ T31] 1 lock held by khungtaskd/31: [ 436.603398][ T31] #0: ffff800088bf70c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 436.603712][ T31] 2 locks held by getty/4487: [ 436.603742][ T31] #0: ffff0000d48730a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 436.603904][ T31] #1: ffff80009238e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf70 [ 436.604099][ T31] 1 lock held by udevd/4698: [ 436.604227][ T31] 4 locks held by kworker/1:5/4814: [ 436.604259][ T31] 2 locks held by kworker/u8:11/5374: [ 436.604292][ T31] 1 lock held by udevd/5704: [ 436.604321][ T31] #0: ffff0000c8ba8350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xc4/0x880 [ 436.604605][ T31] 1 lock held by syz.7.1616/11464: [ 436.604635][ T31] 4 locks held by syz.6.1622/11482: [ 436.604666][ T31] 3 locks held by syz.9.1623/11484: [ 436.604697][ T31] [ 436.604724][ T31] ============================================= [ 436.604724][ T31] [ 436.604755][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 436.642508][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 436.643859][ T31] Tainted: [L]=SOFTLOCKUP [ 436.644472][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 436.646062][ T31] Call trace: [ 436.646487][ T31] show_stack+0x2c/0x3c (C) [ 436.647050][ T31] __dump_stack+0x30/0x40 [ 436.647698][ T31] dump_stack_lvl+0x30/0x12c [ 436.648318][ T31] dump_stack+0x1c/0x28 [ 436.648927][ T31] vpanic+0x594/0xaf8 [ 436.649482][ T31] vpanic+0x0/0xaf8 [ 436.650114][ T31] hung_task_panic+0x0/0x2c [ 436.650797][ T31] kthread+0x304/0x3d4 [ 436.651390][ T31] ret_from_fork+0x10/0x20 [ 436.652026][ T31] SMP: stopping secondary CPUs [ 436.652675][ T31] Kernel Offset: disabled [ 436.653283][ T31] CPU features: 0x0a000000,003c0008,27020501,5427fea7 [ 436.654278][ T31] Memory Limit: none [ 436.831194][ T31] Rebooting in 86400 seconds..