last executing test programs: 2m44.25064751s ago: executing program 1 (id=848): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) (async, rerun: 64) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (rerun: 64) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/81, 0x51}], 0x1, 0x0) 2m44.161248759s ago: executing program 1 (id=849): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x0, 0x48000002, r2, 0x0) fanotify_mark(r1, 0x12, 0x8000001, r0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000a00000000ffffffff000000000000000003000600000000000200fffce000000100"/64], 0x40}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0x24}, @l2cap_cid_le_signaling={{0x20}, @l2cap_ecred_conn_rsp={{0x18, 0xf1, 0x1c}, {0x7ff, 0x8, 0x8, 0x1, [0x4, 0x101, 0xa2, 0x7, 0xff, 0x9, 0xe912, 0xc, 0x8, 0x6]}}}}, 0x29) 2m44.14406259s ago: executing program 1 (id=850): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a00", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2m44.126981502s ago: executing program 1 (id=851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000280)=0x2e) r1 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0xff08) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x100}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) write$UHID_INPUT(r3, &(0x7f0000000400)={0x8, {"940de312c9be105c33394390ce360adcb8443d1ca2464ad29fe46c8717a823e29b12011e867516a9c1b63394e6b4922549ac2f98b0bafc013757371b5762e5b03b4c8cfcc5d34368b21917740955f80e80fa98a68cb052b102c03e72a4c6702778dfcc5bb74ce23d914f8b143bd94d7382a385be93f61eef509d6cbffa81afee0e3524b8b768a0ef0ae00ad2a23728722436d1c150b512b6c642cb2eeaecb085719014332015474a4ddf7098bb5ac398c0ce256e4dcfd4613dbe9a34b96439546a28db9ce97b344b6c97289b3854e127b4f533f56439a74fcffc41dfeffc5d7a99c01a0fedfd937af595c05a942216581f8efd1ffa1c23c6f08d6987be16bb52420c80bda5da46987fbf7209487defe0374226a526d3588660192d921bfe407f1d1833f390dd8b41b30c53b4deba5a086c516d9bc8ca572d8f0f875303c85bd16570e89f74d7c4ef547a07dd62f334fee76e2e0ca31cca1ad0528d7448ceecd4c9785c302a40bc114335dea8775958a3beff8eeb31afcb9a2c7561980f8554220769e5e90fdfb2f5a905518ef1667a91e2dd474383e4312ea219fe65d421006734fe04661f75e69ae825120b33fb74293e3b83e7f7f563b475cd6e08fd6878ee424fa141d3aee86d952c212c2e7730796510a463a8da486852b23a1d62b714a11301499029d9efb715a11b64f24cd2660c9a47573ce4dd042e333e433ee28b2bce545cf067040193057de290965c1d547fed137e5eb22f5c0a06ad4de6b78204bf053f37c5d96b8053ea445b640360da8fce3391514dc3d1f4e4b35047138cd8c2717bcba278a4f8c27bac01b469ee3fd04004f58287a18307b0ad4120f2c26b08c3267249bfbe1064a3f171e0cfe595f7ab146f3148c73228edf694dc0c400c36e3493b1aca5f85972dadb8d02bddb607b7a431750ca4863812b8020000000000000042db2971e280541cbfa446c6c6d85b77e3327a2d327c25b7619647374e76b1be266cb68959d2651d0c7438cb1b53982191858c66500d8536013701194a9f02dd77216f932e07a4c4b4558b2a38d7e5c39a453c8fb5fae0d00550a2d143f721cd676d842f2ae39ecbf99e027b4cf9f3c2a9bf3b663e51a0b29cf4cfb0877d5b89fdfa93fd9bf33392e6a2c8df36f9f2faa3716d293b7d94c93458c17df99aaadd218fe4c7b967b43f48725e6bac67bf9176e8c63f94862b036b1870bc314b51fea9d0c92020427abaf5be10d3faad2f684d46a2461f2a92350d6f204f03ad2a9fa54cbd8a7a3e7ba2d54f3615ac5ea47f120572f8ef941e81b0812bfc4227ef5719093afbf90040ef1a5eda64563eb7fd015ea54342340ec8648d911a8f3f358ca124ef8c70685bce2fbaeeebf54d059cefd53751b5cf33fe2d92c9df6a63821b6db5188210565e132768b192fb27e745605c529e3648060a98d656f35e36dc4be3102bd678db0ceb0301c5cb0f7f7a08c55cd038a5f751a7c96116f0bd9c9a349558a7a8fc6a73cce1132549169822bf32d742fc4f4e2e50f59eb669f2384282247c60253edc98f9bc802a288a94e1011a066ce9f6eca5f87d2afd893900c3aff87be959451269bc9ac735c43c1e5ecf5d5bff262a27f0c8a1ad401492ffec662e27b12399096fee9910d0fadfd1e1bcf1f20f8f7e5ff1cce9e8db0fd71dda6f228aa96bba6b4120361a6f6acc832be5daa1aabd03a9ae810f0d21466c1a652a47c11db6a8e52580a8347326113b54a4beeaeb21b45e5ef0aa3cfbfb22d99640b7b935bce8e37cebce586f7fe72208b491795a9fbb220ec9b98dd7811ced86292189ce351e8a64c6afde9c1dccbaaebf7e5e3d5e529e926e814b381342c13ea0757ce52a0b0a155d1c85c4108deffa719a22bef7b681a17504e22d6fe9197699e0a16a7104f412e3a681c8ee41d8fbddc8610c161f1fad9e4a5e526e20ac61496e9f3596cc94b79e9680a64a832dc26d6e33e127abe5c405b16978bc4297a85ccaf1599b195db9d66b698c770d84fa90d89b51eca02ed3a3465b8eca9589af034bd6b9c8f6329e393e4753887696ae5158e8ca3ef2e66fac38a6d6a1b61e81d5b6a3c1cb007d64a33f1fe01cf39b82b270e9083ce13b1a32f0c98376d43cdbf9f17b74655f3000343fe051a75ac658a84629b1245107652d6dfa54b1a7d77922becb74539ffb11292794f12ebfd3ea8888c7cd10692d52c85340f92c5d01464fe36deaaec6ad6cc22870372d61485e2d76accd9bf93e0842efe5652e73100a6627b3a4ce4d1594c8ddb5742897d05fd6f6333fa1b90afeaab9fc7426251d24deeef43784f12c0bb09f102962ee9ab427a53fd8da8e1e3c8000ac7164e61d6258c515dcdd911fb1a519d7b38e556457da330ceda8e948aeaf7421d37faf50071f0d38c08fc938278f247084195e778ac90ab7bfafb59c2a1c643cd18d883a46a6cc41410f505ba209746d6b12c015eddf31b6c9ebf2f04605518033721cdf02b1da210ca1465129b443c0c46247b5f8cceb000af2c551fcea1c1bef29c5859e95bcf0956b9092279b47dc652134d2bc54c3688978fd4d7c203749da5e4824fe314aa57e76f58fadfafcc7660b68b1a6043acf8f9f0c259d16fe236b5906f88816e7ab69b67f762ad79a5f654c507cc49be181525ff05cde4d56b53790151efa8060c4685e2b1dd0ad89551a41e0d3dda33c2b528922849a8dfcd7246c242c3b2aa38a69e3e5a37c5806c4bcff53e08ffc7a830d925e3394b688ffffffffcbfe387c9e7df19cfb2b54303c101557aa2ed080194fe0af76d672ed77dfa4c5c0c0f9693f4e8c446d3bc19c0a8654bb4ba8b4daae69edf414615473ec2aadaa6871b7d08a51e349acc7b16fddf741f71670da4c2b0eadcf19f46f0fd18b59ecf7b943a2a5c90125638a3b3270a366c074868e62fe2e8751ff3e60411d7e1b3fb6a873f7843489f661f1bc401765cdfacbd76e1b52e15fb10fc19dc4803d3a4743ab977fae35eed00d59ddf64fcbc61f5fa0cf4098d0babde4a397d2ef100c23ca9f836656d5f25b018606e148e3f66400a682472ed5d28b7de624ed838277432623c11027da18378e46c3fd340585b4835ab1d771266322eee56c3e6bf3300f5d48b6b01f515ba7f3fb726cfc6fdf6c07a2f46bbc3f36fc9ba6e551a46335337c881cc4a73e79e76638411adcaa81ee3b6d0e6e6c721da36dcab68bfb0ca6ba7b2c267b80120143a5c4be333b2cf85b3bd2425ca691ff367d130dbbd8e5f6a833e093eae9d176c1c3fb61557f9e5080ee7703fe2ca1061b52d0a40d7ee2f408b3ceac303e302d96d929c17026793c66423d748a81adfd7cb29027f327b0dac4055e88e385f0400f97988aa1fa40cdf776f9f07991fb55d9d4bf62ebefced240d821bd4fbba62c1b62320228c6a4ca613878e3eb538eea28e92b5d909fc7e63ed5a544e7698d0b7d3d99415d4028a5da4cc67fcba3b744acd4f92938027f42b785405228a38d85fd678703b9d41a6a54cd48303a6be64408101fc5471641c1c5a747244da684fef97aa48bf1a225007f26d9f4002a0dc14d01191ef1d749ea2ea05c42c173c3244c1039c04341b0cf37574d8b78e357b451bfcfb79762ed6a4fbc689690bf37afaa92702a0349ed9aecd9111df9fd57b97749bbf5003991029344497c9ff85adaa7a2e566647ba5bad341eed62034b581981dd7c9de9fd4c241a54ad4d6e9e1cf7ca984b13c628cc65eca0829e69d4d390581e43cd2ed5c56608b45c109f35350fb875316e71f79c433319462d4b589a1f7f2d14d43092655da23d63c63298ed62dd481ab0bc58e97f397b39c94b32fad6a1e0cd9da2dfbe6897ee4986fdbafdb0e4b575f800df5da43cf318ea7a5e83a0136b3bde3296b2bd230ed212f79500c6a4458522c3881532b7bfd170647ee65931760f35a1c1f95b8c93e4233f0de2a13c83f31522f2bee05a57c8378ac6bdd3c9e30dc188b30dadb936f35a3fa247732ebae6a8d762992f8a96c1d26981bda157f2b676ac9d61bb786ac8c349da94dbf75a21b786cdceb47a92597b6d2b22f7dc1187cdb4681ce9bebd69977bab9eabf2a68c1d3b3463d6c7f1392e12a17deb97f2ce5c9ef4021d3b4e0df6b3f4b693e136e3931837e91617cd85846f3019a74d2d65f36369e73a461753631d72f9e2834c446ae7e173d6b1935adc0ce65eb0eac830d442a0344f2cbaedf8d48cb0a6959d07f208fbb2dae434f4fdf35b265fbdbde4138b455b7941096d55808de601ddd8a41a70b12968862d0b4086d4ff55152aee65eaa761a9588bb25bce193b4e55ebb183807f118bff0ccbd85ea761e7c3b6cccb64f97b3f1bf7a96eecc7ab40e770a1620209b50ba23aab0f769a16c9b8092326987f0cd1de94b911ea6bef5cf15a93829b7cbf03aa85ef577633e058f81e9653fc47d15ab8bead567ed2affbbf5a470302c065086324dc304c777228050ea9f717e45b6676fc9002ccd0428fcb27d839e4139fb17d4ee72e2fe8394e5de0cc814d92663f8c5f87e131a34ef7094078be0cf54763c82004af9727c7972ff1ea6162b279beea87bc2741e996d14f549d0474aabe780c5b80a35eed311cb734c23d01c160e439662c813126747c7d09068e32fa72605d71abc2a332cb59d81071818d5e0944194285f4cfc050392e505dd93c8c882f46fb6b70b4660784d543a6bf34653487840fdc298c8280241174805bf3cf38083224d213cd6076beac135ed3f010000800000000047750cb0f4d2be6beada1c481a0152d80c0b520d2f090455494c83ba78eb91e6558d52ceceb23c956bb382bb280e6382d2cb679eecd2bcfb6107e2e4f568f1be293eaa0d2ebb77169b103d5fe74d745cf082c36022108b4c430a87fa8535f1c56d0c1d5dae50c549b1b08911e2d2619eef61131c7804b35c3ca4dac1f2595c68941b013b5ded8bfd52ed41da13c0886b7f9c61a5244a815711253aad7ea74eae788b1beea9bc15addb199d2fc79e81a34b887a0e4b935ad154e961c8b6972f124cae7742e82db1e714af15f34908960dbb4ea24e44ffd750c9d11dd45bfaae73028bc88fddf74b2d24de205980ba14f4889119f8a6291b3724497503ddf95222d5d050414e487a3dc65e5eda3169e10570a50440be346cc1f1b0c848410b46610c738636707c5d740a8e3a9b688c2c1ea54135bffd2ffd87d9dfa902f3dd97b2a6078fa65f5a5f95da2b9f6124fe07682e27ab65ab96573e762f5060439e18649798e0b9d7864f91dbc4f4ed3a4ab30671f8f7f3c49c7ac504a755f9420fd9b22421afd7203f7cd6dd8c8e7a33709e12d004e402672af2b3f9046bc57854f98482538ad48723cd153cf03103c157cdb1a63e839a02c3f0041d7020280f96f3f7e0ce89c408be10d344540808dee1bfcb01f5293ab606c71ffc09f9e63b93b37e8d8007ad8432d2e81c3d1d40a57711bdb798ee91a3f05f93f4f46f883db0613bf95fabd523d955d0d4a5518e1bb3dae7646af8af8d4a4d7dcfac633c6efa3164f9e05bbb4b05947ac0e6c4edd99a768eda4c7149cf38a460b522d6405aa47fada1c78f56fbd33669719b1496427f290532334b69d0a7cf6c46cefe5ecd0fd923b14929fd3db8a1a94ba63954b58ceb9b1e0f8471a02c13a160aa763083a5fd36c199075a769768e164f17911f5a416bb96198aa0954a7d27e30c480691ce80dc71a49100", 0x1000}}, 0xfffffe69) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000040)=0xbb, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='highspeed', 0x9) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000002900)={[{@orlov}, {@grpid}, {@usrjquota}, {@grpid}, {@noload}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@bsdgroups}, {@grpid}, {@norecovery}]}, 0xfe, 0x499, &(0x7f0000002e80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 2m43.42255563s ago: executing program 1 (id=855): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SHUTDOWN={0x22, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (fail_nth: 1) 2m42.76924552s ago: executing program 1 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2m42.724454914s ago: executing program 32 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 2m18.413068165s ago: executing program 2 (id=1099): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x50) 2m18.388321294s ago: executing program 2 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0x10, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m17.534386288s ago: executing program 2 (id=1110): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000040)=0x8, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x5, 0x5) fadvise64(r1, 0x8f, 0x6, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x4000800) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f0000000180)={[{@usrjquota}], [{@fsname={'fsname', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@euid_gt={'euid>', r3}}]}, 0x81, 0x633, &(0x7f0000000c00)="$eJzs3c9vVNUeAPDvnWlLS3mvhby893iLR5OXF0iUlhYwxLiArSEN/oiJcaGVFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmyUVcu3LgyJEQJGxITx9zp3DLT3hnotJ1LOp9PMvSe+6Pne5l+55x75557A+haI+k/pYi9ETGXRAwlSyvLeqK2cGR5vfv3PjidvpKoVF76LYmkNi9bP6n9HKxt3B8RP3yXxJ7y2nrnF6+cn5qdnblcK48tXJgbm1+8cvDchamzM2dnLk48M3Hs6JGjx8YPtbVfV3Pmnbz+9rtDH02+9tUXfyTjX/88mcTxeL62Yv1+bJaRGKn+nyRrFw0e2+zKClKu/Z3Uv8VJT4EBsS7Z+9cbEf+KoSjHwzdvKD58odDggC1VSSIqQJdK5D90qawfkB3brz4OLhXSKwE64e6J5RMAa/O/Z/ncYPRXzw3svJ9E/WmdJCLaOzPXaFdE3L41ef3MrcnrsUXn4YB8S9ci4t95+Z9U8384+mO4mv+lhvxP+wWnaj/T+S9uUjyPyn/9Edg8y/nf3zL/o0n+v1GX/2+2Wf/Iw8m3Bhryf6DdXQIAAAAAAICudfNERDyd9/1/aeX6n8i5/mcwIo5vQv0jq8r3B2LV9/+lO5tQDZDj7omI53Kv/y1lV9sMl+tKw9GbnDk3O3MoIv4eEQeid0daHm9Rx8GP93zebNlI7fq/7JXWf7t2LWAtjjs9Oxq3mZ5amNrofgMRd69F/Cf3+t9kpf1Pctr/9LNgrsXvPfzqw+k9/79xqtl6j85/YKtUvozYn9v+L9+14kF1hGDL+3OMVfsDY1mvYK3/vv/JN83qbzf/3WICNi5t/3e2yP+0y5/U369nfv11HF7sqTRb1m7/vy95uXrLmb7avPemFhYuj0f0JSfL6dyG+RPrjxm2oywfsnxJ8//A/1qf/8vr/w9ExNKq35383jimOPPPPwd/aRaP/j8UJ83/6XW1/+ufmLgx/G2z+rP8z5r4/Pb/SLWtP1CbM51zP0HoRp9ladrXOD8nHXvyFnU6XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYDkoRsSuS0mj2tP8olUZHIwYj4h+xszR7aX7hqTOX3rk4na5Xff5/KXvS79ByOcme/z9cV55YVT4cEbsj4tPyQLU8evrS7HTROw8AAAAAAAAAAAAAAAAAAABPiMFV4/931cb/p34tFx0dsOV6ig4AKExO/v9YRBxA52n/oXu1zP/X73UuEKDjHqf97+9AHEDn6f9D95L/0L3W5n+rb/7vVSqVLQ0H6CDtP3Qv+Q8AAAAAANvK7n03f0oiYunZgeor1Vdb1ltoZMBWKxUdAFAYt/iB7uXSH+hedcf4w0XGARTiQSUikjWzrzWUcof/J5G75eObO72BjQEAAAAAAAAAAACg6+zfa/w/dCvj/6F7lZsWgO0uG/+/r+A4gM5zjA/dLfsMaDWSf834/5VjhY2M/wcAAAAAAAAAAAAA1mN+8cr5qdnZmcsmXmlz8+//FlF48O1NVCqVq+lfwZMSzxMwsWMDm2eXwhe/F7kT2Vi/x9uq4WNiMPf5fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEf8FQAA//+/xihd") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m17.411755391s ago: executing program 2 (id=1112): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x103495, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$usbfs(0x0, 0x204, 0x2) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r5, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r4) chroot(&(0x7f0000000100)='./file0\x00') getcwd(&(0x7f0000000140)=""/157, 0x9d) 2m17.34318231s ago: executing program 4 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'Z'}]}, @NFTA_BITWISE_MASK={0x18, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "e3be2fad38fde8163b564163f0"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) 2m17.283896953s ago: executing program 4 (id=1115): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001a7211a93087ee39fad4b5e2163177a289a35460cd30e4c156d6cdfb2ef47cf6518d88386b8a9b9be0891eaf1447763aa599d01ac89efa90a428303d434aa4594f86d9f4630d0b59215225a895a584a7edfb036ec5374b19a5b72e6998c4d99d0077d522d5c47f729ff8771e18b2c33c5fb90669582b7ca0be788464f94944c295b0f"], 0x7c}, 0x1, 0x0, 0x0, 0x400c014}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008055}, 0x40014) 2m16.529226058s ago: executing program 2 (id=1119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) 2m16.369337307s ago: executing program 4 (id=1122): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x36, 0x0, @void}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000e80)={0x2020}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 2m15.847900732s ago: executing program 2 (id=1134): socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = gettid() r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r6, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000063c0)="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", 0xff2}, {&(0x7f0000000240)="b7df5e157fc454d841ad6aec8257d6", 0xf}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000841}], 0x1, 0x44804) recvmsg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}, {&(0x7f00000003c0)=""/251, 0xfb}], 0x2}, 0x20012101) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m15.798275433s ago: executing program 33 (id=1134): socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = gettid() r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r6, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000063c0)="5985d20392a438a118753a61ccd1d0e83101f02653a3db12a8785d9bcc59b58251f9ae571dc6a2d023b82407fbb8ae52a24b445059869df6095b826013c10bb7745d9edc0ef211452945180b52cc3986fb74d70cdc0194be37b376d2d4798d4e4463d042b1a462e80d80915fcffca56f2e0f5a6b6bff7e43eb6c80c1a8e85c077f4e980c3aa7b4b34562044059224e7280a86d55356ca279765d0943a185ac585ba7355885a40b0f4d02e5afe7b154deb20048d62307273f7069b86987af5b7fd9272d1ed5a9891e493deafa8a98f30c86803d00028221b891d3ae3437e26e9e0bbb0c152036ffebc06c5aa3fe55480e68414e7283793c5f93bf95ee471bf2b70abf696bb304bbecce852fd81439df022489675c1827a96f824378a80ce5338143bbc8fc3b1955bba34f2121cf485212c7cd8b50d81382605d28573b46b376e1092560f6d76c8ee2c4ebd9cf88665cec5acd5c2bb34ed1ce0338a7c1c8583914be1ef3a054e91f35a82147c0ef819f7971e12c18c5314df9e06bbbea133f82e638fd4646fb6a517fe75130f65392e8e1456fff3ae5cc7298b7bd6e7ea141808b4b4ec6930e7ee97e802a9a5c37c7bfaf6f8fd113b1e713e9d07cf0ddddf91965c29dbcc7a6478a071efe498458ee8428baeacd171ca321a88863d747ae8ba633f835401e66c831bec8d66ede3a6be8c9d6cd2e543df191a661d934e115c49db11cd3382aa4c378ea27b37078e4dbd52d5237873388f0b114dbcd77332e3cae456d8a96465a763709b9e33255b9648f186ae462f585dd729676a66e5dcba00b76ef82b9926d820d1f81f2ef2bdedb9727bc9b8420a16af0a3d49bfabaf53637b5712cd1efcfecefea443d99749398406a15af44464330fcc7ae05bc1319a403f17320384adf670171b10572b7a3c29224327d4da0cc98605adb69b143b75f495c3ee34b0e2df6119cdecfc9c14adac77c00225ba394a33c2031f7fd6fd5c51603133fd282b714d0206a61dcbfd9826847751c0828c7258b75739fc0f26cb4f5037652f608bfd156660b8ca43069fdfd27dc658b768b0842a71bd2191064e7c343710b26b4f94900dea847881b9269a250b165aa5b32cb02e853e01df7283f5aae557f555cdd110ffa52c5c702cb214934c5aa8a99c87b2ec9dd6717693827029ad477fa822c84c83303d04a6db313af73b83ef53d0caae2a0de16e13746d092a2e6260638245c57bf2904740ef4d4385b3fd888ea17795c712dbce6a559c71a8425deab805f99ec9f16cf268c5c6cb6cbbefe71115e62c85e9a0940b96a19a49b4a9373250c5b7a2446b4393aaa144ba32a9a0fff5cffc515d48691911a84ef869af3c3b08db4d8e44279b8ecf0753e88e5405897b4050db08c254cf0ff5b69a045bc62049218a573c6a395148454953a72768ddbd4326a0d247a0a4571ea894875a2f899f47487c3d2b62e51d8239633d3421fd79b0c32d05b99256614accf64ee6e2d51a3bdd221e79d6475e6ac68159923977200feba975e290d768d7255416a06c8f161fa39f7a04c4651d420f1d96703cb3773bd2a2a0c37b1603151c4cc47f0699900849509534f8ec5131cfee5d96d598e28d571328ca037a34ba31aa5e6d51fe2604f8316545f129f0ae8e0856888d3315ed22f6246852df12d67e3a64e7891df946b81495189341e9401406037cfb31490fcff4fc0406f2f70e2cabcd0fb8adeec4be909526dfa252a5aee0435df3a07e0897b86eaff8dd190f466b2a81e8a37ffb577bfb5feddefb292809c1d925c2f9cf27380dc78e74d74ceb1d31ebe84bbd2e6ce48dded3c55203966896ad1458d3d3095b9bacf250416ee27aa73a5c5d6ec6b2c9c323759ffe97df44481f796f4762e3245c0a88fd129dbafde688f2c57445665c623025a76748a9931a7f67c53faa4a155c9ba5caa38986462e48db7c580749bd372955244c9d4a17631f24b9b64036de9e97147b7056dcb54652fca36a037d0c3f754a303c594d8e04f706fe75e8f19607e6cc94ac60d83b4fc620a00b52605323391f3e005dcdb9be443b59d89760b605f32c07bef27a326863e07d770e7bb2853354f6404a83d099559e5a25849bd16c6381354ec45df14e3e16099a0cc299256118be93e47c025b01a2fe899c81411c8f6b74808562ecb2f91b8688b1617b93516b29162bf71db6e2dbee1ba98fba3cf6e7f56d90fbf017d2d81d2411515d73272bc167a55770deacb3d79dcfa1cb9c27e27585b521d3900e4fb280c1ba1f9e956bd1326bf162255f66b0189ae648a402e48cc61fdd20fd3a09070c88167730bf80b34cecfcb37a4046552d1b345f66c97fb67f1993990e55e43ee58372455864de62d636d836477fca1ca355bce2eed04ca30751ad642e61862d1e29886b9acc5be9d6ab7e6eab7c89a7ebde051116ae5f12432caa8228c4dddb5221f7f5fafeef8d397ee0c7d94dfcd2fade21947c98bd89b071f4e24dfb43b46f1db5f1276d8d71e3cccca479cb612be6bd02e6f188403b85022ed0e9d42f9c4531a11659bfd144b4a49b6659be2a548658a66d7faa44622742d7c42d7f90caa2ca3a24d10c993a9b1c814f4e0b735615cbd9c00d6bf444d0ae1071f2b74023d2e53b9d2b79f6ddaeadcef3bcc5d13971b7f9c7e72d1a431e1d79234e1dab13ee758f741777d836905c7873de0192ecda15d3a224331fc2222f6793edd69da51befe4f772ec696e4e4e5deba877b52b91d8b7de4fd151e1009134cebf4a353e6219b21f131487b3fba0f4b7e39626c5c7583ed5073086ff735ce19cb786e8d1bf359b4c3a7bc29bbf9d441d914d7e842b88f0868d0f6a6fd41624271ad5e166d677ea5109b6c8e9d2fdfff9e944e9c9ad50b3cde7e3f229e2bbf81c6aaa7b7c8e5700362000b6509942bbed25253e0833a5f7a71975b780472ed6f3da3a2ba162f20b3b90d4a084acbb137129bbd9b65f3e9ba6886241d80ee90dcf7d64050d52e8550f21262a88395ca06b83a5b5d9c05426582c86fe7753019a71ecc84c59fae3239d195246306f153b301629fbc6bd6e3fbc6aff7d35d79c5c8046b61ec70e2b7356c9400477778990364091be2b74bdab711f5561ff137021fdf9e82a35fd5bf85673bbb2944cf1f36a2e25fa4dd948525621f7a14dc3c8d1e1f1ec9d334dddcf7f9487f3d3ec60106becfddc15ece3850215aa3231a543264263757c6417adde58eb6b624096ac5c7b96e4e294cc935ad9315669d03b80522e5b7f6207e325cc5e9a33cdd8d5512aa388e452674a936826d47f23097d33c4e4a1f2f0802a2b9be2a608f2f0ff27f6b041d70d268f848687d45e6e510691ad516c7d7038d4153fb30415e425a4cb9d879aee8ffbca65df46876151af9a583d9a3fb331fb1b616a8007fddba31bee77e420172cd2a2a140a3376db47d7336d958bfa6f4ae80f78310c9043a184258dbaa9bba0c2482d7eb70c2bd94d52587fb92fd80c58110b05ad6eb1623009cd263deb3cb219bfde713ef738dfed0b1c6254177d939e8c358cc69ddfa3e31aa4c3cbfe384d96749217ff3b2b45a15f34403fe327aa2f805d1eaf7ee7f187070032eceba18a11e4ccf7c2e3a4d5c72d1db7b0bb5dc2354ae7eb27dedb91a5571203835b482353950220ad39f21334135c6fdd22a71c6119ce5dfa292a71ad296b141663210872c192aa228e21068d717235f1186234de39e69e5904ead38314ef69b86a656371d9987d327a7064fc6e1acd7f822165b1e42da9bff573db1eaf2563552bf6dbb6591031883f5cf7e22d1f2e2522e5bb88fc4bdece187d7f2612886a7f314895d43dd2c9e1b731aec39014028590ea0c76f1cd7d71c96ed45ce31d5e38f38a36a95d54708875dd99d8612275450a700251c7f21742d31b9be6de5fcf63b7b639ff746f31537694b3005ddf6cc8375f25bd782bc784943b72bd19f938a449fe0a617b5b1430a4d506e3bf0a1f118b6e45e9e6a3515efd9ecd1a964c5459921b01a0cacf0d4e4659f06ee2e53123a2241b583072f91af6b82f51fa14622ead00697b2f511e7f54cc4e8b015bd03b4ebae849ec9f7738d945450ff8363aee60678b80a86e93326f6a87d73b1a114f6f6186e2a4365d66d5b74df15280c4060ec847da5a1baf1706e7a373f2ec73ad755bffdd5813cf5ce8cf8b07d4ac8b324293b7248145b35b13fe638f902c5e8147084c221591cefa221573080f49ed7b3479e9c81c4ec2e5e8df89ce0266f6023327aae85f74fc70085398ca9749a1b8467d3d2d7bdcfc4bb9af62721a4cf55a5d2600210eeda03de3b9353725eb991583d7226debf7e3d4b06d89c41599b3687d56571c6c810882e1060510b0e6480b4e3d8705c858e24897dd8bd936f9a16bd626b98dd55696aa2dea3c0a12a6b12f5befba90ea487134453b5a8e863b5446565730e9d84e019d664654568c3448bbddd8cccc15e4615addae0d732dafe6f54b229cd5689396720d0010dfea3f9e6d9793b51be5c4e39659e8eb604ec15ee7ae2a2961a8b815d9417795cdde0702d6cf7dcdc16f02365d7eee5dfc7a0a9ea3957672f00a209fb845e782777ef9e5c9e7aa7926bb93c3486a8612e222ddc9709d9a2acef6c60db859c4fd39f365bb22f90edd04f891fd3ccdff35c5eac56ec49d02063a7859aa14c938d575fb85cc26a3f3fb3ef4d8ce576e927dc54c27702aff904e133a6869ac4384ca6ce273d1a7f3b4ffb570dd097e607ade6733262b527c508e4ff7e09bb56432c36a38065c582210252efc06aa0d3fe0ea99e97e6ee88f80ad33bcb2cd0570b8f97488bfe09d4560b9ab44ec7ea5726d291460ab46d32922c1b37067425ff9abc8a4bf810879114dc266a575e1ddcbfd6ef2c51b624091b3ebe68ededfd94f883ae674b1f00be817a559b3c6376aa68f039628ae425191b7c7ba60e73b0fa3c4fe5533b4f8fe0b21f61a5f9e520e22cdbebd929048552b6d8d1d5c18fa9900b7786462e7e4d738e57485e9a6dd14a0fd37f0256613317df8ec3518c7eee50c59070a7276f8b0575426887f2cb5be122cc766a25a07132ef01611d0c2d3f16de29a8c0f39a3a5a3e9596b61fd4e518bcc52cdd2d87605ce9d9c5f2a6d4e11d2f94575b0d5de72d0b97d0a2cf32b5465c6a4ddb62d61b97f2331341c9d448ec775180f858394f2c0b2ee982b9f867d73f97d0e0e3b275ef49c7c262c4d6f5fac787edafaa8b79410b1288a0b52afd93c8584ff9d61eddfa0cada98bd3c200fc708078098764bbe304c44d62eff132415a917c022c9f7466318017da7b4649eb0fae58fcb716a1f295d84dd9ec14218beb0372c041aaa4421a8f75eaef5115f0f32aca8fd30fde0e9e08972e23faf5381eb18c626c0ce920261461c3dfe7f1e8b35ca16f7283de3af4bba5c384e256cd369568214101a8e27c94531a81fe4fba595a4455f8724eebea716d1a4940b3d787fc4bd6ad8aa403fceb74f316fb5a816890646338efb6f13aba195f127aa1b1107bf303b1f997c74d6f4f664d708f58c3b3ca063825405ad7a61260debf4b220443b6537f5ae94820ec62901944cc9023e655f82e0e31a13f351ed0336cbcfda8ae0b20025fb33e49f011f6aa708140cffefbd06f9b90fefc6f9d79f67495ff0b1a2f1ff075eda3fdd800088fc0583dc0e1e9f7f02673da61cc4466a2559d70cd90e453b11449442eb11f444e1203bc38754f7ad0d93bb91e40f9cd490d2dd5d7e2571c460718f94d4c61751c119fedbbbd28d7716ccb6aaa8ba", 0xff2}, {&(0x7f0000000240)="b7df5e157fc454d841ad6aec8257d6", 0xf}], 0x2, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000841}], 0x1, 0x44804) recvmsg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001c00)=""/4075, 0xfeb}, {&(0x7f00000003c0)=""/251, 0xfb}], 0x2}, 0x20012101) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m15.441234726s ago: executing program 4 (id=1138): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (fail_nth: 3) 2m15.328017163s ago: executing program 4 (id=1139): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000000680)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@ssrr={0x89, 0x7, 0xce, [@broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x7fffffff}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x712, 0xbc6, 0xdc, 0x3]}, @eol, @exp_fastopen={0xfe, 0x5, 0xf989, '<'}, @window={0x3, 0x3, 0x6}, @mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0xd3, 0x0, 0xe9f5}]}}}}}}}, 0x0) shutdown(r0, 0x1) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x4, 0x4) 2m15.276794069s ago: executing program 4 (id=1142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="f78d9ca58f06ff48ec680e835e75dd8f93283cb0a2dcaaa4b234ff4b0f3df4f6acb709814f10551e1dafebdc2eb668fb61299fde349f63698301175108ebc6e7784a273fe398c930c8d00fb927c0608d5e6bc7d2d936c4e22e695bb60950153251befe43ae11dc1f49c63b1d59488d3b942f92b30e58f1561a56eab971f0975f50caa1f2d0a3fca865956cadf8b3a0b4574994df40c5a3e6a97665103b0f6734bacf09e09b63a8ef1d85f24ce255e77780694deb8dfaa14e8f23fc5b8581c07628a0049003da4ccf78e5414e891e407b166a0adb9521057c8a133b30b9e4bec98424896f34000000001083fc0edc568a30cb4559a8644626e59b2832385d69d3b281ee2e9952d9d26cce1d8e02e257d31e07956d799a456b1b0ae09bf697884269a2e19edecec8ee970af7e1dbbceb4af708cea7aa8a3bad0aa5e3f43de01c2cffd6fdb0c9eeb6ce7deb9b0207b746db490702ed59b2a899c23187a38935cd6dcf67e81fbdded52b67253321f4fc118624071cb7240823a4a87aab147fe7e70bd2cdc21beeb65c53052942a74a7f82c1708743d53de5db5473ee723dde190d14b44f5dd7993aeb170cb8197d6096be192d536d3eecc75f95872969b4d079e96858abc176d725c3ec273e435919fdd9672383e9b44a8b59a8f17b437f17e472ab4f9fe9a599c668a07d2eccedb32c848eabb6919e490629adab29006d1a357835a09a8cc93f296c675cc0be21a88d6fcbaf81ea073bb6fa5b67cc1aa21a90a80000269e87c837c551e544a66886b5d9d322b225e0990e3c644f0fa93a5877161943764f5ef6395a8e29ded26f02b3f94822cf0281758fdf483c1a66c8484930ba0a5382e800825fa3409e715f7e3f85ac59cf6c58ed61dea7de0000000000000000000000000000001dcca88020e6eb2acdd5ad0a9a69dd796714a45d88d43a9bfaed086bbb30ecb5db173fe8cf41785532f6d6", 0x2b3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef", 0xb6}, {&(0x7f0000000140)="23b8ce44711f1e6f1e1059b58dfd6c1fbae9ca50cec9126827230a4b25a750120f30aab739c810d8424df34e6d1579255bc8ad160b61d2f336d7a823faad5de6204d45b9b5afde", 0x47}, {&(0x7f0000000ac0)="868e0efb0cce7d63cce87f0b969e4d661cf7c6c2ab2e79d06a3822d85773c5f9d303d6328e468ca95d37bb6a8183f07441c092ba53e95a7fd45c44becc62e5dbf264dfd8e0616e68323e8c03dd04e715af683b5554c09176a801cb43ddfe4747e61699509f80c98ef921fc3aa3b3ab8a021912227b275ee2f2ffc1d69eac00cdc6cf37438e630001f07b818d24dd0504d62f1cb17c120b407d0c4168032cee73ee5bda79ed4a589526795b0c8da1da2a56defb2cd8284850c71cc9ee263628f0ff1e8b6785d0c37327665cff8c4b0f30b23dc75ad68966b6ebd1d1caae036c124d130003baa8f2dc3edd5145a5b01c5a368dd257fb8730d34a2d56cf04bcfbb03fb2d16509c5f6bf64ca2ec5fb9c698145a27cc5585fd3a6a67333fe8e580fd4a9f235ac9e00a26842a8163be66b271456ab59accbc832a4b5155038ca174109a2952dd1a71a49ef06fe346a81b88a231f4c7edcb24785f151d127329da36c8793de35290981441f211b4803f96f9c904d0fc34479a0ede3c371579dd5307cebb36f816ee33949067062ca705789b33c83c02a9f10a9051b9299d204b4c365ce3b9b8101f6227b91f556df641b290d87822ac02a889685b00d3d929f83dc00d063b16d240aab974a03c165ebbe28b79d80de66c781eb980cbd572067520f3310b212e008f947e9e5f5717d2a9a1b5b5a742cbadf3f45eed041b4e1b0b72d255c78949c0c0841576ac27c6742ffeded73911cfcf41ed70967df82394dd55551f67fb1c237ae23afa270b8db5a2199a3347bfa0544dd49b7dc3053805889d9b99429d0d1b47579de3d068808860f733a3cb6ff7b4e1eecd3fe9ee511c501353c10b12d478aaa30ab51d9d0ddbed1ea0a897f5aa1e1588351af5744f49f76bf6870942341528a06494a1a7edbd820c5a5beac4629d4583db91d62b42097d33c64a6a062990b007e1238591f9db0099bd8153677f1d6c188982393c19abd626371f39d1b7b60aa51257ed2097836522f6702ea76d4e84c688e8949c5980497bef67e6cb822f52b82ed89873ee5454558130a3fcec45d1a058866f237da8157888f49b64fa5a72997db154a9dc16e5192587b3b73c1753550911f878b6b8e7928deec921c8481c5e24b30cd3b81c698e4850434470c98c015d99b7341828a5e8eabf1487cfdbfeccf26f5b982992609a534f021fc27cc3ba54c296a5c570d430b237aee8865851314ab37c9cdaa0d626ab782b32ef3a0e97ed651c50ccf6b16e1bfb37cb40740e1fbeb93576d80da0b9ed4bf1bedd00d1abcabff5f6ab7a6f062ce4753d917d0eea12dc01b961fa1505d6083f21e3f4c52866f640980523a5375226cf46ba1fa5706a7ba3fdcc4942dfff3bf02615ff4009834e8f029a74d66cf1b1a716be5b722956ffeeb1435ef8d4bfb7a3f9757329f319d7f235a439908aa264ea6c1d0bb8096977dbdd19cf5aa640f127476792d3eaf47e852dd3c444b5162bc2ca898cb21cc9b94e0ec772ab731c55fcbf8e4056d5dee0988eea3d4d5ccf53716154f05e0a9fbcf0cf16c1da6b9e8201e025b3c05dba067aa9b3250542e02ac85be092f0e93100ea5d29f57fb307eb496ea7d845c1c7c8bba021a7f62b46137337565a2c39920470aa167f004ba163bae81f8e48a98d71ce6d7c609b3c532fd8feca24686f9fab18768f1c61a2b9e8547cf2836bcc2a0cca52d5c20d78c6e11b13aa9ea7cfdd84935e63e23255dffa2c6954cfa7da8b5feff337c3b54966f88e344b3eafb4ae24e67cc02c7130b8dc7609a3f3df5dbb3d1b30bab092cf1f19bddd9a257b0b269f69fc00a4c34e1c05dc69797924319b92b3f588fff581b58ad2defd6247f632d1af1ca138f74b2534d320091e434af56e45978f10fe9adaf3217edee0f875ae776476d34e82de8d63506da726a0a6810ed07e672c3a535039e6fc3aa85d4e0f0eb056b0a84e2aca93d2046343f809fb2979a1160197fda1d10d01a6c4266a84d4ac73cc9b364e7b8957e400e25b89c3494898c2bc57fb0ac5eb7ab41e5b4b08e919e7ffdcfafe8b654fab7b9ddebd322650edf7634d23da58d0ead543b4a68f969994f3bbe8b8f0e2240a5da9369534f9d5604515505e5117b56cdd62ef5683b0c6c7f0e88d928558b76b451cea7a64a42b91e72f32ae153e1a0786a2edf229bcf68d2adfb678c75e4ba1d25f5dd20167277f1fb5ec2574db4c96892ee98ead3f90703ecbcff4cda5b0f8de4d7bcb34c1d449918795e8fcdc5b818b7b37aa3ae41f88f687e5be428efca6e1f8e4025da0ad08b063c9354377df6d695f200a2e6cdbfa3dc1d28b5477715e9f1e9341cc843c841b055d54569d6e6b912550b1b339384123c174a4539e809b420d99f55b1d6396a119e7f591fcfabcd46efcfb36c4185f5aad27f67d0ca6112e847c15518382cd1d051feb1943b1304e6c771fbe2c837ae36716550f23b788b31b158c7f3b46cb4cf9e72ecc64298a5479d2c899a593fbdf5560f1b20bffd4fb260c6cd8522e43288c24d0c25e57718fad7c7a158d1aaaae58c1ec9679ab1c9ae27f07fee40fdc4f38588d69e271e6307a1f3b66a4c59b61521bcc2f9144a166210974de8d22c843e40536ed4bd9fc377e0229e02b3ea47602b85ec562e5ff855ad8f2e75614da49994704c7f05c86cc6d040aa1b79cadad83b1e53b1fd158d68d80bbacd25264ea2343881637567eb0d704d6136ba0edcd0240829929bd6779d470561ff8d0c752125c5f97750d5f8c4a83387cbf9436d533e86558e25a91d385158dfa07328f7b94f078206408d0c97bc27b2401da43656b2fea7efb5824743676623937cda98c7b54b8361c356e4cd985aa611baf1356733862b824583a7cbff39601d23e66b837406bb79d86b3e346611555e24a2e20238aa0360209c30f6e5abea0767b020dfb7cac45675480605f990eae9889038837e1497f8deccf8f670f44253c050ab0b1a06cd3d50e221445779d25a55523a0c1768a8fa4b72f0911e866ce1bbd15c3a8b0dd8cef7a6ca2635cf2bfdde34fba00021e5303a22ed62a4f0561c926bc6389a926c087a65a77c00c3dfb3d429120ba18113dc72024bc3ca23997f7b5327552fb3d6ee4bb38e2b18eab3a3f81d74f37c09ede942bef58605cd0e919b844aa9e693bdd385fb3f1038f33fad5f160414e2044ffa1c297ef5ccd8f0f5085f548c2bf7677dd56e959d4f829ab7178e16b011fa846c6b7876be6dee0c7c4a2502d3e68da5fa2d13c9969bb3a5a2a219903d02dcd785dbeb5485f6bc2a8e8af6723300e93f3f732583f767e08db23f15e6924408bd00cf007ab85dc0839e553d5fd7f56bdbd99084139523fa8f9b937e46011b35278d3a9f95820b24fef53e87dbfc59238e8e71646cc859c0df3d8b65b6e9595475727fc055f217b4be6cfaa3278028d6bf0d4f9e2a8f555a5ba2764880e7f55c8c815290c7b8134eacb2df5968535e1056d17b357a2be569264d6ac2b452da1b09044e43093bbb466015f19db70964c989f3b1ae85c5c6afe8885c765d86c83a44bbe81264181cf2c064d3aeb9394d6367c4610837ef432d0fab04e4307895548a03544d0cdca3b08228c38db03b750b72d542633c1ff2f4b905c0b878415a3c1ccba44b4b1aef7b5319ca9ad2df4485e31713e78210ada8fc4732c14c2532a8d9f4c2bb68ea5d8b740a8cd7dc9cddc86a8056b4ce121304d23e908ba4935d20ee205c384f13cf8418b282fe01ba08d6affff979d4fc9361832297208913a65d84af2aa15a517443c746eeac446eb41dabeabb86c54f82019e47fc3326a695c0cf9dd947949b8497ae1bf321549aeec29adc6373d51f31e6a901041a6580bc070aa1436cc798b2514ae11ec6fd3f60b3e901ab186a3e0be6443f49ec3db72a49fac4159f1029b61dcc7bf322aff7183442bf20908f65dcfba5958ee6ba5bba613fdac6adcb0113dcad8afe2b3a5f2c6b43d5b7e27924c756547b4537812c4563f4b49337ea41ec0086558a0a625ed4170fa1c7e35b830d2e29b330ceaeb4e4937fff4092dd4fe99d9e05a7874e771d9926af625759b76cf7428c98a288ee966234d5f8cd723b011f801d63925f8b21031a1c3326ceebc67526bbcb123b0497df5c8bea4dfecab8bdef0d180a5489fde69df8d4ae99c23201f5065cd53e8976711e7a", 0xb8f}], 0x4, 0x0, 0x0, 0x4880}], 0x1, 0x150) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m0.019577121s ago: executing program 34 (id=1142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001b00)="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", 0x2b3}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef", 0xb6}, {&(0x7f0000000140)="23b8ce44711f1e6f1e1059b58dfd6c1fbae9ca50cec9126827230a4b25a750120f30aab739c810d8424df34e6d1579255bc8ad160b61d2f336d7a823faad5de6204d45b9b5afde", 0x47}, {&(0x7f0000000ac0)="868e0efb0cce7d63cce87f0b969e4d661cf7c6c2ab2e79d06a3822d85773c5f9d303d6328e468ca95d37bb6a8183f07441c092ba53e95a7fd45c44becc62e5dbf264dfd8e0616e68323e8c03dd04e715af683b5554c09176a801cb43ddfe4747e61699509f80c98ef921fc3aa3b3ab8a021912227b275ee2f2ffc1d69eac00cdc6cf37438e630001f07b818d24dd0504d62f1cb17c120b407d0c4168032cee73ee5bda79ed4a589526795b0c8da1da2a56defb2cd8284850c71cc9ee263628f0ff1e8b6785d0c37327665cff8c4b0f30b23dc75ad68966b6ebd1d1caae036c124d130003baa8f2dc3edd5145a5b01c5a368dd257fb8730d34a2d56cf04bcfbb03fb2d16509c5f6bf64ca2ec5fb9c698145a27cc5585fd3a6a67333fe8e580fd4a9f235ac9e00a26842a8163be66b271456ab59accbc832a4b5155038ca174109a2952dd1a71a49ef06fe346a81b88a231f4c7edcb24785f151d127329da36c8793de35290981441f211b4803f96f9c904d0fc34479a0ede3c371579dd5307cebb36f816ee33949067062ca705789b33c83c02a9f10a9051b9299d204b4c365ce3b9b8101f6227b91f556df641b290d87822ac02a889685b00d3d929f83dc00d063b16d240aab974a03c165ebbe28b79d80de66c781eb980cbd572067520f3310b212e008f947e9e5f5717d2a9a1b5b5a742cbadf3f45eed041b4e1b0b72d255c78949c0c0841576ac27c6742ffeded73911cfcf41ed70967df82394dd55551f67fb1c237ae23afa270b8db5a2199a3347bfa0544dd49b7dc3053805889d9b99429d0d1b47579de3d068808860f733a3cb6ff7b4e1eecd3fe9ee511c501353c10b12d478aaa30ab51d9d0ddbed1ea0a897f5aa1e1588351af5744f49f76bf6870942341528a06494a1a7edbd820c5a5beac4629d4583db91d62b42097d33c64a6a062990b007e1238591f9db0099bd8153677f1d6c188982393c19abd626371f39d1b7b60aa51257ed2097836522f6702ea76d4e84c688e8949c5980497bef67e6cb822f52b82ed89873ee5454558130a3fcec45d1a058866f237da8157888f49b64fa5a72997db154a9dc16e5192587b3b73c1753550911f878b6b8e7928deec921c8481c5e24b30cd3b81c698e4850434470c98c015d99b7341828a5e8eabf1487cfdbfeccf26f5b982992609a534f021fc27cc3ba54c296a5c570d430b237aee8865851314ab37c9cdaa0d626ab782b32ef3a0e97ed651c50ccf6b16e1bfb37cb40740e1fbeb93576d80da0b9ed4bf1bedd00d1abcabff5f6ab7a6f062ce4753d917d0eea12dc01b961fa1505d6083f21e3f4c52866f640980523a5375226cf46ba1fa5706a7ba3fdcc4942dfff3bf02615ff4009834e8f029a74d66cf1b1a716be5b722956ffeeb1435ef8d4bfb7a3f9757329f319d7f235a439908aa264ea6c1d0bb8096977dbdd19cf5aa640f127476792d3eaf47e852dd3c444b5162bc2ca898cb21cc9b94e0ec772ab731c55fcbf8e4056d5dee0988eea3d4d5ccf53716154f05e0a9fbcf0cf16c1da6b9e8201e025b3c05dba067aa9b3250542e02ac85be092f0e93100ea5d29f57fb307eb496ea7d845c1c7c8bba021a7f62b46137337565a2c39920470aa167f004ba163bae81f8e48a98d71ce6d7c609b3c532fd8feca24686f9fab18768f1c61a2b9e8547cf2836bcc2a0cca52d5c20d78c6e11b13aa9ea7cfdd84935e63e23255dffa2c6954cfa7da8b5feff337c3b54966f88e344b3eafb4ae24e67cc02c7130b8dc7609a3f3df5dbb3d1b30bab092cf1f19bddd9a257b0b269f69fc00a4c34e1c05dc69797924319b92b3f588fff581b58ad2defd6247f632d1af1ca138f74b2534d320091e434af56e45978f10fe9adaf3217edee0f875ae776476d34e82de8d63506da726a0a6810ed07e672c3a535039e6fc3aa85d4e0f0eb056b0a84e2aca93d2046343f809fb2979a1160197fda1d10d01a6c4266a84d4ac73cc9b364e7b8957e400e25b89c3494898c2bc57fb0ac5eb7ab41e5b4b08e919e7ffdcfafe8b654fab7b9ddebd322650edf7634d23da58d0ead543b4a68f969994f3bbe8b8f0e2240a5da9369534f9d5604515505e5117b56cdd62ef5683b0c6c7f0e88d928558b76b451cea7a64a42b91e72f32ae153e1a0786a2edf229bcf68d2adfb678c75e4ba1d25f5dd20167277f1fb5ec2574db4c96892ee98ead3f90703ecbcff4cda5b0f8de4d7bcb34c1d449918795e8fcdc5b818b7b37aa3ae41f88f687e5be428efca6e1f8e4025da0ad08b063c9354377df6d695f200a2e6cdbfa3dc1d28b5477715e9f1e9341cc843c841b055d54569d6e6b912550b1b339384123c174a4539e809b420d99f55b1d6396a119e7f591fcfabcd46efcfb36c4185f5aad27f67d0ca6112e847c15518382cd1d051feb1943b1304e6c771fbe2c837ae36716550f23b788b31b158c7f3b46cb4cf9e72ecc64298a5479d2c899a593fbdf5560f1b20bffd4fb260c6cd8522e43288c24d0c25e57718fad7c7a158d1aaaae58c1ec9679ab1c9ae27f07fee40fdc4f38588d69e271e6307a1f3b66a4c59b61521bcc2f9144a166210974de8d22c843e40536ed4bd9fc377e0229e02b3ea47602b85ec562e5ff855ad8f2e75614da49994704c7f05c86cc6d040aa1b79cadad83b1e53b1fd158d68d80bbacd25264ea2343881637567eb0d704d6136ba0edcd0240829929bd6779d470561ff8d0c752125c5f97750d5f8c4a83387cbf9436d533e86558e25a91d385158dfa07328f7b94f078206408d0c97bc27b2401da43656b2fea7efb5824743676623937cda98c7b54b8361c356e4cd985aa611baf1356733862b824583a7cbff39601d23e66b837406bb79d86b3e346611555e24a2e20238aa0360209c30f6e5abea0767b020dfb7cac45675480605f990eae9889038837e1497f8deccf8f670f44253c050ab0b1a06cd3d50e221445779d25a55523a0c1768a8fa4b72f0911e866ce1bbd15c3a8b0dd8cef7a6ca2635cf2bfdde34fba00021e5303a22ed62a4f0561c926bc6389a926c087a65a77c00c3dfb3d429120ba18113dc72024bc3ca23997f7b5327552fb3d6ee4bb38e2b18eab3a3f81d74f37c09ede942bef58605cd0e919b844aa9e693bdd385fb3f1038f33fad5f160414e2044ffa1c297ef5ccd8f0f5085f548c2bf7677dd56e959d4f829ab7178e16b011fa846c6b7876be6dee0c7c4a2502d3e68da5fa2d13c9969bb3a5a2a219903d02dcd785dbeb5485f6bc2a8e8af6723300e93f3f732583f767e08db23f15e6924408bd00cf007ab85dc0839e553d5fd7f56bdbd99084139523fa8f9b937e46011b35278d3a9f95820b24fef53e87dbfc59238e8e71646cc859c0df3d8b65b6e9595475727fc055f217b4be6cfaa3278028d6bf0d4f9e2a8f555a5ba2764880e7f55c8c815290c7b8134eacb2df5968535e1056d17b357a2be569264d6ac2b452da1b09044e43093bbb466015f19db70964c989f3b1ae85c5c6afe8885c765d86c83a44bbe81264181cf2c064d3aeb9394d6367c4610837ef432d0fab04e4307895548a03544d0cdca3b08228c38db03b750b72d542633c1ff2f4b905c0b878415a3c1ccba44b4b1aef7b5319ca9ad2df4485e31713e78210ada8fc4732c14c2532a8d9f4c2bb68ea5d8b740a8cd7dc9cddc86a8056b4ce121304d23e908ba4935d20ee205c384f13cf8418b282fe01ba08d6affff979d4fc9361832297208913a65d84af2aa15a517443c746eeac446eb41dabeabb86c54f82019e47fc3326a695c0cf9dd947949b8497ae1bf321549aeec29adc6373d51f31e6a901041a6580bc070aa1436cc798b2514ae11ec6fd3f60b3e901ab186a3e0be6443f49ec3db72a49fac4159f1029b61dcc7bf322aff7183442bf20908f65dcfba5958ee6ba5bba613fdac6adcb0113dcad8afe2b3a5f2c6b43d5b7e27924c756547b4537812c4563f4b49337ea41ec0086558a0a625ed4170fa1c7e35b830d2e29b330ceaeb4e4937fff4092dd4fe99d9e05a7874e771d9926af625759b76cf7428c98a288ee966234d5f8cd723b011f801d63925f8b21031a1c3326ceebc67526bbcb123b0497df5c8bea4dfecab8bdef0d180a5489fde69df8d4ae99c23201f5065cd53e8976711e7a", 0xb8f}], 0x4, 0x0, 0x0, 0x4880}], 0x1, 0x150) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m46.829159907s ago: executing program 5 (id=1421): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x120, 0x1, 0x4000}}) 1m46.828980751s ago: executing program 5 (id=1422): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x12, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x80000005, 0x1000000000007, 0x9, 0x10001, 0x9, 0x5}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x28) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @empty}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="b800000000fbdbdf25fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100008000000000ffffffffffffffff000000000000000000000000000000000200000000000000fdffffffffffffff0000000000000000000000000000000005000000000000000000000000200000000000000000000000000000000000000101020200000000"], 0xb8}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe, 0x2}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x6e22, 0x0, @local, 0x7}, 0x80, 0x0}, 0x20000000) 1m45.995595998s ago: executing program 5 (id=1428): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) syz_emit_ethernet(0xf1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) 1m45.93927781s ago: executing program 5 (id=1429): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f00000003c0)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0xc5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsold}, {@nobarrier}]}, 0xfa, 0x48d, &(0x7f0000000e00)="$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") r0 = syz_clone(0x40000000, &(0x7f0000001440)="eece54700b9871a749991ea359df08b970d41dc81609e62afccb0713072bb4994ec1654546be8102f847d22f3c92378feece5a15792dfaed542cf0cac4258b48c50e4875c8f87d16a65517f71f84a9ce508ed633bf696b195539744331e653831bf36e86cdd05430824302c13cbebce23afd26764808831e6e384d3457d0049737d01e606bb832328ae77b593042bf6a23ca3c9be72e58776f4661dcc73107bf177b9ae1a17a94fc60ad493b15395826d7e38bb494448c4ae32227f65960e5d8465bb5c439401fded0dde326a87d133b547d64b7edd9b7c75b9b6a2aedc97a28", 0xe0, &(0x7f0000001540), &(0x7f0000001580), &(0x7f00000015c0)="0a06ca8b54a61a55a73eae07c5a937041b51666436fde0102a6876038b9485365f71618d6a355d1b05e8ee6f5818f8e8088a5c4267111b0543") sched_setscheduler(r0, 0x3, &(0x7f0000001600)=0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079a04000000000007b0a00fe000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000004c80)={{{@in=@private, @in6=@local}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000007c0)=0xf0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x118) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$UHID_INPUT(r5, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x800000, 0x1, 0x5, 0xfffffffb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000002080)={@remote, 0x0}, &(0x7f00000020c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000030c0)={'wg1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000240)="a4f6fb006350407e3ddc7a4fc6e4709b053de36692158753117d33943fcbb088079b2085582050a02548", 0x2a}], 0x1, &(0x7f0000001680)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x4a, 0x3, 0x4, [{@private=0xa010101, 0xfffffffa}, {@multicast2, 0x5}]}, @lsrr={0x83, 0xb, 0x8d, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x3c, 0x2, [{0x1, 0x6, "e7ddb44f"}, {0x0, 0xc, "f06745f62830b332abd2"}, {0x2, 0x12, "b227dfd6a2fcfddb5a6c3d9c947396c7"}, {0x0, 0x3, "0e"}, {0x7, 0x9, "fa0a1c695a4a1b"}, {0x7, 0x6, "4cdc6565"}]}, @generic={0x82, 0x12, "3bf7d0bf004d30e2c3364982946b51e8"}, @ssrr={0x89, 0x13, 0xcc, [@private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x5, "02eaa5"}]}}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001780)="97b79b0ec6d51ea7e1b5e66b064212f74bb926f1940b8f70fee0ee56170620596fd7697f8db1138fd42f14c1d790f61fbe0c0233bbedbf3a5730358f", 0x3c}, {&(0x7f00000017c0)="11ff5d359a35116459b6985bf636d25ff025eea72603683ca820a6a0fc34f7e4baa7eed33faeb9e7fe0cc223772c7823f22c728260f5f216f5acc85a94b41e6f5564838fef10dd611478753b0eb83191d34310055fb3a4ecece09afbc1ad5d6fdaf2210075ca4023624f28cf8ff2e4061cba488be3910d660666e6db29d088865ce99a0cb1", 0x85}, {&(0x7f0000001e00)="06a55cee24afff2517724974fe372c5fa8454754b62f2d9c3e569033be6830b7097dc01d626789bacca35e20bf7092bada3a271e4b8bdbfe1116c1b4edf289a102d2bc29f977b164822dd48b7d02153e82e2bd3b811bee1ba2cb2681bd0c9e6764976340f6e2b60f508414cd6580f002530e120c8f119d7467bbc34ae59a4d03478e68ad682357a4359907f9561f8e31b4f9dce01c0635d647e8d9f07c268598c280fe90ac2f3a3acb59", 0xaa}, {&(0x7f0000001ec0)="0a787fce9d05a13558a5e118fc40a9c552dfba70f77b76c7ff6fe55947cdd34dd04ea18be9a2dbb93d26137db92d55b2b921c86c1695c66f86f9cc0f79daffb5c5907bc7255b9c15805929fc45eafbbe8f63eff2c4126ca221b7a6a90e1079e354fcc18561129a8bb82395ece1bcc4c1c44b296df071b025da27fd974872f98e0884242a15d372e289b4661f31de721aea227a3cfe761fef0b8c292ef4daf8fd7087f4f3ea2ce0d37774ce06b97e04f23373556a85318931207a34816c138b26e090e6c710983d5f7b513e688955140708614221e7fd5b807b08aef2f6fa2266d1b950ededaa903582e3933cec3516bf2b3e35136adf47e6", 0xf8}, {&(0x7f0000001fc0)="21010eca8487b5f696a36e54a8b35094aaa3c2e1e3aa1d0754feb1c678c54ec59f24ff7465b3121a11a02d0a8e", 0x2d}], 0x5, &(0x7f0000002100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x70}}, {{&(0x7f0000002180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002640)=[{&(0x7f00000021c0)="14e1e2e6c8981387073b065eb243f8806f6eaf3967135dab865b4a741351e3059694029e182aca78af65fe9207951b99311f6e07e1c1c93756beb9bdfcf3df01cc7d852d87a37aa92375b667c29da6655db0695d5bc5e480e00f", 0x5a}, {&(0x7f0000002240)="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", 0xfb}, {&(0x7f0000002340)}, {&(0x7f0000002380)="b86ed7b3acd83ecb28cdde761f04fb87978790604565b144174e76272934d38c3e6c4948f51705ff505cff08cec616365d5809db0d4d2a2aeb9cf617", 0x3c}, {&(0x7f00000023c0)="4b449a54de8677aff47fdc7eaaf76196dc83ac885deb7d9a208a0fb06f5812cf8757c7cc88dd152bba07303eb414b71c3ac5e5244c55dde9c0bca706c1f775822376b04908ff494639d33121b2ff6e327f4c245e1e41a9ea2cea734a237f077c4b2e2a4605b5988cd0218a63c785be87d102fd18f22745039002285e620394c79e441163882fbc8979b386fa0e02bfc60110cf69b18b973670b544940af6f2bd7316e7eafc425fff7adce3fc1580bfad00ec38a1a31f19f751bf2ea89d85157d3f9123d9b76bc3ee81e9bf521076eef34abd28dd87ec", 0xd6}, {&(0x7f0000002580)="76ae2928eb3255df8d2e1c93fe5e8f7bbcc6b374b930c9ee26708bb74fd7d9ce36a61bb9c5cbb9f53729d68e0994f1a5d30e11ad7e226c7cb0a14bbe3ce23d93745fec39b1f2b06857964e6cc5e106d3db6100a3d083f84d5f1899d21c868e6402533da003022cf6ee973be9d64eadce3b0e32e3bece5c5b5a0d69a86f63c66575dd9586200411c519ac25cc4d8285e6aa0fa0595b40ca2e8ce82e5d", 0x9c}], 0x6, &(0x7f00000026c0)=[@ip_retopts={{0x48, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @generic={0x88, 0x3, "f1"}, @ra={0x94, 0x4}, @generic={0x44, 0xa, "53dcbb2beeafc695"}, @timestamp_addr={0x44, 0x1c, 0xe7, 0x1, 0xb, [{@broadcast, 0x5}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010102, 0x6d}]}, @end, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x86, 0xf, "7583575aac23e9d3a1cbbd8de1"}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}], 0x80}}, {{&(0x7f0000002740)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000002b40)=[{&(0x7f0000002780)="d163e6eed5c97336a8f76ab502c8ed0caed1e477f6a9bcdd254d5dd05f25eb8755f7977bad656152d50c3dac7a48efe8f794d177261d21518829d7a31036baa8608fe92285dec1025b0b671a388a4ff77348360178986b322692b29519a1f5afecef1f1f584642f4888ce8b7e19572a10a114ae7a210f55a7ef96c2bc721", 0x7e}, {&(0x7f0000002800)="0c720dc4a5f6601ba469c01ac5df970b434ca236190d0684e833b8439a6cd31a399deafe0da84488534bedaa3ad324b31392ba4612f25ea7e74ac46aaaadc1a411ea02edb6f8ca0ad3ae13106284122bf90eae9dc3ab13f90c2f0972edca68bc574914e81297f00fd3b7ea342c45de35", 0x70}, {&(0x7f0000002880)="939f1835d6b37f9ea49a7bd3625e709067ce1585fafd925473961b4e22f17cdd3f95f81bd32e0de8f594ebc6c31995d3f9e0690eed9b3c511a1d4ec80e410a821724148b7bc03f928c08760c7bf6f260f3e3e3d5c5425aa19237a64560b066c2f0bc85ddbc20d6211070b425857cdd28a64ca77ce0a5b51f11ca43406d29d15cb3cda62f2d397f9820382cc10dcff350bb7e71f6fd4f7d6479273a902b8d920171c6f833011fa696b6095c1a80e191fa7172283fea43b790149ea8d67c899d645074ea3dcba9575db2c3e6f9f1009517a0f12193b8022814f3f792db1f851b88c910", 0xe2}, {&(0x7f0000002980)="afb4ae0d83207281e46f6b139e869cd0302d54c5fcfe04bc611c838b0be8ebcccbfea59afbc117c704fd1961a82280781ed3fb211e39d726d87c05fece116375863cf2db6dcfed17ccfe3c60f42c01b61401b6a1fac813544f88f5e4efe13a0611ce57c78fa0a623bb65f456b8f0d1185cf1c326756e931d0ce3e4", 0x7b}, {&(0x7f0000002a00)="60a76cb405843eb578a9469e3c8c64f22dd526d6d9e9fd7c62f76af3d4d16229cdc93e751545fd51983804a47fc115207c3b6ae6fae00f202355de47196eddd0fa1fd5f28d9b33cf9a1f15af18e033c9533f6839df200600cf63b7e20a93dca44ed29dd8d1310a4d95c59ba9f5aa936873cab36039f32564f00a3ce83827954b9f8c242ef036e95103e89292df2ebf71392ce56fce73ec1b2bb5ce86a58521a50a8503e970ee32d0183d5a4c1a903450713f18b8a9df6e20752b59be442b5307ca67c2e33ea5cee0", 0xc8}, {&(0x7f0000002b00)="db69bcf7991c37239a4d556080fbe725", 0x10}], 0x6, &(0x7f0000002bc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}, {{&(0x7f0000002c00)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000003040)=[{&(0x7f0000002c40)="0dbdfc02840d6ed589159df8936eeec78598fb955ea149d0f18d9c4bb2a701c25d39c0279c9f8dd7692523ddd2857fc65ce20fcb6dd5c4407c8d3dedb43a701769068f903294c660da4287bba4d6a09b3d7afd7202571c9c19473f3afd52b2963c7a7684c441792f4a86d8a0d4651185741689494fd42b864c40df89563a5985f388bdea9b744bbbbe97f75cc351c395ac4a4c80711fe672c0fe8da3b7998c49ee0989a71770797d907b9304a626f37259d37b26d7cf079b0d47c8f817ad608f4e3c93fd0f97084ca2dabe9c8e7b711b1a96756b6cc6671176c1705e354de6bfcc90d7d63538aaff630399a47ada7f14cb", 0xf1}, {&(0x7f0000002d40)="d176d202df57918e3a86a8d8563b3ae370a16f1fe68720ef7cf068abbc0c6296fd462435da862fffa0b6ee66e658931cb497786fa96e939b1ac40b7649992c9b956b8da4a4676284d2fe8736da5d98b0c636e9188f048222dc96747729375d5720d33aea1b3f37de7494a7b8f72e3e23e771ea39a9fd2cd2b6c5b25a02f080fbc37ab92275e9c36404c793e6ac4bef7347cc3723f13f15b0eb800723c3699d02e7ed0d83c06317", 0xa7}, {&(0x7f0000002e00)="cdfe0092442c9092423b510717fb818793ac1ee19724dae70a99923f9373386f7a32db92b39c2dd89f6a53f0515bd5bcfc332c260dc5075d2ccee74bd06930f7ee3cce7ad06890d1b7724e5efa98f481ec73e4fb800dc0873b9291f5e3c763eb14acfa3bba4494eca288d066fd16b0e0912edb3fab291641baac7932a2b023cc62a7c375b542051dbb508e98ca5b53a8805628c99739ea9475618084d74f92b3e04299e3e781fb156775ca1f046290d924951cf8d13b1c29bb54b6f3758a9ebb888234253ae2648ea8c300b938cb4c625c2d51f2c49cc43142dcc74648df7ab7880f94", 0xe3}, {&(0x7f0000002f00)="9b5152234799c795ea848defc8bb175d480b0cb4b02f2dc9eb5c9770", 0x1c}, {&(0x7f0000002f40)="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", 0xfa}], 0x5, &(0x7f0000003100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x68}}], 0x5, 0x800) 1m45.793030763s ago: executing program 5 (id=1430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xb688, 0x1c803, 0x1, 0x80}) io_uring_enter(r1, 0x6250, 0x366, 0x30, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900040000000000000000008500000013000000950100000000000075c405338a16adae0c556bdaef6e0f0b5289c535f55bf3989117f5092e94e37eab06b15f5287eca6a6a6a4fce573891168ee4a01b74b8049bc281240dbcc7f77fb9c431e8cfc8233dd825de04b41f87d8c6bdbfaccabd8ae488cdfa512f132b1a0c958f2a8e9f3db541581499c98b4ce1176c69e2818bc36cad003df86c45872d9efd1e3c50150577de49db8346ecb75c1674dc5c3537f4379b82a7d59aff781e633637e97a281512497afcfd2d78a1436ebe992f8f95d6647f086615b2decab114327218f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, r4, 0x80000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_QBUF(r5, 0xc0186f3f, &(0x7f0000000240)={0x10001, 0x0, 0x4fb, 0xc, 0x0, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0x12, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) 1m45.570985616s ago: executing program 5 (id=1432): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000840)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x20008004, 0x1}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000200)={[{@shortname_winnt}, {@numtail}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x100000150}}, {@numtail}]}, 0x0, 0x2ac, &(0x7f0000000840)="$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") io_uring_enter(r0, 0x539d, 0xbecd, 0x0, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r6, &(0x7f0000000980)={&(0x7f0000000000), 0xc, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/32, 0x20}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/244, 0xf4}, {&(0x7f0000000780)=""/161, 0xa1}], 0xa, 0x0, 0x0, 0x2002}, 0x38, 0x41) 1m45.500216676s ago: executing program 35 (id=1432): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000840)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x20008004, 0x1}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x48c5, &(0x7f0000000200)={[{@shortname_winnt}, {@numtail}, {@shortname_win95}, {@fat=@discard}, {@uni_xlate}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4007}}, {@rodir}, {@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x100000150}}, {@numtail}]}, 0x0, 0x2ac, &(0x7f0000000840)="$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") io_uring_enter(r0, 0x539d, 0xbecd, 0x0, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r6, &(0x7f0000000980)={&(0x7f0000000000), 0xc, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/32, 0x20}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/69, 0x45}, {&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/244, 0xf4}, {&(0x7f0000000780)=""/161, 0xa1}], 0xa, 0x0, 0x0, 0x2002}, 0x38, 0x41) 17.525236516s ago: executing program 6 (id=2277): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2e, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000000000000000f0000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 17.441130384s ago: executing program 6 (id=2278): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@isdn, &(0x7f0000000100)=0x80, 0x80000) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x2}, 0xe) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x4, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) recvmsg$unix(r0, &(0x7f0000003140)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000003080)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/4096, 0x1000}], 0x2, &(0x7f00000030c0)}, 0x100) r1 = getpid() r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x4c}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000002000000000000000d0000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000006e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) mmap(&(0x7f0000a96000/0x4000)=nil, 0x4000, 0xb635773f06ebbee6, 0x10, 0xffffffffffffffff, 0xffffc000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$xdp(0x2c, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000000)={'veth0_virt_wifi\x00', @random="e80300001000"}) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) listen(0xffffffffffffffff, 0x9000c) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x1800000, &(0x7f0000000440)={[{@dioread_lock}]}, 0x1, 0x528, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) 16.631495781s ago: executing program 6 (id=2283): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x16, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) pwritev2(r5, &(0x7f0000002600)=[{&(0x7f0000000300)="2cb9e6142658cb5b17b8a4a37d62b45a87c99df8dda7b3e50a6afa086128607a2ef1558e62d80ed0bb6892d81da1288e631b1bc3617e71af6529465d815a5edff66dec3bb9c02d76fa8cc2fd80a2f642f18023c360055e14f88981ac1b8ef64730530c26c7913c7df90c40b687b3fc2ef66b5d81211b2734984582c4cbfa2f20506c15caab31054b4b0cc03cebbf45d97ba676dde1d910504ec44a5963d66de0ce6af3575b48e40e8f83399c19e1cfb1702855f8eed4e280f98a9e693c77911d3bee902ff607f890307d833c340c63b562a2992124c66ad5447bc0522c46407ad7214a32d84d6a28cf267cd9dcecdb942250a3f15f5836e7b21f", 0xfa}, {&(0x7f0000000400)="a5eb74afdd5d07f69554495570589b0b140d9291bb095fb7d72d261453311ae9105f81b841192b8006a5d6f58a0fc1f93500cff62a44f89be9d926e812c7c7f3eeb436f7d099c4aa1991bc1d620b1c9da42cdee6a5bb4e395741af53be966fa3a6841dc866dbdae04a8722de5f8a6450ed", 0x71}, {&(0x7f0000000480)='|', 0x1}, {&(0x7f00000004c0)="1ee2513560db5c260c330abc67844d0712a0fb66ed6a70331b72efdb980e8d8a6cf63681a2dc685aa573e8ff4c0d262866a42d7544ce5a022f7a135839919a9a2138c96b65a931e054c13abe83ab1d9c6d865f962532c8cef8c639750e22c716ed0f63e350aa928b92e15f5da6b408701352075bb9d6240190e2fc2009dd41bafd267e2086326693da942bb056a8f9327d4fcf5d9765ba730a854b683a36ffe7fed2820b44c6ce835840afbf3cadd2083dd556741857c28b32f6cdf74da75c42a548129f", 0xc4}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="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", 0x1000}], 0x7, 0xfffffffb, 0x2, 0x1c) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000026c0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x40, r6, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000027c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000002800)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000002840)={{0x1, 0x1, 0x18, r8, {0xec8}}, './file0\x00'}) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x40080c0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44800}, 0x10) syz_ublk_setup_io_uring(0x26d7, &(0x7f0000002a80)={0x0, 0x6fb9, 0x10, 0x2, 0x35b, 0x0, r9}, &(0x7f0000002b00), &(0x7f0000002b40)=0x0, &(0x7f0000002b80)) syz_io_uring_complete(0x0, r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002c80)={r9, 0x58, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000002cc0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000002d80)={'ip6_vti0\x00', &(0x7f0000002d00)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x7f, 0x0, 0x10, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x7, 0x5, 0xe1bd}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000002e40)={'ip6gre0\x00', &(0x7f0000002dc0)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x80, 0x9, 0x40, @mcast1, @loopback, 0x711, 0x8, 0xa, 0xb9}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000002f40)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x70, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x4) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000002f80), &(0x7f0000002fc0)=0x4) ioctl$TIOCEXCL(r9, 0x540c) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003040), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x2c, r15, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0xc000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000003180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000071) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f00000033c0)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x4c, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x30c8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0xa8c5) 16.501168498s ago: executing program 6 (id=2285): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x14010, 0x0) syz_mount_image$fuse(&(0x7f0000000380), &(0x7f0000000040)='./file0\x00', 0xa0a8, &(0x7f0000000340)=ANY=[], 0x21, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYBLOB="0a0001"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 16.430054477s ago: executing program 6 (id=2289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x34}}, 0x0) 15.6670795s ago: executing program 6 (id=2294): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, 0x0, 0x18}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="e8c5760d8b33e0e4ca4ee5ff484992823288174d49a42658f7bf0352f08a2da30d80b0c248d61a1fbee0a239c8284961b2", 0x31}], 0x1, 0x0, 0x0, 0x1}, 0x4800) 15.335235914s ago: executing program 36 (id=2294): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, 0x0, 0x18}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="e8c5760d8b33e0e4ca4ee5ff484992823288174d49a42658f7bf0352f08a2da30d80b0c248d61a1fbee0a239c8284961b2", 0x31}], 0x1, 0x0, 0x0, 0x1}, 0x4800) 7.176184894s ago: executing program 8 (id=2364): ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x8c8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x400200, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x2, 0x2000}, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 6.236128112s ago: executing program 8 (id=2373): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0x0, r1, {{0x7, 0x7, 0x2}}}, 0x28) statfs(&(0x7f0000000540)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 5.319411778s ago: executing program 8 (id=2384): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000002200)=ANY=[], 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 4.413513162s ago: executing program 8 (id=2387): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, 0x0, 0x42) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}, {@access_client}]}}) 3.808429187s ago: executing program 8 (id=2403): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 2.745173464s ago: executing program 7 (id=2429): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x1000080, &(0x7f0000000740)={[{@dax_inode}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nombcache}, {@orlov}, {@errors_continue}, {@nobh}, {@stripe={'stripe', 0x3d, 0x10}}], [{@subj_user={'subj_user', 0x3d, 'nobh'}}, {@euid_eq}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_open_dev$video(&(0x7f0000000040), 0xb, 0x80f82) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000001cc0)=[{r4, 0x8000}], 0x1, &(0x7f0000001d00), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000880)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(aegis128-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86b", 0xf) r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) io_setup(0x42, 0x0) sendmmsg$alg(r6, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x4040010) io_submit(0x0, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r6, &(0x7f0000000000)='e', 0x3f}]) ioctl$KDSKBENT(r5, 0x4b47, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0, 0x10000}, 0x8) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x21, 0xe4}]}, 0x10) 2.245213384s ago: executing program 9 (id=2434): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x2, [{}, {}]}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000540)=0x73, 0x4) recvmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000040), 0x80, 0x0, 0x0, &(0x7f0000000280)=""/41, 0x29}, 0x6}], 0x1, 0x2002, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 1.818883639s ago: executing program 7 (id=2436): socket$kcm(0x29, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x8, 0x4) 1.797688882s ago: executing program 7 (id=2437): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103a28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.744241105s ago: executing program 7 (id=2438): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x92}], 0x1}, 0x0) 1.741613002s ago: executing program 7 (id=2439): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0xfffffffffffffffd, 0x10000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x2) chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000140)=@v1={0x2, @adiantum, 0x3, @auto="0900012000"}) r5 = open_tree(r0, &(0x7f0000000000)='./mnt\x00', 0x80000) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) 1.256754872s ago: executing program 3 (id=2442): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_SHUTDOWN={0x22, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000300)={0x0, 0xb768, 0x100, 0x22, 0x1e5}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x11e6}}) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) msgsnd(0x0, 0x0, 0x2000, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)={0x64, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x78}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0xdedb}, {0x8, 0xb, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000888}, 0x0) syz_ublk_add_dev(r4, r5, r2, r3, &(0x7f0000000480)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x23b, 0x0, 0x0, 0x1000, 0x5, 0xffffffffffffffff, 0x0, 0xc}}}, &(0x7f0000000500)) r14 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r14, 0x5421, &(0x7f00000001c0)=0x3) r15 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r15, r16, r17, r18, &(0x7f0000000200)={0x2e, 0x0, 0x0, r14, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) syz_ublk_add_dev(r0, r16, r6, r7, &(0x7f0000000380)={0x2e, 0x5, 0x0, r13, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0xb1}}}, &(0x7f0000000440)) r19 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x63, 0x4000, @fd=r0, 0xffff, 0x0, 0x0, 0x9, 0x1, {0x2, r19}}) 1.256231516s ago: executing program 9 (id=2444): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x7, 0x8001, 0x3, {0x2, @pix={0x1, 0x7fc, 0x31363553, 0x4, 0x6, 0x26c, 0x7, 0x0, 0x1, 0x8, 0x0, 0x6}}, 0x8}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) sendmmsg$inet6(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f8", 0x1}], 0x1}}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000380), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c43, 0x0) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x1, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 1.210449732s ago: executing program 9 (id=2445): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x63, 0xa, 0xff04}, [@call={0x44}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0), 0x8, 0x80800) lseek(r0, 0x1, 0x4) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x5a001) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f0000000280)) ioctl$NBD_SET_SIZE(r3, 0xab02, 0xff) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'sit0\x00', r2, 0x8, 0x40, 0x8, 0x53158e3e, {{0x16, 0x4, 0x0, 0x9, 0x58, 0x64, 0x0, 0x4, 0x2f, 0x0, @broadcast, @broadcast, {[@end, @generic={0x94, 0x3, '('}, @timestamp_addr={0x44, 0x3c, 0xb5, 0x1, 0x1, [{@broadcast, 0xb}, {@loopback, 0x6}, {@private=0xa010102, 0x400}, {@rand_addr=0x64010100, 0x878}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@loopback}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8) 856.71313ms ago: executing program 7 (id=2447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getpeername$packet(r0, 0x0, &(0x7f0000000540)) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x9, 0xe4, &(0x7f0000000400)=""/228, 0x0, 0x12, '\x00', 0x0, @lirc_mode2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x4, 0x0, &(0x7f0000000600)=[{0x5, 0x1, 0x6, 0x9}, {0x1, 0x1, 0x10, 0x2}, {0x5, 0x2, 0xb, 0x4}, {0x4, 0x2, 0x5, 0x6}], 0x10, 0x8}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf25000000f3", @ANYRES32=r6, @ANYBLOB="1388000023b201002400128009000100626f6e6400000000140002800800070081"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) file_setattr(r7, 0x0, &(0x7f0000000080)={0x88, 0xd9, 0x3, 0xb, 0x57519bea}, 0x18, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2, 0x0, 0xe0000001}}}}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mount(0x0, 0x0, 0x0, 0x400080, 0x0) 852.867672ms ago: executing program 9 (id=2448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000040000000900010073797a31000000002c000000fe0a01020000000000000000050000000900010073797a30000000000900030073797a300000000034000000060a010400000000000000000500000008000b40000000000c00034000000000000000010900010073797a3000000000140000001100010000000000000000000300000a81c7c473b97c64f7baa06b16b6adb85a5602a95616cf5c5f5327f33f9839df20ab7e99984dd22f014e8bc305fe28189960533c5a51feda78f5db5301023c5cf171112ea5ad27c8a1d324670e02e76f7b0100b968e77da6d06cee564ea6a8d20c7a3d737c0446ff77a5f14f43a70f180aa5e2fc23222360e13fc13bdf309a1524b3c94d07df0284ca4e82ac218d899baa99619009eb581fa6739d616fcde742b56fbc9889810324b30fd81a54c8ceea30881f4fe5db7d1231b00b49f1dc1f940e9aad4cf6cc0b752adac085b611f9a0daf262571738483d6d12b4ffc39c5218b380a7e660571b"], 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) (async, rerun: 32) r4 = fsopen(&(0x7f0000000540)='befs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = fsmount(r4, 0x0, 0x0) (rerun: 64) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x31, 0x0, @void}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x30, 0x4c00}, 0x880) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000740)={0x80}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x2) (async) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x78}}, 0x0) (async) r10 = fsopen(&(0x7f00000000c0)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x8, 0x300, 0x0, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000028000000000006907864010101ac1414aa00004e222b1991296857e2a7bbab28f72e5b3b662d24da414e211a29eec97adfe273ec798fc25002def336e9e14b3e83d0f1c3df1f74a547d3dec683485f79c23b31fe5d3ecd74697891b22edbecaea5e1a7b98c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c04000090780000c516"], 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000140)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x14, r2, 0x10, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x40000) 769.017656ms ago: executing program 0 (id=2449): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/meminfo\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x802, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xec, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611198000000000006000000000000fce5138cd6e10c2d00"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) socket$kcm(0x29, 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x19b501, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000740)={0xcb60, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) sendto$packet(r1, &(0x7f0000000240)="26e9959ad69cb8f04949874dae7e322e78468808fdcab4d6678eee97d0240904d415c8a79d0eeae2d5d59bbb57cb29f1227912b4c23a36985891a6420e0fb2fba73a535548b8afc5e93056237b6e6bd167752ef09ac3d1a150992365312a684fcf1db16dc68c0a211df07ecfb4db0cf63b5e7ade854767629489a0e48cf7fb04acc67e74028f40fda9d0379c726f5ba48b84eb1afa6e3981ed90b6d7d3918b", 0x9f, 0x2404c040, &(0x7f0000000380)={0x11, 0x19, r4, 0x1, 0x6, 0x6, @local}, 0x14) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000180)=[r6], &(0x7f0000000080), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 768.732969ms ago: executing program 0 (id=2450): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e24, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="280000000000000029000000390000002f020201"], 0x28}, 0x44040) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 757.887741ms ago: executing program 9 (id=2451): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000006000000000000000200000000000000000000000000000003000000000000000200000000000000fbffffffffffffff00000000000000004000000004000000000200000000000000000200"/106], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x43, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000001b000100feffffff00004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0xb}, 0x90) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000380)={'U+'}, 0x16, 0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48800) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000006000000000000000200000000000000000000000000000003000000000000000200000000000000fbffffffffffffff00000000000000004000000004000000000200000000000000000200"/106], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x43, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000001b000100feffffff00004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7, 0xb}, 0x90) (async) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000380)={'U+'}, 0x16, 0x1) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48800) (async) 712.567166ms ago: executing program 0 (id=2452): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) 700.924364ms ago: executing program 8 (id=2453): syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, 0x0) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000100)=0x1000) 404.951881ms ago: executing program 9 (id=2454): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x7d, &(0x7f0000000080)={r1, 0x2000}, 0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000680)={[{@dioread_nolock}, {@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0xf}}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000280)=0x8) renameat2(0xffffffffffffff9c, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0xffffffffffffffff, 0x0, 0x5004) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="010000018000"/18], 0x18}}, 0x2000c050) 309.087497ms ago: executing program 3 (id=2455): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/meminfo\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x802, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x420403, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 287.557123ms ago: executing program 0 (id=2456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0xcac) 180.879188ms ago: executing program 0 (id=2457): r0 = socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x4c, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) setgroups(0x0, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0xffe0}, {0x10, 0xffff}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) accept4$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000300)=0x60, 0x80000) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000101030000000000000000000a0000df4400028006000340000100000c000280050001003c0000002c000180140003"], 0x60}, 0x1, 0x0, 0x0, 0x20008014}, 0x4000c090) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x28441, 0x125) open_by_handle_at(r7, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], 0x98300) 136.829422ms ago: executing program 0 (id=2458): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x6004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="086d00000000000000000000001f0000000000001e00000000000000d3427ea1615f8d16c5c3019ec561802d2298c755e8aec41e11d7094b6bd075586c03efae6007490de0c24d48d7fbad8008958810be790ef78cc74daeb2f9eabdbfbfd49bf6746357dd"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000480)={0x0, "588704ab825a9054442dbf6c53e03259"}) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0), 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000300)=0x8) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001480)={r3, 0x2, 0x5}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x12e02, 0xe8) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x48, r9}) sendmmsg$inet6(r10, &(0x7f0000001940)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x1, 0x20000004) 87.922635ms ago: executing program 3 (id=2459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="7660cfd48e047b1a873c04bdcd1a9a3fc36e961eabd680c054ff1e93204facc85703", 0x22) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="7660cfd48e047b1a873c04bdcd1a9a3fc36e961eabd680c054ff1e93204facc85703", 0x22) (async) 25.074785ms ago: executing program 3 (id=2460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') writev(r1, &(0x7f0000000600)=[{&(0x7f0000000ac0)="c0648ff8882e934c", 0x8}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x445619b8, 0xff, 0x10000, 0x5, 0xc, "96b829bb00eb9e2bf58c60c47cec78a42e5eb2"}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 24.807392ms ago: executing program 3 (id=2461): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9e, &(0x7f0000000340)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x64, 0x11, 0xff, @remote, @local, {[], {0x4e22, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x8c, "56f29586286ff596882ed0d0d70a76684e3f34a7ab29e8837ad6925eee4f9992", "e291e93699b32f69d467cbfe63723243", {"217db4dd8f31bf61d8cba226424059d0", "c42d9ecb52bbfb13bc7c8cbb8d9f7859"}}}}}}}}, 0x0) 0s ago: executing program 3 (id=2462): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) unshare(0x26000400) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r2, 0x0, 0x8000000}, 0x27) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000001800)={0x8, {"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", 0x1000}}, 0x1006) (async) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in=@empty, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000240)=0xfffffe65) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) (async, rerun: 32) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) (rerun: 32) kernel console output (not intermixed with test programs): ed_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 170.691013][ T8960] lowmem_reserve[]: 0 0 3653 3653 3653 [ 170.691030][ T8960] Node 0 Normal free:2716364kB boost:0kB min:24700kB low:30872kB high:37044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11728kB inactive_anon:36648kB active_file:13628kB inactive_file:68004kB unevictable:3072kB writepending:1076kB zspages:0kB present:5242880kB managed:3741384kB mlocked:0kB bounce:0kB free_pcp:90240kB local_pcp:10300kB free_cma:0kB [ 170.691053][ T8960] lowmem_reserve[]: 0 0 0 0 0 [ 170.691069][ T8960] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 170.691125][ T8960] Node 0 Normal: 2712*4kB (UM) 1719*8kB (U) 1205*16kB (UM) 255*32kB (UM) 27*64kB (UM) 9*128kB (UME) 88*256kB (UME) 84*512kB (UM) 55*1024kB (UM) 18*2048kB (UE) 611*4096kB (UM) = 2716296kB [ 170.691199][ T8960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.691205][ T8960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 170.691211][ T8960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 170.691217][ T8960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 170.691223][ T8960] 27602 total pagecache pages [ 170.691227][ T8960] 0 pages in swap cache [ 170.691230][ T8960] Free swap = 124996kB [ 170.691233][ T8960] Total swap = 124996kB [ 170.691237][ T8960] 2097152 pages RAM [ 170.691240][ T8960] 0 pages HighMem/MovableOnly [ 170.691243][ T8960] 391758 pages reserved [ 170.691246][ T8960] 8192 pages cma reserved [ 170.691249][ T8960] 4 pages hwpoisoned [ 170.839993][ T8973] netlink: 'syz.6.1294': attribute type 4 has an invalid length. [ 170.842733][ T8837] veth0_vlan: entered promiscuous mode [ 170.849282][ T8837] veth1_vlan: entered promiscuous mode [ 170.855311][ T8973] syzkaller0: entered promiscuous mode [ 170.855341][ T8973] syzkaller0: entered allmulticast mode [ 170.864462][ T8837] veth0_macvtap: entered promiscuous mode [ 170.867035][ T8837] veth1_macvtap: entered promiscuous mode [ 170.880993][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.886754][ T8837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.901488][ T40] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.902525][ T40] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.902550][ T40] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.902565][ T40] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.971269][ T842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.971303][ T842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.995441][ T842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.995477][ T842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.033582][ T8539] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 171.079705][ T8978] syzkaller0: entered promiscuous mode [ 171.079743][ T8978] syzkaller0: entered allmulticast mode [ 171.168860][ T8990] FAULT_INJECTION: forcing a failure. [ 171.168860][ T8990] name failslab, interval 1, probability 0, space 0, times 0 [ 171.171336][ T8990] CPU: 0 UID: 0 PID: 8990 Comm: syz.7.1300 Tainted: G L syzkaller #0 PREEMPT [ 171.171357][ T8990] Tainted: [L]=SOFTLOCKUP [ 171.171361][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 171.171367][ T8990] Call trace: [ 171.171370][ T8990] show_stack+0x2c/0x3c (C) [ 171.171391][ T8990] __dump_stack+0x30/0x40 [ 171.171402][ T8990] dump_stack_lvl+0xd8/0x12c [ 171.171412][ T8990] dump_stack+0x1c/0x28 [ 171.171422][ T8990] should_fail_ex+0x414/0x588 [ 171.171431][ T8990] should_failslab+0xc4/0x124 [ 171.171440][ T8990] __kmalloc_node_noprof+0x104/0x74c [ 171.171449][ T8990] __vmalloc_node_range_noprof+0x46c/0x10dc [ 171.171459][ T8990] __vmalloc_node_noprof+0xec/0x14c [ 171.171468][ T8990] __vmalloc_noprof+0x64/0x8c [ 171.171478][ T8990] bpf_prog_alloc_no_stats+0x60/0x484 [ 171.171488][ T8990] bpf_prog_alloc+0x48/0x108 [ 171.171497][ T8990] bpf_prog_load+0x594/0x1434 [ 171.171507][ T8990] __sys_bpf+0x3f4/0x5f0 [ 171.171516][ T8990] __arm64_sys_bpf+0x80/0x98 [ 171.171525][ T8990] invoke_syscall+0x98/0x244 [ 171.171535][ T8990] el0_svc_common+0xe8/0x23c [ 171.171544][ T8990] do_el0_svc+0x48/0x58 [ 171.171554][ T8990] el0_svc+0x64/0x260 [ 171.171561][ T8990] el0t_64_sync_handler+0x48/0x148 [ 171.171568][ T8990] el0t_64_sync+0x198/0x19c [ 171.309056][ T9001] binder: 8996:9001 tried to acquire reference to desc 0, got 1 instead [ 171.313271][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1305'. [ 171.338418][ T9001] binder: 8996:9001 got new transaction with bad transaction stack, transaction 33 has target 8996:0 [ 171.338468][ T9001] binder: 8996:9001 transaction call to 8996:0 failed 35/29201/-71, code 0 size 0-0 line 3296 [ 171.673470][ T9010] trusted_key: encrypted_key: insufficient parameters specified [ 171.809306][ T9016] loop5: detected capacity change from 0 to 512 [ 171.816044][ T9016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 171.816124][ T9016] System zones: 1-12 [ 171.819527][ T9016] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.1308: Directory hole found for htree index block 0 [ 171.823032][ T9016] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 171.825862][ T9016] EXT4-fs (loop5): Remounting filesystem read-only [ 171.829138][ T9016] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 171.831862][ T9016] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 171.836490][ T9016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.860500][ T7315] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.025018][ T9023] loop5: detected capacity change from 0 to 512 [ 172.027775][ T9023] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.036083][ T9023] EXT4-fs (loop5): 1 orphan inode deleted [ 172.036113][ T9023] EXT4-fs (loop5): 1 truncate cleaned up [ 172.036622][ T9023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.060950][ T9023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.167767][ T24] binder: send failed reply for transaction 33 to 8996:9001 [ 172.167818][ T24] binder: undelivered transaction 34, process died. [ 172.171986][ T24] binder: undelivered TRANSACTION_COMPLETE [ 172.172030][ T24] binder: undelivered TRANSACTION_COMPLETE [ 172.172046][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 172.172060][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 172.281152][ T9029] syzkaller1: entered promiscuous mode [ 172.282237][ T9029] syzkaller1: entered allmulticast mode [ 172.301906][ T9041] FAULT_INJECTION: forcing a failure. [ 172.301906][ T9041] name failslab, interval 1, probability 0, space 0, times 0 [ 172.301946][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: syz.7.1316 Tainted: G L syzkaller #0 PREEMPT [ 172.301960][ T9041] Tainted: [L]=SOFTLOCKUP [ 172.301964][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 172.301969][ T9041] Call trace: [ 172.301972][ T9041] show_stack+0x2c/0x3c (C) [ 172.301989][ T9041] __dump_stack+0x30/0x40 [ 172.302000][ T9041] dump_stack_lvl+0xd8/0x12c [ 172.302009][ T9041] dump_stack+0x1c/0x28 [ 172.302019][ T9041] should_fail_ex+0x414/0x588 [ 172.302028][ T9041] should_failslab+0xc4/0x124 [ 172.302037][ T9041] __kmalloc_noprof+0x100/0x6f0 [ 172.302046][ T9041] drm_atomic_state_init+0x9c/0x2ac [ 172.302056][ T9041] drm_atomic_state_alloc+0xd0/0x108 [ 172.302064][ T9041] drm_mode_atomic_ioctl+0x3d4/0xe78 [ 172.302073][ T9041] drm_ioctl_kernel+0x250/0x31c [ 172.302082][ T9041] drm_ioctl+0x694/0xb28 [ 172.302090][ T9041] __arm64_sys_ioctl+0x14c/0x1c4 [ 172.302101][ T9041] invoke_syscall+0x98/0x244 [ 172.302111][ T9041] el0_svc_common+0xe8/0x23c [ 172.302121][ T9041] do_el0_svc+0x48/0x58 [ 172.302130][ T9041] el0_svc+0x64/0x260 [ 172.302138][ T9041] el0t_64_sync_handler+0x48/0x148 [ 172.302145][ T9041] el0t_64_sync+0x198/0x19c [ 172.533366][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 172.564071][ T4718] Bluetooth: hci5: command tx timeout [ 172.766352][ T12] bond0: (slave bond_slave_0): interface is now down [ 172.766387][ T12] bond0: (slave bond_slave_1): interface is now down [ 172.770314][ T12] bond0: now running without any active interface! [ 172.825986][ T7315] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.919247][ T9053] loop7: detected capacity change from 0 to 32768 [ 172.977387][ T9053] loop7: unable to read partition table [ 172.977487][ T9053] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 173.356464][ T9083] FAULT_INJECTION: forcing a failure. [ 173.356464][ T9083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.359229][ T9083] CPU: 0 UID: 0 PID: 9083 Comm: syz.6.1328 Tainted: G L syzkaller #0 PREEMPT [ 173.359253][ T9083] Tainted: [L]=SOFTLOCKUP [ 173.359256][ T9083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 173.359262][ T9083] Call trace: [ 173.359265][ T9083] show_stack+0x2c/0x3c (C) [ 173.359284][ T9083] __dump_stack+0x30/0x40 [ 173.359295][ T9083] dump_stack_lvl+0xd8/0x12c [ 173.359304][ T9083] dump_stack+0x1c/0x28 [ 173.359314][ T9083] should_fail_ex+0x414/0x588 [ 173.359323][ T9083] should_fail+0x14/0x24 [ 173.359331][ T9083] should_fail_usercopy+0x20/0x30 [ 173.359340][ T9083] _inline_copy_from_user+0x3c/0x194 [ 173.359350][ T9083] ioctl_standard_iw_point+0x488/0xb14 [ 173.359359][ T9083] ioctl_standard_call+0xc0/0x1a8 [ 173.359368][ T9083] wext_ioctl_dispatch+0x104/0x374 [ 173.359376][ T9083] wext_handle_ioctl+0x154/0x290 [ 173.359385][ T9083] sock_ioctl+0x150/0x7e8 [ 173.359393][ T9083] __arm64_sys_ioctl+0x14c/0x1c4 [ 173.359404][ T9083] invoke_syscall+0x98/0x244 [ 173.359414][ T9083] el0_svc_common+0xe8/0x23c [ 173.359424][ T9083] do_el0_svc+0x48/0x58 [ 173.359434][ T9083] el0_svc+0x64/0x260 [ 173.359441][ T9083] el0t_64_sync_handler+0x48/0x148 [ 173.359448][ T9083] el0t_64_sync+0x198/0x19c [ 173.819077][ T9092] loop5: detected capacity change from 0 to 2048 [ 173.827774][ T9092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.654260][ T4718] Bluetooth: hci5: command tx timeout [ 174.682754][ T7315] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.697153][ T9112] FAULT_INJECTION: forcing a failure. [ 174.697153][ T9112] name failslab, interval 1, probability 0, space 0, times 0 [ 174.697196][ T9112] CPU: 1 UID: 0 PID: 9112 Comm: syz.6.1336 Tainted: G L syzkaller #0 PREEMPT [ 174.697209][ T9112] Tainted: [L]=SOFTLOCKUP [ 174.697213][ T9112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.697218][ T9112] Call trace: [ 174.697221][ T9112] show_stack+0x2c/0x3c (C) [ 174.697241][ T9112] __dump_stack+0x30/0x40 [ 174.697252][ T9112] dump_stack_lvl+0xd8/0x12c [ 174.697262][ T9112] dump_stack+0x1c/0x28 [ 174.697271][ T9112] should_fail_ex+0x414/0x588 [ 174.697284][ T9112] should_failslab+0xc4/0x124 [ 174.697293][ T9112] __kmalloc_cache_noprof+0x8c/0x624 [ 174.697304][ T9112] vkms_plane_duplicate_state+0x58/0x110 [ 174.697312][ T9112] drm_atomic_get_plane_state+0x208/0x564 [ 174.697322][ T9112] drm_client_modeset_commit_atomic+0x18c/0x6c8 [ 174.697331][ T9112] drm_client_modeset_commit_locked+0xd0/0x498 [ 174.697339][ T9112] drm_fb_helper_pan_display+0x1b4/0x78c [ 174.697348][ T9112] fb_pan_display+0x2ec/0x540 [ 174.697355][ T9112] bit_update_start+0x4c/0x1dc [ 174.697365][ T9112] fbcon_switch+0xb28/0xf5c [ 174.697373][ T9112] csi_J+0x358/0x610 [ 174.697384][ T9112] csi_ECMA+0x13e0/0x31a0 [ 174.697393][ T9112] do_con_write+0x2ee8/0x3e8c [ 174.697403][ T9112] con_write+0x34/0x58 [ 174.697413][ T9112] n_tty_write+0x970/0xd98 [ 174.697423][ T9112] file_tty_write+0x3e8/0x644 [ 174.697432][ T9112] tty_write+0x44/0x54 [ 174.697441][ T9112] vfs_write+0x52c/0xa14 [ 174.697451][ T9112] ksys_write+0x12c/0x224 [ 174.697461][ T9112] __arm64_sys_write+0x7c/0x90 [ 174.697470][ T9112] invoke_syscall+0x98/0x244 [ 174.697481][ T9112] el0_svc_common+0xe8/0x23c [ 174.697490][ T9112] do_el0_svc+0x48/0x58 [ 174.697500][ T9112] el0_svc+0x64/0x260 [ 174.697508][ T9112] el0t_64_sync_handler+0x48/0x148 [ 174.697516][ T9112] el0t_64_sync+0x198/0x19c [ 175.113199][ T9140] netlink: 'syz.3.1347': attribute type 3 has an invalid length. [ 175.227999][ T9150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1350'. [ 175.233981][ T9150] vlan0: entered promiscuous mode [ 175.235074][ T9150] veth1_virt_wifi: entered promiscuous mode [ 175.338086][ T9160] syz.7.1349 uses obsolete (PF_INET,SOCK_PACKET) [ 175.577916][ T9169] evm: overlay not supported [ 175.579243][ T9169] 8021q: VLANs not supported on ipvlan0 [ 175.685135][ T9180] FAULT_INJECTION: forcing a failure. [ 175.685135][ T9180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.685172][ T9180] CPU: 0 UID: 0 PID: 9180 Comm: syz.3.1363 Tainted: G L syzkaller #0 PREEMPT [ 175.685188][ T9180] Tainted: [L]=SOFTLOCKUP [ 175.685193][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.685199][ T9180] Call trace: [ 175.685203][ T9180] show_stack+0x2c/0x3c (C) [ 175.685220][ T9180] __dump_stack+0x30/0x40 [ 175.685230][ T9180] dump_stack_lvl+0xd8/0x12c [ 175.685240][ T9180] dump_stack+0x1c/0x28 [ 175.685249][ T9180] should_fail_ex+0x414/0x588 [ 175.685259][ T9180] should_fail+0x14/0x24 [ 175.685267][ T9180] should_fail_usercopy+0x20/0x30 [ 175.685275][ T9180] simple_read_from_buffer+0xc4/0x240 [ 175.685285][ T9180] proc_fail_nth_read+0x1a8/0x248 [ 175.685292][ T9180] vfs_read+0x230/0x8e4 [ 175.685302][ T9180] ksys_read+0x12c/0x224 [ 175.685311][ T9180] __arm64_sys_read+0x7c/0x90 [ 175.685321][ T9180] invoke_syscall+0x98/0x244 [ 175.685331][ T9180] el0_svc_common+0xe8/0x23c [ 175.685341][ T9180] do_el0_svc+0x48/0x58 [ 175.685350][ T9180] el0_svc+0x64/0x260 [ 175.685358][ T9180] el0t_64_sync_handler+0x48/0x148 [ 175.685365][ T9180] el0t_64_sync+0x198/0x19c [ 175.766829][ T9182] FAULT_INJECTION: forcing a failure. [ 175.766829][ T9182] name failslab, interval 1, probability 0, space 0, times 0 [ 175.770344][ T9182] CPU: 1 UID: 0 PID: 9182 Comm: syz.3.1365 Tainted: G L syzkaller #0 PREEMPT [ 175.770367][ T9182] Tainted: [L]=SOFTLOCKUP [ 175.770371][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 175.770377][ T9182] Call trace: [ 175.770380][ T9182] show_stack+0x2c/0x3c (C) [ 175.770401][ T9182] __dump_stack+0x30/0x40 [ 175.770412][ T9182] dump_stack_lvl+0xd8/0x12c [ 175.770422][ T9182] dump_stack+0x1c/0x28 [ 175.770432][ T9182] should_fail_ex+0x414/0x588 [ 175.770441][ T9182] should_failslab+0xc4/0x124 [ 175.770450][ T9182] __kmalloc_cache_node_noprof+0x90/0x6ac [ 175.770459][ T9182] __get_vm_area_node+0x178/0x32c [ 175.770469][ T9182] __vmalloc_node_range_noprof+0x2c4/0x10dc [ 175.770479][ T9182] __vmalloc_node_noprof+0xec/0x14c [ 175.770488][ T9182] dup_task_struct+0x380/0x7bc [ 175.770496][ T9182] copy_process+0x634/0x334c [ 175.770503][ T9182] create_io_thread+0xe0/0x140 [ 175.770511][ T9182] create_io_worker+0x158/0x4f0 [ 175.770521][ T9182] io_wq_enqueue+0x50c/0x740 [ 175.770530][ T9182] io_queue_iowq+0x1fc/0x65c [ 175.770541][ T9182] io_queue_sqe_fallback+0x124/0x1e8 [ 175.770548][ T9182] io_submit_sqes+0xf94/0x1e48 [ 175.770555][ T9182] __arm64_sys_io_uring_enter+0x290/0x1674 [ 175.770563][ T9182] invoke_syscall+0x98/0x244 [ 175.770572][ T9182] el0_svc_common+0xe8/0x23c [ 175.770582][ T9182] do_el0_svc+0x48/0x58 [ 175.770597][ T9182] el0_svc+0x64/0x260 [ 175.770605][ T9182] el0t_64_sync_handler+0x48/0x148 [ 175.770612][ T9182] el0t_64_sync+0x198/0x19c [ 176.150808][ T9196] sctp: [Deprecated]: syz.6.1368 (pid 9196) Use of int in max_burst socket option. [ 176.150808][ T9196] Use struct sctp_assoc_value instead [ 176.158071][ T9196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.158254][ T9196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.171080][ T9199] loop7: detected capacity change from 0 to 512 [ 176.195893][ T9199] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.725940][ T4718] Bluetooth: hci5: command tx timeout [ 177.400870][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.264428][ T9239] bond2: peer notification delay (6) is not a multiple of miimon (9), value rounded to 0 ms [ 178.794048][ T9258] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 178.797596][ T9258] overlayfs: failed to clone upperpath [ 179.471716][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 179.711576][ T9280] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20ffb000 [ 179.711815][ T9280] Memory failure: 0x21cf58: Sending SIGBUS to syz.6.1394:9280 due to hardware memory corruption [ 179.712584][ T9280] Memory failure: 0x21cf58: recovery action for already poisoned page: Failed [ 179.714592][ T9280] loop6: detected capacity change from 0 to 128 [ 179.813377][ T9280] FAT-fs (loop6): bogus number of reserved sectors [ 179.813421][ T9280] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 179.813442][ T9280] FAT-fs (loop6): Can't find a valid FAT filesystem [ 179.827801][ T9280] ±ÿe=0,utf8=: renamed from lo (while UP) [ 179.828856][ T6742] bond0: (slave bond_slave_0): interface is now down [ 179.829473][ T6742] bond0: (slave bond_slave_1): interface is now down [ 179.963625][ T39] bond0: (slave bond_slave_0): interface is now down [ 179.969948][ T39] bond0: (slave bond_slave_1): interface is now down [ 180.061269][ T39] bond0: now running without any active interface! [ 180.210229][ T9296] FAULT_INJECTION: forcing a failure. [ 180.210229][ T9296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.210277][ T9296] CPU: 0 UID: 0 PID: 9296 Comm: syz.6.1400 Tainted: G L syzkaller #0 PREEMPT [ 180.210292][ T9296] Tainted: [L]=SOFTLOCKUP [ 180.210297][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 180.210304][ T9296] Call trace: [ 180.210308][ T9296] show_stack+0x2c/0x3c (C) [ 180.210332][ T9296] __dump_stack+0x30/0x40 [ 180.210347][ T9296] dump_stack_lvl+0xd8/0x12c [ 180.210356][ T9296] dump_stack+0x1c/0x28 [ 180.210366][ T9296] should_fail_ex+0x414/0x588 [ 180.210379][ T9296] should_fail+0x14/0x24 [ 180.210387][ T9296] should_fail_usercopy+0x20/0x30 [ 180.210396][ T9296] _inline_copy_from_user+0x40/0x180 [ 180.210406][ T9296] copy_msghdr_from_user+0xb8/0x194 [ 180.210414][ T9296] ___sys_recvmsg+0x11c/0x1f4 [ 180.210421][ T9296] do_recvmmsg+0x2a8/0x7e8 [ 180.210427][ T9296] __sys_recvmmsg+0x1e0/0x270 [ 180.210434][ T9296] __arm64_sys_recvmmsg+0xd0/0xf8 [ 180.210441][ T9296] invoke_syscall+0x98/0x244 [ 180.210452][ T9296] el0_svc_common+0xe8/0x23c [ 180.210462][ T9296] do_el0_svc+0x48/0x58 [ 180.210471][ T9296] el0_svc+0x64/0x260 [ 180.210479][ T9296] el0t_64_sync_handler+0x48/0x148 [ 180.210486][ T9296] el0t_64_sync+0x198/0x19c [ 180.334134][ T9306] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1405'. [ 180.362360][ T9313] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1408'. [ 181.214505][ T9337] netlink: 'syz.3.1416': attribute type 5 has an invalid length. [ 181.215009][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1416'. [ 182.227892][ T9376] loop5: detected capacity change from 0 to 512 [ 182.239402][ T9376] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1429: corrupted in-inode xattr: e_value size too large [ 182.242380][ T9376] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 182.242725][ T9376] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1429: couldn't read orphan inode 15 (err -117) [ 182.244751][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 182.244765][ C1] EXT4-fs (loop5): initial error at time 184: ext4_iget_extra_inode:5128: inode 15 [ 182.244785][ C1] EXT4-fs (loop5): last error at time 184: ext4_iget_extra_inode:5128: inode 15 [ 182.253227][ T9376] loop5: lost filesystem error report for type 5 error -117 [ 182.254225][ T9376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.351999][ T7315] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 182.354879][ T7315] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 182.580054][ T9381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.580272][ T9381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.597357][ T9379] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.649966][ T4939] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.742634][ T4939] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.753899][ T4717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.756719][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.759289][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.761178][ T4717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.763226][ T4717] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.957352][ T4939] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.118764][ T4939] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.154541][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1436'. [ 183.285834][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.285905][ T9385] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.286008][ T9385] bridge_slave_0: entered allmulticast mode [ 183.286489][ T9385] bridge_slave_0: entered promiscuous mode [ 183.293035][ T9385] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.294944][ T9385] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.295084][ T9385] bridge_slave_1: entered allmulticast mode [ 183.298087][ T9385] bridge_slave_1: entered promiscuous mode [ 183.386215][ T9419] sctp: [Deprecated]: syz.7.1439 (pid 9419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.386215][ T9419] Use struct sctp_sack_info instead [ 183.523081][ T4939] bridge_slave_1: left allmulticast mode [ 183.523117][ T4939] bridge_slave_1: left promiscuous mode [ 183.523333][ T4939] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.525835][ T4939] bridge_slave_0: left allmulticast mode [ 183.525849][ T4939] bridge_slave_0: left promiscuous mode [ 183.525920][ T4939] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.577753][ T4718] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 183.651170][ T4939] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 183.816676][ T4939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.836372][ T4939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.865302][ T4939] bond0 (unregistering): Released all slaves [ 183.868831][ T4939] bond1 (unregistering): Released all slaves [ 183.874979][ T4939] bond2 (unregistering): Released all slaves [ 183.880200][ T9385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.884984][ T9385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.895337][ T9385] team0: Port device team_slave_0 added [ 183.897382][ T9385] team0: Port device team_slave_1 added [ 183.907447][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.908902][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.913085][ T9385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.916488][ T9385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.916503][ T9385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.916523][ T9385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.965192][ T9385] hsr_slave_0: entered promiscuous mode [ 183.965579][ T9385] hsr_slave_1: entered promiscuous mode [ 183.966993][ T9385] debugfs: 'hsr0' already exists in 'hsr' [ 183.967005][ T9385] Cannot create hsr debugfs directory [ 184.157789][ T9456] tipc: Started in network mode [ 184.158966][ T9456] tipc: Node identity d20be07d6688, cluster identity 4711 [ 184.160510][ T9456] tipc: Enabled bearer , priority 0 [ 184.211159][ T4394] 8021q: adding VLAN 0 to HW filter on device eth8 [ 184.211702][ T9456] syzkaller0: entered promiscuous mode [ 184.211717][ T9456] syzkaller0: entered allmulticast mode [ 184.228366][ T9456] tipc: Resetting bearer [ 184.231693][ T9455] tipc: Resetting bearer [ 184.237449][ T9455] tipc: Disabling bearer [ 184.295699][ T4939] hsr_slave_0: left promiscuous mode [ 184.297177][ T4939] hsr_slave_1: left promiscuous mode [ 184.298653][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.300077][ T4939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.314014][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.315382][ T4939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.320520][ T4939] veth1_macvtap: left promiscuous mode [ 184.321522][ T4939] veth0_macvtap: left promiscuous mode [ 184.322607][ T4939] veth1_vlan: left promiscuous mode [ 184.324054][ T4939] veth0_vlan: left promiscuous mode [ 184.793727][ T4718] Bluetooth: hci1: command tx timeout [ 184.848787][ T4939] team0 (unregistering): Port device team_slave_1 removed [ 184.858745][ T4939] team0 (unregistering): Port device team_slave_0 removed [ 184.932926][ T4394] 8021q: adding VLAN 0 to HW filter on device eth9 [ 184.960733][ T9492] syzkaller0: entered promiscuous mode [ 184.960771][ T9492] syzkaller0: entered allmulticast mode [ 184.961992][ T9385] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 184.965022][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.965353][ T9385] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 184.968386][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.971643][ T9385] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 184.979578][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.979974][ T9385] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 184.983948][ T9385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 185.081155][ T9385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.093430][ T9385] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.099599][ T3065] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.099650][ T3065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.103670][ T3065] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.103710][ T3065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.120247][ T9385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.120280][ T9385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.158082][ T4394] 8021q: adding VLAN 0 to HW filter on device eth10 [ 185.211203][ T9533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1455'. [ 185.433755][ T9385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.496944][ T4394] 8021q: adding VLAN 0 to HW filter on device eth11 [ 185.536953][ T9385] veth0_vlan: entered promiscuous mode [ 185.540343][ T9385] veth1_vlan: entered promiscuous mode [ 185.559034][ T9385] veth0_macvtap: entered promiscuous mode [ 185.560394][ T9385] veth1_macvtap: entered promiscuous mode [ 185.566409][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.567959][ T9385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.574993][ T3065] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.579641][ T3065] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.581598][ T3065] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.585530][ T9282] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.643662][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.643696][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.663210][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.663243][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.713856][ T9579] FAULT_INJECTION: forcing a failure. [ 185.713856][ T9579] name failslab, interval 1, probability 0, space 0, times 0 [ 185.716276][ T9579] CPU: 1 UID: 0 PID: 9579 Comm: syz.8.1433 Tainted: G L syzkaller #0 PREEMPT [ 185.716311][ T9579] Tainted: [L]=SOFTLOCKUP [ 185.716315][ T9579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.716322][ T9579] Call trace: [ 185.716326][ T9579] show_stack+0x2c/0x3c (C) [ 185.716347][ T9579] __dump_stack+0x30/0x40 [ 185.716359][ T9579] dump_stack_lvl+0xd8/0x12c [ 185.716368][ T9579] dump_stack+0x1c/0x28 [ 185.716378][ T9579] should_fail_ex+0x414/0x588 [ 185.716387][ T9579] should_failslab+0xc4/0x124 [ 185.716396][ T9579] __kmalloc_cache_noprof+0x8c/0x624 [ 185.716405][ T9579] nf_tables_newtable+0x48c/0x1120 [ 185.716415][ T9579] nfnetlink_rcv+0xca0/0x16f8 [ 185.716424][ T9579] netlink_unicast+0x610/0x800 [ 185.716434][ T9579] netlink_sendmsg+0x63c/0x920 [ 185.716444][ T9579] __sock_sendmsg+0xc8/0x138 [ 185.716454][ T9579] ____sys_sendmsg+0x418/0x70c [ 185.716461][ T9579] ___sys_sendmsg+0x198/0x224 [ 185.716467][ T9579] __sys_sendmsg+0x160/0x214 [ 185.716474][ T9579] __arm64_sys_sendmsg+0x80/0x94 [ 185.716481][ T9579] invoke_syscall+0x98/0x244 [ 185.716491][ T9579] el0_svc_common+0xe8/0x23c [ 185.716501][ T9579] do_el0_svc+0x48/0x58 [ 185.716511][ T9579] el0_svc+0x64/0x260 [ 185.716519][ T9579] el0t_64_sync_handler+0x48/0x148 [ 185.716526][ T9579] el0t_64_sync+0x198/0x19c [ 186.716246][ T9613] loop8: detected capacity change from 0 to 512 [ 186.732131][ T9613] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.893321][ T4718] Bluetooth: hci1: command tx timeout [ 187.374623][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.376679][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.780938][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1478'. [ 187.944810][ T9385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.043075][ T4718] Bluetooth: hci1: command tx timeout [ 189.289707][ T9662] No control pipe specified [ 189.941569][ T9686] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1495'. [ 190.006156][ T9686] netlink: 'syz.8.1495': attribute type 1 has an invalid length. [ 190.477790][ T9703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'. [ 190.511845][ T9706] No control pipe specified [ 190.707508][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'. [ 191.027908][ T4718] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 191.113093][ T4718] Bluetooth: hci1: command tx timeout [ 191.264957][ T9733] binder: 9724:9733 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 191.265047][ T9733] binder: 9733 RLIMIT_NICE not set [ 191.266132][ T9733] binder: 9724:9733 ioctl c0306201 0 returned -14 [ 191.338103][ T9733] loop7: detected capacity change from 0 to 2048 [ 191.471581][ T9733] Alternate GPT is invalid, using primary GPT. [ 191.471683][ T9733] loop7: p2 p3 p7 [ 191.497490][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1511'. [ 191.497524][ T9738] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1511'. [ 192.007064][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1522'. [ 192.158032][ T9771] loop8: detected capacity change from 0 to 1024 [ 192.159885][ T9771] EXT4-fs: inline encryption not supported [ 192.201732][ T9771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.209101][ T9771] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1523'. [ 192.224881][ T9771] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1523: bg 0: block 112: padding at end of block bitmap is not set [ 192.265928][ T9385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.379473][ T9780] binder: 9779:9780 ioctl 4018620d ffffffffffffffff returned -22 [ 192.599808][ T9782] FAULT_INJECTION: forcing a failure. [ 192.599808][ T9782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.603658][ T9782] CPU: 1 UID: 0 PID: 9782 Comm: syz.8.1527 Tainted: G L syzkaller #0 PREEMPT [ 192.603690][ T9782] Tainted: [L]=SOFTLOCKUP [ 192.603694][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 192.603700][ T9782] Call trace: [ 192.603704][ T9782] show_stack+0x2c/0x3c (C) [ 192.603729][ T9782] __dump_stack+0x30/0x40 [ 192.603741][ T9782] dump_stack_lvl+0xd8/0x12c [ 192.603751][ T9782] dump_stack+0x1c/0x28 [ 192.603761][ T9782] should_fail_ex+0x414/0x588 [ 192.603773][ T9782] should_fail+0x14/0x24 [ 192.603782][ T9782] should_fail_usercopy+0x20/0x30 [ 192.603792][ T9782] _inline_copy_from_user+0x40/0x180 [ 192.603801][ T9782] copy_msghdr_from_user+0xb8/0x194 [ 192.603809][ T9782] ___sys_recvmsg+0x11c/0x1f4 [ 192.603816][ T9782] do_recvmmsg+0x2a8/0x7e8 [ 192.603823][ T9782] __sys_recvmmsg+0x1e0/0x270 [ 192.603830][ T9782] __arm64_sys_recvmmsg+0xd0/0xf8 [ 192.603837][ T9782] invoke_syscall+0x98/0x244 [ 192.603848][ T9782] el0_svc_common+0xe8/0x23c [ 192.603858][ T9782] do_el0_svc+0x48/0x58 [ 192.603867][ T9782] el0_svc+0x64/0x260 [ 192.603875][ T9782] el0t_64_sync_handler+0x48/0x148 [ 192.603882][ T9782] el0t_64_sync+0x198/0x19c [ 192.882134][ T9801] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1531'. [ 192.882187][ T9801] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1531'. [ 192.901475][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1535'. [ 192.951792][ T9808] loop7: detected capacity change from 0 to 2048 [ 192.971908][ T9808] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.046404][ T9815] netlink: 'syz.8.1538': attribute type 1 has an invalid length. [ 193.048976][ T9815] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.1538'. [ 193.437289][ T9824] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1541'. [ 193.597306][ T9835] loop6: detected capacity change from 0 to 512 [ 193.608110][ T9835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.647968][ T8280] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 193.659720][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.831464][ T9282] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 193.832003][ T9282] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 193.832023][ T9282] EXT4-fs (loop7): This should not happen!! Data will be lost [ 193.832023][ T9282] [ 193.832035][ T9282] EXT4-fs (loop7): Total free blocks count 0 [ 193.832045][ T9282] EXT4-fs (loop7): Free/Dirty block details [ 193.832067][ T9282] EXT4-fs (loop7): free_blocks=4096 [ 193.832087][ T9282] EXT4-fs (loop7): dirty_blocks=160 [ 193.832097][ T9282] EXT4-fs (loop7): Block reservation details [ 193.832106][ T9282] EXT4-fs (loop7): i_reserved_data_blocks=10 [ 193.853317][ T9856] syzkaller0: entered allmulticast mode [ 193.855667][ T8837] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 193.858903][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.859983][ T9860] FAULT_INJECTION: forcing a failure. [ 193.859983][ T9860] name failslab, interval 1, probability 0, space 0, times 0 [ 193.860002][ T9860] CPU: 0 UID: 0 PID: 9860 Comm: syz.6.1552 Tainted: G L syzkaller #0 PREEMPT [ 193.860014][ T9860] Tainted: [L]=SOFTLOCKUP [ 193.860017][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 193.860022][ T9860] Call trace: [ 193.860025][ T9860] show_stack+0x2c/0x3c (C) [ 193.860044][ T9860] __dump_stack+0x30/0x40 [ 193.860055][ T9860] dump_stack_lvl+0xd8/0x12c [ 193.860064][ T9860] dump_stack+0x1c/0x28 [ 193.860073][ T9860] should_fail_ex+0x414/0x588 [ 193.860083][ T9860] should_failslab+0xc4/0x124 [ 193.860092][ T9860] __kmalloc_noprof+0x100/0x6f0 [ 193.860102][ T9860] io_cache_alloc_new+0x58/0x114 [ 193.860111][ T9860] __io_prep_rw+0x268/0xc20 [ 193.860120][ T9860] io_prep_rw+0x44/0x124 [ 193.860128][ T9860] io_prep_write+0x2c/0x3c [ 193.860137][ T9860] io_submit_sqes+0x8a8/0x1e48 [ 193.860144][ T9860] __arm64_sys_io_uring_enter+0x290/0x1674 [ 193.860151][ T9860] invoke_syscall+0x98/0x244 [ 193.860161][ T9860] el0_svc_common+0xe8/0x23c [ 193.860171][ T9860] do_el0_svc+0x48/0x58 [ 193.860180][ T9860] el0_svc+0x64/0x260 [ 193.860188][ T9860] el0t_64_sync_handler+0x48/0x148 [ 193.860195][ T9860] el0t_64_sync+0x198/0x19c [ 193.918234][ T9862] syzkaller1: entered promiscuous mode [ 193.918271][ T9862] syzkaller1: entered allmulticast mode [ 193.925246][ T9862] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 194.076484][ T9880] loop8: detected capacity change from 0 to 512 [ 194.089778][ T9880] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 194.109399][ T9883] syzkaller0: entered promiscuous mode [ 194.110601][ T9883] syzkaller0: entered allmulticast mode [ 194.113407][ T9883] tipc: Started in network mode [ 194.114484][ T9883] tipc: Node identity 86be0f19cd36, cluster identity 4711 [ 194.117119][ T9883] tipc: Enabled bearer , priority 0 [ 194.118897][ T9882] tipc: Resetting bearer [ 194.134989][ T9880] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 not in group (block 16)! [ 194.136993][ T9880] EXT4-fs (loop8): group descriptors corrupted! [ 194.148668][ T9882] tipc: Disabling bearer [ 194.242535][ T9893] loop8: detected capacity change from 0 to 2048 [ 194.255067][ T9893] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.325561][ T9890] xt_hashlimit: size too large, truncated to 1048576 [ 195.134780][ T9906] netlink: 'syz.7.1567': attribute type 10 has an invalid length. [ 195.134815][ T9906] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1567'. [ 195.134922][ T9906] team0: entered promiscuous mode [ 195.134938][ T9906] team_slave_0: entered promiscuous mode [ 195.135036][ T9906] team_slave_1: entered promiscuous mode [ 195.135090][ T9906] team0: entered allmulticast mode [ 195.135101][ T9906] team_slave_0: entered allmulticast mode [ 195.135113][ T9906] team_slave_1: entered allmulticast mode [ 195.135545][ T9906] bridge0: port 3(team0) entered blocking state [ 195.135601][ T9906] bridge0: port 3(team0) entered disabled state [ 195.136644][ T9906] bridge0: port 3(team0) entered blocking state [ 195.136680][ T9906] bridge0: port 3(team0) entered forwarding state [ 195.229245][ T9908] loop6: detected capacity change from 0 to 1024 [ 195.234444][ T9908] EXT4-fs: Ignoring removed bh option [ 195.237676][ T9908] EXT4-fs: inline encryption not supported [ 195.239792][ T9908] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.261364][ T9908] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.1568: lblock 2 mapped to illegal pblock 2 (length 1) [ 195.261407][ T9908] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 195.264903][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 195.264916][ C0] EXT4-fs (loop6): initial error at time 197: ext4_map_blocks:791: inode 3: block 2 [ 195.264935][ C0] EXT4-fs (loop6): last error at time 197: ext4_map_blocks:791: inode 3: block 2 [ 195.272349][ T9908] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 195.272428][ T9908] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.1568: Invalid inode table block 1 in block_group 0 [ 195.272458][ T9908] loop6: lost filesystem error report for type 5 error -117 [ 195.279597][ T9908] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 195.279633][ T9908] loop6: lost filesystem error report for type 5 error -117 [ 195.285265][ T9908] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.1568: mark_inode_dirty error [ 195.285311][ T9908] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 195.288800][ T9908] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 195.288828][ T9908] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1568: Failed to acquire dquot type 0 [ 195.288854][ T9908] loop6: lost filesystem error report for type 5 error -117 [ 195.295023][ T9908] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 195.295054][ T9908] loop6: lost filesystem error report for type 5 error -117 [ 195.298763][ T9908] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.1568: mark_inode_dirty error [ 195.298806][ T9908] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 195.303330][ T9908] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 195.303416][ T9908] EXT4-fs (loop6): 1 orphan inode deleted [ 195.303906][ T9908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.324047][ T9282] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.333085][ T9282] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 195.333132][ T9282] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:13: Failed to release dquot type 0 [ 195.347695][ T9908] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.361510][ T9908] EXT4-fs error (device loop6): __ext4_get_inode_loc:4885: comm syz.6.1568: Invalid inode table block 1 in block_group 0 [ 195.361546][ T9908] loop6: lost filesystem error report for type 5 error -117 [ 195.365701][ T9908] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 195.365743][ T9908] loop6: lost filesystem error report for type 5 error -117 [ 195.369885][ T9908] EXT4-fs error (device loop6): ext4_quota_off:7318: inode #3: comm syz.6.1568: mark_inode_dirty error [ 195.369928][ T9908] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 195.407818][ T9385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.579044][ T9908] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1568'. [ 195.678891][ T9928] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.1574'. [ 195.690495][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 195.698401][ T9928] sctp: [Deprecated]: syz.0.1574 (pid 9928) Use of int in maxseg socket option. [ 195.698401][ T9928] Use struct sctp_assoc_value instead [ 195.756048][ T9957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.756248][ T9957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.762080][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 195.766166][ T9958] fuse: Bad value for 'fd' [ 196.827482][ T9971] No control pipe specified [ 197.415681][ T9995] netlink: 'syz.6.1588': attribute type 1 has an invalid length. [ 197.422386][ T9995] tipc: New replicast peer: 255.255.255.255 [ 197.426184][ T9995] tipc: Enabled bearer , priority 10 [ 197.748907][T10025] loop8: detected capacity change from 0 to 256 [ 197.750429][T10025] vfat: Bad value for 'time_offset' [ 197.911061][T10031] No control pipe specified [ 198.401340][T10060] loop7: detected capacity change from 0 to 512 [ 198.416660][T10060] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.457958][T10060] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 198.458868][T10060] Quota error (device loop7): write_blk: dquota write failed [ 198.458890][T10060] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 198.458928][T10060] Quota error (device loop7): write_blk: dquota write failed [ 198.458970][T10060] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 198.458990][T10060] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.1599: Failed to acquire dquot type 1 [ 198.459005][T10060] loop7: lost filesystem error report for type 5 error -28 [ 198.462922][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 198.462942][ C0] EXT4-fs (loop7): initial error at time 200: ext4_mb_generate_buddy:1317 [ 198.462960][ C0] EXT4-fs (loop7): last error at time 200: ext4_acquire_dquot:7034 [ 198.489092][T10060] EXT4-fs (loop7): 1 truncate cleaned up [ 198.489572][T10060] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.534814][T10048] EXT4-fs error (device loop7): __ext4_remount:6837: comm syz.7.1599: Abort forced by user [ 198.537887][T10048] EXT4-fs (loop7): Remounting filesystem read-only [ 198.537936][T10048] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 198.544202][ T10] tipc: Node number set to 3028541565 [ 199.166350][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.391715][T10085] syzkaller0: entered promiscuous mode [ 199.391753][T10085] syzkaller0: entered allmulticast mode [ 199.406163][T10085] __nla_validate_parse: 3 callbacks suppressed [ 199.407516][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1608'. [ 199.438751][T10089] vlan2: entered promiscuous mode [ 199.439713][T10089] veth1_virt_wifi: entered promiscuous mode [ 199.512076][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'. [ 199.740845][T10104] No memory to map [ 199.921551][T10108] loop7: detected capacity change from 0 to 1024 [ 199.940869][T10108] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 199.941099][T10108] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 199.946341][T10108] EXT4-fs (loop7): invalid journal inode [ 199.946568][T10108] EXT4-fs (loop7): can't get journal size [ 199.965723][T10108] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 17104912: comm syz.7.1614: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 199.965794][T10108] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 199.966490][T10108] EXT4-fs (loop7): Remounting filesystem read-only [ 199.966928][T10108] EXT4-fs (loop7): failed to initialize system zone (-117) [ 199.967143][T10108] EXT4-fs (loop7): mount failed [ 200.023793][T10111] syzkaller0: entered promiscuous mode [ 200.023830][T10111] syzkaller0: entered allmulticast mode [ 200.805989][T10139] syzkaller0: entered promiscuous mode [ 200.806031][T10139] syzkaller0: entered allmulticast mode [ 202.299220][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.303648][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.517952][T10180] loop6: detected capacity change from 0 to 256 [ 202.520273][T10180] vfat: Unknown parameter 'uni_xlEže' [ 202.901580][T10191] netlink: 'syz.7.1644': attribute type 16 has an invalid length. [ 202.901613][T10191] netlink: 'syz.7.1644': attribute type 17 has an invalid length. [ 203.243250][T10191] bridge0: port 3(team0) entered disabled state [ 203.243413][T10191] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.243549][T10191] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.579589][T10205] binder: 10199:10205 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 203.579626][T10205] binder: 10205 RLIMIT_NICE not set [ 203.579898][T10205] binder: 10199:10205 ioctl c0306201 0 returned -14 [ 203.585693][T10205] loop8: detected capacity change from 0 to 2048 [ 203.626000][T10205] Alternate GPT is invalid, using primary GPT. [ 203.626118][T10205] loop8: p2 p3 p7 [ 203.763893][T10191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.767787][T10191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.514850][ T15] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.514913][ T15] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.514935][ T15] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.514953][ T15] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.533792][T10233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.535893][T10233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.541078][T10225] syzkaller0: entered promiscuous mode [ 204.541116][T10225] syzkaller0: entered allmulticast mode [ 204.600797][T10240] loop7: detected capacity change from 0 to 1024 [ 204.697367][T10240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.768656][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.837125][T10256] loop7: detected capacity change from 0 to 256 [ 204.838915][T10256] vfat: Unknown parameter 'iocharseÅ' [ 205.571556][T10269] capability: warning: `syz.0.1665' uses 32-bit capabilities (legacy support in use) [ 206.332515][T10300] netlink: 'syz.8.1676': attribute type 10 has an invalid length. [ 206.334254][T10300] syz_tun: entered promiscuous mode [ 206.339974][T10300] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 206.397621][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1678'. [ 206.535164][T10311] tipc: Enabling of bearer rejected, failed to enable media [ 206.811687][T10314] syzkaller0: entered promiscuous mode [ 206.814233][T10314] syzkaller0: entered allmulticast mode [ 206.875233][T10316] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 207.005572][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1684'. [ 207.145520][T10328] binder: 10324:10328 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.145612][T10328] binder: 10328 RLIMIT_NICE not set [ 207.146297][T10328] binder: 10324:10328 ioctl c0306201 0 returned -14 [ 207.227047][T10328] loop7: detected capacity change from 0 to 2048 [ 207.338161][T10305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.354827][T10328] Alternate GPT is invalid, using primary GPT. [ 207.354939][T10328] loop7: p2 p3 p7 [ 207.766341][T10335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1689'. [ 207.915583][ T4697] udevd[4697]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 207.917083][ T6660] udevd[6660]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 207.922571][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 208.869042][T10364] loop7: detected capacity change from 0 to 512 [ 208.871097][T10364] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 208.879547][T10364] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 208.882913][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 208.882945][ C0] EXT4-fs (loop7): initial error at time 210: ext4_mb_generate_buddy:1317 [ 208.882980][ C0] EXT4-fs (loop7): last error at time 210: ext4_mb_generate_buddy:1317 [ 208.883395][T10364] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 208.883925][T10364] EXT4-fs (loop7): 1 truncate cleaned up [ 208.884858][T10364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.113167][T10372] binder: 10367:10372 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 209.113239][T10372] binder: 10372 RLIMIT_NICE not set [ 209.114250][T10372] binder: 10367:10372 ioctl c0306201 0 returned -14 [ 209.171674][T10372] loop8: detected capacity change from 0 to 2048 [ 209.246751][T10372] Alternate GPT is invalid, using primary GPT. [ 209.246919][T10372] loop8: p2 p3 p7 [ 209.280210][ T4339] Alternate GPT is invalid, using primary GPT. [ 209.280322][ T4339] loop8: p2 p3 p7 [ 209.525018][ T4718] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 209.686854][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.834996][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 210.249158][T10413] loop6: detected capacity change from 0 to 256 [ 210.249505][T10413] vfat: Unknown parameter 'utf801' [ 210.476176][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1719'. [ 210.558389][ T30] audit: type=1326 audit(212.548:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10422 comm="syz.3.1719" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff82977aa8 code=0x0 [ 210.654421][T10430] fuse: Bad value for 'fd' [ 210.770553][T10434] autofs: Bad value for 'fd' [ 210.810968][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 210.818652][T10438] x_tables: duplicate entry at hook 3 [ 210.948330][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1727'. [ 211.079752][T10453] No control pipe specified [ 212.013190][T10458] veth0: entered promiscuous mode [ 212.887682][T10490] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1740'. [ 212.887715][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1740'. [ 212.898733][T10490] vlan0: entered allmulticast mode [ 212.898764][T10490] gretap0: entered allmulticast mode [ 213.168432][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1737'. [ 213.262415][T10512] loop7: detected capacity change from 0 to 512 [ 213.276818][T10512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.529768][T10534] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1755'. [ 214.534058][T10534] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1755'. [ 215.419077][T10540] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 215.544818][T10540] bond1: (slave geneve2): making interface the new active one [ 215.546915][T10548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.547111][T10548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.561934][T10540] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 215.565432][ T15] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.565484][ T15] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.565512][ T15] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.565531][ T15] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.665213][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.745355][T10589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1773'. [ 216.764395][ T15] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 216.766709][ T15] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 216.770031][ T15] bond0: active interface up! [ 217.189673][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.189880][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.244001][T10604] loop6: detected capacity change from 0 to 512 [ 217.266865][T10604] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 217.291121][T10610] FAULT_INJECTION: forcing a failure. [ 217.291121][T10610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.291157][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.3.1781 Tainted: G L syzkaller #0 PREEMPT [ 217.291171][T10610] Tainted: [L]=SOFTLOCKUP [ 217.291175][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 217.291181][T10610] Call trace: [ 217.291184][T10610] show_stack+0x2c/0x3c (C) [ 217.291205][T10610] __dump_stack+0x30/0x40 [ 217.291216][T10610] dump_stack_lvl+0xd8/0x12c [ 217.291225][T10610] dump_stack+0x1c/0x28 [ 217.291235][T10610] should_fail_ex+0x414/0x588 [ 217.291245][T10610] should_fail+0x14/0x24 [ 217.291253][T10610] should_fail_usercopy+0x20/0x30 [ 217.291262][T10610] simple_read_from_buffer+0xc4/0x240 [ 217.291272][T10610] proc_fail_nth_read+0x1a8/0x248 [ 217.291280][T10610] vfs_read+0x230/0x8e4 [ 217.291290][T10610] ksys_read+0x12c/0x224 [ 217.291299][T10610] __arm64_sys_read+0x7c/0x90 [ 217.291309][T10610] invoke_syscall+0x98/0x244 [ 217.291319][T10610] el0_svc_common+0xe8/0x23c [ 217.291329][T10610] do_el0_svc+0x48/0x58 [ 217.291338][T10610] el0_svc+0x64/0x260 [ 217.291347][T10610] el0t_64_sync_handler+0x48/0x148 [ 217.291354][T10610] el0t_64_sync+0x198/0x19c [ 217.710957][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1784'. [ 218.134976][T10631] loop6: detected capacity change from 0 to 512 [ 218.206413][T10633] netlink: 'syz.3.1787': attribute type 10 has an invalid length. [ 218.206908][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.207088][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.213271][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.213336][T10633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.213458][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.213491][T10633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.217015][T10633] team0: Port device bridge0 added [ 218.220030][T10631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.258859][T10651] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1792'. [ 219.262590][T10651] loop7: detected capacity change from 0 to 512 [ 219.266293][T10651] EXT4-fs: Ignoring removed oldalloc option [ 219.268585][T10651] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.270208][T10651] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 219.270233][T10651] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 219.270260][T10651] EXT4-fs (loop7): group descriptors corrupted! [ 219.447196][T10666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.447406][T10666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.611269][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.679650][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1801'. [ 220.609476][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 220.633941][T10711] loop8: detected capacity change from 0 to 512 [ 220.636029][T10711] EXT4-fs: Mount option(s) incompatible with ext2 [ 220.638102][T10710] syzkaller1: entered promiscuous mode [ 220.638130][T10710] syzkaller1: entered allmulticast mode [ 220.714999][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.717622][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.899303][T10734] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1816'. [ 220.941514][T10736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1817'. [ 221.287878][T10744] loop8: detected capacity change from 0 to 512 [ 221.295544][T10744] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 221.300806][T10744] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 221.304491][T10744] EXT4-fs (loop8): orphan cleanup on readonly fs [ 221.307536][T10744] Quota error (device loop8): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 221.310566][T10744] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 221.313666][T10744] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 221.316046][T10744] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #16: comm syz.8.1819: iget: immutable or append flags not allowed on symlinks [ 221.316080][T10744] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 221.322604][T10744] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1819: couldn't read orphan inode 16 (err -117) [ 221.322645][T10744] loop8: lost filesystem error report for type 5 error -117 [ 221.322911][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 221.322933][ C1] EXT4-fs (loop8): initial error at time 223: ext4_orphan_get:1397: inode 16 [ 221.322966][ C1] EXT4-fs (loop8): last error at time 223: ext4_orphan_get:1402 [ 221.341914][T10744] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.389468][ T9385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.030738][T10761] netlink: 'syz.8.1822': attribute type 10 has an invalid length. [ 222.031026][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.031213][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.033571][T10761] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.033618][T10761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.033728][T10761] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.033765][T10761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.035363][T10761] team0: Port device bridge0 added [ 222.143160][T10763] loop6: detected capacity change from 0 to 128 [ 222.143918][T10763] EXT4-fs: Mount option(s) incompatible with ext3 [ 222.174541][T10777] loop7: detected capacity change from 0 to 512 [ 222.191352][T10777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.349189][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.145752][T10873] loop7: detected capacity change from 0 to 512 [ 227.147473][T10873] EXT4-fs: Ignoring removed mblk_io_submit option [ 227.150624][T10873] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 227.155890][T10873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 227.156006][T10873] EXT4-fs (loop7): orphan cleanup on readonly fs [ 227.160885][T10873] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1852: bg 0: block 361: padding at end of block bitmap is not set [ 227.160927][T10873] loop7: lost filesystem error report for type 5 error -117 [ 227.164393][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 227.164407][ C0] EXT4-fs (loop7): initial error at time 229: ext4_validate_block_bitmap:441 [ 227.164423][ C0] EXT4-fs (loop7): last error at time 229: ext4_validate_block_bitmap:441 [ 227.171338][T10873] EXT4-fs (loop7): Remounting filesystem read-only [ 227.175031][T10873] EXT4-fs (loop7): 1 truncate cleaned up [ 227.177339][T10873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 227.180134][T10876] loop6: detected capacity change from 0 to 1024 [ 227.180605][T10876] EXT4-fs: Ignoring removed nobh option [ 227.180624][T10876] EXT4-fs: Ignoring removed orlov option [ 227.182133][T10876] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 227.223636][T10876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.261271][T10876] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 227.262603][T10876] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 227.275927][T10876] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers [ 227.359332][T10884] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.1852: dx entry: limit 0 != root limit 125 [ 227.359538][T10884] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.1852: Corrupt directory, running e2fsck is recommended [ 227.822317][T10891] netlink: 'syz.0.1855': attribute type 10 has an invalid length. [ 227.822536][T10891] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.822721][T10891] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.832664][T10891] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.832713][T10891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.834002][T10891] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.834042][T10891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.839140][T10891] team0: Port device bridge0 added [ 227.867358][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.007338][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 228.114693][T10902] syzkaller0: entered promiscuous mode [ 228.117018][T10902] syzkaller0: entered allmulticast mode [ 228.831154][T10916] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1865'. [ 228.927686][T10914] overlay: filesystem on ./bus not supported as upperdir [ 229.023964][T10921] loop6: detected capacity change from 0 to 256 [ 229.192170][T10930] loop8: detected capacity change from 0 to 4096 [ 229.199634][T10930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.367129][T10848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.421834][T10937] syzkaller0: entered promiscuous mode [ 229.421874][T10937] syzkaller0: entered allmulticast mode [ 229.916854][ T9385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.319743][T10961] bridge_slave_1: left allmulticast mode [ 230.321070][T10961] bridge_slave_1: left promiscuous mode [ 230.322424][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.330550][T10961] bond0: (slave bond_slave_0): Releasing backup interface [ 230.357521][T10961] bond0: (slave bond_slave_1): Releasing backup interface [ 230.392148][T10961] team0: Port device team_slave_0 removed [ 230.395573][T10961] team0: Port device team_slave_1 removed [ 230.397342][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.398927][T10961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.401236][T10961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.403243][T10961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.405321][T10961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.435290][T10966] loop6: detected capacity change from 0 to 8192 [ 231.870149][T10986] syzkaller0: entered promiscuous mode [ 231.871398][T10986] syzkaller0: entered allmulticast mode [ 231.929826][T10993] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1886'. [ 232.008496][T11001] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1892'. [ 232.446305][T11006] syzkaller0: entered promiscuous mode [ 232.446340][T11006] syzkaller0: entered allmulticast mode [ 232.565995][T11006] loop6: detected capacity change from 0 to 256 [ 232.584685][T11006] FAT-fs (loop6): Directory bread(block 64) failed [ 232.584718][T11006] FAT-fs (loop6): Directory bread(block 65) failed [ 232.584753][T11006] FAT-fs (loop6): Directory bread(block 66) failed [ 232.584769][T11006] FAT-fs (loop6): Directory bread(block 67) failed [ 232.584796][T11006] FAT-fs (loop6): Directory bread(block 68) failed [ 232.584811][T11006] FAT-fs (loop6): Directory bread(block 69) failed [ 232.584876][T11006] FAT-fs (loop6): Directory bread(block 70) failed [ 232.584890][T11006] FAT-fs (loop6): Directory bread(block 71) failed [ 232.584916][T11006] FAT-fs (loop6): Directory bread(block 72) failed [ 232.584930][T11006] FAT-fs (loop6): Directory bread(block 73) failed [ 232.821710][T11016] binder: 11009:11016 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 232.821790][T11016] binder: 11016 RLIMIT_NICE not set [ 232.822699][T11016] binder: 11009:11016 ioctl c0306201 0 returned -14 [ 232.870871][T11016] loop7: detected capacity change from 0 to 2048 [ 233.089175][T11014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.089380][T11014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.096403][T11014] loop8: detected capacity change from 0 to 512 [ 233.116371][T11014] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 233.116506][T11014] EXT4-fs (loop8): orphan cleanup on readonly fs [ 233.128559][T11016] Alternate GPT is invalid, using primary GPT. [ 233.129816][T11016] loop7: p2 p3 p7 [ 233.144940][T11014] Quota error (device loop8): do_check_range: Getting block 196613 out of range 1-5 [ 233.147022][T11014] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 233.147058][T11014] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.1897: Failed to acquire dquot type 1 [ 233.147077][T11014] loop8: lost filesystem error report for type 5 error -117 [ 233.151684][T11014] EXT4-fs (loop8): Remounting filesystem read-only [ 233.153035][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 233.153047][ C1] EXT4-fs (loop8): initial error at time 235: ext4_acquire_dquot:7034 [ 233.153064][ C1] EXT4-fs (loop8): last error at time 235: ext4_acquire_dquot:7034 [ 233.160152][T11014] EXT4-fs (loop8): 1 truncate cleaned up [ 233.161517][ T39] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 233.161533][ T39] Quota error (device loop8): write_blk: dquota write failed [ 233.161540][ T39] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 233.161548][ T39] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 233.161556][ T39] Quota error (device loop8): write_blk: dquota write failed [ 233.161562][ T39] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 233.161596][ T39] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 233.161606][ T39] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 233.178207][T11014] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.450123][ T4718] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 233.895085][T11037] loop7: detected capacity change from 0 to 512 [ 233.907594][T11037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.991066][ T9385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.759977][T11052] loop8: detected capacity change from 0 to 2048 [ 234.760372][T11052] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.760400][T11052] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.833827][T11052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.938261][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1903'. [ 234.944256][T11052] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 234.994006][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.132447][T11071] FAULT_INJECTION: forcing a failure. [ 235.132447][T11071] name failslab, interval 1, probability 0, space 0, times 0 [ 235.132488][T11071] CPU: 0 UID: 0 PID: 11071 Comm: syz.7.1906 Tainted: G L syzkaller #0 PREEMPT [ 235.132504][T11071] Tainted: [L]=SOFTLOCKUP [ 235.132508][T11071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 235.132516][T11071] Call trace: [ 235.132519][T11071] show_stack+0x2c/0x3c (C) [ 235.132539][T11071] __dump_stack+0x30/0x40 [ 235.132550][T11071] dump_stack_lvl+0xd8/0x12c [ 235.132560][T11071] dump_stack+0x1c/0x28 [ 235.132569][T11071] should_fail_ex+0x414/0x588 [ 235.132583][T11071] should_failslab+0xc4/0x124 [ 235.132592][T11071] __kmalloc_noprof+0x100/0x6f0 [ 235.132601][T11071] tomoyo_realpath_from_path+0xbc/0x4cc [ 235.132614][T11071] tomoyo_path_number_perm+0x1f4/0x514 [ 235.132624][T11071] tomoyo_file_ioctl+0x2c/0x3c [ 235.132631][T11071] security_file_ioctl+0xdc/0x2b0 [ 235.132642][T11071] __arm64_sys_ioctl+0xa8/0x1c4 [ 235.132652][T11071] invoke_syscall+0x98/0x244 [ 235.132662][T11071] el0_svc_common+0xe8/0x23c [ 235.132672][T11071] do_el0_svc+0x48/0x58 [ 235.132681][T11071] el0_svc+0x64/0x260 [ 235.132690][T11071] el0t_64_sync_handler+0x48/0x148 [ 235.132697][T11071] el0t_64_sync+0x198/0x19c [ 235.132723][T11071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 235.986510][T11102] ±ÿe=0,utf8=: entered allmulticast mode [ 235.992681][ T9385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.712672][T11151] tipc: Started in network mode [ 236.714600][T11151] tipc: Node identity ac14140f, cluster identity 4711 [ 236.716159][T11151] tipc: New replicast peer: 255.255.255.255 [ 236.717568][T11151] tipc: Enabled bearer , priority 10 [ 236.719183][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1926'. [ 236.720924][T11151] tipc: Disabling bearer [ 237.747356][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.747563][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.041512][T11202] loop8: detected capacity change from 0 to 1024 [ 238.049683][T11202] EXT4-fs: Invalid want_extra_isize 3 [ 240.630612][T11262] loop7: detected capacity change from 0 to 512 [ 240.865011][T11262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.128632][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.575054][T11309] loop6: detected capacity change from 0 to 512 [ 242.590036][T11309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.913788][T11332] bond2: option miimon: invalid value (18446744073709551615) [ 243.915285][T11332] bond2: option miimon: allowed values 0 - 2147483647 [ 243.921982][T11332] bond2 (unregistering): Released all slaves [ 243.929988][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.072665][T11350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.078141][T11350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.251864][T11362] loop6: detected capacity change from 0 to 256 [ 244.252711][T11362] vfat: Unknown parameter 'shortname½winnt' [ 244.801142][T11368] syzkaller0: entered promiscuous mode [ 244.802501][T11368] syzkaller0: entered allmulticast mode [ 244.852194][T11370] syzkaller0: entered promiscuous mode [ 244.853648][T11370] syzkaller0: entered allmulticast mode [ 244.856443][T11370] FAULT_INJECTION: forcing a failure. [ 244.856443][T11370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.859019][T11370] CPU: 0 UID: 0 PID: 11370 Comm: syz.3.1989 Tainted: G L syzkaller #0 PREEMPT [ 244.859049][T11370] Tainted: [L]=SOFTLOCKUP [ 244.859055][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.859063][T11370] Call trace: [ 244.859067][T11370] show_stack+0x2c/0x3c (C) [ 244.859087][T11370] __dump_stack+0x30/0x40 [ 244.859099][T11370] dump_stack_lvl+0xd8/0x12c [ 244.859110][T11370] dump_stack+0x1c/0x28 [ 244.859119][T11370] should_fail_ex+0x414/0x588 [ 244.859130][T11370] should_fail+0x14/0x24 [ 244.859137][T11370] should_fail_usercopy+0x20/0x30 [ 244.859146][T11370] _inline_copy_from_user+0x40/0x180 [ 244.859155][T11370] move_addr_to_kernel+0x88/0x168 [ 244.859165][T11370] __sys_sendto+0x1b4/0x338 [ 244.859175][T11370] __arm64_sys_sendto+0xd8/0xf8 [ 244.859185][T11370] invoke_syscall+0x98/0x244 [ 244.859195][T11370] el0_svc_common+0xe8/0x23c [ 244.859205][T11370] do_el0_svc+0x48/0x58 [ 244.859214][T11370] el0_svc+0x64/0x260 [ 244.859222][T11370] el0t_64_sync_handler+0x48/0x148 [ 244.859229][T11370] el0t_64_sync+0x198/0x19c [ 244.945367][T11372] syzkaller0: entered promiscuous mode [ 244.946736][T11372] syzkaller0: entered allmulticast mode [ 245.431123][T11378] loop6: detected capacity change from 0 to 512 [ 245.448815][T11378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.536120][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 246.555027][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.566758][T11400] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1997'. [ 246.674142][T11405] loop6: detected capacity change from 0 to 512 [ 246.688254][T11405] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1998: inode has both inline data and extents flags [ 246.688294][T11405] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 246.690887][T11405] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1998: couldn't read orphan inode 15 (err -117) [ 246.690918][T11405] loop6: lost filesystem error report for type 5 error -117 [ 246.694565][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 246.694590][ C1] EXT4-fs (loop6): initial error at time 250: ext4_orphan_get:1397: inode 15 [ 246.694612][ C1] EXT4-fs (loop6): last error at time 250: ext4_orphan_get:1402 [ 246.701169][T11405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.704627][T11405] fscrypt (loop6, inode 18): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 246.707156][T11405] binder: 11404:11405 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 246.709707][T11405] binder: 11405 RLIMIT_NICE not set [ 246.711105][T11405] binder: 11404:11405 ioctl c0306201 0 returned -14 [ 246.722780][T11405] binder: 11404:11405 ioctl b704 200005c0 returned -22 [ 246.769324][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.142861][T11420] binder: 11417:11420 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 247.143189][T11420] binder: 11420 RLIMIT_NICE not set [ 247.144693][T11420] binder: 11417:11420 ioctl c0306201 0 returned -14 [ 247.205033][T11420] loop6: detected capacity change from 0 to 2048 [ 247.362035][T11420] Alternate GPT is invalid, using primary GPT. [ 247.362138][T11420] loop6: p2 p3 p7 [ 247.754554][T11393] lo speed is unknown, defaulting to 1000 [ 247.755110][T11393] lo speed is unknown, defaulting to 1000 [ 247.755359][T11393] lo speed is unknown, defaulting to 1000 [ 247.801606][T11393] infiniband sz1: set active [ 247.801640][ T867] lo speed is unknown, defaulting to 1000 [ 247.805897][T11393] infiniband sz1: added lo [ 247.806370][T11393] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 247.809855][T11393] infiniband sz1: Couldn't open port 1 [ 247.844122][T11393] RDS/IB: sz1: added [ 247.844169][T11393] smc: adding ib device sz1 with port count 1 [ 247.844181][T11393] smc: ib device sz1 port 1 has no pnetid [ 247.844414][T11393] lo speed is unknown, defaulting to 1000 [ 247.853072][ T9] lo speed is unknown, defaulting to 1000 [ 247.937061][T11393] lo speed is unknown, defaulting to 1000 [ 247.979825][T11393] lo speed is unknown, defaulting to 1000 [ 248.336938][T11393] lo speed is unknown, defaulting to 1000 [ 248.383177][T11393] lo speed is unknown, defaulting to 1000 [ 248.428101][T11393] lo speed is unknown, defaulting to 1000 [ 248.794630][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.795926][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.825851][T11470] loop8: detected capacity change from 0 to 2048 [ 248.845061][T11470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.471553][T11486] vivid-000: disconnect [ 249.476888][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2021'. [ 249.564792][ T30] audit: type=1326 audit(253.559:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab77aa8 code=0x7ffc0000 [ 249.564846][ T30] audit: type=1326 audit(253.559:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab77aa8 code=0x7ffc0000 [ 249.567076][ T30] audit: type=1326 audit(253.559:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9ab7154c code=0x7ffc0000 [ 249.567844][ T30] audit: type=1326 audit(253.559:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9bb0b9e0 code=0x7ffc0000 [ 249.568388][ T30] audit: type=1326 audit(253.559:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9ab7154c code=0x7ffc0000 [ 249.569513][ T30] audit: type=1326 audit(253.559:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9bb0b9e0 code=0x7ffc0000 [ 249.570096][ T30] audit: type=1326 audit(253.559:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9ab7154c code=0x7ffc0000 [ 249.571364][ T30] audit: type=1326 audit(253.559:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9bb0b9e0 code=0x7ffc0000 [ 249.571802][ T30] audit: type=1326 audit(253.559:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9ab7154c code=0x7ffc0000 [ 249.572621][ T30] audit: type=1326 audit(253.559:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.6.2016" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9bb0b9e0 code=0x7ffc0000 [ 249.646292][ T9385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.997505][T11495] loop8: detected capacity change from 0 to 2048 [ 250.081128][T11495] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.101414][T11495] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 250.109389][T11496] workqueue: Failed to create a rescuer kthread for wq "nfc12_nci_cmd_wq": -EINTR [ 250.111616][T11495] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 250.111653][T11495] EXT4-fs (loop8): This should not happen!! Data will be lost [ 250.111653][T11495] [ 250.113537][T11495] EXT4-fs (loop8): Total free blocks count 0 [ 250.113553][T11495] EXT4-fs (loop8): Free/Dirty block details [ 250.113600][T11495] EXT4-fs (loop8): free_blocks=66060288 [ 250.113620][T11495] EXT4-fs (loop8): dirty_blocks=64 [ 250.113628][T11495] EXT4-fs (loop8): Block reservation details [ 250.113635][T11495] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 250.113767][T11495] EXT4-fs error (device loop8) in ext4_setattr:6120: error 28 [ 250.291460][T11486] vivid-000: reconnect [ 250.293970][ T39] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 250.296835][ T9385] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 250.779157][T11540] loop8: detected capacity change from 0 to 256 [ 250.818334][T11540] FAT-fs (loop8): Directory bread(block 64) failed [ 250.818377][T11540] FAT-fs (loop8): Directory bread(block 65) failed [ 250.818407][T11540] FAT-fs (loop8): Directory bread(block 66) failed [ 250.818420][T11540] FAT-fs (loop8): Directory bread(block 67) failed [ 250.818444][T11540] FAT-fs (loop8): Directory bread(block 68) failed [ 250.818456][T11540] FAT-fs (loop8): Directory bread(block 69) failed [ 250.818479][T11540] FAT-fs (loop8): Directory bread(block 70) failed [ 250.818490][T11540] FAT-fs (loop8): Directory bread(block 71) failed [ 250.818512][T11540] FAT-fs (loop8): Directory bread(block 72) failed [ 250.818522][T11540] FAT-fs (loop8): Directory bread(block 73) failed [ 251.272485][T11549] smc: net device wlan0 applied user defined pnetid SYZ0 [ 251.935300][T11565] xt_hashlimit: max too large, truncated to 1048576 [ 251.935372][T11565] xt_hashlimit: overflow, rate too high: 0 [ 251.944640][T11565] netlink: 'syz.6.2034': attribute type 1 has an invalid length. [ 252.180696][T11595] loop6: detected capacity change from 0 to 8192 [ 252.255300][T11595] loop6: p1 < > p3[EZD] [ 252.256702][T11595] loop6: p3 start 3238002688 is beyond EOD, truncated [ 252.292167][ T4698] udevd[4698]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 252.697640][T11617] overlayfs: failed to clone upperpath [ 252.704722][T11617] overlayfs: missing 'lowerdir' [ 252.706889][T11617] overlayfs: failed to clone upperpath [ 252.810275][T11624] ip6erspan0: entered allmulticast mode [ 252.812495][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 252.854797][T11628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2059'. [ 253.336781][T11678] lo: entered allmulticast mode [ 254.070119][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.072107][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.087250][T11700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.087486][T11700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.950859][T11715] Option '2 O€ÉÇ—Wz [ 254.950859][T11715] ­ f:ó–ã5úÉùÔAŠÀ- [ 254.950859][T11715] ¶ÉØ)‰dÁÕ::ûÞl]GYï;ŸÌmÁ~Rã N+o¸ý{j\°' to dns_resolver key: bad/missing value [ 256.275681][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2105'. [ 256.854862][T11814] syzkaller0: entered promiscuous mode [ 256.854902][T11814] syzkaller0: entered allmulticast mode [ 256.894523][T11805] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2114'. [ 256.982170][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2119'. [ 257.063670][T11824] rdma_rxe: rxe_newlink: failed to add lo [ 257.382648][T11831] binder: 11827:11831 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 257.382743][T11831] binder: 11831 RLIMIT_NICE not set [ 257.382810][T11831] FAULT_INJECTION: forcing a failure. [ 257.382810][T11831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.382849][T11831] CPU: 0 UID: 0 PID: 11831 Comm: syz.7.2123 Tainted: G L syzkaller #0 PREEMPT [ 257.382861][T11831] Tainted: [L]=SOFTLOCKUP [ 257.382864][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 257.382870][T11831] Call trace: [ 257.382873][T11831] show_stack+0x2c/0x3c (C) [ 257.382894][T11831] __dump_stack+0x30/0x40 [ 257.382905][T11831] dump_stack_lvl+0xd8/0x12c [ 257.382915][T11831] dump_stack+0x1c/0x28 [ 257.382924][T11831] should_fail_ex+0x414/0x588 [ 257.382933][T11831] should_fail+0x14/0x24 [ 257.382941][T11831] should_fail_usercopy+0x20/0x30 [ 257.382950][T11831] binder_ioctl_write_read+0x7bac/0x9260 [ 257.382960][T11831] binder_ioctl+0x438/0x1ba8 [ 257.382967][T11831] __arm64_sys_ioctl+0x14c/0x1c4 [ 257.382977][T11831] invoke_syscall+0x98/0x244 [ 257.382987][T11831] el0_svc_common+0xe8/0x23c [ 257.382997][T11831] do_el0_svc+0x48/0x58 [ 257.383006][T11831] el0_svc+0x64/0x260 [ 257.383014][T11831] el0t_64_sync_handler+0x48/0x148 [ 257.383021][T11831] el0t_64_sync+0x198/0x19c [ 257.383098][T11831] binder: 11827:11831 ioctl c0306201 200000c0 returned -14 [ 257.383862][T11831] binder: 11827:11831 ioctl c0306201 0 returned -14 [ 257.432210][T11831] loop7: detected capacity change from 0 to 2048 [ 257.551398][T11831] Alternate GPT is invalid, using primary GPT. [ 257.551523][T11831] loop7: p2 p3 p7 [ 257.746899][T11822] loop6: detected capacity change from 0 to 512 [ 257.856824][T11822] EXT4-fs: Ignoring removed oldalloc option [ 257.862081][T11822] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 257.866477][T11822] EXT4-fs (loop6): 1 truncate cleaned up [ 257.866953][T11822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.927229][T11822] EXT4-fs (loop6): shut down requested (1) [ 258.569726][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2133'. [ 258.585490][ T9282] bond0: (slave bond_slave_0): interface is now down [ 258.585731][ T9282] bond0: (slave bond_slave_1): interface is now down [ 258.585770][ T9282] bond0: (slave syz_tun): interface is now down [ 258.592144][ T9282] bond0: now running without any active interface! [ 258.818552][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.327358][T11905] sit1: entered allmulticast mode [ 260.370464][T11905] fuse: Bad value for 'fd' [ 260.387283][T11911] syzkaller0: entered promiscuous mode [ 260.387316][T11911] syzkaller0: entered allmulticast mode [ 260.392207][T11911] tipc: Enabled bearer , priority 0 [ 260.396618][T11910] tipc: Resetting bearer [ 260.415405][T11910] tipc: Disabling bearer [ 260.459527][T11916] lo speed is unknown, defaulting to 1000 [ 260.467854][T11918] netlink: 'syz.0.2151': attribute type 10 has an invalid length. [ 260.472295][T11918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.671166][T11916] loop7: detected capacity change from 0 to 128 [ 260.680486][T11916] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.711934][T11932] netlink: 16162 bytes leftover after parsing attributes in process `syz.0.2157'. [ 260.804281][T11940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2161'. [ 261.196515][T11949] overlayfs: missing 'workdir' [ 261.236771][T11953] bond1 (unregistering): Released all slaves [ 261.375594][ T8837] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.402785][T11956] FAULT_INJECTION: forcing a failure. [ 261.402785][T11956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.402816][T11956] CPU: 1 UID: 0 PID: 11956 Comm: syz.6.2166 Tainted: G L syzkaller #0 PREEMPT [ 261.402829][T11956] Tainted: [L]=SOFTLOCKUP [ 261.402833][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 261.402838][T11956] Call trace: [ 261.402841][T11956] show_stack+0x2c/0x3c (C) [ 261.402861][T11956] __dump_stack+0x30/0x40 [ 261.402875][T11956] dump_stack_lvl+0xd8/0x12c [ 261.402885][T11956] dump_stack+0x1c/0x28 [ 261.402894][T11956] should_fail_ex+0x414/0x588 [ 261.402904][T11956] should_fail+0x14/0x24 [ 261.402911][T11956] should_fail_usercopy+0x20/0x30 [ 261.402920][T11956] _inline_copy_from_user+0x40/0x180 [ 261.402929][T11956] copy_msghdr_from_user+0xb8/0x194 [ 261.402937][T11956] ___sys_sendmsg+0x14c/0x224 [ 261.402944][T11956] __sys_sendmsg+0x160/0x214 [ 261.402951][T11956] __arm64_sys_sendmsg+0x80/0x94 [ 261.402957][T11956] invoke_syscall+0x98/0x244 [ 261.402968][T11956] el0_svc_common+0xe8/0x23c [ 261.402978][T11956] do_el0_svc+0x48/0x58 [ 261.402988][T11956] el0_svc+0x64/0x260 [ 261.402996][T11956] el0t_64_sync_handler+0x48/0x148 [ 261.403003][T11956] el0t_64_sync+0x198/0x19c [ 261.625414][ T30] kauditd_printk_skb: 2753 callbacks suppressed [ 261.625632][ T30] audit: type=1326 audit(265.619:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11963 comm="syz.6.2170" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab77aa8 code=0x0 [ 263.212391][T12014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2186'. [ 263.280729][T12020] loop7: detected capacity change from 0 to 128 [ 263.404917][ T30] audit: type=1326 audit(267.389:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12028 comm="syz.6.2189" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ab77aa8 code=0x0 [ 263.789085][T12047] loop8: detected capacity change from 0 to 256 [ 263.791614][T12047] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 263.940837][T12059] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2198'. [ 263.966264][T12061] ªªªªªª: renamed from lo (while UP) [ 264.011953][T12066] loop8: detected capacity change from 0 to 128 [ 264.539400][T12087] loop7: detected capacity change from 0 to 512 [ 264.543895][T12087] EXT4-fs (loop7): orphan cleanup on readonly fs [ 264.547689][T12087] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 264.549728][T12087] EXT4-fs (loop7): Remounting filesystem read-only [ 264.549909][T12087] EXT4-fs (loop7): 1 truncate cleaned up [ 264.552168][T12087] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 264.559582][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2206'. [ 264.602277][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.666073][T12099] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2211'. [ 265.079143][T12111] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20ff7000 [ 265.079217][T12111] Memory failure: 0x21cf58: Sending SIGBUS to syz.6.2213:12111 due to hardware memory corruption [ 265.079251][T12111] Memory failure: 0x21cf58: recovery action for already poisoned page: Failed [ 265.087042][T12111] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20ff7000 [ 265.087137][T12111] Memory failure: 0x21cf58: Sending SIGBUS to syz.6.2213:12111 due to hardware memory corruption [ 265.087163][T12111] Memory failure: 0x21cf58: recovery action for already poisoned page: Failed [ 265.123291][T12115] netlink: 'syz.3.2214': attribute type 11 has an invalid length. [ 265.176912][T12121] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2215'. [ 265.351341][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 265.365921][T10799] bond0: (slave bond_slave_0): interface is now down [ 265.367025][T10799] bond0: (slave bond_slave_1): interface is now down [ 265.369449][T10799] bond0: now running without any active interface! [ 265.600616][T12131] loop6: detected capacity change from 0 to 512 [ 265.616353][T12131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.905757][T12138] veth2: entered allmulticast mode [ 265.932403][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.413094][ T4718] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 266.459815][T12172] loop7: detected capacity change from 0 to 512 [ 266.487120][T12172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.448331][T12192] FAULT_INJECTION: forcing a failure. [ 267.448331][T12192] name failslab, interval 1, probability 0, space 0, times 0 [ 267.448374][T12192] CPU: 1 UID: 0 PID: 12192 Comm: syz.6.2235 Tainted: G L syzkaller #0 PREEMPT [ 267.448390][T12192] Tainted: [L]=SOFTLOCKUP [ 267.448395][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.448402][T12192] Call trace: [ 267.448405][T12192] show_stack+0x2c/0x3c (C) [ 267.448426][T12192] __dump_stack+0x30/0x40 [ 267.448439][T12192] dump_stack_lvl+0xd8/0x12c [ 267.448449][T12192] dump_stack+0x1c/0x28 [ 267.448458][T12192] should_fail_ex+0x414/0x588 [ 267.448469][T12192] should_failslab+0xc4/0x124 [ 267.448479][T12192] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 267.448489][T12192] __alloc_skb+0x1f0/0x5f8 [ 267.448500][T12192] netlink_alloc_large_skb+0xd4/0x114 [ 267.448511][T12192] netlink_sendmsg+0x4bc/0x920 [ 267.448521][T12192] __sock_sendmsg+0xc8/0x138 [ 267.448531][T12192] ____sys_sendmsg+0x418/0x70c [ 267.448538][T12192] ___sys_sendmsg+0x198/0x224 [ 267.448545][T12192] __sys_sendmsg+0x160/0x214 [ 267.448551][T12192] __arm64_sys_sendmsg+0x80/0x94 [ 267.448558][T12192] invoke_syscall+0x98/0x244 [ 267.448568][T12192] el0_svc_common+0xe8/0x23c [ 267.448578][T12192] do_el0_svc+0x48/0x58 [ 267.448592][T12192] el0_svc+0x64/0x260 [ 267.448601][T12192] el0t_64_sync_handler+0x48/0x148 [ 267.448608][T12192] el0t_64_sync+0x198/0x19c [ 267.699096][T12203] FAULT_INJECTION: forcing a failure. [ 267.699096][T12203] name failslab, interval 1, probability 0, space 0, times 0 [ 267.699377][T12203] CPU: 1 UID: 0 PID: 12203 Comm: syz.6.2236 Tainted: G L syzkaller #0 PREEMPT [ 267.699395][T12203] Tainted: [L]=SOFTLOCKUP [ 267.699399][T12203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.699404][T12203] Call trace: [ 267.699407][T12203] show_stack+0x2c/0x3c (C) [ 267.699429][T12203] __dump_stack+0x30/0x40 [ 267.699442][T12203] dump_stack_lvl+0xd8/0x12c [ 267.699451][T12203] dump_stack+0x1c/0x28 [ 267.699461][T12203] should_fail_ex+0x414/0x588 [ 267.699472][T12203] should_failslab+0xc4/0x124 [ 267.699482][T12203] __kmalloc_noprof+0x100/0x6f0 [ 267.699491][T12203] tomoyo_encode2+0x10c/0x33c [ 267.699503][T12203] tomoyo_encode+0x34/0x50 [ 267.699512][T12203] tomoyo_realpath_from_path+0x478/0x4cc [ 267.699523][T12203] tomoyo_path_number_perm+0x1f4/0x514 [ 267.699533][T12203] tomoyo_file_ioctl+0x2c/0x3c [ 267.699540][T12203] security_file_ioctl+0xdc/0x2b0 [ 267.699550][T12203] __arm64_sys_ioctl+0xa8/0x1c4 [ 267.699561][T12203] invoke_syscall+0x98/0x244 [ 267.699571][T12203] el0_svc_common+0xe8/0x23c [ 267.699581][T12203] do_el0_svc+0x48/0x58 [ 267.699599][T12203] el0_svc+0x64/0x260 [ 267.699607][T12203] el0t_64_sync_handler+0x48/0x148 [ 267.699615][T12203] el0t_64_sync+0x198/0x19c [ 267.699681][T12203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 267.900566][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.301875][T12220] loop7: detected capacity change from 0 to 1024 [ 268.330562][T12220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.404312][T12220] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.2246: missing EA_INODE flag [ 268.414295][T12220] EXT4-fs (loop7): Remounting filesystem read-only [ 268.438972][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2251'. [ 268.522437][T12241] loop6: detected capacity change from 0 to 1024 [ 268.539300][T12241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.581217][ T8280] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.622696][T12246] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2255'. [ 268.686602][T12248] syzkaller0: entered promiscuous mode [ 268.686640][T12248] syzkaller0: entered allmulticast mode [ 268.967257][T12255] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2258'. [ 270.393244][ T4718] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 270.486942][T12288] FAULT_INJECTION: forcing a failure. [ 270.486942][T12288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.486981][T12288] CPU: 0 UID: 0 PID: 12288 Comm: syz.3.2270 Tainted: G L syzkaller #0 PREEMPT [ 270.486997][T12288] Tainted: [L]=SOFTLOCKUP [ 270.487002][T12288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 270.487009][T12288] Call trace: [ 270.487013][T12288] show_stack+0x2c/0x3c (C) [ 270.487031][T12288] __dump_stack+0x30/0x40 [ 270.487042][T12288] dump_stack_lvl+0xd8/0x12c [ 270.487051][T12288] dump_stack+0x1c/0x28 [ 270.487061][T12288] should_fail_ex+0x414/0x588 [ 270.487071][T12288] should_fail+0x14/0x24 [ 270.487078][T12288] should_fail_usercopy+0x20/0x30 [ 270.487087][T12288] _inline_copy_from_user+0x40/0x180 [ 270.487096][T12288] copy_msghdr_from_user+0xb8/0x194 [ 270.487104][T12288] ___sys_sendmsg+0x14c/0x224 [ 270.487111][T12288] __sys_sendmsg+0x160/0x214 [ 270.487118][T12288] __arm64_sys_sendmsg+0x80/0x94 [ 270.487125][T12288] invoke_syscall+0x98/0x244 [ 270.487135][T12288] el0_svc_common+0xe8/0x23c [ 270.487145][T12288] do_el0_svc+0x48/0x58 [ 270.487154][T12288] el0_svc+0x64/0x260 [ 270.487162][T12288] el0t_64_sync_handler+0x48/0x148 [ 270.487169][T12288] el0t_64_sync+0x198/0x19c [ 270.513063][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.550689][T12294] binder: 12292:12294 ioctl 4018620d 0 returned -22 [ 270.553841][T12294] binder: 12292:12294 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 270.561075][T12293] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 270.609587][T12297] syzkaller0: entered promiscuous mode [ 270.609619][T12297] syzkaller0: entered allmulticast mode [ 270.671403][T12303] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2277'. [ 270.681984][T12301] team0 (unregistering): Port device team_slave_0 removed [ 270.687114][T12301] team0 (unregistering): Port device team_slave_1 removed [ 270.688621][T12301] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.688740][T12301] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.690783][T12301] team0 (unregistering): Port device bridge0 removed [ 270.783963][T12311] loop6: detected capacity change from 0 to 512 [ 270.787305][T12311] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 270.799680][ T4698] udevd[4698]: incorrect ext4 checksum on /dev/loop6 [ 271.659309][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2285'. [ 271.685870][T12331] binder: 12330:12331 ioctl 4018620d 0 returned -22 [ 271.686198][T12331] binder: 12330:12331 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 271.836661][T12339] mmap: syz.8.2291 (12339): VmData 37888000 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 272.836918][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.863493][T12358] binder: 12356:12358 ioctl 4018620d 0 returned -22 [ 272.869506][T12358] binder: 12356:12358 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 272.907860][T12360] syzkaller0: entered promiscuous mode [ 272.909042][T12360] syzkaller0: entered allmulticast mode [ 272.916335][ T4718] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 272.918056][ T4707] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.922169][ T4707] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.925225][ T4707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.925905][ T4707] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.926695][ T4707] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.962733][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.431416][ T30] audit: type=1326 audit(277.419:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12377 comm="syz.8.2303" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed77aa8 code=0x0 [ 273.949491][T12386] tipc: Enabling of bearer rejected, failed to enable media [ 274.004931][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.015594][T12361] lo speed is unknown, defaulting to 1000 [ 274.069724][T12403] loop7: detected capacity change from 0 to 512 [ 274.107315][T12403] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.127609][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.208353][ T8837] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.796312][ T40] ±ÿe=0,utf8=: left allmulticast mode [ 274.954150][ T4717] Bluetooth: hci3: command tx timeout [ 275.079897][ T40] bond0 (unregistering): Released all slaves [ 275.092679][T12361] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.092764][T12361] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.092844][T12361] bridge_slave_0: entered allmulticast mode [ 275.096692][T12361] bridge_slave_0: entered promiscuous mode [ 275.098742][T12361] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.098763][T12361] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.098826][T12361] bridge_slave_1: entered allmulticast mode [ 275.100504][T12361] bridge_slave_1: entered promiscuous mode [ 275.119837][T12361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.122291][T12361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.174865][T12361] team0: Port device team_slave_0 added [ 275.181314][T12361] team0: Port device team_slave_1 added [ 275.197781][ T40] tipc: Disabling bearer [ 275.197975][ T40] tipc: Left network mode [ 275.209647][T12430] 9p: Bad value for 'rfdno' [ 275.250963][T12361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.250995][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.251237][T12361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.255806][T12361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.255826][T12361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.255840][T12361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.460137][ T4394] 8021q: adding VLAN 0 to HW filter on device eth12 [ 275.471267][T12361] hsr_slave_0: entered promiscuous mode [ 275.471943][T12361] hsr_slave_1: entered promiscuous mode [ 275.472259][T12361] debugfs: 'hsr0' already exists in 'hsr' [ 275.472272][T12361] Cannot create hsr debugfs directory [ 275.865914][T12361] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 275.875322][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.875800][T12361] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 275.878826][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.910930][T12361] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 275.920297][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.923137][ T4394] 8021q: adding VLAN 0 to HW filter on device eth13 [ 275.925413][T12361] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 275.930748][T12361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.979616][T12361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.032792][T12361] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.060360][T10799] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.060408][T10799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.071171][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.071219][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.099490][ T40] hsr_slave_0: left promiscuous mode [ 276.100767][ T40] hsr_slave_1: left promiscuous mode [ 276.179674][ T40] veth1_macvtap: left promiscuous mode [ 276.179719][ T40] veth0_macvtap: left promiscuous mode [ 276.193679][T12492] random: crng reseeded on system resumption [ 276.719640][ T4394] 8021q: adding VLAN 0 to HW filter on device eth14 [ 276.890155][T12361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.027186][ T4394] 8021q: adding VLAN 0 to HW filter on device eth15 [ 277.033237][ T4717] Bluetooth: hci3: command tx timeout [ 277.082019][T12544] netlink: 10894 bytes leftover after parsing attributes in process `syz.0.2324'. [ 277.120297][T12361] veth0_vlan: entered promiscuous mode [ 277.144874][T12361] veth1_vlan: entered promiscuous mode [ 277.185495][T12361] veth0_macvtap: entered promiscuous mode [ 277.190978][T12361] veth1_macvtap: entered promiscuous mode [ 277.207238][T12361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.214031][T12361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.220415][ T40] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.220525][ T40] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.220558][ T40] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.220589][ T40] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.518636][T12563] No such timeout policy "syz1" [ 277.657874][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.660228][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.687071][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.687100][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.769607][T12570] syzkaller0: entered promiscuous mode [ 277.770865][T12570] syzkaller0: entered allmulticast mode [ 277.776277][ T4707] Bluetooth: Unknown LE signaling command 0xf6 [ 277.778155][ T4707] Bluetooth: Wrong link type (-22) [ 278.208369][T12579] IPVS: length: 173 != 24 [ 278.622633][T12593] loop7: detected capacity change from 0 to 128 [ 279.106803][T12595] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2331'. [ 279.522984][ T4707] Bluetooth: hci3: command tx timeout [ 279.805477][T12610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.810253][T12610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.819061][ T4707] Bluetooth: hci1: unknown advertising packet type: 0x17 [ 279.820597][T12609] 9pnet_fd: p9_fd_create_tcp (12609): problem connecting socket to 127.0.0.1 [ 279.965163][T12619] netlink: 376 bytes leftover after parsing attributes in process `syz.9.2344'. [ 280.359838][ T4707] Bluetooth: hci2: unexpected event for opcode 0x6843 [ 280.423220][ T4938] IPVS: starting estimator thread 0... [ 280.512993][T12641] IPVS: using max 45 ests per chain, 108000 per kthread [ 280.587464][T12645] loop8: detected capacity change from 0 to 32768 [ 280.626474][T12645] loop8: unable to read partition table [ 280.626594][T12645] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 280.640254][ T4707] Bluetooth: hci1: unexpected cc 0x0402 length: 61 > 1 [ 280.642635][ T4707] Bluetooth: hci1: unexpected event for opcode 0x0402 [ 280.791148][T12650] binder: 12649:12650 got transaction to invalid handle, 1 [ 280.791181][T12650] binder: 12649:12650 cannot find target node [ 280.791212][T12650] binder: 12649:12650 transaction call to 0:0 failed 59/29201/-22, code 0 size 0-0 line 3236 [ 280.816834][ T4707] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 280.822039][ T4792] binder: undelivered TRANSACTION_ERROR: 29201 [ 281.071025][T12674] netlink: 566 bytes leftover after parsing attributes in process `syz.3.2365'. [ 281.204309][T12679] lo speed is unknown, defaulting to 1000 [ 281.328399][T12686] loop9: detected capacity change from 0 to 512 [ 281.647645][ T4707] Bluetooth: hci3: command tx timeout [ 282.486721][T12710] FAULT_INJECTION: forcing a failure. [ 282.486721][T12710] name failslab, interval 1, probability 0, space 0, times 0 [ 282.486757][T12710] CPU: 1 UID: 0 PID: 12710 Comm: syz.9.2376 Tainted: G L syzkaller #0 PREEMPT [ 282.486771][T12710] Tainted: [L]=SOFTLOCKUP [ 282.486775][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 282.486780][T12710] Call trace: [ 282.486783][T12710] show_stack+0x2c/0x3c (C) [ 282.486803][T12710] __dump_stack+0x30/0x40 [ 282.486816][T12710] dump_stack_lvl+0xd8/0x12c [ 282.486826][T12710] dump_stack+0x1c/0x28 [ 282.486835][T12710] should_fail_ex+0x414/0x588 [ 282.486846][T12710] should_failslab+0xc4/0x124 [ 282.486856][T12710] __kmalloc_noprof+0x100/0x6f0 [ 282.486865][T12710] smk_write_net6addr+0x150/0x684 [ 282.486874][T12710] do_loop_readv_writev+0x248/0x3d8 [ 282.486882][T12710] vfs_writev+0x2e8/0x664 [ 282.486889][T12710] do_writev+0x134/0x2a4 [ 282.486895][T12710] __arm64_sys_writev+0x80/0x94 [ 282.486908][T12710] invoke_syscall+0x98/0x244 [ 282.486919][T12710] el0_svc_common+0xe8/0x23c [ 282.486929][T12710] do_el0_svc+0x48/0x58 [ 282.486938][T12710] el0_svc+0x64/0x260 [ 282.486946][T12710] el0t_64_sync_handler+0x48/0x148 [ 282.486953][T12710] el0t_64_sync+0x198/0x19c [ 282.527457][T12712] netlink: 'syz.9.2377': attribute type 4 has an invalid length. [ 283.802062][T12746] syz_tun: entered allmulticast mode [ 283.803722][T12746] netlink: 'syz.8.2387': attribute type 39 has an invalid length. [ 283.816999][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2389'. [ 283.828026][T12746] syz_tun (unregistering): left allmulticast mode [ 283.829727][T12746] bond0: (slave syz_tun): Releasing backup interface [ 283.874077][T12748] bond1: entered allmulticast mode [ 283.874296][T12748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.164218][T12769] FAULT_INJECTION: forcing a failure. [ 284.164218][T12769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.164256][T12769] CPU: 1 UID: 0 PID: 12769 Comm: syz.9.2391 Tainted: G L syzkaller #0 PREEMPT [ 284.164271][T12769] Tainted: [L]=SOFTLOCKUP [ 284.164274][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 284.164279][T12769] Call trace: [ 284.164282][T12769] show_stack+0x2c/0x3c (C) [ 284.164300][T12769] __dump_stack+0x30/0x40 [ 284.164310][T12769] dump_stack_lvl+0xd8/0x12c [ 284.164320][T12769] dump_stack+0x1c/0x28 [ 284.164329][T12769] should_fail_ex+0x414/0x588 [ 284.164339][T12769] should_fail+0x14/0x24 [ 284.164347][T12769] should_fail_usercopy+0x20/0x30 [ 284.164356][T12769] simple_read_from_buffer+0xc4/0x240 [ 284.164365][T12769] proc_fail_nth_read+0x1a8/0x248 [ 284.164373][T12769] vfs_read+0x230/0x8e4 [ 284.164383][T12769] ksys_read+0x12c/0x224 [ 284.164392][T12769] __arm64_sys_read+0x7c/0x90 [ 284.164402][T12769] invoke_syscall+0x98/0x244 [ 284.164412][T12769] el0_svc_common+0xe8/0x23c [ 284.164422][T12769] do_el0_svc+0x48/0x58 [ 284.164431][T12769] el0_svc+0x64/0x260 [ 284.164440][T12769] el0t_64_sync_handler+0x48/0x148 [ 284.164447][T12769] el0t_64_sync+0x198/0x19c [ 284.372986][T12784] loop9: detected capacity change from 0 to 2048 [ 284.398934][T12784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.415247][T12794] loop7: detected capacity change from 0 to 8 [ 284.433553][T12784] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #12: comm syz.9.2402: corrupted in-inode xattr: e_name out of bounds [ 284.437692][T12794] netlink: 'syz.7.2405': attribute type 10 has an invalid length. [ 284.439471][T12794] team0: Device bridge0 is already an upper device of the team interface [ 284.441458][T12784] EXT4-fs (loop9): Remounting filesystem read-only [ 284.472725][T12797] netlink: 'syz.3.2406': attribute type 4 has an invalid length. [ 284.478626][ T4938] lo speed is unknown, defaulting to 1000 [ 284.478659][ T4938] sz1: Port: 1 Link DOWN [ 284.479305][ T4938] lo speed is unknown, defaulting to 1000 [ 284.493563][T12361] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.557960][T12803] FAULT_INJECTION: forcing a failure. [ 284.557960][T12803] name failslab, interval 1, probability 0, space 0, times 0 [ 284.558005][T12803] CPU: 0 UID: 0 PID: 12803 Comm: syz.3.2408 Tainted: G L syzkaller #0 PREEMPT [ 284.558022][T12803] Tainted: [L]=SOFTLOCKUP [ 284.558026][T12803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 284.558032][T12803] Call trace: [ 284.558035][T12803] show_stack+0x2c/0x3c (C) [ 284.558056][T12803] __dump_stack+0x30/0x40 [ 284.558067][T12803] dump_stack_lvl+0xd8/0x12c [ 284.558076][T12803] dump_stack+0x1c/0x28 [ 284.558086][T12803] should_fail_ex+0x414/0x588 [ 284.558095][T12803] should_failslab+0xc4/0x124 [ 284.558104][T12803] kmem_cache_alloc_noprof+0x8c/0x610 [ 284.558113][T12803] skb_clone+0x1a8/0x31c [ 284.558122][T12803] nfnetlink_rcv+0x3cc/0x16f8 [ 284.558131][T12803] netlink_unicast+0x610/0x800 [ 284.558141][T12803] netlink_sendmsg+0x63c/0x920 [ 284.558151][T12803] __sock_sendmsg+0xc8/0x138 [ 284.558160][T12803] ____sys_sendmsg+0x418/0x70c [ 284.558167][T12803] ___sys_sendmsg+0x198/0x224 [ 284.558174][T12803] __sys_sendmsg+0x160/0x214 [ 284.558181][T12803] __arm64_sys_sendmsg+0x80/0x94 [ 284.558188][T12803] invoke_syscall+0x98/0x244 [ 284.558198][T12803] el0_svc_common+0xe8/0x23c [ 284.558208][T12803] do_el0_svc+0x48/0x58 [ 284.558217][T12803] el0_svc+0x64/0x260 [ 284.558225][T12803] el0t_64_sync_handler+0x48/0x148 [ 284.558233][T12803] el0t_64_sync+0x198/0x19c [ 284.666241][ T4707] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 284.669796][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2413'. [ 284.671643][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2413'. [ 284.678575][T12816] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2413'. [ 284.740103][T12820] netlink: 288 bytes leftover after parsing attributes in process `syz.9.2415'. [ 284.845159][T12832] loop9: detected capacity change from 0 to 512 [ 284.850998][T12832] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.856378][T12832] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 284.870931][T12832] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 284.880559][T12832] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 284.882580][T12832] System zones: 0-2, 18-18, 34-35 [ 284.887940][T12832] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.942418][T12837] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2422'. [ 285.245818][T12849] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 285.373344][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'. [ 285.397751][T12853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2427'. [ 285.449486][T12855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.449998][T12855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.462354][T12857] loop7: detected capacity change from 0 to 512 [ 285.464207][T12857] EXT4-fs: Ignoring removed orlov option [ 285.464240][T12857] EXT4-fs: Ignoring removed nobh option [ 285.464259][T12857] ext4: Unknown parameter 'subj_user' [ 285.815021][T12862] fuse: fd is not a fuse device [ 285.839756][T12361] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.916714][T12872] lo speed is unknown, defaulting to 1000 [ 286.120738][T12875] 9p: Bad value for 'rfdno' [ 286.120839][T12875] 9p: Bad value for 'rfdno' [ 286.120915][T12875] 9p: Bad value for 'rfdno' [ 286.120994][T12875] 9p: Bad value for 'rfdno' [ 286.121067][T12875] 9p: Bad value for 'rfdno' [ 286.121495][T12875] 9p: Bad value for 'rfdno' [ 286.121583][T12875] 9p: Bad value for 'rfdno' [ 286.121667][T12875] 9p: Bad value for 'rfdno' [ 286.121737][T12875] 9p: Bad value for 'rfdno' [ 286.121804][T12875] 9p: Bad value for 'rfdno' [ 286.121875][T12875] 9p: Bad value for 'rfdno' [ 286.121943][T12875] 9p: Bad value for 'rfdno' [ 286.122016][T12875] 9p: Bad value for 'rfdno' [ 286.122088][T12875] 9p: Bad value for 'rfdno' [ 286.122157][T12875] 9p: Bad value for 'rfdno' [ 286.122235][T12875] 9p: Bad value for 'rfdno' [ 286.122306][T12875] 9p: Bad value for 'rfdno' [ 286.122374][T12875] 9p: Bad value for 'rfdno' [ 286.122444][T12875] 9p: Bad value for 'rfdno' [ 286.122510][T12875] 9p: Bad value for 'rfdno' [ 286.122578][T12875] 9p: Bad value for 'rfdno' [ 286.122647][T12875] 9p: Bad value for 'rfdno' [ 286.122744][T12875] 9p: Bad value for 'rfdno' [ 286.122811][T12875] 9p: Bad value for 'rfdno' [ 286.127142][T12875] 9p: Bad value for 'rfdno' [ 286.427423][T12884] netlink: 'syz.7.2438': attribute type 10 has an invalid length. [ 286.427464][T12884] team0: Device bridge0 is already an upper device of the team interface [ 286.455102][T12886] loop7: detected capacity change from 0 to 128 [ 286.458208][T12886] EXT4-fs: Ignoring removed nobh option [ 286.462579][T12886] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 287.339001][ T8837] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.472769][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2451'. [ 287.551577][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2447'. [ 287.559352][T12934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.609730][T10800] bond0: (slave bond_slave_0): interface is now down [ 287.611467][T10800] bond0: (slave bond_slave_1): interface is now down [ 287.646325][T10800] bond0: now running without any active interface! [ 287.915410][T12938] loop9: detected capacity change from 0 to 1024 [ 287.967995][T12938] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.982338][T12938] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.2454: missing EA_INODE flag [ 288.015738][T12938] EXT4-fs (loop9): Remounting filesystem read-only [ 288.035073][T12960] overlayfs: failed to resolve './file1': -2 [ 288.065516][T12964] overlayfs: failed to clone upperpath [ 288.069352][T12964] ipt_REJECT: TCP_RESET invalid for non-tcp [ 288.219465][T12980] [ 288.219935][T12980] ====================================================== [ 288.221188][T12980] WARNING: possible circular locking dependency detected [ 288.222454][T12980] syzkaller #0 Tainted: G L [ 288.223579][T12980] ------------------------------------------------------ [ 288.224693][T12980] syz.3.2462/12980 is trying to acquire lock: [ 288.225710][T12980] ffff0000c1918210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x94/0xdc [ 288.227512][T12980] [ 288.227512][T12980] but task is already holding lock: [ 288.228738][T12980] ffff0000c76ba580 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 288.230564][T12980] [ 288.230564][T12980] which lock already depends on the new lock. [ 288.230564][T12980] [ 288.232251][T12980] [ 288.232251][T12980] the existing dependency chain (in reverse order) is: [ 288.233764][T12980] [ 288.233764][T12980] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 288.235241][T12980] blk_alloc_queue+0x47c/0x57c [ 288.236178][T12980] blk_mq_alloc_queue+0x148/0x294 [ 288.237095][T12980] __blk_mq_alloc_disk+0x38/0x10c [ 288.238012][T12980] loop_add+0x34c/0x8b8 [ 288.238762][T12980] loop_init+0xe8/0x10c [ 288.239561][T12980] do_one_initcall+0x274/0xc20 [ 288.240479][T12980] do_initcall_level+0x128/0x1c4 [ 288.241377][T12980] do_initcalls+0x70/0xd0 [ 288.242199][T12980] do_basic_setup+0x7c/0x90 [ 288.243025][T12980] kernel_init_freeable+0x268/0x3a8 [ 288.244036][T12980] kernel_init+0x24/0x1dc [ 288.244863][T12980] ret_from_fork+0x10/0x20 [ 288.245643][T12980] [ 288.245643][T12980] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 288.246851][T12980] fs_reclaim_acquire+0x90/0x110 [ 288.247783][T12980] kmem_cache_alloc_noprof+0x58/0x610 [ 288.248765][T12980] __kernfs_iattrs+0xd8/0x2d8 [ 288.249631][T12980] __kernfs_setattr+0x4c/0x2c4 [ 288.250471][T12980] kernfs_iop_setattr+0xc4/0x11c [ 288.251421][T12980] notify_change+0x984/0xbd8 [ 288.252307][T12980] do_truncate+0x1a8/0x22c [ 288.253149][T12980] path_openat+0x23a4/0x2a6c [ 288.253995][T12980] do_file_open+0x1c4/0x2e4 [ 288.254831][T12980] do_sys_openat2+0x114/0x1e8 [ 288.255669][T12980] do_sys_open+0xac/0xdc [ 288.256436][T12980] __arm64_sys_openat+0x9c/0xb8 [ 288.257344][T12980] invoke_syscall+0x98/0x244 [ 288.258258][T12980] el0_svc_common+0xe8/0x23c [ 288.259173][T12980] do_el0_svc+0x48/0x58 [ 288.259958][T12980] el0_svc+0x64/0x260 [ 288.260738][T12980] el0t_64_sync_handler+0x48/0x148 [ 288.261741][T12980] el0t_64_sync+0x198/0x19c [ 288.262517][T12980] [ 288.262517][T12980] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 288.263937][T12980] __lock_acquire+0x1780/0x2f44 [ 288.264883][T12980] lock_acquire+0x140/0x368 [ 288.265748][T12980] down_read+0x58/0x2bc [ 288.266509][T12980] kernfs_iop_getattr+0x94/0xdc [ 288.267379][T12980] vfs_getattr_nosec+0x254/0x38c [ 288.268335][T12980] vfs_getattr+0x60/0x88 [ 288.269194][T12980] loop_assign_backing_file+0x200/0x3cc [ 288.270217][T12980] lo_ioctl+0x1158/0x1684 [ 288.271043][T12980] blkdev_ioctl+0x574/0x904 [ 288.271852][T12980] __arm64_sys_ioctl+0x14c/0x1c4 [ 288.272744][T12980] invoke_syscall+0x98/0x244 [ 288.273598][T12980] el0_svc_common+0xe8/0x23c [ 288.274396][T12980] do_el0_svc+0x48/0x58 [ 288.275165][T12980] el0_svc+0x64/0x260 [ 288.275871][T12980] el0t_64_sync_handler+0x48/0x148 [ 288.276806][T12980] el0t_64_sync+0x198/0x19c [ 288.277642][T12980] [ 288.277642][T12980] other info that might help us debug this: [ 288.277642][T12980] [ 288.279292][T12980] Chain exists of: [ 288.279292][T12980] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 288.279292][T12980] [ 288.281539][T12980] Possible unsafe locking scenario: [ 288.281539][T12980] [ 288.282692][T12980] CPU0 CPU1 [ 288.283504][T12980] ---- ---- [ 288.284390][T12980] lock(&q->q_usage_counter(io)#25); [ 288.285310][T12980] lock(fs_reclaim); [ 288.286408][T12980] lock(&q->q_usage_counter(io)#25); [ 288.287717][T12980] rlock(&root->kernfs_iattr_rwsem); [ 288.288615][T12980] [ 288.288615][T12980] *** DEADLOCK *** [ 288.288615][T12980] [ 288.289973][T12980] 3 locks held by syz.3.2462/12980: [ 288.290816][T12980] #0: ffff0000c783f430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 288.292464][T12980] #1: ffff0000c76ba580 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 288.294462][T12980] #2: ffff0000c76ba5b8 (&q->q_usage_counter(queue)#9){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 288.296378][T12980] [ 288.296378][T12980] stack backtrace: [ 288.297315][T12980] CPU: 0 UID: 0 PID: 12980 Comm: syz.3.2462 Tainted: G L syzkaller #0 PREEMPT [ 288.299107][T12980] Tainted: [L]=SOFTLOCKUP [ 288.299817][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 288.301585][T12980] Call trace: [ 288.302153][T12980] show_stack+0x2c/0x3c (C) [ 288.302924][T12980] __dump_stack+0x30/0x40 [ 288.303666][T12980] dump_stack_lvl+0xd8/0x12c [ 288.304467][T12980] dump_stack+0x1c/0x28 [ 288.305210][T12980] print_circular_bug+0x328/0x330 [ 288.306122][T12980] check_noncircular+0x158/0x174 [ 288.306960][T12980] __lock_acquire+0x1780/0x2f44 [ 288.307772][T12980] lock_acquire+0x140/0x368 [ 288.308515][T12980] down_read+0x58/0x2bc [ 288.309206][T12980] kernfs_iop_getattr+0x94/0xdc [ 288.309999][T12980] vfs_getattr_nosec+0x254/0x38c [ 288.310782][T12980] vfs_getattr+0x60/0x88 [ 288.311528][T12980] loop_assign_backing_file+0x200/0x3cc [ 288.312454][T12980] lo_ioctl+0x1158/0x1684 [ 288.313165][T12980] blkdev_ioctl+0x574/0x904 [ 288.313947][T12980] __arm64_sys_ioctl+0x14c/0x1c4 [ 288.314850][T12980] invoke_syscall+0x98/0x244 [ 288.315650][T12980] el0_svc_common+0xe8/0x23c [ 288.316454][T12980] do_el0_svc+0x48/0x58 [ 288.317175][T12980] el0_svc+0x64/0x260 [ 288.317817][T12980] el0t_64_sync_handler+0x48/0x148 [ 288.318675][T12980] el0t_64_sync+0x198/0x19c [ 288.611276][T12361] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.833142][ T4707] Bluetooth: hci5: command 0x0406 tx timeout