last executing test programs: 4m15.915454355s ago: executing program 2 (id=105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="04020000090701022dbd70481e27756299a4ee08da00ad8008004500", @ANYRES32=r1, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="0400f8800400018014007100fe880000000000000000000000000001e48751029c0ef85fcb20e482ea1614e37fc06b76c11be473ab2d87c1a99e70aeade6ca7eb8041440c63c644d525394de21d1e43a64202ac25fb66f4113555a5f3dc98435be8f9ac95276410a65bb51dd05779405cb449565dbdd6f3da8c6938623f98a00fed23fd6dbe926b0184ffc6af6a3ef2d02931e3ea88bc8d8ad0e246adbdeb83cd88b7b889dc57bef93d3153beb3f9d24622f04006b8008008c00", @ANYRES32=r2, @ANYBLOB="0400078004006500000029000f8004b101e37544bd689c435edc4dc872e214ec64572ba5dcc89bda5c40c908003200e00000020000004500998004007d800400548008005b00000000099571855966d991d5cf65d785d6bc5cd9dcfa5940d702a3396f8e587d579c54652bf3e430cf4b65055633334ed2b802a41d0000000800a10000080000898c4c09d2514bedf6a7f9a75a323a9426e9e72a6b679a18ed527b1cd6935ee8018f5dd5c2b062d1aea184a973629f1872e62dbb4b9193613f89488899be05160fd9aeded59d3e0854d996c277048ee275679cf134fde54f3db481f8ac93ded4b8e75853291518319830ec2d2dc371ee7cd2725b8b5bd74a4828e639a69bb50e1236936ff04e88d46b3d0c003600"/286], 0x204}, 0x1, 0x0, 0x0, 0x20004004}, 0x4021) sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) r3 = accept$packet(r1, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4040044, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='\\x-', 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000640)={0x0, 0x0}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x180, 0x0) syz_clone3(&(0x7f0000000700)={0x200010280, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/64, 0x40, &(0x7f0000000540)=""/193, &(0x7f0000000680)=[r2, r2, r2, r5, r2], 0x5, {r6}}, 0x58) 4m15.817176901s ago: executing program 32 (id=105): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="04020000090701022dbd70481e27756299a4ee08da00ad8008004500", @ANYRES32=r1, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="0400f8800400018014007100fe880000000000000000000000000001e48751029c0ef85fcb20e482ea1614e37fc06b76c11be473ab2d87c1a99e70aeade6ca7eb8041440c63c644d525394de21d1e43a64202ac25fb66f4113555a5f3dc98435be8f9ac95276410a65bb51dd05779405cb449565dbdd6f3da8c6938623f98a00fed23fd6dbe926b0184ffc6af6a3ef2d02931e3ea88bc8d8ad0e246adbdeb83cd88b7b889dc57bef93d3153beb3f9d24622f04006b8008008c00", @ANYRES32=r2, @ANYBLOB="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"/286], 0x204}, 0x1, 0x0, 0x0, 0x20004004}, 0x4021) sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) r3 = accept$packet(r1, 0x0, 0x0) sendto$packet(r3, 0x0, 0x0, 0x4040044, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f0000000780)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='\\x-', 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000640)={0x0, 0x0}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x180, 0x0) syz_clone3(&(0x7f0000000700)={0x200010280, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0), {0x3d}, &(0x7f0000000400)=""/64, 0x40, &(0x7f0000000540)=""/193, &(0x7f0000000680)=[r2, r2, r2, r5, r2], 0x5, {r6}}, 0x58) 4m3.353075764s ago: executing program 0 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000000780)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x2f00, 0x0, 0x0}, 0x48) 4m3.273668651s ago: executing program 0 (id=237): clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000340)={0x18, 0x9, 0x380000, 0x4, 0xfffffffffffffff9, 0xfffffffffffffff4, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x4000000000000006, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) clock_adjtime(0x5, &(0x7f0000000940)={0x6, 0x20000000e, 0x5, 0x3, 0xf, 0x8000000000000000, 0xa, 0x2, 0xc, 0x4, 0xffffffffffff8001, 0x9, 0xc, 0x9, 0x7, 0x2000000000000009, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0xfffffffffffffbff, 0x7fff, 0x5}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) (async) clock_adjtime(0x0, &(0x7f0000000340)={0x18, 0x9, 0x380000, 0x4, 0xfffffffffffffff9, 0xfffffffffffffff4, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x4000000000000006, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) (async) clock_adjtime(0x5, &(0x7f0000000940)={0x6, 0x20000000e, 0x5, 0x3, 0xf, 0x8000000000000000, 0xa, 0x2, 0xc, 0x4, 0xffffffffffff8001, 0x9, 0xc, 0x9, 0x7, 0x2000000000000009, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0xfffffffffffffbff, 0x7fff, 0x5}) (async) 4m3.273414648s ago: executing program 0 (id=238): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0x20, 0x850, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000240)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = dup(r0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000280)=0x5, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000001c00)=0x40) 4m3.242262665s ago: executing program 0 (id=239): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004740)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000004780)={0x0, 0x0, &(0x7f00000047c0)={&(0x7f0000004800)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004880)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004900)={&(0x7f0000004940)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000004980)=ANY=[@ANYBLOB="0180c20000000300000000010027424203"], 0x0) 4m3.194636959s ago: executing program 0 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010004b0400000000000000007a6631e5", @ANYRES32=0x0, @ANYBLOB="a19001000e2c00002c00128009000100626f6e64000000001c0002800800070002000000050006000100000008000300", @ANYRES8], 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000340)={0x0, 0x3, {0x0}, {}, 0x610, 0xf36}) ptrace$setsig(0x4203, r1, 0xfffffffffffffffa, &(0x7f00000003c0)={0xa, 0x1, 0x9}) userfaultfd(0x80000) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r0}, 0x8) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3}}]}, 0x34}}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xfffffffffffffc63, 0x0, &(0x7f0000000300)="1d3c0c9ba8cdf7b9ceac8e25ec05", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x22000, 0x0) r6 = syz_usb_connect(0x0, 0x54, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x68, &(0x7f00000007c0)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x88, &(0x7f0000000840)={[{0x31, 0x4e00, "a0041e53eae1818da601c71cbe33c7c7d6a8b9597fcfc0be375371b137ddcd86bf8930169ee75dd1b397bdebffe55e7325"}, {0x4b, 0x4e00, "3022b7efe886f9f06dc83d1193099744f579f5e87280b932884da450f208ba8d03ec4ab1fdaa3cc6be0b137364730df21e28d39c91277fa13354b19bf3434bc43c732473a2166053e61ea2"}]}) syz_usb_control_io$printer(r6, &(0x7f0000000a00)={0x14, &(0x7f0000000900)={0x20, 0x23, 0xb2, {0xb2, 0x23, "01121d205d62761490ac339c7c5f99da0bc8f1b37713a7b79695c870ec8da93e05df3e722929bc1a4229515e3f3e418be3a04dea312fb9ffa06561435383e734a8b725454813b4f40d94eebdccc402fb875cb94270934d4622a6eac7f13962afe20471477ac195d9b96ef6973c1e325efff0e123d223de03cf939fd7d44b020434f1f39694e7185d880067c0779cd485453f58b889da2430c545aa373e1e33dfc6a2f8adcfbccd6351f5825f03283a6d"}}, &(0x7f0000000ec0)=ANY=[@ANYBLOB="02031f0000001f0352966eaf3e70000180000000000000044d6b986f75446f8526a466d336240c8f370afe3b095929614d27bd02ba00d31e14cc53c1a7ea81bcabf71433bfe1d734bff25da7ca14680baa544e44b34bf19b98916d760b9551189837b6a0596253b39578aa5e23211d738826986a3f5397585ad899b19b784769d966c003ca68b078f38d2c4bfe7e139a5aaa2540a4b09149e1aceb3b54dbf5e859a6df4536baa40b6e4f16e5062d16b586040ee19658e924347ca8e6"]}, &(0x7f0000000cc0)={0x34, &(0x7f0000000a40)={0x20, 0x0, 0x89, "7e60e506603b3bcb11f8a9bf2e49017196a90999790277f0b90eb8e0dc4e8f62bc7a216a0f5b671b0e681c0bd571a4102dcf600d4c2fd52056a48e52d8fe5450b8d160ce52e0bc5bd950a8703dda90ead46ae518ee1929bc6345aa08a0738b41e45af242b2cf4d52d5705aee9646c16c666ead051d3f3ce5c6750a06c812cb2be344467216fa70d023"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000b80)=ANY=[@ANYBLOB="2000ab00000000a90de0122f67ecee6b052778ffcba780c2a0ff9c1ee895ff7a3225c207bf0a07500004cd15c4b1988256edd85699eca8846c1314e7b8975879be52ce41c0b44d663ea2304ba4958495d6852ef5de4598a8653c0e078160f7b545d186a5477b54334d9d029a82e1cdddb4aef648817ffbbf9d39c8c10eaa00e228e20f2dde810000000000000014b5fcc4e6653fafc2c3d73e301dc5a98aa1bf4e1bddfa94d681379b8eebd34070a8f554"], &(0x7f0000000c40)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000c80)={0x20, 0x0, 0x1, 0x8}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000f80)=""/222, &(0x7f0000001080)=0x80fe) fchdir(r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780), &(0x7f00000007c0), 0x800000, r8}, 0x38) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000e80)={0x0, 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000880), 0x2, r8}, 0x38) r9 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000480)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000e00)={&(0x7f0000000500)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f0000000540)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000006c0), 0x18800, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r9, 0xc03064b7, &(0x7f0000000580)={r10, r11, r12, 0x0, 0x100000, 0x80000001}) exit(0x3) 4m1.406265205s ago: executing program 33 (id=258): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b20, &(0x7f0000000480)={'wlan1\x00'}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x470, 0x470, 0x1d0, 0x470, 0x470, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], 'pim6reg1\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x6, 0x2, 0x0, 0x2d}, 0x0, 0x188, 0x1d0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x4e22, 0x0, 0x0, 0xffff]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0xa, 0x30, 0x1}}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@local}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x1}, {0x4, 0x6, 0x6}, {0xffffffffffffffff, 0x6, 0x4}, 0x6, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$PTP_PIN_SETFUNC(r5, 0x40603d07, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)="2242083d228576c38d0abf5715d3f8e874", 0x11) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r3) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000040), &(0x7f0000000400)={0x0, 0xfb, 0x45, 0x5, 0x60, "4b7e1b8e55f9f0f8fd3def03a692357b", "4f6edd735ab980e1ce749f466f594d39ff5ba0a76f2674c78e258b77f616ca3612b3cb95752ba7317cf0888fd20c83d8"}, 0x45, 0x2) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r7, 0xeba6118535e44a49, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x13, @l2={'ib', 0x3a, 'veth1_virt_wifi\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1c, r2, 0x303, 0x70bf2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x4c90) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r3) 3m59.333792838s ago: executing program 0 (id=272): socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x80002, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x300a, &(0x7f0000000100), 0xf5, 0x48b, &(0x7f00000001c0)="$eJzs3MtvVNUfAPDvvZ2WlscPfogPCGgVjMRHS8tDFiZGowkLjUZdYFzVaSFIAQM1EUIUXWCMC0Pi3rg08S9wpRujrkx0iXtDQgwb0NWYO/fePoaZtkMHpjCfT3KZc+6Dc75z7rk999zbBtCzhrN/koj1EXE5IjZGRKVxh+H848a189V/rp2vJlGrvfl3kh0W16+drxb/RX3JrMtX1GpFfk2Tci++EzExPT11usiPzpx4f/TM2XPPHDsxcXTq6NTJ8YMH9+3dMXBgfH9H4sziur7to1Pbtx56+9Kr1cOX3v3lu6y+64vtZRydNJx/u0093unCumzDvHRS6WJFaEvWbv3FcjlqfX0xNLttY7z8aVcrB9xulWY/nwsXasA9LBuoA72o/EGf3f+Wy1LjhQ6OPbru6gt5RFncN4ol31KJtNinv+H+tpMGI+LwhX+/zpa4TfMQAADz/ZCNf55uNv5L44F5+/2veIayKSL+HxGbI+K+iNgSEfdH1Pd9MCIearP8xickN49/0isLsrW+NktYXDb+e654trVw/FeO/mJTX5HbUI+/PzlybHpqT/Gd7I7+NVl+bMEhC/340u9fNq77ophmH543/suWrPyFEaZXGifoJidmJlYeee7qJxHbKs3iT2YH+klEbI2IbbdYxrEnv93ealuz+Mux8JI6cCdS+ybiibz9L0RD/KWk5fPJsWcPjO8fHYzpqT2j5Vlxs19/u/h6q/JXFH8HZO2/tun5n8ef3SMmgxFnzp47Xn9ee+YWCvnzs2rSYtOWIv7+lvHffP5Xd0UMJG/V0wPlXsXnQPJK9jFUrv9wYmbm9PjcsWW+/jmWx79751z8EzHX/zfnt2eR/PHG7PE7IuLhiHikaLtHI+KxiNi5SPg/v7jrvVbbWrf/IrPyHZTFP7lI+2eXvCw11/7tJ/qO//R9q/JrS57/Wfvvq6d2F2uWc/1bbgVX8t0BAADA3SKtvwOfpCOz6TQdGcnf4d8Sa9NKRDx15NQHJyfzd+U3RX9aznRtnDcfOlbMDZf58Yb83mLe+Ku+oXp+pHpqerLbwUOPW9ei/2f+6uyjFmA1uqfe6APaov9D79L/oXfp/9C7nu92BYDuGGi++uM7XQ+gK9of/w/elnoAd577f+hd+j/0Lv0felLL341PV/Qr/3drorI6qtE0MbQ6qlEmIl1yn3SVVHV5idc+z7vEaqlPmags+49Z3GJiTdNNTS8Xh9bf2csTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0XAAD//1ub24E=") prlimit64(0x0, 0xe, &(0x7f0000000680)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000008c0)='team_slave_0\x00') 3m42.60587977s ago: executing program 34 (id=272): socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x80002, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x300a, &(0x7f0000000100), 0xf5, 0x48b, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000680)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000008c0)='team_slave_0\x00') 2m22.520416724s ago: executing program 7 (id=574): r0 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1) 2m22.098082327s ago: executing program 7 (id=577): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000001740)='ext2\x00', &(0x7f0000001780)='./file0\x00', 0x808080, &(0x7f00000017c0)={[{@discard}, {@dax}, {@noblock_validity}]}, 0x0, 0x53c, &(0x7f0000001800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r0, &(0x7f0000000000)='3', 0x52) syz_usb_connect(0xf00000, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x43, 0x25, 0x32, 0x20, 0xc45, 0x6253, 0x8225, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8b, 0x4b, 0x33ea2dbcbb6dcb29, 0x6, "", [{{0x9, 0x4, 0x68, 0xe, 0x0, 0x39, 0xf0, 0xfd, 0x1}}]}}]}}, 0x0) 2m19.198406639s ago: executing program 7 (id=589): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x8c6, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@utf8no}, {@uni_xlate}, {@fat=@check_strict}, {@shortname_win95}, {@fat=@flush}, {@numtail}, {@utf8}, {@uni_xlate}, {@fat=@gid}, {@shortname_mixed}, {@rodir}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@utf8no}]}, 0x1, 0x296, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x20842, 0x63) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="050000000000000071110400000000008510000002000000850000007600000095000000000000009500a505000000009a6b4a3f"], &(0x7f0000000bc0)='GPL\x00', 0x5, 0x29e, &(0x7f0000000c00)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000e40)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write(r2, &(0x7f0000000180)='7', 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x5793, &(0x7f0000000680)={0x0, 0xca23, 0x10000, 0xfffffff7, 0x212}, &(0x7f0000000700), &(0x7f0000000740), 0x0) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000780)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000940)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000009c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000900), 0x3, r5, 0x1c, 0x1, @ib={0x1b, 0x9, 0xec, {"2fe0885c4e05bab742a71af7968613c9"}, 0x0, 0xfffffffffffffffe, 0x1}}}, 0xa0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80), 0x2000, 0x0) preadv(r6, &(0x7f0000000800)=[{&(0x7f0000000880)=""/100, 0x64}, {0x0}], 0x2, 0x5, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x2}}, 0x20) 2m18.576978012s ago: executing program 7 (id=595): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$eJzs3c1rHOUfAPDvbPPSX9qfjSBoPQUEDZRuTI2tgoeKBxEsFPRsGzbbULPJhuymNCGgRQQvgooHQS89W603r75c9Q/w7kFaqqbFiAeJzL6k22Y33aTZbMt+PjDJ88zM5jvfeWbmebIz7AbQs0bSH5mIwxHxURJxqDY/iYj+Sqkv4mR1vbXVlVw6JbG+/sYfSWWdW6sruWh4TepArfJERPzwfsSRzOa4paXlmclCIb9Qq4+VZ+fHSkvLR8/PTk7np/Nzx8cnJo6deP7E8d3L9a+flw9e//jVZ74++c97j1/98MckTsbB2rLGPHbLSIzU9kl/ugvv8Eq8s9vhuirp9gawI+mpua96lsfhJC33dXuTAIAOS0eh6wBAj0n0/wDQY+rvA9xaXcnVp+6+I7G3brwcEfur+dfvb1aX9NXu2e2v3AcdupXccWckiYjhXYg/EhFffPvWlXSKDt2HBGjm3UsRcXZ4ZPP1P9n0zMJ2PdvGOiN31Tfi/9J/n9GBe/kuHf+80Gz8l9kY/0ST8c9gk3N3J1qe/xsy13YhTEvp+O+lhmfb1hryrxneV6v9vzLm60/OnS/k02vbIxExGv2DaX18ixijN/+92WpZ4/jvz0/e/jKNn/6+vUbmWt/gna+ZmixP3k/OjW5ciniyr57/pYYlyUb7Jy3Gv6fbjPHaix983mpZmn+ab33anH9nrV+OeLpp+99+oi3Z8vnEscrhMFY/KJr45tfPhlrFb2z/dFpbXVlPIq7sfqbNpe0/tHX+w0nj85ql7cf46fKh71sta5J/rv6/UFXz438gebNSHqjNuzhZLi+MRwwkr2+ef+z2a+v1+vpp/qNPNT//tzr+09HJ2Tbz77v++1c7z7+z0vynttX+2y9cXZvZ1yp+e+0/USmN1uZsff2rXrfb3cD73X8AAAAAAAAAAAAAAAAAAAAAAAAA0I5MRByMJJPdKGcy2Wz1O7wfi6FMoVgqHzlXXJybisp3ZQ9Hf6b+UZeHGj4Pdbz2efj1+rG76s9FxKMR8eng/yr1bK5YmOp28gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQc6DF9/+nfhvs9tYBAB2zv9sbAADsOf0/APQe/T8A9B79PwD0Hv0/APQe/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAddvrUqXRa/3t1JZfWpy4sLc4ULxydypdmsrOLuWyuuDCfnS4Wpwv5bK44e6+/VygW5ydibvHiWDlfKo+VlpbPzBYX58pnzs9OTufP5Pv3JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7S0vLMZKGQX1B4CAp9tVZ7ULZnR4VMPYm9CjrQxjrr8zdPbTuLB2Bndq7QxYsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEPkvwAAAP//vI8fOA==") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 2m15.47767786s ago: executing program 7 (id=601): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m13.849665002s ago: executing program 35 (id=601): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m49.85450277s ago: executing program 6 (id=694): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newsa={0xf8, 0x10, 0x401, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x180, 0x73}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x5, 0x9}, [@sa_dir={0x5, 0x21, 0x1}]}, 0xf8}}, 0x10) syz_emit_ethernet(0x58, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x0, [@ipv4=@tcp={{0x5, 0x4, 0x3, 0x5, 0x28, 0x68, 0x0, 0xfd, 0x6, 0x0, @private=0xa010101, @local}, {{0x4e23, 0x4621, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x3}}}]}}}}}}, 0x0) 1m48.608486534s ago: executing program 6 (id=697): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r0 = fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1m48.254766385s ago: executing program 6 (id=700): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f0000000040)=""/224, 0xe0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x16c, &(0x7f0000000240)="$eJzsVc1K80AUPdNOf75vVdCVIBQUrYI2naq4cNGH6ANY0liLqT9NQFuKjTufwG23Ln0E3yKvIIqLunIjkcncjGP2CkKyyLnnXu6ZexM4c+xdeCUAH/OJDVTAAHAs4oUxcAALMgGgXVL4XlR4QPyJK1ym/D3hM6E3Gp90XNcZ/mDwG2dkQRZkwV8LvmjzJofX2MvC+cQmU9NPF4BZz6dqSxzII9J1aXqSrAOo+4Pzujcab/UHnZ7Tc06FaO5ZO5a1K+pHfdex1JsZ8jmSlrgBQHrpP6NeMI7/nxo1Gf2ajNfsk557SPXayvc+eVYURREMZHjUveTnkKu3sYYygMuAGdlqrMIRr9MCQ55Ig6dmy6EcF7btM7c7BQNL2mbgWqMRoqCJMEmzEiRr3HKlekf3yX6QLDQlrBK2CGeEIWFygz2QAo8V3ojVAqCIq47vDxsypSKdEzonKoH5KVdB/81Ye5P4ZwAAAP//xwlU6g==") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') (async) getdents64(r0, &(0x7f0000000040)=""/224, 0xe0) (async) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x16c, &(0x7f0000000240)="$eJzsVc1K80AUPdNOf75vVdCVIBQUrYI2naq4cNGH6ANY0liLqT9NQFuKjTufwG23Ln0E3yKvIIqLunIjkcncjGP2CkKyyLnnXu6ZexM4c+xdeCUAH/OJDVTAAHAs4oUxcAALMgGgXVL4XlR4QPyJK1ym/D3hM6E3Gp90XNcZ/mDwG2dkQRZkwV8LvmjzJofX2MvC+cQmU9NPF4BZz6dqSxzII9J1aXqSrAOo+4Pzujcab/UHnZ7Tc06FaO5ZO5a1K+pHfdex1JsZ8jmSlrgBQHrpP6NeMI7/nxo1Gf2ajNfsk557SPXayvc+eVYURREMZHjUveTnkKu3sYYygMuAGdlqrMIRr9MCQ55Ig6dmy6EcF7btM7c7BQNL2mbgWqMRoqCJMEmzEiRr3HKlekf3yX6QLDQlrBK2CGeEIWFygz2QAo8V3ojVAqCIq47vDxsypSKdEzonKoH5KVdB/81Ye5P4ZwAAAP//xwlU6g==") (async) 1m47.208406242s ago: executing program 6 (id=702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="8b803757dcd903ee3bd61bb9fe8bdb3cd8933788dbfd76bde0276906c9fed1379f"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4008000) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x200000000000001}, 0x8) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000a00), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000a40)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000a80)={0x28, 0x2, r3, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000ac0)={0x28, 0x2, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000b00)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000b40)={0x28, 0x7, r4, r3, 0xa0, 0xfffffffffffffffc, 0x3ffe}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000980)={0xa, 0x4ea1, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x34) sendmmsg$inet6(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a00), 0x171}}], 0x400000000000172, 0x4000000) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000140)=""/102, 0x5}], 0x2, 0x0, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1400c, &(0x7f0000000cc0)={[{@test_dummy_encryption}, {@data_journal}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}]}, 0x3, 0x481, &(0x7f00000003c0)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x47) r8 = landlock_create_ruleset(&(0x7f00000001c0)={0x0, 0x3, 0x0, 0x0, 0x7, 0x2}, 0x30, 0x0) landlock_restrict_self(r8, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000200)={0x28a0, 0x9, 0x5, 0x2, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r9, 0x0) landlock_restrict_self(r9, 0x0) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f00000002c0), 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000340), 0x651, 0x0) ioctl$FITRIM(r7, 0x40e8662e, &(0x7f0000000900)={0x35e8, 0xeb6746e, 0x2}) ioctl$OCFS2_IOC_MOVE_EXT(r6, 0x40406f06, &(0x7f0000000c40)={0x6, 0x3, 0x51a2, 0x6, 0x1}) r11 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$smackfs_logging(r11, 0x0, 0xfffffe88) 1m46.346690249s ago: executing program 6 (id=707): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1f0a00c90002014ac28d53e558"], 0x22) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x164}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r3, 0x3b87, &(0x7f0000000180)={0x18, 0x1, 0x0, 0x0, r4}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, &(0x7f0000000040)=0x8) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000980)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000009c0)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000a00)=ANY=[@ANYBLOB="01808ea918981dc3e1d6bbbb08004500007800000002"], 0x0) 1m44.664865576s ago: executing program 8 (id=713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000c00)=@newtfilter={0x34, 0x2c, 0x601, 0x4000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x1, 0xffff}, {0x10, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 1m44.55818862s ago: executing program 6 (id=715): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x4000087, 0x2, 0x0) unshare(0x62000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x7fffffe, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 1m43.80089688s ago: executing program 36 (id=715): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000440)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x4000087, 0x2, 0x0) unshare(0x62000000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x7fffffe, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 1m43.755728472s ago: executing program 8 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000009001e"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810822, &(0x7f0000000240)={[{@delalloc}, {@resuid}, {@jqfmt_vfsv0}, {@nodiscard}, {@noinit_itable}, {@journal_checksum}]}, 0x1, 0x7d8, &(0x7f0000000380)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101080, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) syz_mount_image$vfat(&(0x7f0000000b80), &(0x7f0000000bc0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f0000000c00)) 1m43.477269497s ago: executing program 8 (id=725): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000480)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) mmap(&(0x7f0000690000/0x1000)=nil, 0x1000, 0x4, 0x1010, 0xffffffffffffffff, 0xd6766000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m41.89695855s ago: executing program 8 (id=730): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001800)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1, 0x11, &(0x7f0000001900)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000019c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf99017019b42da6b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001a00)=r1, 0x4) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) 1m41.212078086s ago: executing program 8 (id=733): io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) 1m41.094551872s ago: executing program 8 (id=734): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x3, @none}, 0xe) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x47, 0x200007, 0x1, {0x2, @sliced={0xb, [0x4, 0x4, 0x8, 0xdc9b, 0x6, 0x4, 0x1, 0x9, 0x2, 0xad, 0xd860, 0x2, 0x1, 0x4, 0xe, 0x4, 0xfffb, 0xab36, 0x80, 0xffff, 0x20, 0x9, 0x3, 0x8, 0x7, 0x3, 0x0, 0x3ff, 0x5, 0x6bd7, 0x4, 0x59, 0x7, 0x4, 0x3, 0x876c, 0xc, 0x2, 0x6, 0x6, 0xd98, 0x4, 0x8, 0x80, 0x3, 0x526, 0x3ff, 0x3], 0x3}}, 0x8}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0xa4800, 0x0, 0x0, @by_dev={r1}, [@zero={0x0, 0x0, 0x0, 0x30}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000780)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000007c0)=0x2050, 0x4) sendmsg$can_j1939(r5, &(0x7f0000000800)={&(0x7f0000000840)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f0000000880)={&(0x7f00000008c0)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r5, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/4115, 0x1013}], 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e80)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000001c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x5c}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0x6, 0x3, 0x3, 0x1000, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000001d80)='syzkaller\x00', 0x1b, 0x3f, &(0x7f0000001dc0)=""/63, 0x40f00, 0x40, '\x00', r6, 0x1b, r3, 0x8, &(0x7f0000001e00)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[0x1, r2, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x35b4}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@bloom_filter={0x1e, 0x7, 0x80, 0x81, 0x18, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xc}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001fc0)={r8, r9}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="070000000000000001020000000024f0cef90f000000000000aa7c9a9790bdea5e54c9f0466f3b"], 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e8030000", @ANYRES16=r7, @ANYBLOB="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"], 0x3e8}, 0x1, 0x0, 0x0, 0x20000040}, 0x8c0) 1m30.154635389s ago: executing program 3 (id=753): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x5) mmap(&(0x7f00004aa000/0x2000)=nil, 0x2000, 0x300000b, 0x204031, r0, 0x1a787000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m29.750029275s ago: executing program 3 (id=755): mknodat$md(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x11, 0xa, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d656469111dbe9728f56647f3eef1ca596174650000001c0002800800014000000000100002800c0002800800"], 0x104}}, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1001, 0x8000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2) 1m28.226653366s ago: executing program 3 (id=759): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="199946ca4d9adbd3d2d5f4e4da9153b631680000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1m27.954157154s ago: executing program 3 (id=760): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xb, 0x0) r1 = io_uring_setup(0x7042, &(0x7f0000000f40)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000340), 0x651, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)="7dcd984c50b0229e7032e3d045dd982588b244183fcabe2aac753688ff71bcd2609e70f75cdc2fd0ba58beb4d2a16ac3f911823ef63987ab3a248642a34a4a21c34001d248c410ea7358917af59d12912832be314d311fd6d6bb7c68d2e1fd3d5a6e197c66fe1dff88af79895f08003541abb96778d976c649280c412f4ae60161d115536a7ff1600fea95a3df1f28e26cadbf421b87054e67a741e5df4903f51a3caec01bc3fc4dd4a45fd20fd3949f06f97f9c3032d81c5d954e3fb722d8d690427bae378d655c188e19a72852ef8407190a69ad12", 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x4, &(0x7f00000008c0)={[{@dax_inode}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x83, 0x4b5, &(0x7f0000000900)="$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") r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6709000000000000001e1aa982017f377321a4b7f8c3d047ee1e0532588563d53db498591ed396d2518f7f60950a5fa88be3ba322f58016ed0db1da11d18d167664aed87316771a056eada778049083a91a4e9e743d97f26f127f1d47d8c97085e17a30f89f71f1b0a7b375613e4bb2da623fc43eed1a7e1f5487b94ef6e6514485a1dc820ff23a89e6ae2efaceb487c3227a85b89d4770217d743bfc0", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 1m26.846711089s ago: executing program 3 (id=765): r0 = syz_io_uring_setup(0x39, 0x0, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, 0x0, 0x1) 1m26.16256509s ago: executing program 3 (id=769): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000bc0)={[{@grpquota}, {@discard}, {@resuid}, {@debug}, {@dioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800f5ffff2f0000000000000000000027000000222f00002500feff00000000950000000000000025f9121e7badef2b35f4e3bed477c7e684a562d7cdd1"], &(0x7f0000000000)='syzkaller\x00'}, 0x78) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 1m25.823889902s ago: executing program 37 (id=734): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000940)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x3, @none}, 0xe) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x47, 0x200007, 0x1, {0x2, @sliced={0xb, [0x4, 0x4, 0x8, 0xdc9b, 0x6, 0x4, 0x1, 0x9, 0x2, 0xad, 0xd860, 0x2, 0x1, 0x4, 0xe, 0x4, 0xfffb, 0xab36, 0x80, 0xffff, 0x20, 0x9, 0x3, 0x8, 0x7, 0x3, 0x0, 0x3ff, 0x5, 0x6bd7, 0x4, 0x59, 0x7, 0x4, 0x3, 0x876c, 0xc, 0x2, 0x6, 0x6, 0xd98, 0x4, 0x8, 0x80, 0x3, 0x526, 0x3ff, 0x3], 0x3}}, 0x8}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000a80)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0xa4800, 0x0, 0x0, @by_dev={r1}, [@zero={0x0, 0x0, 0x0, 0x30}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000780)={0x1d, r6, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000007c0)=0x2050, 0x4) sendmsg$can_j1939(r5, &(0x7f0000000800)={&(0x7f0000000840)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f0000000880)={&(0x7f00000008c0)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r5, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/4115, 0x1013}], 0x1) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e80)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000001c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x5c}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0x6, 0x3, 0x3, 0x1000, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000001d80)='syzkaller\x00', 0x1b, 0x3f, &(0x7f0000001dc0)=""/63, 0x40f00, 0x40, '\x00', r6, 0x1b, r3, 0x8, &(0x7f0000001e00)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[0x1, r2, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x35b4}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@bloom_filter={0x1e, 0x7, 0x80, 0x81, 0x18, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xc}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001fc0)={r8, r9}, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="070000000000000001020000000024f0cef90f000000000000aa7c9a9790bdea5e54c9f0466f3b"], 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="e8030000", @ANYRES16=r7, @ANYBLOB="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"], 0x3e8}, 0x1, 0x0, 0x0, 0x20000040}, 0x8c0) 1m25.723511428s ago: executing program 38 (id=769): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000bc0)={[{@grpquota}, {@discard}, {@resuid}, {@debug}, {@dioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800f5ffff2f0000000000000000000027000000222f00002500feff00000000950000000000000025f9121e7badef2b35f4e3bed477c7e684a562d7cdd1"], &(0x7f0000000000)='syzkaller\x00'}, 0x78) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) syz_emit_ethernet(0x36, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 1m9.834566702s ago: executing program 1 (id=801): sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x0) setrlimit(0xb, 0x0) r1 = io_uring_setup(0x7042, &(0x7f0000000f40)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000340), 0x651, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)="7dcd984c50b0229e7032e3d045dd982588b244183fcabe2aac753688ff71bcd2609e70f75cdc2fd0ba58beb4d2a16ac3f911823ef63987ab3a248642a34a4a21c34001d248c410ea7358917af59d12912832be314d311fd6d6bb7c68d2e1fd3d5a6e197c66fe1dff88af79895f08003541abb96778d976c649280c412f4ae60161d115536a7ff1600fea95a3df1f28e26cadbf421b87054e67a741e5df4903f51a3caec01bc3fc4dd4a45fd20fd3949f06f97f9c3032d81c5d954e3fb722d8d690427bae378d655c188e19a72852ef8407190a69ad12", 0x401, 0xffffffffffffffff, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x4, &(0x7f00000008c0)={[{@dax_inode}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x83, 0x4b5, &(0x7f0000000900)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m7.84895521s ago: executing program 1 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000e4ff0000000010000a80"], 0x100}, 0x1, 0x0, 0x0, 0x8894}, 0x0) (fail_nth: 3) 1m7.505584094s ago: executing program 1 (id=805): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000cc0)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000e00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000e40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e80)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, 0x0, 0x4008804) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000680), 0x4000000000001f2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/schedstat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=""/76, 0x4c}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) syz_open_pts(0xffffffffffffffff, 0x800) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r5, 0x84, 0x85, &(0x7f0000000840)={0x2, @in6={{0xa, 0x4e23, 0x6, @private0, 0x3}}, 0x9}, &(0x7f0000000900)=0x90) 1m2.760204132s ago: executing program 1 (id=811): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./trace\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='*:', 0x2) 1m2.481453054s ago: executing program 1 (id=812): mknodat$md(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x11, 0xa, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d656469111dbe9728f56647f3eef1ca596174650000001c0002800800014000000000100002800c0002800800"], 0x104}}, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1001, 0x8000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000300)={0x2000}, 0x18, 0x0) r4 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) writev(r4, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000500)="b4516e4e", 0x4}], 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x100, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f00000003c0)={0x10}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2) 1m1.778038326s ago: executing program 1 (id=814): r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x35314258, 0x0, 0x8, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x5cb6c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x4, 0x8, 0xb}, 0x50) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) r2 = userfaultfd(0x80001) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000280)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x1, 0x1}}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r10 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000540)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r10, &(0x7f0000000580)={'#! ', './file0', [{0x20, 'WWux'}]}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 50.891670907s ago: executing program 2 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r1, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) (fail_nth: 7) 50.742629632s ago: executing program 2 (id=836): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000180)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 50.361269391s ago: executing program 2 (id=837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r2, &(0x7f0000000400)=[{0x0, 0xd}, {&(0x7f0000000500)="da", 0x1}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@increfs]}) r3 = dup3(r1, r0, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt_trace\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x590, 0xffffffff, 0x0, 0x310, 0x0, 0xffffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, &(0x7f00000005c0), {[{{@uncond, 0x0, 0x2d0, 0x310, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x28, [{0x1794, 0x4, 0x80, 0x5}, {0x200, 0xcb, 0x0, 0x80}, {0xa8a8, 0x80, 0x0, 0x4}, {0x6, 0x7, 0x9, 0xfffffffb}, {0xfffe, 0x9}, {0x1, 0x7f, 0xfc, 0x24}, {0x4, 0x7, 0xf, 0x6}, {0xdfa, 0x6, 0x2, 0x7}, {0xfff1, 0x3, 0x7f, 0xffff000}, {0x3, 0x7, 0x4b, 0x6}, {0x4, 0xd6, 0x2, 0x8001}, {0x6, 0x7, 0x5, 0x4}, {0x2, 0x8, 0xff, 0x2}, {0x5, 0xf5, 0xce, 0x7f}, {0x1, 0x0, 0x6, 0x10}, {0x2, 0x7, 0x6, 0x9}, {0x5e4, 0x5, 0xf8, 0x5}, {0xd, 0x7, 0x2, 0x8}, {0xfff7, 0x1, 0x3, 0x8}, {0x7ff, 0x6, 0x0, 0x8000}, {0x3, 0xe3, 0x7, 0x8001}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x8, 0xfc, 0xfffffc01}, {0x2, 0x8, 0x5, 0x4}, {0x9, 0x4, 0x8, 0x1}, {0x3, 0xff, 0x70, 0x6}, {0x27d9, 0x7, 0x8, 0x200}, {0x5, 0x81, 0x6, 0x9}, {0x0, 0xa, 0xe2, 0x2}, {0x2, 0x0, 0x40, 0x31605f91}, {0x4000, 0x7, 0x4, 0x6}, {0x9, 0x8, 0x1}, {0xfff, 0xa0, 0x6, 0x2}, {0x4, 0x81, 0xfd, 0x401}, {0xba84, 0x8, 0x5, 0x401}, {0x104e, 0x78, 0xfd, 0x101d}, {0x8, 0x9, 0xe1, 0xfff}, {0x7, 0x62, 0x8, 0x6}, {0x40, 0x9, 0xa9, 0x8}, {0x4, 0x7, 0x6, 0x40}, {0x6c3, 0x7, 0x40, 0x75}, {0x8, 0x5, 0xcd, 0x4}, {0x800, 0x4, 0x6, 0x134c}, {0x7, 0x8, 0x6, 0x9}, {0x1, 0xb, 0x6, 0x80000}, {0x1, 0x2, 0xc, 0x3ff}, {0x8, 0x4, 0x9}, {0x9, 0x9, 0x4, 0x3}, {0x6, 0xd8, 0x9, 0x200}, {0x1, 0x1, 0x6, 0x2}, {0x672, 0x0, 0xfc, 0x1}, {0x9, 0x8, 0xe8, 0x7}, {0xfff1, 0x0, 0x9, 0xc}, {0x3, 0x5, 0x4, 0x1}, {0x3, 0x40, 0xd, 0x1}, {0x1, 0xad, 0x10, 0x5}, {0xfffc, 0x3a, 0x7, 0xe57}, {0x0, 0x7, 0x5, 0x3}, {0xe2e, 0x2, 0x79, 0xd7}, {0x0, 0xb2, 0x5, 0x9c}, {0x1, 0x8, 0x5, 0x5}, {0x37, 0x7, 0x5}, {0x6, 0x2, 0x7, 0x9}, {0xec, 0xfe, 0x7, 0xb10c}], {0x6}}}, @common=@ah={{0x30}, {[0x9], 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x2, 0x1, 0x2, 0x7, 0x1, 0x10, 0x3]}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x0, 0x0, 0x0, 0x4], 0x0, 0x6}}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffffff, 0xffffffff], 0x5, 0x1, {0x1}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x2, 0x2, 0xc], 0x3, 0x6}, {0x3, [0x4, 0x4, 0x1, 0x0, 0x0, 0x2], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5f0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000380)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f00000003c0)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x380000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x10a}) syz_clone(0x2802400, &(0x7f0000000440)="89b92340ed6649e97bb45ec3226cb521738c3924d4561a77c2229c6724ae683700"/47, 0x2f, &(0x7f00000004c0), &(0x7f0000000480), &(0x7f0000000c00)="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") ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire]}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000fef000/0x4000)=nil) 50.084625102s ago: executing program 2 (id=838): mknodat$md(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x11, 0xa, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d656469111dbe9728f56647f3eef1ca596174650000001c0002800800014000000000100002800c0002800800"], 0x104}}, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1001, 0x8000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000300)={0x2000}, 0x18, 0x0) r4 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) writev(r4, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000500)="b4516e4e", 0x4}], 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000380)={0x2000}, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f00000003c0)={0x10}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2) 49.414588122s ago: executing program 2 (id=839): mount$nfs4(&(0x7f0000000180)='127.0.0.1:/root\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{'addr=127.0.0.1'}, {'timeo=1'}]}) 47.896642166s ago: executing program 39 (id=839): mount$nfs4(&(0x7f0000000180)='127.0.0.1:/root\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{'addr=127.0.0.1'}, {'timeo=1'}]}) 45.15819441s ago: executing program 40 (id=814): r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x35314258, 0x0, 0x8, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x5cb6c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x4, 0x8, 0xb}, 0x50) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) r2 = userfaultfd(0x80001) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000280)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x1, 0x1}}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0xffff5257, 0x2e2e, 0x100, 0x7, 0x0, 0x400, 0x3, 0xffff7fff}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r10 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000540)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r10, &(0x7f0000000580)={'#! ', './file0', [{0x20, 'WWux'}]}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 40.535516843s ago: executing program 4 (id=872): socket$inet6(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) setns(0xc9, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000580)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000005c0)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0x2, 0x4e20, 0x10, @dev={0xfe, 0x80, '\x00', 0xfc}, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 40.38698998s ago: executing program 4 (id=873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 40.186402213s ago: executing program 4 (id=874): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r1, 0x3b81, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 39.997562059s ago: executing program 4 (id=876): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'wlan0\x00', 0x1000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000440)={'wlan0\x00', 0x1}) 39.378097292s ago: executing program 4 (id=880): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x8a1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3) recvfrom$inet(r0, &(0x7f00000001c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 38.230359152s ago: executing program 4 (id=882): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000006c0)={0x4, 0x3200, 0x0, 0x168, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_create={'create_thin '}}}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000c00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) 22.079259105s ago: executing program 41 (id=882): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@thin_pool={0x0, 0x2000, 0x0, 0x58, 'thin-pool\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x1}, 0x20, '128'}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r0, 0xc138fd0e, &(0x7f00000006c0)={0x4, 0x3200, 0x0, 0x168, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, {0x0, @thin_create={'create_thin '}}}) ioctl$DM_DEV_REMOVE(r0, 0xc138fd04, &(0x7f0000000c00)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) 2.733477919s ago: executing program 9 (id=980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 2.430556466s ago: executing program 9 (id=981): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000680)={{0x2, 0x4e20, @multicast2}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1_virt_wifi\x00'}) 1.436448237s ago: executing program 9 (id=985): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0xd0, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bbr', 0x3) recvfrom$inet(r0, &(0x7f0000000340)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 917.626183ms ago: executing program 5 (id=988): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x4000080) 767.359962ms ago: executing program 5 (id=989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x24}}, 0x0) 662.280566ms ago: executing program 5 (id=990): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x11, 0x300, r2}, 0x14) 422.1046ms ago: executing program 9 (id=991): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000840)={'wlan1\x00', @random="8dffffff0600"}) 421.316637ms ago: executing program 5 (id=992): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x3b81, 0x0) ioctl(0xffffffffffffffff, 0x3b89, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) write(r0, &(0x7f0000000000)='3', 0x4e) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setreuid(0x0, 0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 263.048495ms ago: executing program 9 (id=993): socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) setns(0xc9, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000580)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000005c0)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000640)={&(0x7f0000000680)=@in6={0x2, 0x4e20, 0x10, @dev={0xfe, 0x80, '\x00', 0xfc}, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 231.548511ms ago: executing program 5 (id=994): pipe2(&(0x7f0000000240), 0x800) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', &(0x7f00000002c0), 0x2204803, 0x0) 128.092059ms ago: executing program 9 (id=995): mknodat$md(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0) r1 = socket(0x11, 0xa, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d656469111dbe9728f56647f3eef1ca596174650000001c0002800800014000000000100002800c0002800800"], 0x104}}, 0x0) ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1001, 0x8000000e) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000300)={0x2000}, 0x18, 0x0) r3 = openat$smackfs_syslog(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) writev(r3, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000500)="b4516e4e", 0x4}], 0x2) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x100, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000380)={0x2000, r4}, 0x0) r5 = landlock_create_ruleset(&(0x7f00000003c0)={0x10}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2) ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0) 56.090193ms ago: executing program 5 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002700)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000027c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004880)={0x20, 0x0, 0x2, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000048c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccefb6719c41902e10c71b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d0dd37ef6d8a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f00000068c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006980)={0x150, 0x0, 0x249595fb, [{{0x1, 0x3, 0x1, 0x2, 0x100, 0x101, {0x80, 0x1, 0x108001, 0x1, 0xfffffffffffffff6, 0x1, 0x3, 0x5831, 0x1b0, 0x1000, 0x5f1, r2, r3, 0xff, 0x5}}, {0x1, 0x1, 0x1, 0xffffdff9, '.'}}, {{0x5, 0x1, 0xe, 0x4, 0x7, 0x100, {0x1, 0x74, 0x400, 0x7, 0x7f, 0x4, 0x0, 0x9, 0xbfdd, 0x6000, 0x1, 0x0, r3, 0x0, 0x4}}, {0x2, 0x7fffffff, 0x2, 0x5fa, '^-'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x9700) 0s ago: executing program 7 (id=846): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x0, 0x0}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x1, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000400)='./bus\x00', 0x1208002, &(0x7f0000000440)={[{@grpquota}, {@discard}, {@resuid}, {@debug}, {@dioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000e80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000ec0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000f00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000f80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001040), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x8, 0x5, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000001180)='syzkaller\x00'}, 0x78) openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x65) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000001580)={@desc={0x1, 0x0, @desc2}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x25, &(0x7f00000015c0)={0xffffff01, 0x3}, 0x1) io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): .032820][ T7421] Memory failure: 0x1527b4: recovery action for clean LRU page: Recovered [ 165.032835][ T7421] Injecting memory failure for pfn 0x18b854 at process virtual address 0x202c6000 [ 165.032903][ T7421] Memory failure: 0x18b854: recovery action for clean LRU page: Recovered [ 165.032919][ T7421] Injecting memory failure for pfn 0x18c0bb at process virtual address 0x202c7000 [ 165.032989][ T7421] Memory failure: 0x18c0bb: recovery action for clean LRU page: Recovered [ 165.033003][ T7421] Injecting memory failure for pfn 0x18b858 at process virtual address 0x202c8000 [ 165.033072][ T7421] Memory failure: 0x18b858: recovery action for clean LRU page: Recovered [ 165.033086][ T7421] Injecting memory failure for pfn 0x11e059 at process virtual address 0x202c9000 [ 165.033155][ T7421] Memory failure: 0x11e059: recovery action for clean LRU page: Recovered [ 165.033170][ T7421] Injecting memory failure for pfn 0x1527b2 at process virtual address 0x202ca000 [ 165.033238][ T7421] Memory failure: 0x1527b2: recovery action for clean LRU page: Recovered [ 165.033253][ T7421] Injecting memory failure for pfn 0x1527ac at process virtual address 0x202cb000 [ 165.033322][ T7421] Memory failure: 0x1527ac: recovery action for clean LRU page: Recovered [ 165.033336][ T7421] Injecting memory failure for pfn 0x1527b0 at process virtual address 0x202cc000 [ 165.033405][ T7421] Memory failure: 0x1527b0: recovery action for clean LRU page: Recovered [ 165.033420][ T7421] Injecting memory failure for pfn 0x1363c6 at process virtual address 0x202cd000 [ 165.033490][ T7421] Memory failure: 0x1363c6: recovery action for clean LRU page: Recovered [ 165.033504][ T7421] Injecting memory failure for pfn 0x1363c7 at process virtual address 0x202ce000 [ 165.033573][ T7421] Memory failure: 0x1363c7: recovery action for clean LRU page: Recovered [ 165.033588][ T7421] Injecting memory failure for pfn 0x133d5b at process virtual address 0x202cf000 [ 165.033657][ T7421] Memory failure: 0x133d5b: recovery action for clean LRU page: Recovered [ 165.033672][ T7421] Injecting memory failure for pfn 0x191476 at process virtual address 0x202d0000 [ 165.033740][ T7421] Memory failure: 0x191476: recovery action for clean LRU page: Recovered [ 165.033759][ T7421] Injecting memory failure for pfn 0x189573 at process virtual address 0x202d1000 [ 165.033831][ T7421] Memory failure: 0x189573: recovery action for clean LRU page: Recovered [ 165.033846][ T7421] Injecting memory failure for pfn 0x11eaee at process virtual address 0x202d2000 [ 165.033914][ T7421] Memory failure: 0x11eaee: recovery action for clean LRU page: Recovered [ 165.033928][ T7421] Injecting memory failure for pfn 0x191474 at process virtual address 0x202d3000 [ 165.033997][ T7421] Memory failure: 0x191474: recovery action for clean LRU page: Recovered [ 165.034012][ T7421] Injecting memory failure for pfn 0x18b8a0 at process virtual address 0x202d4000 [ 165.034080][ T7421] Memory failure: 0x18b8a0: recovery action for clean LRU page: Recovered [ 165.034095][ T7421] Injecting memory failure for pfn 0x1527da at process virtual address 0x202d5000 [ 165.034165][ T7421] Memory failure: 0x1527da: recovery action for clean LRU page: Recovered [ 165.034179][ T7421] Injecting memory failure for pfn 0x1527ae at process virtual address 0x202d6000 [ 165.034247][ T7421] Memory failure: 0x1527ae: recovery action for clean LRU page: Recovered [ 165.034262][ T7421] Injecting memory failure for pfn 0x153475 at process virtual address 0x202d7000 [ 165.034331][ T7421] Memory failure: 0x153475: recovery action for clean LRU page: Recovered [ 165.034346][ T7421] Injecting memory failure for pfn 0x153474 at process virtual address 0x202d8000 [ 165.034414][ T7421] Memory failure: 0x153474: recovery action for clean LRU page: Recovered [ 165.034429][ T7421] Injecting memory failure for pfn 0x153471 at process virtual address 0x202d9000 [ 165.034497][ T7421] Memory failure: 0x153471: recovery action for clean LRU page: Recovered [ 165.034512][ T7421] Injecting memory failure for pfn 0x153470 at process virtual address 0x202da000 [ 165.034580][ T7421] Memory failure: 0x153470: recovery action for clean LRU page: Recovered [ 165.034595][ T7421] Injecting memory failure for pfn 0x15346d at process virtual address 0x202db000 [ 165.034665][ T7421] Memory failure: 0x15346d: recovery action for clean LRU page: Recovered [ 165.034679][ T7421] Injecting memory failure for pfn 0x15346c at process virtual address 0x202dc000 [ 165.034759][ T7421] Memory failure: 0x15346c: recovery action for clean LRU page: Recovered [ 165.034774][ T7421] Injecting memory failure for pfn 0x153469 at process virtual address 0x202dd000 [ 165.034844][ T7421] Memory failure: 0x153469: recovery action for clean LRU page: Recovered [ 165.034859][ T7421] Injecting memory failure for pfn 0x153468 at process virtual address 0x202de000 [ 165.034928][ T7421] Memory failure: 0x153468: recovery action for clean LRU page: Recovered [ 165.034942][ T7421] Injecting memory failure for pfn 0x153465 at process virtual address 0x202df000 [ 165.035010][ T7421] Memory failure: 0x153465: recovery action for clean LRU page: Recovered [ 165.035025][ T7421] Injecting memory failure for pfn 0x153464 at process virtual address 0x202e0000 [ 165.035094][ T7421] Memory failure: 0x153464: recovery action for clean LRU page: Recovered [ 165.035109][ T7421] Injecting memory failure for pfn 0x153461 at process virtual address 0x202e1000 [ 165.035179][ T7421] Memory failure: 0x153461: recovery action for clean LRU page: Recovered [ 165.035194][ T7421] Injecting memory failure for pfn 0x153460 at process virtual address 0x202e2000 [ 165.035264][ T7421] Memory failure: 0x153460: recovery action for clean LRU page: Recovered [ 165.035278][ T7421] Injecting memory failure for pfn 0x15345d at process virtual address 0x202e3000 [ 165.035348][ T7421] Memory failure: 0x15345d: recovery action for clean LRU page: Recovered [ 165.035362][ T7421] Injecting memory failure for pfn 0x15345c at process virtual address 0x202e4000 [ 165.035431][ T7421] Memory failure: 0x15345c: recovery action for clean LRU page: Recovered [ 165.035446][ T7421] Injecting memory failure for pfn 0x153439 at process virtual address 0x202e5000 [ 165.035515][ T7421] Memory failure: 0x153439: recovery action for clean LRU page: Recovered [ 165.035530][ T7421] Injecting memory failure for pfn 0x153438 at process virtual address 0x202e6000 [ 165.035599][ T7421] Memory failure: 0x153438: recovery action for clean LRU page: Recovered [ 165.035614][ T7421] Injecting memory failure for pfn 0x153435 at process virtual address 0x202e7000 [ 165.035684][ T7421] Memory failure: 0x153435: recovery action for clean LRU page: Recovered [ 165.035698][ T7421] Injecting memory failure for pfn 0x153434 at process virtual address 0x202e8000 [ 165.035770][ T7421] Memory failure: 0x153434: recovery action for clean LRU page: Recovered [ 165.035785][ T7421] Injecting memory failure for pfn 0x153431 at process virtual address 0x202e9000 [ 165.035854][ T7421] Memory failure: 0x153431: recovery action for clean LRU page: Recovered [ 165.035870][ T7421] Injecting memory failure for pfn 0x153430 at process virtual address 0x202ea000 [ 165.035938][ T7421] Memory failure: 0x153430: recovery action for clean LRU page: Recovered [ 165.035952][ T7421] Injecting memory failure for pfn 0x15342d at process virtual address 0x202eb000 [ 165.036021][ T7421] Memory failure: 0x15342d: recovery action for clean LRU page: Recovered [ 165.036036][ T7421] Injecting memory failure for pfn 0x15342c at process virtual address 0x202ec000 [ 165.036104][ T7421] Memory failure: 0x15342c: recovery action for clean LRU page: Recovered [ 165.036118][ T7421] Injecting memory failure for pfn 0x153429 at process virtual address 0x202ed000 [ 165.036187][ T7421] Memory failure: 0x153429: recovery action for clean LRU page: Recovered [ 165.036201][ T7421] Injecting memory failure for pfn 0x153428 at process virtual address 0x202ee000 [ 165.036270][ T7421] Memory failure: 0x153428: recovery action for clean LRU page: Recovered [ 165.036284][ T7421] Injecting memory failure for pfn 0x153425 at process virtual address 0x202ef000 [ 165.036353][ T7421] Memory failure: 0x153425: recovery action for clean LRU page: Recovered [ 165.036367][ T7421] Injecting memory failure for pfn 0x11e8bd at process virtual address 0x202f0000 [ 165.036436][ T7421] Memory failure: 0x11e8bd: recovery action for clean LRU page: Recovered [ 165.036451][ T7421] Injecting memory failure for pfn 0x11e8bb at process virtual address 0x202f1000 [ 165.036522][ T7421] Memory failure: 0x11e8bb: recovery action for clean LRU page: Recovered [ 165.036537][ T7421] Injecting memory failure for pfn 0x11e8b9 at process virtual address 0x202f2000 [ 165.036606][ T7421] Memory failure: 0x11e8b9: recovery action for clean LRU page: Recovered [ 165.036620][ T7421] Injecting memory failure for pfn 0x11e8b7 at process virtual address 0x202f3000 [ 165.036689][ T7421] Memory failure: 0x11e8b7: recovery action for clean LRU page: Recovered [ 165.036704][ T7421] Injecting memory failure for pfn 0x18e951 at process virtual address 0x202f4000 [ 165.036775][ T7421] Memory failure: 0x18e951: recovery action for clean LRU page: Recovered [ 165.036790][ T7421] Injecting memory failure for pfn 0x190ccc at process virtual address 0x202f5000 [ 165.036860][ T7421] Memory failure: 0x190ccc: recovery action for clean LRU page: Recovered [ 165.036874][ T7421] Injecting memory failure for pfn 0x18c623 at process virtual address 0x202f6000 [ 165.036944][ T7421] Memory failure: 0x18c623: recovery action for clean LRU page: Recovered [ 165.036958][ T7421] Injecting memory failure for pfn 0x18c621 at process virtual address 0x202f7000 [ 165.037027][ T7421] Memory failure: 0x18c621: recovery action for clean LRU page: Recovered [ 165.037041][ T7421] Injecting memory failure for pfn 0x189c99 at process virtual address 0x202f8000 [ 165.037111][ T7421] Memory failure: 0x189c99: recovery action for clean LRU page: Recovered [ 165.037125][ T7421] Injecting memory failure for pfn 0x1928be at process virtual address 0x202f9000 [ 165.037195][ T7421] Memory failure: 0x1928be: recovery action for clean LRU page: Recovered [ 165.037210][ T7421] Injecting memory failure for pfn 0x18f6c5 at process virtual address 0x202fa000 [ 165.037279][ T7421] Memory failure: 0x18f6c5: recovery action for clean LRU page: Recovered [ 165.037294][ T7421] Injecting memory failure for pfn 0x1923a0 at process virtual address 0x202fb000 [ 165.037363][ T7421] Memory failure: 0x1923a0: recovery action for clean LRU page: Recovered [ 165.037377][ T7421] Injecting memory failure for pfn 0x18fa4b at process virtual address 0x202fc000 [ 165.037447][ T7421] Memory failure: 0x18fa4b: recovery action for clean LRU page: Recovered [ 165.037461][ T7421] Injecting memory failure for pfn 0x1895bf at process virtual address 0x202fd000 [ 165.037531][ T7421] Memory failure: 0x1895bf: recovery action for clean LRU page: Recovered [ 165.037545][ T7421] Injecting memory failure for pfn 0x1895b3 at process virtual address 0x202fe000 [ 165.037615][ T7421] Memory failure: 0x1895b3: recovery action for clean LRU page: Recovered [ 165.037629][ T7421] Injecting memory failure for pfn 0x1895ab at process virtual address 0x202ff000 [ 165.037698][ T7421] Memory failure: 0x1895ab: recovery action for clean LRU page: Recovered [ 165.037713][ T7421] Injecting memory failure for pfn 0x1895a9 at process virtual address 0x20300000 [ 165.037785][ T7421] Memory failure: 0x1895a9: recovery action for clean LRU page: Recovered [ 165.037800][ T7421] Injecting memory failure for pfn 0x1895a3 at process virtual address 0x20301000 [ 165.037868][ T7421] Memory failure: 0x1895a3: recovery action for clean LRU page: Recovered [ 165.037883][ T7421] Injecting memory failure for pfn 0x18959b at process virtual address 0x20302000 [ 165.037951][ T7421] Memory failure: 0x18959b: recovery action for clean LRU page: Recovered [ 165.037966][ T7421] Injecting memory failure for pfn 0x1895a1 at process virtual address 0x20303000 [ 165.038036][ T7421] Memory failure: 0x1895a1: recovery action for clean LRU page: Recovered [ 165.038051][ T7421] Injecting memory failure for pfn 0x18959d at process virtual address 0x20304000 [ 165.038119][ T7421] Memory failure: 0x18959d: recovery action for clean LRU page: Recovered [ 165.038134][ T7421] Injecting memory failure for pfn 0x18959f at process virtual address 0x20305000 [ 165.038204][ T7421] Memory failure: 0x18959f: recovery action for clean LRU page: Recovered [ 165.038218][ T7421] Injecting memory failure for pfn 0x1895af at process virtual address 0x20306000 [ 165.038287][ T7421] Memory failure: 0x1895af: recovery action for clean LRU page: Recovered [ 165.038302][ T7421] Injecting memory failure for pfn 0x189571 at process virtual address 0x20307000 [ 165.038371][ T7421] Memory failure: 0x189571: recovery action for clean LRU page: Recovered [ 165.038386][ T7421] Injecting memory failure for pfn 0x1527de at process virtual address 0x20308000 [ 165.038455][ T7421] Memory failure: 0x1527de: recovery action for clean LRU page: Recovered [ 165.038469][ T7421] Injecting memory failure for pfn 0x1527b8 at process virtual address 0x20309000 [ 165.038537][ T7421] Memory failure: 0x1527b8: recovery action for clean LRU page: Recovered [ 165.038552][ T7421] Injecting memory failure for pfn 0x13fbe1 at process virtual address 0x2030a000 [ 165.038621][ T7421] Memory failure: 0x13fbe1: recovery action for clean LRU page: Recovered [ 165.038636][ T7421] Injecting memory failure for pfn 0x189341 at process virtual address 0x2030b000 [ 165.038705][ T7421] Memory failure: 0x189341: recovery action for clean LRU page: Recovered [ 165.038720][ T7421] Injecting memory failure for pfn 0x11e1d1 at process virtual address 0x2030c000 [ 165.038791][ T7421] Memory failure: 0x11e1d1: recovery action for clean LRU page: Recovered [ 165.038806][ T7421] Injecting memory failure for pfn 0x18925d at process virtual address 0x2030d000 [ 165.038875][ T7421] Memory failure: 0x18925d: recovery action for clean LRU page: Recovered [ 165.038890][ T7421] Injecting memory failure for pfn 0x1892f4 at process virtual address 0x2030e000 [ 165.038959][ T7421] Memory failure: 0x1892f4: recovery action for clean LRU page: Recovered [ 165.038973][ T7421] Injecting memory failure for pfn 0x189310 at process virtual address 0x2030f000 [ 165.039042][ T7421] Memory failure: 0x189310: recovery action for clean LRU page: Recovered [ 165.039057][ T7421] Injecting memory failure for pfn 0x18930c at process virtual address 0x20310000 [ 165.039125][ T7421] Memory failure: 0x18930c: recovery action for clean LRU page: Recovered [ 165.039140][ T7421] Injecting memory failure for pfn 0x18e374 at process virtual address 0x20311000 [ 165.047404][ T7421] Memory failure: 0x18e374: recovery action for clean LRU page: Recovered [ 165.047429][ T7421] Injecting memory failure for pfn 0x11e8ff at process virtual address 0x20312000 [ 165.047602][ T7421] Memory failure: 0x11e8ff: recovery action for clean LRU page: Recovered [ 165.047618][ T7421] Injecting memory failure for pfn 0x11e875 at process virtual address 0x20313000 [ 165.047697][ T7421] Memory failure: 0x11e875: recovery action for clean LRU page: Recovered [ 165.047713][ T7421] Injecting memory failure for pfn 0x140805 at process virtual address 0x20314000 [ 165.047796][ T7421] Memory failure: 0x140805: recovery action for clean LRU page: Recovered [ 165.047812][ T7421] Injecting memory failure for pfn 0x18e33e at process virtual address 0x20315000 [ 165.047883][ T7421] Memory failure: 0x18e33e: recovery action for clean LRU page: Recovered [ 165.047899][ T7421] Injecting memory failure for pfn 0x18e368 at process virtual address 0x20316000 [ 165.047969][ T7421] Memory failure: 0x18e368: recovery action for clean LRU page: Recovered [ 165.047984][ T7421] Injecting memory failure for pfn 0x13ec43 at process virtual address 0x20317000 [ 165.048056][ T7421] Memory failure: 0x13ec43: recovery action for clean LRU page: Recovered [ 165.048070][ T7421] Injecting memory failure for pfn 0x13ec55 at process virtual address 0x20318000 [ 165.048141][ T7421] Memory failure: 0x13ec55: recovery action for clean LRU page: Recovered [ 165.048155][ T7421] Injecting memory failure for pfn 0x13ec59 at process virtual address 0x20319000 [ 165.048225][ T7421] Memory failure: 0x13ec59: recovery action for clean LRU page: Recovered [ 165.048240][ T7421] Injecting memory failure for pfn 0x13efc7 at process virtual address 0x2031a000 [ 165.048309][ T7421] Memory failure: 0x13efc7: recovery action for clean LRU page: Recovered [ 165.048323][ T7421] Injecting memory failure for pfn 0x190b65 at process virtual address 0x2031b000 [ 165.048393][ T7421] Memory failure: 0x190b65: recovery action for clean LRU page: Recovered [ 165.048407][ T7421] Injecting memory failure for pfn 0x18ff5d at process virtual address 0x2031c000 [ 165.048478][ T7421] Memory failure: 0x18ff5d: recovery action for clean LRU page: Recovered [ 165.048492][ T7421] Injecting memory failure for pfn 0x18e30f at process virtual address 0x2031d000 [ 165.048562][ T7421] Memory failure: 0x18e30f: recovery action for clean LRU page: Recovered [ 165.048576][ T7421] Injecting memory failure for pfn 0x190fac at process virtual address 0x2031e000 [ 165.048645][ T7421] Memory failure: 0x190fac: recovery action for clean LRU page: Recovered [ 165.048660][ T7421] Injecting memory failure for pfn 0x18e29b at process virtual address 0x2031f000 [ 165.048729][ T7421] Memory failure: 0x18e29b: recovery action for clean LRU page: Recovered [ 165.048744][ T7421] Injecting memory failure for pfn 0x15e69f at process virtual address 0x20320000 [ 165.048824][ T7421] Memory failure: 0x15e69f: recovery action for clean LRU page: Recovered [ 165.048839][ T7421] Injecting memory failure for pfn 0x18e30b at process virtual address 0x20321000 [ 165.048908][ T7421] Memory failure: 0x18e30b: recovery action for clean LRU page: Recovered [ 165.048922][ T7421] Injecting memory failure for pfn 0x1908f4 at process virtual address 0x20322000 [ 165.048992][ T7421] Memory failure: 0x1908f4: recovery action for clean LRU page: Recovered [ 165.049006][ T7421] Injecting memory failure for pfn 0x1226b4 at process virtual address 0x20323000 [ 165.049075][ T7421] Memory failure: 0x1226b4: recovery action for clean LRU page: Recovered [ 165.049090][ T7421] Injecting memory failure for pfn 0x11eb01 at process virtual address 0x20324000 [ 165.049160][ T7421] Memory failure: 0x11eb01: recovery action for clean LRU page: Recovered [ 165.049174][ T7421] Injecting memory failure for pfn 0x140827 at process virtual address 0x20325000 [ 165.049242][ T7421] Memory failure: 0x140827: recovery action for clean LRU page: Recovered [ 165.049257][ T7421] Injecting memory failure for pfn 0x11fe0e at process virtual address 0x20326000 [ 165.049325][ T7421] Memory failure: 0x11fe0e: recovery action for clean LRU page: Recovered [ 165.049340][ T7421] Injecting memory failure for pfn 0x13fb78 at process virtual address 0x20327000 [ 165.049409][ T7421] Memory failure: 0x13fb78: recovery action for clean LRU page: Recovered [ 165.049424][ T7421] Injecting memory failure for pfn 0x13faf7 at process virtual address 0x20328000 [ 165.049493][ T7421] Memory failure: 0x13faf7: recovery action for clean LRU page: Recovered [ 165.049508][ T7421] Injecting memory failure for pfn 0x13fa0b at process virtual address 0x20329000 [ 165.049577][ T7421] Memory failure: 0x13fa0b: recovery action for clean LRU page: Recovered [ 165.049591][ T7421] Injecting memory failure for pfn 0x1226b3 at process virtual address 0x2032a000 [ 165.049661][ T7421] Memory failure: 0x1226b3: recovery action for clean LRU page: Recovered [ 165.049675][ T7421] Injecting memory failure for pfn 0x190975 at process virtual address 0x2032b000 [ 165.049748][ T7421] Memory failure: 0x190975: recovery action for clean LRU page: Recovered [ 165.049765][ T7421] Injecting memory failure for pfn 0x190b63 at process virtual address 0x2032c000 [ 165.049834][ T7421] Memory failure: 0x190b63: recovery action for clean LRU page: Recovered [ 165.049849][ T7421] Injecting memory failure for pfn 0x18e98f at process virtual address 0x2032d000 [ 165.049918][ T7421] Memory failure: 0x18e98f: recovery action for clean LRU page: Recovered [ 165.049933][ T7421] Injecting memory failure for pfn 0x190536 at process virtual address 0x2032e000 [ 165.050003][ T7421] Memory failure: 0x190536: recovery action for clean LRU page: Recovered [ 165.050018][ T7421] Injecting memory failure for pfn 0x19053a at process virtual address 0x2032f000 [ 165.056549][ T7421] Memory failure: 0x19053a: recovery action for clean LRU page: Recovered [ 165.056574][ T7421] Injecting memory failure for pfn 0x19053e at process virtual address 0x20330000 [ 165.056736][ T7421] Memory failure: 0x19053e: recovery action for clean LRU page: Recovered [ 165.056758][ T7421] Injecting memory failure for pfn 0x190542 at process virtual address 0x20331000 [ 165.056845][ T7421] Memory failure: 0x190542: recovery action for clean LRU page: Recovered [ 165.056862][ T7421] Injecting memory failure for pfn 0x190546 at process virtual address 0x20332000 [ 165.056936][ T7421] Memory failure: 0x190546: recovery action for clean LRU page: Recovered [ 165.056952][ T7421] Injecting memory failure for pfn 0x19054a at process virtual address 0x20333000 [ 165.057023][ T7421] Memory failure: 0x19054a: recovery action for clean LRU page: Recovered [ 165.057038][ T7421] Injecting memory failure for pfn 0x19054e at process virtual address 0x20334000 [ 165.057109][ T7421] Memory failure: 0x19054e: recovery action for clean LRU page: Recovered [ 165.057124][ T7421] Injecting memory failure for pfn 0x190552 at process virtual address 0x20335000 [ 165.057195][ T7421] Memory failure: 0x190552: recovery action for clean LRU page: Recovered [ 165.057210][ T7421] Injecting memory failure for pfn 0x190556 at process virtual address 0x20336000 [ 165.057280][ T7421] Memory failure: 0x190556: recovery action for clean LRU page: Recovered [ 165.057295][ T7421] Injecting memory failure for pfn 0x190582 at process virtual address 0x20337000 [ 165.057364][ T7421] Memory failure: 0x190582: recovery action for clean LRU page: Recovered [ 165.057379][ T7421] Injecting memory failure for pfn 0x190586 at process virtual address 0x20338000 [ 165.057448][ T7421] Memory failure: 0x190586: recovery action for clean LRU page: Recovered [ 165.057463][ T7421] Injecting memory failure for pfn 0x19058a at process virtual address 0x20339000 [ 165.057531][ T7421] Memory failure: 0x19058a: recovery action for clean LRU page: Recovered [ 165.057545][ T7421] Injecting memory failure for pfn 0x19058e at process virtual address 0x2033a000 [ 165.057615][ T7421] Memory failure: 0x19058e: recovery action for clean LRU page: Recovered [ 165.057629][ T7421] Injecting memory failure for pfn 0x190592 at process virtual address 0x2033b000 [ 165.057698][ T7421] Memory failure: 0x190592: recovery action for clean LRU page: Recovered [ 165.057713][ T7421] Injecting memory failure for pfn 0x190596 at process virtual address 0x2033c000 [ 165.057786][ T7421] Memory failure: 0x190596: recovery action for clean LRU page: Recovered [ 165.057802][ T7421] Injecting memory failure for pfn 0x1905a5 at process virtual address 0x2033d000 [ 165.057870][ T7421] Memory failure: 0x1905a5: recovery action for clean LRU page: Recovered [ 165.057884][ T7421] Injecting memory failure for pfn 0x1905a9 at process virtual address 0x2033e000 [ 165.057953][ T7421] Memory failure: 0x1905a9: recovery action for clean LRU page: Recovered [ 165.057968][ T7421] Injecting memory failure for pfn 0x1905ad at process virtual address 0x2033f000 [ 165.058037][ T7421] Memory failure: 0x1905ad: recovery action for clean LRU page: Recovered [ 165.058052][ T7421] Injecting memory failure for pfn 0x1905b2 at process virtual address 0x20340000 [ 165.058122][ T7421] Memory failure: 0x1905b2: recovery action for clean LRU page: Recovered [ 165.058137][ T7421] Injecting memory failure for pfn 0x190fce at process virtual address 0x20341000 [ 165.058206][ T7421] Memory failure: 0x190fce: recovery action for clean LRU page: Recovered [ 165.058220][ T7421] Injecting memory failure for pfn 0x190fb4 at process virtual address 0x20342000 [ 165.058289][ T7421] Memory failure: 0x190fb4: recovery action for clean LRU page: Recovered [ 165.058304][ T7421] Injecting memory failure for pfn 0x190fa6 at process virtual address 0x20343000 [ 165.058372][ T7421] Memory failure: 0x190fa6: recovery action for clean LRU page: Recovered [ 165.058387][ T7421] Injecting memory failure for pfn 0x18ee88 at process virtual address 0x20344000 [ 165.058456][ T7421] Memory failure: 0x18ee88: recovery action for clean LRU page: Recovered [ 165.058470][ T7421] Injecting memory failure for pfn 0x19363a at process virtual address 0x20345000 [ 165.058539][ T7421] Memory failure: 0x19363a: recovery action for clean LRU page: Recovered [ 165.058554][ T7421] Injecting memory failure for pfn 0x18ee8b at process virtual address 0x20346000 [ 165.058623][ T7421] Memory failure: 0x18ee8b: recovery action for clean LRU page: Recovered [ 165.058638][ T7421] Injecting memory failure for pfn 0x194561 at process virtual address 0x20347000 [ 165.058709][ T7421] Memory failure: 0x194561: recovery action for clean LRU page: Recovered [ 165.058724][ T7421] Injecting memory failure for pfn 0x18edf3 at process virtual address 0x20348000 [ 165.058796][ T7421] Memory failure: 0x18edf3: recovery action for clean LRU page: Recovered [ 165.058811][ T7421] Injecting memory failure for pfn 0x11e8d3 at process virtual address 0x20349000 [ 165.058882][ T7421] Memory failure: 0x11e8d3: recovery action for clean LRU page: Recovered [ 165.058897][ T7421] Injecting memory failure for pfn 0x18925f at process virtual address 0x2034a000 [ 165.058967][ T7421] Memory failure: 0x18925f: recovery action for clean LRU page: Recovered [ 165.058981][ T7421] Injecting memory failure for pfn 0x18e91f at process virtual address 0x2034b000 [ 165.059050][ T7421] Memory failure: 0x18e91f: recovery action for clean LRU page: Recovered [ 165.059065][ T7421] Injecting memory failure for pfn 0x13ec51 at process virtual address 0x2034c000 [ 165.059134][ T7421] Memory failure: 0x13ec51: recovery action for clean LRU page: Recovered [ 165.059149][ T7421] Injecting memory failure for pfn 0x1895ad at process virtual address 0x2034d000 [ 165.059217][ T7421] Memory failure: 0x1895ad: recovery action for clean LRU page: Recovered [ 165.059232][ T7421] Injecting memory failure for pfn 0x189553 at process virtual address 0x2034e000 [ 165.059301][ T7421] Memory failure: 0x189553: recovery action for clean LRU page: Recovered [ 165.059315][ T7421] Injecting memory failure for pfn 0x18950f at process virtual address 0x2034f000 [ 165.059384][ T7421] Memory failure: 0x18950f: recovery action for clean LRU page: Recovered [ 165.059399][ T7421] Injecting memory failure for pfn 0x18950d at process virtual address 0x20350000 [ 165.059467][ T7421] Memory failure: 0x18950d: recovery action for clean LRU page: Recovered [ 165.059482][ T7421] Injecting memory failure for pfn 0x13ec4f at process virtual address 0x20351000 [ 165.059553][ T7421] Memory failure: 0x13ec4f: recovery action for clean LRU page: Recovered [ 165.059568][ T7421] Injecting memory failure for pfn 0x18e91d at process virtual address 0x20352000 [ 165.059636][ T7421] Memory failure: 0x18e91d: recovery action for clean LRU page: Recovered [ 165.059650][ T7421] Injecting memory failure for pfn 0x190c36 at process virtual address 0x20353000 [ 165.059720][ T7421] Memory failure: 0x190c36: recovery action for clean LRU page: Recovered [ 165.059734][ T7421] Injecting memory failure for pfn 0x190b5b at process virtual address 0x20354000 [ 165.059807][ T7421] Memory failure: 0x190b5b: recovery action for clean LRU page: Recovered [ 165.059822][ T7421] Injecting memory failure for pfn 0x190b57 at process virtual address 0x20355000 [ 165.059891][ T7421] Memory failure: 0x190b57: recovery action for clean LRU page: Recovered [ 165.059905][ T7421] Injecting memory failure for pfn 0x190b51 at process virtual address 0x20356000 [ 165.059974][ T7421] Memory failure: 0x190b51: recovery action for clean LRU page: Recovered [ 165.059988][ T7421] Injecting memory failure for pfn 0x190b4d at process virtual address 0x20357000 [ 165.060057][ T7421] Memory failure: 0x190b4d: recovery action for clean LRU page: Recovered [ 165.060071][ T7421] Injecting memory failure for pfn 0x190b59 at process virtual address 0x20358000 [ 165.060140][ T7421] Memory failure: 0x190b59: recovery action for clean LRU page: Recovered [ 165.060155][ T7421] Injecting memory failure for pfn 0x190b53 at process virtual address 0x20359000 [ 165.060224][ T7421] Memory failure: 0x190b53: recovery action for clean LRU page: Recovered [ 165.060239][ T7421] Injecting memory failure for pfn 0x190b4f at process virtual address 0x2035a000 [ 165.066280][ T7421] Memory failure: 0x190b4f: recovery action for clean LRU page: Recovered [ 165.066303][ T7421] Injecting memory failure for pfn 0x190b55 at process virtual address 0x2035b000 [ 165.066422][ T7421] Memory failure: 0x190b55: recovery action for clean LRU page: Recovered [ 165.066439][ T7421] Injecting memory failure for pfn 0x190b4b at process virtual address 0x2035c000 [ 165.066513][ T7421] Memory failure: 0x190b4b: recovery action for clean LRU page: Recovered [ 165.066529][ T7421] Injecting memory failure for pfn 0x190cd8 at process virtual address 0x2035d000 [ 165.066606][ T7421] Memory failure: 0x190cd8: recovery action for clean LRU page: Recovered [ 165.066621][ T7421] Injecting memory failure for pfn 0x190cc6 at process virtual address 0x2035e000 [ 165.066691][ T7421] Memory failure: 0x190cc6: recovery action for clean LRU page: Recovered [ 165.066706][ T7421] Injecting memory failure for pfn 0x1903d0 at process virtual address 0x2035f000 [ 165.066783][ T7421] Memory failure: 0x1903d0: recovery action for clean LRU page: Recovered [ 165.066801][ T7421] Injecting memory failure for pfn 0x19060f at process virtual address 0x20360000 [ 165.066872][ T7421] Memory failure: 0x19060f: recovery action for clean LRU page: Recovered [ 165.066887][ T7421] Injecting memory failure for pfn 0x190611 at process virtual address 0x20361000 [ 165.066956][ T7421] Memory failure: 0x190611: recovery action for clean LRU page: Recovered [ 165.066972][ T7421] Injecting memory failure for pfn 0x190613 at process virtual address 0x20362000 [ 165.067040][ T7421] Memory failure: 0x190613: recovery action for clean LRU page: Recovered [ 165.067055][ T7421] Injecting memory failure for pfn 0x190615 at process virtual address 0x20363000 [ 165.067124][ T7421] Memory failure: 0x190615: recovery action for clean LRU page: Recovered [ 165.067138][ T7421] Injecting memory failure for pfn 0x190617 at process virtual address 0x20364000 [ 165.067208][ T7421] Memory failure: 0x190617: recovery action for clean LRU page: Recovered [ 165.067223][ T7421] Injecting memory failure for pfn 0x190cf6 at process virtual address 0x20365000 [ 165.067292][ T7421] Memory failure: 0x190cf6: recovery action for clean LRU page: Recovered [ 165.067307][ T7421] Injecting memory failure for pfn 0x13ec53 at process virtual address 0x20366000 [ 165.067377][ T7421] Memory failure: 0x13ec53: recovery action for clean LRU page: Recovered [ 165.067392][ T7421] Injecting memory failure for pfn 0x189306 at process virtual address 0x20367000 [ 165.067460][ T7421] Memory failure: 0x189306: recovery action for clean LRU page: Recovered [ 165.067475][ T7421] Injecting memory failure for pfn 0x190f0e at process virtual address 0x20368000 [ 165.067544][ T7421] Memory failure: 0x190f0e: recovery action for clean LRU page: Recovered [ 165.067558][ T7421] Injecting memory failure for pfn 0x18924d at process virtual address 0x20369000 [ 165.067627][ T7421] Memory failure: 0x18924d: recovery action for clean LRU page: Recovered [ 165.067642][ T7421] Injecting memory failure for pfn 0x189249 at process virtual address 0x2036a000 [ 165.067712][ T7421] Memory failure: 0x189249: recovery action for clean LRU page: Recovered [ 165.067726][ T7421] Injecting memory failure for pfn 0x189245 at process virtual address 0x2036b000 [ 165.067803][ T7421] Memory failure: 0x189245: recovery action for clean LRU page: Recovered [ 165.067818][ T7421] Injecting memory failure for pfn 0x190f12 at process virtual address 0x2036c000 [ 165.067887][ T7421] Memory failure: 0x190f12: recovery action for clean LRU page: Recovered [ 165.067902][ T7421] Injecting memory failure for pfn 0x13f89b at process virtual address 0x2036d000 [ 165.067971][ T7421] Memory failure: 0x13f89b: recovery action for clean LRU page: Recovered [ 165.067985][ T7421] Injecting memory failure for pfn 0x190f14 at process virtual address 0x2036e000 [ 165.068054][ T7421] Memory failure: 0x190f14: recovery action for clean LRU page: Recovered [ 165.068069][ T7421] Injecting memory failure for pfn 0x13ef43 at process virtual address 0x2036f000 [ 165.068139][ T7421] Memory failure: 0x13ef43: recovery action for clean LRU page: Recovered [ 165.068153][ T7421] Injecting memory failure for pfn 0x19071b at process virtual address 0x20370000 [ 165.068223][ T7421] Memory failure: 0x19071b: recovery action for clean LRU page: Recovered [ 165.068237][ T7421] Injecting memory failure for pfn 0x13512e at process virtual address 0x20371000 [ 165.068309][ T7421] Memory failure: 0x13512e: recovery action for clean LRU page: Recovered [ 165.263853][ T3405] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.478182][ T3405] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.581243][ T3405] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.933116][ T4754] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 166.062879][ T7434] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.062907][ T7434] block device autoloading is deprecated and will be removed. [ 166.200820][ T7434] __nla_validate_parse: 6 callbacks suppressed [ 166.200839][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 166.200885][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 166.553955][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 166.554012][ T7434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'. [ 166.583656][ T3405] bridge_slave_1: left allmulticast mode [ 166.583684][ T3405] bridge_slave_1: left promiscuous mode [ 166.583859][ T3405] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.612412][ T3405] bridge_slave_0: left allmulticast mode [ 166.612442][ T3405] bridge_slave_0: left promiscuous mode [ 166.612604][ T3405] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.794809][ T7453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.642121][ T7462] loop6: detected capacity change from 0 to 2048 [ 167.660912][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.664071][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.665374][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.679874][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.686228][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.703285][ T7462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.823523][ T3405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.017232][ T3405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.310981][ T7478] loop1: detected capacity change from 0 to 2048 [ 168.735724][ T7469] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 168.972696][ T4754] Bluetooth: hci4: command 0x0406 tx timeout [ 169.089916][ T3405] bond0 (unregistering): Released all slaves [ 169.293014][ T7478] loop1: p1 < > p4 [ 169.293014][ T7478] p4: [ 169.436498][ T7478] loop1: p4 size 722688 extends beyond EOD, truncated [ 169.773716][ T4754] Bluetooth: hci2: command tx timeout [ 171.505528][ T5894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.560415][ T7497] netlink: 16 bytes leftover after parsing attributes in process `syz.5.617'. [ 171.865782][ T4746] Bluetooth: hci2: command tx timeout [ 172.316132][ T7507] batman_adv: batadv0: Adding interface: syz_tun [ 172.316150][ T7507] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.316174][ T7507] batman_adv: batadv0: Interface activated: syz_tun [ 173.094471][ T7463] rxe_eth0 speed is unknown, defaulting to 1000 [ 173.932349][ T4746] Bluetooth: hci2: command tx timeout [ 174.188269][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 174.188327][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 174.423106][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 174.423163][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 174.726443][ T7546] sctp: [Deprecated]: syz.5.629 (pid 7546) Use of int in max_burst socket option. [ 174.726443][ T7546] Use struct sctp_assoc_value instead [ 174.730125][ T7486] IPVS: starting estimator thread 0... [ 174.812787][ T7553] IPVS: using max 11 ests per chain, 26400 per kthread [ 174.827294][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 174.827348][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 174.833385][ T3405] hsr_slave_0: left promiscuous mode [ 174.841060][ T3405] hsr_slave_1: left promiscuous mode [ 174.844661][ T3405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.844684][ T3405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.854706][ T3405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.854739][ T3405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.882550][ T7559] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 174.882581][ T7559] block device autoloading is deprecated and will be removed. [ 174.885829][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.631'. [ 174.885880][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.631'. [ 174.901332][ T3405] vlan0: left allmulticast mode [ 174.901351][ T3405] veth0_vlan: left allmulticast mode [ 174.901423][ T3405] vlan0: left promiscuous mode [ 174.906637][ T3405] veth1_macvtap: left promiscuous mode [ 174.906773][ T3405] veth0_macvtap: left promiscuous mode [ 174.906911][ T3405] veth1_vlan: left promiscuous mode [ 174.907015][ T3405] veth0_vlan: left promiscuous mode [ 175.020709][ T7559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.631'. [ 175.553682][ T7581] loop6: detected capacity change from 0 to 4096 [ 175.561047][ T7581] EXT4-fs: Ignoring removed orlov option [ 175.569402][ T7581] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.569421][ T7581] EXT4-fs (loop6): Test dummy encryption mode enabled [ 175.590077][ T7581] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0002] [ 175.590172][ T7581] System zones: 0-5 [ 175.609866][ T7581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.653941][ T7581] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.636: bg 0: block 98: padding at end of block bitmap is not set [ 175.656693][ T7581] EXT4-fs (loop6): Remounting filesystem read-only [ 175.769641][ T7486] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 175.769684][ T7486] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 175.790284][ T5894] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.846381][ T3405] team0 (unregistering): Port device team_slave_1 removed [ 175.907977][ T3405] team0 (unregistering): Port device team_slave_0 removed [ 176.011863][ T4746] Bluetooth: hci2: command tx timeout [ 176.029282][ T7591] loop6: detected capacity change from 0 to 1024 [ 176.030336][ T7591] EXT4-fs: quotafile must be on filesystem root [ 176.045254][ T7590] loop3: detected capacity change from 0 to 4096 [ 176.053773][ T7590] EXT4-fs: Ignoring removed orlov option [ 176.076663][ T7590] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.076686][ T7590] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.124810][ T7590] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0002] [ 176.124919][ T7590] System zones: 0-5 [ 176.129266][ T7590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.348188][ T7590] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.639: bg 0: block 98: padding at end of block bitmap is not set [ 176.366734][ T7590] EXT4-fs (loop3): Remounting filesystem read-only [ 176.508099][ T4737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.522040][ T5474] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 176.522082][ T5474] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 176.626989][ T4427] 8021q: adding VLAN 0 to HW filter on device eth12 [ 176.628285][ T7571] batman_adv: batadv0: Adding interface: syz_tun [ 176.628298][ T7571] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.628323][ T7571] batman_adv: batadv0: Interface activated: syz_tun [ 176.683977][ T7594] loop6: detected capacity change from 0 to 128 [ 176.704300][ T7596] loop3: detected capacity change from 0 to 1024 [ 176.705957][ T7596] ext4: Unknown parameter 'context' [ 176.783602][ T7594] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 176.784107][ T7594] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.946397][ T7600] ip_tables: iptables: counters copy to user failed while replacing table [ 177.019522][ T7600] tipc: Can't bind to reserved service type 2 [ 177.481168][ T7610] __nla_validate_parse: 9 callbacks suppressed [ 177.481189][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.644'. [ 177.481236][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.644'. [ 177.555972][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.644'. [ 177.556025][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.644'. [ 177.712528][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.644'. [ 177.712583][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.644'. [ 178.086612][ T7463] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.086759][ T7463] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.086951][ T7463] bridge_slave_0: entered allmulticast mode [ 178.088961][ T7463] bridge_slave_0: entered promiscuous mode [ 178.099823][ T7463] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.099971][ T7463] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.100151][ T7463] bridge_slave_1: entered allmulticast mode [ 178.107125][ T7463] bridge_slave_1: entered promiscuous mode [ 178.264852][ T7463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.296270][ T7463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.299466][ T4427] 8021q: adding VLAN 0 to HW filter on device eth13 [ 178.458339][ T7463] team0: Port device team_slave_0 added [ 178.485238][ T7463] team0: Port device team_slave_1 added [ 178.739924][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.739942][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.739959][ T7463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.766460][ T7463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.766475][ T7463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.766490][ T7463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.875750][ T7655] netlink: 52 bytes leftover after parsing attributes in process `syz.5.651'. [ 179.073539][ T7463] hsr_slave_0: entered promiscuous mode [ 179.077142][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.5.652'. [ 179.077190][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.5.652'. [ 179.080970][ T7463] hsr_slave_1: entered promiscuous mode [ 179.132286][ T4746] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 179.168239][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.5.652'. [ 179.344417][ T5894] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.485135][ T7673] macvlan0: entered promiscuous mode [ 179.486151][ T7673] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 179.511129][ T4427] 8021q: adding VLAN 0 to HW filter on device eth14 [ 181.226904][ T7694] loop6: detected capacity change from 0 to 2048 [ 181.690360][ T7694] loop6: p1 < > p4 [ 181.690360][ T7694] p4: [ 181.699739][ T7694] loop6: p4 size 722688 extends beyond EOD, truncated [ 182.221052][ T7705] netlink: 'syz.5.660': attribute type 14 has an invalid length. [ 183.141057][ T4427] 8021q: adding VLAN 0 to HW filter on device eth15 [ 183.556924][ T7463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 183.592840][ T7463] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.594438][ T7463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 183.646241][ T7463] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.646999][ T7463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 183.742511][ T7463] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.769246][ T7463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 183.791053][ T7463] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 183.821160][ T7739] __nla_validate_parse: 4 callbacks suppressed [ 183.821183][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 183.821228][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 183.919742][ T7745] loop1: detected capacity change from 0 to 1024 [ 183.931284][ T7745] EXT4-fs: quotafile must be on filesystem root [ 185.185867][ T7748] overlayfs: failed to clone upperpath [ 185.230500][ T7463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.452183][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 185.452239][ T7739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 185.618185][ T7757] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.618212][ T7757] block device autoloading is deprecated and will be removed. [ 185.634162][ T7463] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.640975][ T7486] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.641028][ T7486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.660629][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.669'. [ 185.660684][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.669'. [ 185.801233][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.801288][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.802118][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.669'. [ 185.802168][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.669'. [ 185.962454][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.669'. [ 185.962509][ T7757] netlink: 28 bytes leftover after parsing attributes in process `syz.6.669'. [ 186.029793][ T7770] loop3: detected capacity change from 0 to 512 [ 186.066538][ T7770] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.127542][ T7770] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.671: bad orphan inode 13 [ 186.127573][ T7770] loop3: lost filesystem error report for type 5 error -117 [ 186.131731][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 186.131755][ C0] EXT4-fs (loop3): last error at time 2000000129: ext4_orphan_get:1429 [ 186.138272][ T7770] ext4_test_bit(bit=12, block=18) = 1 [ 186.138295][ T7770] is_bad_inode(inode)=0 [ 186.138306][ T7770] NEXT_ORPHAN(inode)=0 [ 186.138316][ T7770] max_ino=32 [ 186.138324][ T7770] i_nlink=1 [ 186.140653][ T7770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 186.288852][ T7770] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 186.291286][ T7770] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.671: bg 0: block 248: padding at end of block bitmap is not set [ 186.302559][ T7770] Quota error (device loop3): write_blk: dquota write failed [ 186.302642][ T7770] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 186.302699][ T7770] EXT4-fs error (device loop3): ext4_acquire_dquot:7070: comm syz.3.671: Failed to acquire dquot type 1 [ 186.307529][ T7463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.461595][ T4737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 186.586547][ T7784] netlink: 'syz.3.675': attribute type 2 has an invalid length. [ 187.049855][ T7463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.376573][ T1612] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.376630][ T1612] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.527349][ T7798] loop3: detected capacity change from 0 to 1024 [ 187.543024][ T7798] EXT4-fs: quotafile must be on filesystem root [ 187.600958][ T7463] veth0_vlan: entered promiscuous mode [ 187.688705][ T7463] veth1_vlan: entered promiscuous mode [ 188.133551][ T7463] veth0_macvtap: entered promiscuous mode [ 188.137266][ T7463] veth1_macvtap: entered promiscuous mode [ 188.275642][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.295835][ T7463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.322069][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.482540][ T5474] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.482605][ T5474] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.482648][ T5474] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.669626][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.669647][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.747181][ T7836] loop9: detected capacity change from 0 to 7 [ 188.986291][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.986311][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.291279][ T7848] fuse: Bad value for 'fd' [ 189.559361][ T7853] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 190.452513][ T7857] __nla_validate_parse: 12 callbacks suppressed [ 190.452535][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.693'. [ 190.452580][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.693'. [ 190.982261][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.693'. [ 190.982317][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.693'. [ 191.115399][ T7872] loop1: detected capacity change from 0 to 1024 [ 191.132838][ T7872] EXT4-fs: quotafile must be on filesystem root [ 191.349138][ T7881] loop6: detected capacity change from 0 to 3 [ 191.358791][ T7881] Filesystem uses "xz" compression. This is not supported [ 191.388436][ T7883] loop6: detected capacity change from 0 to 3 [ 191.420321][ T7883] Filesystem uses "xz" compression. This is not supported [ 192.777472][ T7890] loop6: detected capacity change from 0 to 512 [ 192.807837][ T7890] EXT4-fs (loop6): Test dummy encryption mode enabled [ 192.807867][ T7890] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 192.807878][ T7890] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 192.823809][ T7893] loop3: detected capacity change from 0 to 1024 [ 192.824884][ T7893] ext4: Bad value for 'journal_dev' [ 192.885540][ T7890] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.702: bad orphan inode 131072 [ 192.885579][ T7890] loop6: lost filesystem error report for type 5 error -117 [ 192.896823][ T7890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.484268][ T7900] batman_adv: batadv0: Interface deactivated: syz_tun [ 193.564687][ T7900] batman_adv: batadv0: Removing interface: syz_tun [ 194.613800][ T7900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.699016][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.709'. [ 194.699072][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.709'. [ 194.791775][ T7925] No such timeout policy "syz1" [ 194.813700][ T7925] binder: 7924:7925 tried to acquire reference to desc 0, got 1 instead [ 194.819272][ T7925] binder: 7924:7925 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 194.819298][ T7925] binder: 7925 RLIMIT_NICE not set [ 194.819323][ T7925] binder: 7925 RLIMIT_NICE not set [ 194.819845][ T7925] binder: 7925 RLIMIT_NICE not set [ 194.819905][ T7925] binder_alloc: 7924: binder_alloc_buf, no vma [ 194.819918][ T7925] binder: cannot allocate buffer: vma cleared, target dead or dying [ 194.819967][ T7925] binder: 7924:7925 transaction reply to 7924:7925 failed 14/29189/-3, code 0 size 0-0 line 3409 [ 194.820001][ T7925] binder: send failed reply for transaction 13 to 7924:7925 [ 194.847359][ T4861] binder: undelivered TRANSACTION_COMPLETE [ 194.847396][ T4861] binder: undelivered TRANSACTION_ERROR: 29189 [ 194.938794][ T4861] binder: undelivered TRANSACTION_ERROR: 29190 [ 194.967334][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.709'. [ 194.967387][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.709'. [ 195.160184][ T5987] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.175323][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.709'. [ 195.175379][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.709'. [ 195.222036][ T7947] batman_adv: batadv0: Interface deactivated: syz_tun [ 195.222065][ T7947] batman_adv: batadv0: Removing interface: syz_tun [ 195.241101][ T7947] bridge0: port 3(syz_tun) entered blocking state [ 195.241273][ T7947] bridge0: port 3(syz_tun) entered disabled state [ 195.241487][ T7947] syz_tun: entered allmulticast mode [ 195.255782][ T7947] syz_tun: entered promiscuous mode [ 195.256355][ T7947] bridge0: port 3(syz_tun) entered blocking state [ 195.256421][ T7947] bridge0: port 3(syz_tun) entered listening state [ 195.451586][ T5987] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.494135][ T7956] loop1: detected capacity change from 0 to 4096 [ 195.497813][ T7956] EXT4-fs: Ignoring removed orlov option [ 195.507069][ T7956] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.507093][ T7956] EXT4-fs (loop1): Test dummy encryption mode enabled [ 195.520077][ T7956] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0002] [ 195.520172][ T7956] System zones: 0-5 [ 195.527595][ T7956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.615138][ T5987] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.648568][ T7957] netlink: 16 bytes leftover after parsing attributes in process `syz.3.718'. [ 195.691094][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.733071][ T5987] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.796993][ T7963] netlink: 'syz.8.721': attribute type 30 has an invalid length. [ 195.821220][ T7963] loop8: detected capacity change from 0 to 2048 [ 196.167708][ T5987] bridge_slave_1: left allmulticast mode [ 196.167736][ T5987] bridge_slave_1: left promiscuous mode [ 196.167916][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.173252][ T5987] bridge_slave_0: left allmulticast mode [ 196.173275][ T5987] bridge_slave_0: left promiscuous mode [ 196.173414][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.425063][ T4754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.426133][ T4754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.426779][ T4754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.427961][ T4754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.428715][ T4754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.523309][ T7992] FAULT_INJECTION: forcing a failure. [ 197.523309][ T7992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.523337][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.3.728 Tainted: G L syzkaller #0 PREEMPT [ 197.523351][ T7992] Tainted: [L]=SOFTLOCKUP [ 197.523356][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 197.523362][ T7992] Call trace: [ 197.523368][ T7992] show_stack+0x2c/0x3c (C) [ 197.523386][ T7992] __dump_stack+0x30/0x40 [ 197.523398][ T7992] dump_stack_lvl+0xd8/0x12c [ 197.523409][ T7992] dump_stack+0x1c/0x28 [ 197.523420][ T7992] should_fail_ex+0x418/0x58c [ 197.523433][ T7992] should_fail+0x14/0x24 [ 197.523445][ T7992] should_fail_usercopy+0x20/0x30 [ 197.523458][ T7992] bpf_test_finish+0x834/0xa70 [ 197.523471][ T7992] bpf_prog_test_run_flow_dissector+0x3f0/0x500 [ 197.523484][ T7992] bpf_prog_test_run+0x1e0/0x250 [ 197.523499][ T7992] __sys_bpf+0x6bc/0x82c [ 197.523512][ T7992] __arm64_sys_bpf+0xd0/0xec [ 197.523525][ T7992] invoke_syscall+0x98/0x244 [ 197.523538][ T7992] el0_svc_common+0x19c/0x23c [ 197.523549][ T7992] do_el0_svc+0x4c/0x5c [ 197.523560][ T7992] el0_svc+0x60/0x1d8 [ 197.523572][ T7992] el0t_64_sync_handler+0x44/0x104 [ 197.523584][ T7992] el0t_64_sync+0x198/0x19c [ 197.686625][ T7996] FAULT_INJECTION: forcing a failure. [ 197.686625][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 197.686654][ T7996] CPU: 0 UID: 0 PID: 7996 Comm: syz.1.729 Tainted: G L syzkaller #0 PREEMPT [ 197.686669][ T7996] Tainted: [L]=SOFTLOCKUP [ 197.686674][ T7996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 197.686682][ T7996] Call trace: [ 197.686686][ T7996] show_stack+0x2c/0x3c (C) [ 197.686706][ T7996] __dump_stack+0x30/0x40 [ 197.686720][ T7996] dump_stack_lvl+0xd8/0x12c [ 197.686733][ T7996] dump_stack+0x1c/0x28 [ 197.686750][ T7996] should_fail_ex+0x418/0x58c [ 197.686766][ T7996] should_failslab+0xc4/0x120 [ 197.686782][ T7996] __kmalloc_cache_noprof+0x94/0x5fc [ 197.686797][ T7996] alloc_vfsmnt+0x84/0x48c [ 197.686814][ T7996] clone_mnt+0x5c/0x6c0 [ 197.686831][ T7996] lock_mount_exact+0x148/0x4b4 [ 197.686843][ T7996] open_new_namespace+0x274/0x884 [ 197.686857][ T7996] vfs_open_tree+0x300/0x348 [ 197.686870][ T7996] __arm64_sys_open_tree+0xa4/0x120 [ 197.686887][ T7996] invoke_syscall+0x98/0x244 [ 197.686901][ T7996] el0_svc_common+0x19c/0x23c [ 197.686914][ T7996] do_el0_svc+0x4c/0x5c [ 197.686926][ T7996] el0_svc+0x60/0x1d8 [ 197.686939][ T7996] el0t_64_sync_handler+0x44/0x104 [ 197.686952][ T7996] el0t_64_sync+0x198/0x19c [ 198.330430][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 198.330486][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 198.508457][ T8014] device-mapper: table: 248:0: zero-length target [ 198.508474][ T8014] device-mapper: ioctl: error adding target to table [ 198.540150][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 198.540206][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 198.846167][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 198.846222][ T8005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 199.150118][ T8020] loop1: detected capacity change from 0 to 4096 [ 199.173117][ T8020] EXT4-fs: Ignoring removed orlov option [ 199.174378][ T8020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.174392][ T8020] EXT4-fs (loop1): Test dummy encryption mode enabled [ 199.205197][ T8020] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec1a8, mo2=0002] [ 199.205287][ T8020] System zones: 0-5 [ 199.216940][ T8020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.453879][ T4754] Bluetooth: hci3: command tx timeout [ 200.238633][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.276383][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.330536][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.397589][ T5987] bond0 (unregistering): Released all slaves [ 200.474440][ T5987] bond1 (unregistering): (slave dummy0): Releasing active interface [ 200.474470][ T5987] dummy0: left promiscuous mode [ 200.474722][ T5987] dummy0: left allmulticast mode [ 200.622265][ T5987] bond1 (unregistering): Released all slaves [ 200.738672][ T4427] 8021q: adding VLAN 0 to HW filter on device eth16 [ 201.532183][ T4754] Bluetooth: hci3: command tx timeout [ 201.906789][ T8049] FAULT_INJECTION: forcing a failure. [ 201.906789][ T8049] name failslab, interval 1, probability 0, space 0, times 0 [ 201.906822][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.3.742 Tainted: G L syzkaller #0 PREEMPT [ 201.906838][ T8049] Tainted: [L]=SOFTLOCKUP [ 201.906844][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 201.906852][ T8049] Call trace: [ 201.906857][ T8049] show_stack+0x2c/0x3c (C) [ 201.906876][ T8049] __dump_stack+0x30/0x40 [ 201.906889][ T8049] dump_stack_lvl+0xd8/0x12c [ 201.906902][ T8049] dump_stack+0x1c/0x28 [ 201.906914][ T8049] should_fail_ex+0x418/0x58c [ 201.906930][ T8049] should_failslab+0xc4/0x120 [ 201.906945][ T8049] kmem_cache_alloc_noprof+0x94/0x5d4 [ 201.906960][ T8049] security_inode_alloc+0x40/0x304 [ 201.906977][ T8049] inode_init_always_gfp+0x704/0xb20 [ 201.906995][ T8049] alloc_inode+0x9c/0x198 [ 201.907011][ T8049] sock_alloc+0x4c/0x204 [ 201.907027][ T8049] __sock_create+0x108/0x670 [ 201.907043][ T8049] __sys_socketpair+0x244/0x528 [ 201.907058][ T8049] __arm64_sys_socketpair+0xa8/0xc4 [ 201.907074][ T8049] invoke_syscall+0x98/0x244 [ 201.907088][ T8049] el0_svc_common+0x19c/0x23c [ 201.907101][ T8049] do_el0_svc+0x4c/0x5c [ 201.907113][ T8049] el0_svc+0x60/0x1d8 [ 201.907126][ T8049] el0t_64_sync_handler+0x44/0x104 [ 201.907139][ T8049] el0t_64_sync+0x198/0x19c [ 201.907193][ T8049] socket: no more sockets [ 202.385260][ T8064] loop1: detected capacity change from 0 to 2048 [ 202.386228][ T8064] EXT4-fs: Ignoring removed nobh option [ 202.464941][ T8064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.512934][ T8064] FAULT_INJECTION: forcing a failure. [ 202.512934][ T8064] name failslab, interval 1, probability 0, space 0, times 0 [ 202.512996][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.1.745 Tainted: G L syzkaller #0 PREEMPT [ 202.513011][ T8064] Tainted: [L]=SOFTLOCKUP [ 202.513016][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 202.513023][ T8064] Call trace: [ 202.513027][ T8064] show_stack+0x2c/0x3c (C) [ 202.513046][ T8064] __dump_stack+0x30/0x40 [ 202.513058][ T8064] dump_stack_lvl+0xd8/0x12c [ 202.513070][ T8064] dump_stack+0x1c/0x28 [ 202.513082][ T8064] should_fail_ex+0x418/0x58c [ 202.513095][ T8064] should_failslab+0xc4/0x120 [ 202.513108][ T8064] kmem_cache_alloc_noprof+0x94/0x5d4 [ 202.513122][ T8064] security_inode_alloc+0x40/0x304 [ 202.513136][ T8064] inode_init_always_gfp+0x704/0xb20 [ 202.513151][ T8064] alloc_inode+0x9c/0x198 [ 202.513165][ T8064] iget_locked+0xd8/0x37c [ 202.513176][ T8064] __ext4_iget+0x1e8/0x2eb0 [ 202.513188][ T8064] ext4_lookup+0x224/0x5f0 [ 202.513202][ T8064] __lookup_slow+0x1e4/0x2b4 [ 202.513216][ T8064] lookup_slow+0x60/0x84 [ 202.513229][ T8064] link_path_walk+0xb0c/0x1584 [ 202.513240][ T8064] path_parentat+0x38/0xbc [ 202.513252][ T8064] __filename_parentat+0x20c/0x444 [ 202.513265][ T8064] filename_renameat2+0x254/0x72c [ 202.513276][ T8064] __arm64_sys_renameat2+0xf4/0x124 [ 202.513288][ T8064] invoke_syscall+0x98/0x244 [ 202.513300][ T8064] el0_svc_common+0x19c/0x23c [ 202.513311][ T8064] do_el0_svc+0x4c/0x5c [ 202.513322][ T8064] el0_svc+0x60/0x1d8 [ 202.513335][ T8064] el0t_64_sync_handler+0x44/0x104 [ 202.513346][ T8064] el0t_64_sync+0x198/0x19c [ 202.643862][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.076425][ T7990] rxe_eth0 speed is unknown, defaulting to 1000 [ 204.152536][ T4754] Bluetooth: hci3: command tx timeout [ 206.135191][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 206.203570][ T4754] Bluetooth: hci3: command tx timeout [ 208.583017][ T8089] loop3: detected capacity change from 0 to 2048 [ 209.266066][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 209.266125][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 209.438515][ T8100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 209.438543][ T8100] block device autoloading is deprecated and will be removed. [ 209.465958][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 209.466011][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 209.478703][ T5987] hsr_slave_0: left promiscuous mode [ 209.486221][ T5987] hsr_slave_1: left promiscuous mode [ 209.487096][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.487116][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.534974][ T5987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.535002][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.578140][ T5987] veth1_macvtap: left promiscuous mode [ 209.578203][ T5987] veth0_macvtap: left promiscuous mode [ 209.578338][ T5987] veth1_vlan: left promiscuous mode [ 209.578459][ T5987] veth0_vlan: left promiscuous mode [ 209.778012][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 209.778068][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.751'. [ 209.891349][ T8122] fuse: Bad value for 'fd' [ 209.979963][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 209.980017][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 210.177947][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 210.411747][ C0] bridge0: port 3(syz_tun) entered learning state [ 211.592453][ T5987] team0 (unregistering): Port device team_slave_1 removed [ 211.667370][ T5987] team0 (unregistering): Port device team_slave_0 removed [ 211.988789][ T8147] loop3: detected capacity change from 0 to 512 [ 212.034871][ T8147] EXT4-fs (loop3): 1 truncate cleaned up [ 212.079543][ T8147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.186005][ T8145] __nla_validate_parse: 3 callbacks suppressed [ 212.186024][ T8145] netlink: 220 bytes leftover after parsing attributes in process `syz.3.760'. [ 212.186036][ T8145] tc_dump_action: action bad kind [ 212.204409][ T8144] fuse: Unknown parameter 'g ' [ 212.252665][ T4746] Bluetooth: hci5: command 0x1003 tx timeout [ 212.252752][ T4754] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 212.635918][ T4737] EXT4-fs error (device loop3): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /187/bus: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 212.659863][ T4737] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz-executor: bg 0: block 7: invalid block bitmap [ 212.664895][ T4737] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 212.771158][ T4737] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 212.780103][ T4737] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 212.837708][ T8165] loop1: detected capacity change from 0 to 4096 [ 212.911915][ T8165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 212.917724][ T8165] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c018, mo2=0103] [ 212.917849][ T8165] System zones: 0-5 [ 212.921201][ T8165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.078551][ T4737] batman_adv: batadv0: Interface deactivated: syz_tun [ 213.129147][ T8165] netlink: 'syz.1.764': attribute type 15 has an invalid length. [ 213.129173][ T8165] netlink: 'syz.1.764': attribute type 7 has an invalid length. [ 213.129188][ T8165] netlink: 52 bytes leftover after parsing attributes in process `syz.1.764'. [ 213.144875][ T4737] batman_adv: batadv0: Removing interface: syz_tun [ 213.256299][ T4737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.589047][ T7486] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.624498][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.665661][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.665712][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.665936][ T7990] bridge_slave_0: entered allmulticast mode [ 213.769045][ T7990] bridge_slave_0: entered promiscuous mode [ 213.830543][ T7486] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.908061][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.908110][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.908326][ T7990] bridge_slave_1: entered allmulticast mode [ 213.937887][ T7990] bridge_slave_1: entered promiscuous mode [ 214.487019][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.601100][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.052098][ T4746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.052598][ T7990] team0: Port device team_slave_0 added [ 215.072144][ T4746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.073866][ T4746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.084714][ T4746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.085607][ T4746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.153553][ T7486] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.178455][ T7990] team0: Port device team_slave_1 added [ 215.226713][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.226730][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.226753][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.229381][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.229392][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.229409][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.261339][ T4746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.264485][ T4746] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.272063][ T4746] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.273357][ T4746] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.274234][ T4746] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.287447][ T8224] 9p: Bad value for 'rfdno' [ 215.589982][ T4427] 8021q: adding VLAN 0 to HW filter on device eth17 [ 216.607246][ T7990] hsr_slave_0: entered promiscuous mode [ 216.608194][ T7990] hsr_slave_1: entered promiscuous mode [ 216.608800][ T7990] debugfs: 'hsr0' already exists in 'hsr' [ 216.608822][ T7990] Cannot create hsr debugfs directory [ 216.715951][ T7486] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.143589][ T4746] Bluetooth: hci1: command tx timeout [ 217.189978][ T6601] IPVS: starting estimator thread 0... [ 217.195875][ T8255] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 217.203300][ T8255] IPVS: dh: UDP 127.0.0.1:21 - no destination available [ 217.271995][ T8256] IPVS: using max 11 ests per chain, 26400 per kthread [ 217.295937][ T4746] Bluetooth: hci5: command tx timeout [ 218.588198][ T7486] bridge_slave_1: left allmulticast mode [ 218.588228][ T7486] bridge_slave_1: left promiscuous mode [ 218.588401][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.619913][ T7486] bridge_slave_0: left allmulticast mode [ 218.620062][ T7486] bridge_slave_0: left promiscuous mode [ 218.689883][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.222896][ T4746] Bluetooth: hci1: command tx timeout [ 219.392036][ T4746] Bluetooth: hci5: command tx timeout [ 220.536066][ T8290] loop1: detected capacity change from 0 to 512 [ 220.597791][ T8290] EXT4-fs (loop1): 1 truncate cleaned up [ 220.633650][ T8290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.769956][ T7486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.798221][ T8293] fuse: Unknown parameter 'g ' [ 220.798815][ T7486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.835344][ T7486] bond0 (unregistering): Released all slaves [ 221.047652][ T8285] netlink: 220 bytes leftover after parsing attributes in process `syz.1.783'. [ 221.047678][ T8285] tc_dump_action: action bad kind [ 221.048976][ T4427] 8021q: adding VLAN 0 to HW filter on device eth18 [ 221.125416][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.272232][ T8217] rxe_eth0 speed is unknown, defaulting to 1000 [ 221.291855][ T4746] Bluetooth: hci1: command tx timeout [ 221.453727][ T4746] Bluetooth: hci5: command tx timeout [ 222.235077][ T7990] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 222.246702][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 222.246759][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 222.312409][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.313222][ T7990] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 222.407253][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.408088][ T7990] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 222.468773][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 222.468829][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 222.523830][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.614817][ T7990] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 222.674033][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 222.674088][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 222.684469][ T7990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.047659][ T8225] rxe_eth0 speed is unknown, defaulting to 1000 [ 223.069698][ T4427] 8021q: adding VLAN 0 to HW filter on device eth19 [ 223.362335][ T8331] loop1: detected capacity change from 0 to 1024 [ 223.372445][ T4746] Bluetooth: hci1: command tx timeout [ 223.424970][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.532040][ T4746] Bluetooth: hci5: command tx timeout [ 223.612948][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.772484][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.772538][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.778738][ T8337] netlink: 220 bytes leftover after parsing attributes in process `syz.5.791'. [ 224.778759][ T8337] tc_dump_action: action bad kind [ 224.794224][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.794277][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.148950][ T8342] fuse: Bad value for 'fd' [ 225.635923][ T7990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.772827][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 225.772848][ C0] bridge0: topology change detected, propagating [ 228.957098][ T4427] 8021q: adding VLAN 0 to HW filter on device eth20 [ 229.466262][ T7486] hsr_slave_0: left promiscuous mode [ 229.467547][ T7486] hsr_slave_1: left promiscuous mode [ 229.470500][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.470522][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.481519][ T7486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.481543][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.489040][ T8393] loop1: detected capacity change from 0 to 512 [ 229.537010][ T8393] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 229.543599][ T8393] EXT4-fs (loop1): orphan cleanup on readonly fs [ 229.554446][ T8393] EXT4-fs (loop1): 1 orphan inode deleted [ 229.556890][ T8393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 229.845008][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.882412][ T7486] vlan0: left allmulticast mode [ 229.882432][ T7486] veth0_vlan: left allmulticast mode [ 229.882491][ T7486] vlan0: left promiscuous mode [ 229.882844][ T7486] veth1_vlan: left promiscuous mode [ 229.882959][ T7486] veth0_vlan: left promiscuous mode [ 230.310875][ T8401] loop1: detected capacity change from 0 to 512 [ 230.379106][ T8401] EXT4-fs (loop1): 1 truncate cleaned up [ 230.410822][ T8401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.750396][ T7486] team0 (unregistering): Port device team_slave_1 removed [ 230.796862][ T7486] team0 (unregistering): Port device team_slave_0 removed [ 231.462243][ T8399] netlink: 220 bytes leftover after parsing attributes in process `syz.1.801'. [ 231.462265][ T8399] tc_dump_action: action bad kind [ 231.686648][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.177687][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.806'. [ 232.177743][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.806'. [ 232.308269][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.806'. [ 232.308324][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.806'. [ 232.569144][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.806'. [ 232.569204][ T8422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.806'. [ 232.873271][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.569936][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.570000][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.570218][ T8217] bridge_slave_0: entered allmulticast mode [ 233.660063][ T8217] bridge_slave_0: entered promiscuous mode [ 233.754945][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.779925][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.780159][ T8217] bridge_slave_1: entered allmulticast mode [ 233.809960][ T8217] bridge_slave_1: entered promiscuous mode [ 234.199262][ T8455] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 234.495217][ T4427] 8021q: adding VLAN 0 to HW filter on device eth21 [ 234.560652][ T8217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.589943][ T8217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.109926][ T8217] team0: Port device team_slave_0 added [ 235.293393][ T8217] team0: Port device team_slave_1 added [ 236.119447][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.119466][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.119482][ T8217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.296895][ T7990] veth0_vlan: entered promiscuous mode [ 236.326174][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.326192][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.326212][ T8217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.192405][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 237.192463][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 237.230375][ T7990] veth1_vlan: entered promiscuous mode [ 237.340032][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 237.340086][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 237.575838][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 237.575893][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 237.591893][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.591942][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.592165][ T8225] bridge_slave_0: entered allmulticast mode [ 237.604036][ T8225] bridge_slave_0: entered promiscuous mode [ 237.626566][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.655909][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.656155][ T8225] bridge_slave_1: entered allmulticast mode [ 237.683177][ T8225] bridge_slave_1: entered promiscuous mode [ 237.824031][ T8217] hsr_slave_0: entered promiscuous mode [ 237.833596][ T8217] hsr_slave_1: entered promiscuous mode [ 237.840674][ T8217] debugfs: 'hsr0' already exists in 'hsr' [ 237.840701][ T8217] Cannot create hsr debugfs directory [ 238.131315][ T4427] 8021q: adding VLAN 0 to HW filter on device eth22 [ 238.394963][ T8225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.730909][ T8225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.272959][ T7990] veth0_macvtap: entered promiscuous mode [ 239.490290][ T8225] team0: Port device team_slave_0 added [ 239.557712][ T8225] team0: Port device team_slave_1 added [ 239.559290][ T7990] veth1_macvtap: entered promiscuous mode [ 239.735730][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.735752][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.735767][ T8225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.799505][ T8225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.799528][ T8225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.799546][ T8225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.822262][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.899260][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.247973][ T4427] 8021q: adding VLAN 0 to HW filter on device eth23 [ 240.308562][ T8225] hsr_slave_0: entered promiscuous mode [ 240.309598][ T8225] hsr_slave_1: entered promiscuous mode [ 240.310225][ T8225] debugfs: 'hsr0' already exists in 'hsr' [ 240.310246][ T8225] Cannot create hsr debugfs directory [ 241.000837][ T7486] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.005761][ T1186] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.006307][ T1186] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.006873][ T1186] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.430081][ T7486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.430102][ T7486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.735791][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'. [ 241.736302][ T8558] Cannot find del_set index 0 as target [ 241.759020][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.818'. [ 241.759696][ T8562] Cannot find del_set index 0 as target [ 241.914230][ T7483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.914251][ T7483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.134322][ T8217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 242.197207][ T8217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 242.198866][ T8217] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 242.219270][ T8217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 242.220967][ T8217] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 242.233347][ T8217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 242.236222][ T8217] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 242.272300][ T8217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.815368][ T8595] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 242.815398][ T8595] block device autoloading is deprecated and will be removed. [ 242.956779][ T8593] rxe_eth0 speed is unknown, defaulting to 1000 [ 243.866367][ T8217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.174234][ T8620] FAULT_INJECTION: forcing a failure. [ 244.174234][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 244.174264][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: syz.9.824 Tainted: G L syzkaller #0 PREEMPT [ 244.174278][ T8620] Tainted: [L]=SOFTLOCKUP [ 244.174283][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 244.174289][ T8620] Call trace: [ 244.174294][ T8620] show_stack+0x2c/0x3c (C) [ 244.174313][ T8620] __dump_stack+0x30/0x40 [ 244.174325][ T8620] dump_stack_lvl+0xd8/0x12c [ 244.174337][ T8620] dump_stack+0x1c/0x28 [ 244.174348][ T8620] should_fail_ex+0x418/0x58c [ 244.174362][ T8620] should_failslab+0xc4/0x120 [ 244.174375][ T8620] __kmalloc_noprof+0x108/0x6c8 [ 244.174389][ T8620] bit_cursor+0x86c/0x112c [ 244.174401][ T8620] fbcon_cursor+0x344/0x498 [ 244.174414][ T8620] set_cursor+0x1a0/0x200 [ 244.174426][ T8620] con_flush_chars+0x84/0xc0 [ 244.174438][ T8620] con_write+0x40/0x58 [ 244.174450][ T8620] n_tty_write+0x994/0xd90 [ 244.174462][ T8620] file_tty_write+0x3dc/0x66c [ 244.174473][ T8620] tty_write+0x44/0x54 [ 244.174483][ T8620] vfs_write+0x51c/0xa0c [ 244.174496][ T8620] ksys_write+0x12c/0x228 [ 244.174507][ T8620] __arm64_sys_write+0x84/0x98 [ 244.174519][ T8620] invoke_syscall+0x98/0x244 [ 244.174531][ T8620] el0_svc_common+0x19c/0x23c [ 244.174544][ T8620] do_el0_svc+0x4c/0x5c [ 244.174555][ T8620] el0_svc+0x60/0x1d8 [ 244.174567][ T8620] el0t_64_sync_handler+0x44/0x104 [ 244.174579][ T8620] el0t_64_sync+0x198/0x19c [ 244.409691][ T8217] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.795108][ T8626] netlink: 'syz.9.826': attribute type 2 has an invalid length. [ 244.958505][ T8626] †: entered promiscuous mode [ 245.000029][ T7483] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.000084][ T7483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.204995][ T7483] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.205048][ T7483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.225733][ T8225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.260268][ T8225] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.276374][ T8225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.328254][ T8225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.348301][ T8225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.371441][ T8225] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.381378][ T8225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.407306][ T8225] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.994958][ T8225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.042125][ T8225] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.050895][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.050949][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.067380][ T7483] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.067433][ T7483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.474952][ T8217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.910382][ T8225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.171438][ T8225] veth0_vlan: entered promiscuous mode [ 247.179285][ T8217] veth0_vlan: entered promiscuous mode [ 247.203005][ T8225] veth1_vlan: entered promiscuous mode [ 247.206683][ T8217] veth1_vlan: entered promiscuous mode [ 247.376046][ T8217] veth0_macvtap: entered promiscuous mode [ 247.379809][ T8217] veth1_macvtap: entered promiscuous mode [ 247.409775][ T8225] veth0_macvtap: entered promiscuous mode [ 247.417359][ T8225] veth1_macvtap: entered promiscuous mode [ 247.469584][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.502079][ T8225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.507253][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.528125][ T8225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.554590][ T1302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.556791][ T1302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.557006][ T1302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.557959][ T1302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.662568][ T3405] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.664019][ T3405] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.664104][ T3405] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.664135][ T3405] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.671633][ T8712] mmap: syz.5.833 (8712) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 247.955334][ T7480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.955354][ T7480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.074841][ T7486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.074859][ T7486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.213647][ T7480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.213668][ T7480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.337707][ T7480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.337727][ T7480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.683788][ T8733] FAULT_INJECTION: forcing a failure. [ 248.683788][ T8733] name failslab, interval 1, probability 0, space 0, times 0 [ 248.683820][ T8733] CPU: 1 UID: 0 PID: 8733 Comm: syz.2.770 Tainted: G L syzkaller #0 PREEMPT [ 248.683836][ T8733] Tainted: [L]=SOFTLOCKUP [ 248.683841][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 248.683848][ T8733] Call trace: [ 248.683853][ T8733] show_stack+0x2c/0x3c (C) [ 248.683871][ T8733] __dump_stack+0x30/0x40 [ 248.683884][ T8733] dump_stack_lvl+0xd8/0x12c [ 248.683895][ T8733] dump_stack+0x1c/0x28 [ 248.683906][ T8733] should_fail_ex+0x418/0x58c [ 248.683920][ T8733] should_failslab+0xc4/0x120 [ 248.683933][ T8733] kmem_cache_alloc_node_noprof+0x98/0x604 [ 248.683947][ T8733] __alloc_skb+0x1f0/0x610 [ 248.683962][ T8733] netlink_dump+0x190/0xb6c [ 248.683976][ T8733] __netlink_dump_start+0x4c4/0x6f8 [ 248.683990][ T8733] genl_family_rcv_msg_dumpit+0x1a8/0x28c [ 248.684002][ T8733] genl_rcv_msg+0x404/0x620 [ 248.684012][ T8733] netlink_rcv_skb+0x238/0x414 [ 248.684026][ T8733] genl_rcv+0x38/0x50 [ 248.684037][ T8733] netlink_unicast+0x600/0x7f8 [ 248.684050][ T8733] netlink_sendmsg+0x648/0x948 [ 248.684064][ T8733] __sock_sendmsg+0xc8/0x17c [ 248.684077][ T8733] ____sys_sendmsg+0x3d0/0x6c8 [ 248.684091][ T8733] ___sys_sendmsg+0x198/0x224 [ 248.684105][ T8733] __sys_sendmsg+0x158/0x204 [ 248.684119][ T8733] __arm64_sys_sendmsg+0x88/0x9c [ 248.684133][ T8733] invoke_syscall+0x98/0x244 [ 248.684145][ T8733] el0_svc_common+0x19c/0x23c [ 248.684156][ T8733] do_el0_svc+0x4c/0x5c [ 248.684167][ T8733] el0_svc+0x60/0x1d8 [ 248.684179][ T8733] el0t_64_sync_handler+0x44/0x104 [ 248.684191][ T8733] el0t_64_sync+0x198/0x19c [ 248.817078][ T1612] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.817172][ T1612] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.364352][ T8742] binder: 8741:8742 tried to acquire reference to desc 0, got 1 instead [ 250.230143][ T1302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.436957][ T1302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.608439][ T1302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.657082][ T4746] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 250.878136][ T1302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.352710][ T1302] bridge_slave_1: left allmulticast mode [ 251.352742][ T1302] bridge_slave_1: left promiscuous mode [ 251.352918][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.356531][ T1302] bridge_slave_0: left allmulticast mode [ 251.356553][ T1302] bridge_slave_0: left promiscuous mode [ 251.356697][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.792620][ T8776] netlink: 'syz.5.841': attribute type 1 has an invalid length. [ 252.006525][ T1302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.035802][ T1302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.074408][ T1302] bond0 (unregistering): Released all slaves [ 252.188189][ T8776] bond2: entered promiscuous mode [ 252.193930][ T8776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.870434][ T4754] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.877092][ T4754] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.892857][ T4754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.905679][ T4754] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.906577][ T4754] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.526683][ T8821] dvmrp1: entered allmulticast mode [ 255.762295][ T1302] hsr_slave_0: left promiscuous mode [ 255.763138][ T1302] hsr_slave_1: left promiscuous mode [ 255.764263][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.764283][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.765446][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.765464][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.864638][ T1302] veth1_macvtap: left promiscuous mode [ 255.864716][ T1302] veth0_macvtap: left promiscuous mode [ 255.864892][ T1302] veth1_vlan: left promiscuous mode [ 255.864987][ T1302] veth0_vlan: left promiscuous mode [ 255.951585][ T4746] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.955720][ T4746] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.956468][ T4746] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.957665][ T4746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.958442][ T4746] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.905903][ T1302] team0 (unregistering): Port device team_slave_1 removed [ 256.941315][ T1302] team0 (unregistering): Port device team_slave_0 removed [ 257.061895][ T4746] Bluetooth: hci5: command tx timeout [ 257.630477][ T8501] bridge0: port 3(syz_tun) entered disabled state [ 257.668586][ T8501] syz_tun (unregistering): left allmulticast mode [ 257.668616][ T8501] syz_tun (unregistering): left promiscuous mode [ 257.668673][ T8501] bridge0: port 3(syz_tun) entered disabled state [ 257.782957][ T8802] rxe_eth0 speed is unknown, defaulting to 1000 [ 258.018997][ T4746] Bluetooth: hci6: command tx timeout [ 258.513639][ T1302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.673406][ T8909] FAULT_INJECTION: forcing a failure. [ 258.673406][ T8909] name failslab, interval 1, probability 0, space 0, times 0 [ 258.673437][ T8909] CPU: 0 UID: 0 PID: 8909 Comm: syz.4.869 Tainted: G L syzkaller #0 PREEMPT [ 258.673452][ T8909] Tainted: [L]=SOFTLOCKUP [ 258.673458][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 258.673466][ T8909] Call trace: [ 258.673471][ T8909] show_stack+0x2c/0x3c (C) [ 258.673491][ T8909] __dump_stack+0x30/0x40 [ 258.673504][ T8909] dump_stack_lvl+0xd8/0x12c [ 258.673517][ T8909] dump_stack+0x1c/0x28 [ 258.673530][ T8909] should_fail_ex+0x418/0x58c [ 258.673546][ T8909] should_failslab+0xc4/0x120 [ 258.673560][ T8909] __kmalloc_noprof+0x108/0x6c8 [ 258.673577][ T8909] ioctx_add_table+0x100/0x3b0 [ 258.673594][ T8909] ioctx_alloc+0x414/0x780 [ 258.673609][ T8909] __arm64_sys_io_setup+0x14c/0x2f4 [ 258.673625][ T8909] invoke_syscall+0x98/0x244 [ 258.673639][ T8909] el0_svc_common+0x19c/0x23c [ 258.673652][ T8909] do_el0_svc+0x4c/0x5c [ 258.673664][ T8909] el0_svc+0x60/0x1d8 [ 258.673678][ T8909] el0t_64_sync_handler+0x44/0x104 [ 258.673691][ T8909] el0t_64_sync+0x198/0x19c [ 258.748450][ T1302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.902168][ T8917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.904160][ T8917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.924954][ T1302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.083746][ T1302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.089768][ T7480] IPVS: starting estimator thread 0... [ 259.107295][ T8831] rxe_eth0 speed is unknown, defaulting to 1000 [ 259.132690][ T4746] Bluetooth: hci5: command tx timeout [ 259.172519][ T8924] IPVS: using max 11 ests per chain, 26400 per kthread [ 259.665944][ T1302] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.097173][ T4746] Bluetooth: hci6: command tx timeout [ 260.114322][ T1302] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.039126][ T1302] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.225312][ T4746] Bluetooth: hci5: command tx timeout [ 261.498672][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 261.557637][ T8989] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(14) [ 261.744961][ T8986] device-mapper: ioctl: device has been removed from the dev hash table. [ 262.183596][ T4746] Bluetooth: hci6: command tx timeout [ 262.280873][ T9002] netlink: 1030 bytes leftover after parsing attributes in process `syz.9.887'. [ 262.281550][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.289984][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.290238][ T8802] bridge_slave_0: entered allmulticast mode [ 262.303943][ T8802] bridge_slave_0: entered promiscuous mode [ 262.318860][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.318909][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.319201][ T8802] bridge_slave_1: entered allmulticast mode [ 262.327209][ T8802] bridge_slave_1: entered promiscuous mode [ 262.436547][ T1302] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.470911][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.526282][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.866973][ T8802] team0: Port device team_slave_0 added [ 262.869808][ T8802] team0: Port device team_slave_1 added [ 262.907945][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.907964][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.907978][ T8802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.911059][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.911071][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.911088][ T8802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.103924][ T9019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.104747][ T9019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.308633][ T4746] Bluetooth: hci5: command tx timeout [ 263.857903][ T8802] hsr_slave_0: entered promiscuous mode [ 263.859034][ T8802] hsr_slave_1: entered promiscuous mode [ 263.859660][ T8802] debugfs: 'hsr0' already exists in 'hsr' [ 263.859681][ T8802] Cannot create hsr debugfs directory [ 264.270570][ T9045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 264.311960][ T4746] Bluetooth: hci6: command tx timeout [ 264.810384][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.833142][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.833377][ T8831] bridge_slave_0: entered allmulticast mode [ 264.914761][ T8831] bridge_slave_0: entered promiscuous mode [ 265.439188][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.439247][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.439466][ T8831] bridge_slave_1: entered allmulticast mode [ 265.478423][ T8831] bridge_slave_1: entered promiscuous mode [ 265.736826][ T8831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.829458][ T8831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.103979][ T9079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 266.190616][ T8831] team0: Port device team_slave_0 added [ 266.425412][ T9079] block device autoloading is deprecated and will be removed. [ 266.454528][ T1302] bridge_slave_1: left allmulticast mode [ 266.454556][ T1302] bridge_slave_1: left promiscuous mode [ 266.454734][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.481177][ T1302] bridge_slave_0: left allmulticast mode [ 266.481207][ T1302] bridge_slave_0: left promiscuous mode [ 266.481369][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.529676][ T9081] block device autoloading is deprecated and will be removed. [ 266.604046][ T1302] bridge_slave_1: left allmulticast mode [ 266.604277][ T1302] bridge_slave_1: left promiscuous mode [ 266.604421][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.648804][ T1302] bridge_slave_0: left allmulticast mode [ 266.648832][ T1302] bridge_slave_0: left promiscuous mode [ 266.648980][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.594778][ T1302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.638953][ T1302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.705103][ T1302] bond0 (unregistering): Released all slaves [ 267.784532][ T1302] bond1 (unregistering): (slave dummy0): Releasing active interface [ 267.784562][ T1302] dummy0: left promiscuous mode [ 267.784694][ T1302] dummy0: left allmulticast mode [ 267.905676][ T1302] bond1 (unregistering): Released all slaves [ 268.109038][ T9096] FAULT_INJECTION: forcing a failure. [ 268.109038][ T9096] name failslab, interval 1, probability 0, space 0, times 0 [ 268.109068][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.9.910 Tainted: G L syzkaller #0 PREEMPT [ 268.109083][ T9096] Tainted: [L]=SOFTLOCKUP [ 268.109089][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 268.109096][ T9096] Call trace: [ 268.109101][ T9096] show_stack+0x2c/0x3c (C) [ 268.109121][ T9096] __dump_stack+0x30/0x40 [ 268.109134][ T9096] dump_stack_lvl+0xd8/0x12c [ 268.109147][ T9096] dump_stack+0x1c/0x28 [ 268.109159][ T9096] should_fail_ex+0x418/0x58c [ 268.109174][ T9096] should_failslab+0xc4/0x120 [ 268.109189][ T9096] __kmalloc_cache_noprof+0x94/0x5fc [ 268.109204][ T9096] init_srcu_struct_fields+0x90/0x9a8 [ 268.109220][ T9096] __init_srcu_struct_common+0x54/0x68 [ 268.109233][ T9096] init_srcu_struct_lockdep+0x3c/0x6c [ 268.109247][ T9096] dm_create+0x204/0xd94 [ 268.109264][ T9096] dev_create+0x108/0x258 [ 268.109278][ T9096] dm_ctl_ioctl+0x884/0xbbc [ 268.109294][ T9096] __arm64_sys_ioctl+0x154/0x1cc [ 268.109308][ T9096] invoke_syscall+0x98/0x244 [ 268.109325][ T9096] el0_svc_common+0x19c/0x23c [ 268.109338][ T9096] do_el0_svc+0x4c/0x5c [ 268.109351][ T9096] el0_svc+0x60/0x1d8 [ 268.109365][ T9096] el0t_64_sync_handler+0x44/0x104 [ 268.109378][ T9096] el0t_64_sync+0x198/0x19c [ 268.407974][ T1302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.455411][ T1302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.499848][ T1302] bond0 (unregistering): Released all slaves [ 268.584723][ T8831] team0: Port device team_slave_1 added [ 269.199625][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.199646][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.199661][ T8831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.227833][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.227854][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.227870][ T8831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.499424][ T8831] hsr_slave_0: entered promiscuous mode [ 269.506352][ T8831] hsr_slave_1: entered promiscuous mode [ 269.511285][ T8831] debugfs: 'hsr0' already exists in 'hsr' [ 269.511313][ T8831] Cannot create hsr debugfs directory [ 273.728946][ T4427] 8021q: adding VLAN 0 to HW filter on device eth0 [ 273.978029][ T9206] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 276.723644][ T4427] 8021q: adding VLAN 0 to HW filter on device eth3 [ 277.411546][ T4427] 8021q: adding VLAN 0 to HW filter on device eth2 [ 278.203353][ T4754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.228160][ T4754] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.229862][ T4754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.249225][ T4754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.277032][ T4754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.455436][ T4427] 8021q: adding VLAN 0 to HW filter on device eth1 [ 279.587557][ T9257] rxe_eth0 speed is unknown, defaulting to 1000 [ 280.049165][ T9098] workqueue: Failed to create a rescuer kthread for wq "kdmflush/248:2": -EINTR [ 280.089539][ T4427] 8021q: adding VLAN 0 to HW filter on device eth4 [ 280.332600][ T4754] Bluetooth: hci0: command tx timeout [ 281.031270][ T4830] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 281.069605][ T4830] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 282.412746][ T4754] Bluetooth: hci0: command tx timeout [ 283.179839][ T9321] warning: `syz.9.935' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 283.619595][ T1302] hsr_slave_0: left promiscuous mode [ 283.631456][ T1302] hsr_slave_1: left promiscuous mode [ 283.635773][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.635795][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.645915][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.645937][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.765471][ T1302] hsr_slave_0: left promiscuous mode [ 283.785137][ T1302] hsr_slave_1: left promiscuous mode [ 283.786032][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.786052][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.788318][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.788338][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.838892][ T1302] veth1_macvtap: left promiscuous mode [ 283.838956][ T1302] veth0_macvtap: left promiscuous mode [ 283.839282][ T1302] veth1_vlan: left promiscuous mode [ 283.839380][ T1302] veth0_vlan: left promiscuous mode [ 283.870690][ T1302] veth1_macvtap: left promiscuous mode [ 283.870753][ T1302] veth0_macvtap: left promiscuous mode [ 283.870888][ T1302] veth1_vlan: left promiscuous mode [ 283.871114][ T1302] veth0_vlan: left promiscuous mode [ 284.492460][ T4754] Bluetooth: hci0: command tx timeout [ 284.735314][ T1302] team0 (unregistering): Port device team_slave_1 removed [ 284.770474][ T1302] team0 (unregistering): Port device team_slave_0 removed [ 285.545406][ T1302] team0 (unregistering): Port device team_slave_1 removed [ 285.610443][ T1302] team0 (unregistering): Port device team_slave_0 removed [ 286.179460][ T9333] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 286.179564][ T9333] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 286.278471][ T9333] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 286.278591][ T9333] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 286.400848][ T9333] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 286.448300][ T8831] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 286.479999][ T9333] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 286.480119][ T9333] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 286.491527][ T8831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.515303][ T8831] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 286.515782][ T9333] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 286.546877][ T9333] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 286.547543][ T9333] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 286.551179][ T8831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.576303][ T4754] Bluetooth: hci0: command tx timeout [ 286.641529][ T8802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.859017][ T9333] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 286.883224][ T8802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.884003][ T8802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.909199][ T9333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 286.909341][ T9333] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 286.988286][ T8802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.988723][ T8831] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.083397][ T9333] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 287.225288][ T8831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.230339][ T8802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 287.287503][ T8802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.288270][ T8802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 287.332992][ T8802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.345026][ T8831] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 287.360508][ T9356] FAULT_INJECTION: forcing a failure. [ 287.360508][ T9356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.360537][ T9356] CPU: 0 UID: 0 PID: 9356 Comm: syz.9.950 Tainted: G L syzkaller #0 PREEMPT [ 287.360551][ T9356] Tainted: [L]=SOFTLOCKUP [ 287.360556][ T9356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 287.360564][ T9356] Call trace: [ 287.360569][ T9356] show_stack+0x2c/0x3c (C) [ 287.360588][ T9356] __dump_stack+0x30/0x40 [ 287.360601][ T9356] dump_stack_lvl+0xd8/0x12c [ 287.360615][ T9356] dump_stack+0x1c/0x28 [ 287.360627][ T9356] should_fail_ex+0x418/0x58c [ 287.360643][ T9356] should_fail_alloc_page+0xec/0x10c [ 287.360658][ T9356] prepare_alloc_pages+0x194/0x484 [ 287.360673][ T9356] __alloc_frozen_pages_noprof+0x180/0x578 [ 287.360689][ T9356] alloc_pages_mpol+0x1fc/0x3d0 [ 287.360704][ T9356] alloc_frozen_pages_noprof+0xc4/0x10c [ 287.360720][ T9356] alloc_pages_noprof+0x30/0x148 [ 287.360741][ T9356] alloc_skb_with_frags+0x244/0x690 [ 287.360756][ T9356] sock_alloc_send_pskb+0x740/0x850 [ 287.360772][ T9356] packet_sendmsg+0x2838/0x40bc [ 287.360788][ T9356] __sock_sendmsg+0xc8/0x17c [ 287.360804][ T9356] __sys_sendto+0x250/0x328 [ 287.360820][ T9356] __arm64_sys_sendto+0xec/0x10c [ 287.360836][ T9356] invoke_syscall+0x98/0x244 [ 287.360849][ T9356] el0_svc_common+0x19c/0x23c [ 287.360862][ T9356] do_el0_svc+0x4c/0x5c [ 287.360874][ T9356] el0_svc+0x60/0x1d8 [ 287.360888][ T9356] el0t_64_sync_handler+0x44/0x104 [ 287.360900][ T9356] el0t_64_sync+0x198/0x19c [ 287.413800][ T8831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 288.249448][ T9373] Bluetooth: MGMT ver 1.23 [ 288.450656][ T4746] Bluetooth: hci4: command 0x0406 tx timeout [ 288.450726][ T4746] Bluetooth: hci3: command 0x0c1a tx timeout [ 288.525135][ T4746] Bluetooth: hci5: command 0x0c1a tx timeout [ 288.631141][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 288.911946][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 289.405997][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.540986][ T8831] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.580542][ T8831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.580563][ T8831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.684269][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.684324][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.688686][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.688751][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.581282][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 290.581338][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.581376][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 290.784990][ T4754] Bluetooth: hci6: command 0x0c1a tx timeout [ 290.977749][ T4754] Bluetooth: hci0: command 0x0c1a tx timeout [ 291.258309][ T9257] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.258415][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.258610][ T9257] bridge_slave_0: entered allmulticast mode [ 291.278675][ T9257] bridge_slave_0: entered promiscuous mode [ 291.330651][ T9257] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.330804][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.331031][ T9257] bridge_slave_1: entered allmulticast mode [ 291.353917][ T9257] bridge_slave_1: entered promiscuous mode [ 291.576522][ T1302] IPVS: stop unused estimator thread 0... [ 291.817714][ T9257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.933686][ T9257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.976661][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.977325][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.995293][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.371073][ T8831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.375632][ T9257] team0: Port device team_slave_0 added [ 292.536404][ T9257] team0: Port device team_slave_1 added [ 292.740347][ T4754] Bluetooth: hci3: command 0x0c1a tx timeout [ 292.740403][ T4754] Bluetooth: hci5: command 0x0c1a tx timeout [ 292.766564][ T8802] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.850220][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 292.930700][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.930718][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.930735][ T9257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.947008][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.947023][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.947039][ T9257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.989231][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.989295][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.062095][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.151365][ T1302] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.223665][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.223717][ T6602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.439207][ T9257] hsr_slave_0: entered promiscuous mode [ 293.440377][ T9257] hsr_slave_1: entered promiscuous mode [ 293.465457][ T1302] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.572258][ T8802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.572280][ T8802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.695833][ T1302] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.896400][ T1302] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.570103][ T9476] loop9: detected capacity change from 0 to 1024 [ 294.580998][ T9476] EXT4-fs: quotafile must be on filesystem root [ 294.985894][ T1302] bridge_slave_1: left allmulticast mode [ 294.985922][ T1302] bridge_slave_1: left promiscuous mode [ 294.986077][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.989438][ T1302] bridge_slave_0: left allmulticast mode [ 294.989458][ T1302] bridge_slave_0: left promiscuous mode [ 294.989599][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.134606][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 295.554703][ T1302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.601571][ T9400] Set syz1 is full, maxelem 65536 reached [ 295.605643][ T1302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.625468][ T1302] bond0 (unregistering): Released all slaves [ 295.658377][ T8831] veth0_vlan: entered promiscuous mode [ 295.675935][ T8802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.863674][ T8831] veth1_vlan: entered promiscuous mode [ 297.078671][ T8831] veth0_macvtap: entered promiscuous mode [ 297.151381][ T1302] hsr_slave_0: left promiscuous mode [ 297.154392][ T1302] hsr_slave_1: left promiscuous mode [ 297.155203][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.155223][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.159441][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.159464][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.179015][ T1302] veth1_macvtap: left promiscuous mode [ 297.179089][ T1302] veth0_macvtap: left promiscuous mode [ 297.179218][ T1302] veth1_vlan: left promiscuous mode [ 297.179313][ T1302] veth0_vlan: left promiscuous mode [ 297.748188][ T1302] team0 (unregistering): Port device team_slave_1 removed [ 297.774022][ T1302] team0 (unregistering): Port device team_slave_0 removed [ 298.045924][ T8831] veth1_macvtap: entered promiscuous mode [ 298.094811][ T8802] veth0_vlan: entered promiscuous mode [ 298.101212][ T8802] veth1_vlan: entered promiscuous mode [ 298.276286][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.279490][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.343095][ T6602] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.343438][ T6602] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.343648][ T6602] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.343858][ T6602] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.955256][ T8802] veth0_macvtap: entered promiscuous mode [ 298.969927][ T8802] veth1_macvtap: entered promiscuous mode [ 298.987099][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.998681][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.042479][ T1302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.075874][ T9257] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 299.095028][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.095667][ T6602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.095844][ T9257] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 299.109205][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.110225][ T9257] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 299.125942][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.132639][ T1302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.142144][ T7483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.173112][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.173133][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.181267][ T9257] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 299.228450][ T9257] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.350207][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.350226][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.476369][ T7483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.476384][ T7483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.592791][ T9617] fuse: Bad value for 'fd' [ 299.610855][ T9610] md/raid1:md9: active with 2 out of 2 mirrors [ 299.619720][ T9610] md9: detected capacity change from 0 to 4096 [ 299.634619][ T4922] [ 299.635143][ T4922] ====================================================== [ 299.636560][ T4922] WARNING: possible circular locking dependency detected [ 299.637717][ T4922] syzkaller #0 Tainted: G L [ 299.638788][ T4922] ------------------------------------------------------ [ 299.640055][ T4922] kworker/1:5/4922 is trying to acquire lock: [ 299.641157][ T4922] ffff00011ded8358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_start_sync+0xf8/0xc80 [ 299.643235][ T4922] [ 299.643235][ T4922] but task is already holding lock: [ 299.644766][ T4922] ffff8000994d7c20 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 299.647180][ T4922] [ 299.647180][ T4922] which lock already depends on the new lock. [ 299.647180][ T4922] [ 299.649357][ T4922] [ 299.649357][ T4922] the existing dependency chain (in reverse order) is: [ 299.651031][ T4922] [ 299.651031][ T4922] -> #3 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 299.652957][ T4922] process_scheduled_works+0x8f0/0x1250 [ 299.654277][ T4922] worker_thread+0x798/0xbd0 [ 299.655236][ T4922] kthread+0x304/0x3d4 [ 299.656165][ T4922] ret_from_fork+0x10/0x20 [ 299.657223][ T4922] [ 299.657223][ T4922] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 299.658977][ T4922] touch_wq_lockdep_map+0xb4/0x15c [ 299.660128][ T4922] __flush_workqueue+0x114/0xd74 [ 299.661222][ T4922] md_alloc+0x44/0x9fc [ 299.662094][ T4922] md_alloc_and_put+0x28/0x84 [ 299.663223][ T4922] md_probe+0x6c/0x88 [ 299.664158][ T4922] blk_probe_dev+0x12c/0x158 [ 299.665239][ T4922] blk_request_module+0x24/0xc0 [ 299.666401][ T4922] blkdev_get_no_open+0x4c/0xf8 [ 299.667439][ T4922] blkdev_open+0xfc/0x408 [ 299.668385][ T4922] do_dentry_open+0x5c4/0xfbc [ 299.669476][ T4922] vfs_open+0x44/0x2dc [ 299.670432][ T4922] path_openat+0x1084/0x18f0 [ 299.671480][ T4922] do_file_open+0x1c8/0x2e8 [ 299.672520][ T4922] do_sys_openat2+0x114/0x1e8 [ 299.673567][ T4922] do_sys_open+0xb0/0xe0 [ 299.674543][ T4922] __arm64_sys_openat+0xa8/0xc4 [ 299.675640][ T4922] invoke_syscall+0x98/0x244 [ 299.676751][ T4922] el0_svc_common+0xec/0x23c [ 299.677870][ T4922] do_el0_svc+0x4c/0x5c [ 299.678962][ T4922] el0_svc+0x60/0x1d8 [ 299.679986][ T4922] el0t_64_sync_handler+0x44/0x104 [ 299.681139][ T4922] el0t_64_sync+0x198/0x19c [ 299.682111][ T4922] [ 299.682111][ T4922] -> #1 (major_names_lock){+.+.}-{4:4}: [ 299.683670][ T4922] __mutex_lock+0x164/0x1078 [ 299.684652][ T4922] mutex_lock_nested+0x24/0x30 [ 299.685707][ T4922] blk_probe_dev+0x3c/0x158 [ 299.686694][ T4922] blk_request_module+0x24/0xc0 [ 299.687604][ T4922] blkdev_get_no_open+0x4c/0xf8 [ 299.688594][ T4922] bdev_file_open_by_dev+0x80/0x1d8 [ 299.689585][ T4922] md_import_device+0xfc/0x354 [ 299.690528][ T4922] md_add_new_disk+0x35c/0x144c [ 299.691465][ T4922] md_ioctl+0x1d68/0x23d4 [ 299.692336][ T4922] blkdev_ioctl+0x574/0x904 [ 299.693202][ T4922] __arm64_sys_ioctl+0x154/0x1cc [ 299.694062][ T4922] invoke_syscall+0x98/0x244 [ 299.694997][ T4922] el0_svc_common+0x19c/0x23c [ 299.696021][ T4922] do_el0_svc+0x4c/0x5c [ 299.697024][ T4922] el0_svc+0x60/0x1d8 [ 299.698011][ T4922] el0t_64_sync_handler+0x44/0x104 [ 299.699211][ T4922] el0t_64_sync+0x198/0x19c [ 299.700331][ T4922] [ 299.700331][ T4922] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 299.701866][ T4922] __lock_acquire+0x1660/0x2b08 [ 299.702804][ T4922] lock_acquire+0x13c/0x320 [ 299.703714][ T4922] __mutex_lock+0x164/0x1078 [ 299.704710][ T4922] mutex_lock_nested+0x24/0x30 [ 299.705681][ T4922] md_start_sync+0xf8/0xc80 [ 299.706727][ T4922] process_scheduled_works+0x91c/0x1250 [ 299.707995][ T4922] worker_thread+0x798/0xbd0 [ 299.709055][ T4922] kthread+0x304/0x3d4 [ 299.709909][ T4922] ret_from_fork+0x10/0x20 [ 299.710969][ T4922] [ 299.710969][ T4922] other info that might help us debug this: [ 299.710969][ T4922] [ 299.713163][ T4922] Chain exists of: [ 299.713163][ T4922] &mddev->reconfig_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->sync_work) [ 299.713163][ T4922] [ 299.716649][ T4922] Possible unsafe locking scenario: [ 299.716649][ T4922] [ 299.718016][ T4922] CPU0 CPU1 [ 299.719106][ T4922] ---- ---- [ 299.720255][ T4922] lock((work_completion)(&mddev->sync_work)); [ 299.721587][ T4922] lock((wq_completion)md_misc); [ 299.723225][ T4922] lock((work_completion)(&mddev->sync_work)); [ 299.725029][ T4922] lock(&mddev->reconfig_mutex); [ 299.726046][ T4922] [ 299.726046][ T4922] *** DEADLOCK *** [ 299.726046][ T4922] [ 299.727600][ T4922] locks held by kworker/1:5/4922: 2, last CPU#1: [ 299.728840][ T4922] #0: ffff0000c2ee7940 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 299.731211][ T4922] #1: ffff8000994d7c20 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 299.733870][ T4922] [ 299.733870][ T4922] stack backtrace: [ 299.735122][ T4922] CPU: 1 UID: 0 PID: 4922 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT [ 299.737309][ T4922] Tainted: [L]=SOFTLOCKUP [ 299.738111][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 299.739807][ T4922] Workqueue: md_misc md_start_sync [ 299.740856][ T4922] Call trace: [ 299.741617][ T4922] show_stack+0x2c/0x3c (C) [ 299.742699][ T4922] __dump_stack+0x30/0x40 [ 299.743572][ T4922] dump_stack_lvl+0xd8/0x12c [ 299.744473][ T4922] dump_stack+0x1c/0x28 [ 299.745309][ T4922] print_circular_bug+0x328/0x330 [ 299.746404][ T4922] check_noncircular+0x158/0x174 [ 299.747501][ T4922] __lock_acquire+0x1660/0x2b08 [ 299.748480][ T4922] lock_acquire+0x13c/0x320 [ 299.749410][ T4922] __mutex_lock+0x164/0x1078 [ 299.750437][ T4922] mutex_lock_nested+0x24/0x30 [ 299.751551][ T4922] md_start_sync+0xf8/0xc80 [ 299.752631][ T4922] process_scheduled_works+0x91c/0x1250 [ 299.753954][ T4922] worker_thread+0x798/0xbd0 [ 299.754994][ T4922] kthread+0x304/0x3d4 [ 299.755872][ T4922] ret_from_fork+0x10/0x20 [ 299.806688][ T9621] loop7: detected capacity change from 0 to 1024 [ 299.807652][ T9621] EXT4-fs: quotafile must be on filesystem root [ 299.904715][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.904733][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.994270][ T9257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.029362][ T9257] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.040940][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.040994][ T6602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.056379][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.056473][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.793336][ T9257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.057914][ T9257] veth0_vlan: entered promiscuous mode [ 301.089954][ T9257] veth1_vlan: entered promiscuous mode [ 301.119048][ T9257] veth0_macvtap: entered promiscuous mode [ 301.141637][ T9257] veth1_macvtap: entered promiscuous mode [ 301.186625][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.197189][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.204319][ T1186] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.204525][ T1186] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.204582][ T1186] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.271807][ T1186] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.295273][ T9257] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 301.314506][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.314524][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.325952][ T9257] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 301.348814][ T7483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.348834][ T7483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.726847][ T4427] 8021q: adding VLAN 0 to HW filter on device eth5 [ 307.946251][ T4427] 8021q: adding VLAN 0 to HW filter on device eth6 [ 308.299186][ T4427] 8021q: adding VLAN 0 to HW filter on device eth7 [ 308.670014][ T4427] 8021q: adding VLAN 0 to HW filter on device eth24 [ 309.023009][ T4427] 8021q: adding VLAN 0 to HW filter on device eth25 [ 309.385244][ T4427] 8021q: adding VLAN 0 to HW filter on device eth26