last executing test programs: 15m4.17583306s ago: executing program 32 (id=205): setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x13) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x3404c813}, 0x240008c4) open_tree(0xffffffffffffffff, 0x0, 0x80000000000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 13m46.150007053s ago: executing program 33 (id=611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', r8, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r0}, &(0x7f0000001cc0), &(0x7f0000001d00)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@unlock_all, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x18) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 10m38.18083823s ago: executing program 34 (id=1843): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 8m48.173369821s ago: executing program 35 (id=2459): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="120000000a0000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) rename(0x0, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) 8m40.807601246s ago: executing program 36 (id=2487): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, 0xffffffffffffffff, 0xb}}, 0x48) 8m26.336813566s ago: executing program 37 (id=2547): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_io_uring_setup(0x9ee, &(0x7f0000000100)={0x0, 0xc95c, 0x100, 0x1, 0x34c, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) 8m13.82302656s ago: executing program 38 (id=2596): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x9}}, 0x20) close(r1) 7m34.494994821s ago: executing program 39 (id=2669): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000020000000000008000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000020095"], &(0x7f00000007c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41002, 0x8, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 6m58.696064991s ago: executing program 40 (id=2880): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff250000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m58.467301321s ago: executing program 41 (id=2882): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b4b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0xffff) 6m39.972124697s ago: executing program 5 (id=2962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) 6m39.614581031s ago: executing program 5 (id=2965): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 6m39.222545224s ago: executing program 5 (id=2967): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffda5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 6m38.405969436s ago: executing program 42 (id=2966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) 6m38.364085464s ago: executing program 5 (id=2970): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x51c, &(0x7f0000002a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x1fe) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) open(0x0, 0x64842, 0x0) 6m37.6018679s ago: executing program 5 (id=2971): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2) 6m36.30494973s ago: executing program 5 (id=2973): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") setgroups(0x0, 0x0) 6m35.784661493s ago: executing program 43 (id=2973): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") setgroups(0x0, 0x0) 5m18.407635956s ago: executing program 2 (id=3289): r0 = syz_io_uring_setup(0x10c, 0x0, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x59, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffeac, 0x40000003}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc0000}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000003c0), 0x0) 5m17.251993944s ago: executing program 2 (id=3300): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x2, r1}) fcntl$getownex(r0, 0x10, 0x0) 5m17.008764871s ago: executing program 2 (id=3302): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) io_setup(0x7, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r5, r4, &(0x7f0000002700)=0x23, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2d}, @empty, @private=0xa010101}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f00000009c0)="$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") 5m15.5236401s ago: executing program 2 (id=3309): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'macvlan1\x00'}) 5m13.931421052s ago: executing program 2 (id=3316): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5m13.605265857s ago: executing program 2 (id=3320): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b70300"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700002104", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0600000000", @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) unshare(0x64000600) 4m58.031207364s ago: executing program 44 (id=3320): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b70300"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700002104", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fc0600000000", @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}}, &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) unshare(0x64000600) 3m36.665187965s ago: executing program 1 (id=3793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r1, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 3m36.248685883s ago: executing program 1 (id=3796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 3m35.841578595s ago: executing program 1 (id=3800): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x200) dup2(r1, r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x100) 3m35.396930626s ago: executing program 1 (id=3802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000340)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b2319344d3c2781803a2119d9efd47b1abba3c1e6c563c1ec692da80ef66b19495b8e801d07b133f1b552ee772732a90e765b92d67f7a0cc8f15a4c6143f7cd3bda78", 0x249}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367", 0x5a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3m35.118456714s ago: executing program 1 (id=3804): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000000)="5cdd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x75, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 3m34.766405991s ago: executing program 1 (id=3808): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$inet(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x2, 0x927c408517621174) 3m19.509764735s ago: executing program 45 (id=3808): move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$inet(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x2, 0x927c408517621174) 1m27.84567876s ago: executing program 8 (id=4522): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) 1m27.536180224s ago: executing program 8 (id=4524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e27, 0x3, @rand_addr=' \x01\x00', 0x800}, 0x1c) listen(r0, 0x39c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m27.053342639s ago: executing program 8 (id=4527): syz_emit_ethernet(0x86, &(0x7f00000006c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0x1, 0x11, 0xe5c, @broadcast, @broadcast, {[@generic={0x44, 0x7, "8af1992842"}, @ssrr={0x89, 0x3, 0x32}, @timestamp_prespec={0x44, 0x3c, 0x22, 0x3, 0x4, [{@loopback, 0x7}, {@rand_addr=0x64010102, 0x3}, {@empty, 0x6}, {@multicast1, 0x7}, {@multicast2, 0x7f}, {@multicast2, 0x7}, {@broadcast, 0x9}]}]}}}}}}}, 0x0) 1m26.643465915s ago: executing program 8 (id=4529): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) sendmmsg$inet6(r2, &(0x7f0000001b00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xffffffff, @remote, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="af", 0x1}], 0x1}}], 0x1, 0x40000840) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x10002002}) close_range(r6, 0xffffffffffffffff, 0x0) 1m24.74191031s ago: executing program 8 (id=4537): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000a40)={0x1, {&(0x7f0000000500)=""/82, 0xfffffea4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f00000007c0)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000440)=""/184, 0xfe53, 0x0, 0x3, 0x3}}, 0x48) 1m24.184307868s ago: executing program 8 (id=4542): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 1m22.767982071s ago: executing program 46 (id=4542): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 16.432968448s ago: executing program 3 (id=4774): bpf$ITER_CREATE(0xb, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x70, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) 15.416702287s ago: executing program 6 (id=4777): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000000)) 14.925950481s ago: executing program 3 (id=4778): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000001840)=""/141, 0x8d, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000a40)={0x1, {&(0x7f0000000500)=""/82, 0xfffffea4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000440)=""/184, 0xfe53, 0x0, 0x3, 0x3}}, 0x48) 14.77305724s ago: executing program 6 (id=4780): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0x80, 0x42}, 0x50) r5 = epoll_create1(0x80000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000006) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) 14.55601094s ago: executing program 3 (id=4782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000108008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 12.558160425s ago: executing program 9 (id=4784): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18070000000000000000000000000000181200003b74c1ce0c3b97374c2481fabc3f29800b47090396413c34e4e7a35e1766e5a546d5ad3aec596515a2292db9873140cad16d260e19855c322afc6f005a967c6925588fb56f43ad24350f430000000000000000", @ANYRES32=r2, @ANYBLOB="00000000fcff0400b7030000ec000000850000001b000000b7fd00000000005dfa"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 12.100805842s ago: executing program 6 (id=4785): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 11.803145719s ago: executing program 7 (id=4786): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) 11.723036818s ago: executing program 3 (id=4787): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) readv(r0, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000200)=""/132, 0x84}], 0x2) 11.387424761s ago: executing program 4 (id=4788): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7], 0x6c}, 0x1, 0x0, 0x0, 0xd0}, 0x48000) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r4], 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x52, 0x1, 0x603d04, 0x25dfdbfc, {0xa}, [@typed={0x4, 0x1}]}, 0x18}}, 0x800) 11.386514s ago: executing program 9 (id=4789): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x88, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11.014336358s ago: executing program 9 (id=4791): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) 10.692372686s ago: executing program 6 (id=4792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000080)={{r3, r4/1000+10000}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmdt(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.612604049s ago: executing program 4 (id=4793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.472996234s ago: executing program 9 (id=4795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10.033031501s ago: executing program 0 (id=4796): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0xc00) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000140)) 9.510069757s ago: executing program 9 (id=4797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, 0x0, 0x10) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r4, 0x0, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}, 0xfffffffffffffe7c, 0x0, 0x0) rseq(0x0, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000000)='\"', 0xfdef) socket$nl_xfrm(0x10, 0x3, 0x6) 9.334817945s ago: executing program 6 (id=4798): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b72, &(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xb, "0060930000efa4890200"}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1a, 0x3, 0x800, &(0x7f00000000c0)) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x81, 0x2a82) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) sched_setparam(r1, &(0x7f0000000000)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) 9.280700681s ago: executing program 4 (id=4799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x2}, 0x50) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 9.225979165s ago: executing program 0 (id=4800): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) 8.189859104s ago: executing program 9 (id=4801): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x83, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 6.439191888s ago: executing program 6 (id=4802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) 5.96106753s ago: executing program 7 (id=4803): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x452, &(0x7f00000005c0)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x200000080000000) 5.897141554s ago: executing program 0 (id=4804): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 5.198172034s ago: executing program 0 (id=4805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xf00) 4.542966701s ago: executing program 3 (id=4806): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.216849137s ago: executing program 7 (id=4807): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="18070000000000000000000000000000181200003b74c1ce0c3b97374c2481fabc3f29800b47090396413c34e4e7a35e1766e5a546d5ad3aec596515a2292db9873140cad16d260e19855c322afc6f005a967c6925588fb56f43ad24350f430000000000000000", @ANYRES32=r2, @ANYBLOB="00000000fcff0400b7030000ec000000850000001b000000b7fd00000000005dfa"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 4.017938702s ago: executing program 4 (id=4808): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@jqfmt_vfsv0}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@bsdgroups}, {@bh}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.54012044s ago: executing program 7 (id=4809): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = open(0x0, 0x1a1342, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x6, 0x110}}, 0x28) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r6}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r7}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009003f0006010a000000370085a168d0bf46d32345653600648d270012000a00000049935ade4a460c89b6ec0cff3959547f509158ba86c902007a00004a32000400160008000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffeff, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @mcast2}, 0x1c) 3.372655093s ago: executing program 0 (id=4810): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfc9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r8, 0x30, r4}, 0x10) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x15, 0x88, 0xc000067}, 0x2c) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@rnullb, r1, &(0x7f00000001c0)={0x3, 0xe20, 0x3, 0x1, 0xfff, 0x100000000, 0x7, 0x1, 0x7}) 3.349083945s ago: executing program 4 (id=4811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.112965407s ago: executing program 7 (id=4812): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000810, &(0x7f0000000100)={[{@favordynmods}]}) 270.778347ms ago: executing program 4 (id=4813): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0xe0e4f3ee43f6dc44, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004c80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x9, @remote, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28}}], 0x1, 0x0) 221.037633ms ago: executing program 7 (id=4814): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 72.410519ms ago: executing program 0 (id=4815): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) 0s ago: executing program 3 (id=4816): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800, 0x0, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000027c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x1a}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): bj=unconfined pid=18718 comm="syz.9.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 861.140761][ T30] audit: type=1326 audit(1757956272.914:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 861.240760][ T30] audit: type=1326 audit(1757956272.914:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 861.429331][ T30] audit: type=1326 audit(1757956272.914:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 861.466374][T18733] netlink: 'syz.7.3857': attribute type 13 has an invalid length. [ 861.529574][ T30] audit: type=1326 audit(1757956272.914:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 861.605849][ T30] audit: type=1326 audit(1757956272.914:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 861.689321][ T30] audit: type=1326 audit(1757956273.044:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.9.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 861.779791][ T30] audit: type=1326 audit(1757956273.044:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18725 comm="syz.9.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2fc7dc1465 code=0x7ffc0000 [ 862.014918][T18733] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.022746][T18733] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.925242][T18733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.954071][T18733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.353513][T18757] loop9: detected capacity change from 0 to 1024 [ 863.420623][T18757] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.708291][T17027] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.983068][ T13] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.049009][ T13] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.082951][ T13] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.104877][ T13] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.401572][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 865.412183][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 865.425683][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 865.433769][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 865.446577][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 866.651548][T18814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 866.657927][T18814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 866.664036][T18814] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 866.670841][T18814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 866.677523][T18814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 866.683606][T18814] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 866.689726][T18814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 866.695782][T18814] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 866.783130][T18814] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 867.312681][T18836] netlink: 'syz.7.3880': attribute type 13 has an invalid length. [ 867.517228][T18842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3884'. [ 867.550557][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3885'. [ 867.595708][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3885'. [ 867.673044][T18794] chnl_net:caif_netlink_parms(): no params data found [ 868.445016][T18861] loop6: detected capacity change from 0 to 1024 [ 868.503989][T18861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.646795][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 868.687732][T18863] netlink: 'syz.9.3889': attribute type 4 has an invalid length. [ 868.695948][T18863] netlink: 17 bytes leftover after parsing attributes in process `syz.9.3889'. [ 868.730878][T15225] Bluetooth: hci6: command 0x0c1a tx timeout [ 868.730878][ T5871] Bluetooth: hci2: command 0x041b tx timeout [ 868.732578][T17822] Bluetooth: hci1: command 0x0c1a tx timeout [ 868.736952][T15225] Bluetooth: hci0: command 0x0c1a tx timeout [ 868.737003][T15225] Bluetooth: hci5: command 0x0c1a tx timeout [ 868.737052][T15225] Bluetooth: hci4: command 0x0c1a tx timeout [ 868.826916][T18794] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.834173][T18794] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.944530][T18794] bridge_slave_0: entered allmulticast mode [ 868.952692][T18794] bridge_slave_0: entered promiscuous mode [ 868.962010][T18794] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.995546][T18794] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.003018][T18794] bridge_slave_1: entered allmulticast mode [ 869.067678][T18794] bridge_slave_1: entered promiscuous mode [ 869.102511][T14861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.444856][T18794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.538758][T18794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.450576][T18895] loop8: detected capacity change from 0 to 512 [ 870.478961][T18895] EXT4-fs error (device loop8): ext4_xattr_inode_iget:440: comm syz.8.3900: error while reading EA inode 32 err=-116 [ 870.491784][T18895] EXT4-fs (loop8): Remounting filesystem read-only [ 870.498428][T18895] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 870.508590][T18895] EXT4-fs (loop8): 1 orphan inode deleted [ 870.517865][T18895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 870.800517][T17499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.814136][T17822] Bluetooth: hci2: command 0x041b tx timeout [ 870.840511][T17499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.969200][T18794] team0: Port device team_slave_0 added [ 871.011203][T18907] netlink: 'syz.0.3905': attribute type 4 has an invalid length. [ 871.019044][T18907] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3905'. [ 871.188689][T18794] team0: Port device team_slave_1 added [ 871.357252][T15222] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.431733][T18913] loop6: detected capacity change from 0 to 1024 [ 871.502448][T17499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.533670][T17499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.729862][T18913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 871.784040][T18794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.813946][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.839883][ C1] vkms_vblank_simulate: vblank timer overrun [ 871.846900][T18794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.961552][T17499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.992669][T17499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.028493][T14861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.063419][T18794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.129746][T18794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.241735][T18794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.498868][T17499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 872.530631][T17499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.797098][T18794] hsr_slave_0: entered promiscuous mode [ 872.806831][T18794] hsr_slave_1: entered promiscuous mode [ 872.813173][T18794] debugfs: 'hsr0' already exists in 'hsr' [ 872.835677][T18794] Cannot create hsr debugfs directory [ 872.885562][T17822] Bluetooth: hci2: command 0x041b tx timeout [ 873.322839][T18879] warn_alloc: 1 callbacks suppressed [ 873.322865][T18879] syz.7.3897: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 873.368784][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3920'. [ 873.409022][T18949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3920'. [ 873.421074][T18879] CPU: 0 UID: 0 PID: 18879 Comm: syz.7.3897 Not tainted syzkaller #0 PREEMPT(full) [ 873.421120][T18879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 873.421144][T18879] Call Trace: [ 873.421156][T18879] [ 873.421170][T18879] dump_stack_lvl+0x16c/0x1f0 [ 873.421234][T18879] warn_alloc+0x248/0x3a0 [ 873.421296][T18879] ? __pfx_warn_alloc+0x10/0x10 [ 873.421377][T18879] ? hash_netport4_resize+0x1d8/0x1c50 [ 873.421423][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.421470][T18879] ? __vmalloc_node_noprof+0xad/0xf0 [ 873.421527][T18879] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 873.421578][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.421640][T18879] ? hash_netport4_resize+0x1d8/0x1c50 [ 873.421701][T18879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 873.421760][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.421812][T18879] ? ___kmalloc_large_node+0xed/0x160 [ 873.421858][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.421915][T18879] __kvmalloc_node_noprof+0x30a/0x620 [ 873.421972][T18879] ? hash_netport4_resize+0x1d8/0x1c50 [ 873.422020][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.422066][T18879] ? __kmalloc_noprof+0x242/0x510 [ 873.422121][T18879] ? hash_netport4_resize+0x1d8/0x1c50 [ 873.422168][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.422223][T18879] ? hash_netport4_resize+0x1d8/0x1c50 [ 873.422270][T18879] hash_netport4_resize+0x1d8/0x1c50 [ 873.422321][T18879] ? __pfx_hash_netport4_add+0x10/0x10 [ 873.422370][T18879] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 873.422416][T18879] ? __pfx___mutex_lock+0x10/0x10 [ 873.422458][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.422516][T18879] ? __pfx_hash_netport4_resize+0x10/0x10 [ 873.422567][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.422620][T18879] call_ad.constprop.0+0x36d/0x940 [ 873.422668][T18879] ? __pfx_hash_netport4_resize+0x10/0x10 [ 873.422724][T18879] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 873.422771][T18879] ? __pfx___nla_validate_parse+0x10/0x10 [ 873.422827][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.422874][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.422933][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.422979][T18879] ? __nla_parse+0x40/0x60 [ 873.423028][T18879] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 873.423090][T18879] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 873.423144][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.423190][T18879] ? call_rcu_tasks_generic+0x400/0x920 [ 873.423291][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.423337][T18879] ? find_held_lock+0x2b/0x80 [ 873.423387][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.423442][T18879] nfnetlink_rcv_msg+0x9fc/0x1200 [ 873.423509][T18879] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 873.423567][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.423613][T18879] ? stack_trace_save+0x8e/0xc0 [ 873.423726][T18879] netlink_rcv_skb+0x158/0x420 [ 873.423764][T18879] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 873.423822][T18879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 873.423857][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.423926][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.423971][T18879] ? ns_capable+0xd7/0x110 [ 873.424023][T18879] nfnetlink_rcv+0x1b3/0x430 [ 873.424071][T18879] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 873.424116][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.424161][T18879] ? netlink_deliver_tap+0x1ae/0xd30 [ 873.424219][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.424264][T18879] ? is_vmalloc_addr+0x86/0xa0 [ 873.424329][T18879] netlink_unicast+0x5aa/0x870 [ 873.424372][T18879] ? __pfx_netlink_unicast+0x10/0x10 [ 873.424436][T18879] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 873.424495][T18879] ? __lock_acquire+0xb97/0x1ce0 [ 873.424569][T18879] netlink_sendmsg+0x8d1/0xdd0 [ 873.424614][T18879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 873.424648][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.424700][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.424745][T18879] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 873.424797][T18879] ____sys_sendmsg+0xa98/0xc70 [ 873.424849][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.424894][T18879] ? copy_msghdr_from_user+0x10a/0x160 [ 873.424953][T18879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 873.425011][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.425067][T18879] ___sys_sendmsg+0x134/0x1d0 [ 873.425129][T18879] ? __pfx____sys_sendmsg+0x10/0x10 [ 873.425216][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.425299][T18879] __sys_sendmsg+0x16d/0x220 [ 873.425361][T18879] ? __pfx___sys_sendmsg+0x10/0x10 [ 873.425421][T18879] ? __pfx_bpf_trace_run2+0x10/0x10 [ 873.425475][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.425526][T18879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.425571][T18879] ? rcu_is_watching+0x12/0xc0 [ 873.425626][T18879] do_syscall_64+0xcd/0x4e0 [ 873.425666][T18879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.425711][T18879] RIP: 0033:0x7f5b8098eba9 [ 873.425740][T18879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.425778][T18879] RSP: 002b:00007f5b81865038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 873.425817][T18879] RAX: ffffffffffffffda RBX: 00007f5b80bd5fa0 RCX: 00007f5b8098eba9 [ 873.425843][T18879] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000f [ 873.425867][T18879] RBP: 00007f5b80a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 873.425892][T18879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.425915][T18879] R13: 00007f5b80bd6038 R14: 00007f5b80bd5fa0 R15: 00007fffdedb7858 [ 873.425967][T18879] [ 873.997261][T18879] Mem-Info: [ 874.009790][T18879] active_anon:7364 inactive_anon:0 isolated_anon:0 [ 874.009790][T18879] active_file:13325 inactive_file:40664 isolated_file:0 [ 874.009790][T18879] unevictable:768 dirty:253 writeback:0 [ 874.009790][T18879] slab_reclaimable:11904 slab_unreclaimable:174820 [ 874.009790][T18879] mapped:37577 shmem:1635 pagetables:1633 [ 874.009790][T18879] sec_pagetables:0 bounce:0 [ 874.009790][T18879] kernel_misc_reclaimable:0 [ 874.009790][T18879] free:1185593 free_pcp:42199 free_cma:0 [ 874.055237][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.217663][T18879] Node 0 active_anon:29276kB inactive_anon:0kB active_file:53300kB inactive_file:162452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142100kB dirty:1012kB writeback:0kB shmem:5004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12804kB pagetables:6512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 874.255907][T18879] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 874.394626][T18879] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 874.445502][T18879] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 874.451414][T18879] Node 0 DMA32 free:847456kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29600kB inactive_anon:0kB active_file:53300kB inactive_file:161128kB unevictable:1536kB writepending:1040kB present:3129332kB managed:2539452kB mlocked:0kB bounce:0kB free_pcp:132372kB local_pcp:65496kB free_cma:0kB [ 874.483914][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.513417][T18879] lowmem_reserve[]: 0 0 1 1 1 [ 874.521304][T18879] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 874.550709][T18879] lowmem_reserve[]: 0 0 0 0 0 [ 874.555925][T18879] Node 1 Normal free:3892404kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22496kB local_pcp:10528kB free_cma:0kB [ 874.588989][T18879] lowmem_reserve[]: 0 0 0 0 0 [ 874.593766][T18879] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 874.670102][T18879] Node 0 DMA32: 2983*4kB (UME) 1898*8kB (UME) 1555*16kB (UME) 1370*32kB (UME) 913*64kB (UME) 403*128kB (UME) 578*256kB (UME) 310*512kB (UME) 33*1024kB (UM) 5*2048kB (UM) 71*4096kB (UM) = 847388kB [ 874.769950][T18879] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 874.814872][T18879] Node 1 Normal: 223*4kB (UE) 57*8kB (UME) 41*16kB (UME) 179*32kB (UME) 38*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3892404kB [ 874.863948][T18879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.891213][T18879] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 874.901629][T18879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 874.911702][T18879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 874.921292][T18879] 55602 total pagecache pages [ 874.926374][T18879] 0 pages in swap cache [ 874.961845][T18879] Free swap = 124996kB [ 874.966670][T17822] Bluetooth: hci2: command 0x041b tx timeout [ 874.975604][T18879] Total swap = 124996kB [ 874.984848][T18879] 2097051 pages RAM [ 874.990157][T18879] 0 pages HighMem/MovableOnly [ 874.994995][T18879] 430226 pages reserved [ 874.999658][T18879] 0 pages cma reserved [ 875.731306][T17499] bond0 (unregistering): Released all slaves [ 875.819163][T17499] bond1 (unregistering): Released all slaves [ 875.904411][T17499] bond2 (unregistering): Released all slaves [ 876.016716][T18960] syzkaller0: entered promiscuous mode [ 876.022310][T18960] syzkaller0: entered allmulticast mode [ 876.035157][T18972] kthread_run failed with err -4 [ 876.063771][T17499] tipc: Left network mode [ 876.486773][T17499] hsr_slave_0: left promiscuous mode [ 876.639788][T17499] hsr_slave_1: left promiscuous mode [ 876.845263][T19010] loop9: detected capacity change from 0 to 2048 [ 876.934351][T17499] veth1_macvtap: left promiscuous mode [ 876.983907][T19010] loop9: p2 p3 p7 [ 877.005527][T17499] veth0_macvtap: left promiscuous mode [ 877.011258][T17499] veth1_vlan: left promiscuous mode [ 877.025151][T17499] veth0_vlan: left promiscuous mode [ 877.050781][T17822] Bluetooth: hci2: command 0x041b tx timeout [ 877.246677][ T5935] IPVS: starting estimator thread 0... [ 877.408460][T19020] IPVS: using max 21 ests per chain, 50400 per kthread [ 878.268635][T19032] loop7: detected capacity change from 0 to 512 [ 878.365580][T19032] EXT4-fs error (device loop7): ext4_xattr_inode_iget:440: comm syz.7.3946: error while reading EA inode 32 err=-116 [ 878.419104][T19032] EXT4-fs (loop7): Remounting filesystem read-only [ 878.434619][T19032] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 878.447007][T19032] EXT4-fs (loop7): 1 orphan inode deleted [ 878.458398][T19032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.126656][T17822] Bluetooth: hci2: command 0x041b tx timeout [ 879.184671][T17499] team0 (unregistering): Port device dummy0 removed [ 879.387297][T19023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 879.393918][T19023] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 879.400157][T19023] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 879.406555][T19023] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 879.412667][T19023] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 879.419114][T19023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 879.694285][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.705664][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 879.705687][ T30] audit: type=1326 audit(1757956291.784:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19052 comm="syz.0.3952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76c698eba9 code=0x0 [ 879.911470][T15246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.366062][T18794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 880.504221][T18794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 880.625973][T18794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 880.693627][T18794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 880.864584][T19085] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3965'. [ 880.877092][T17499] IPVS: stop unused estimator thread 0... [ 881.474580][T17822] Bluetooth: hci2: command 0x041b tx timeout [ 881.476879][T11358] Bluetooth: hci0: command 0x0c1a tx timeout [ 881.486661][T15225] Bluetooth: hci5: command 0x0c1a tx timeout [ 881.489216][T17822] Bluetooth: hci4: command 0x0c1a tx timeout [ 881.492668][T15225] Bluetooth: hci3: command 0x0c1a tx timeout [ 881.504680][ T5871] Bluetooth: hci6: command 0x0c1a tx timeout [ 881.565554][T18794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.633091][T18794] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.699293][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.706512][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.794442][T17499] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.801637][T17499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.659236][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3981'. [ 883.974239][T18794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 885.048325][T19166] loop7: detected capacity change from 0 to 512 [ 885.252389][T19166] EXT4-fs error (device loop7): ext4_xattr_inode_iget:440: comm syz.7.3989: error while reading EA inode 32 err=-116 [ 885.348417][T19166] EXT4-fs (loop7): Remounting filesystem read-only [ 885.401888][T19166] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 885.485647][T19166] EXT4-fs (loop7): 1 orphan inode deleted [ 885.492970][T19166] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 885.557934][T19182] sctp: [Deprecated]: syz.8.3993 (pid 19182) Use of int in max_burst socket option. [ 885.557934][T19182] Use struct sctp_assoc_value instead [ 886.008992][T15246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.250769][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3999'. [ 886.318527][T18794] veth0_vlan: entered promiscuous mode [ 886.383840][T18794] veth1_vlan: entered promiscuous mode [ 886.532316][T18794] veth0_macvtap: entered promiscuous mode [ 886.590064][T18794] veth1_macvtap: entered promiscuous mode [ 886.615137][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3999'. [ 886.686108][T18794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 886.757396][T18794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 886.855577][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.864347][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.932626][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 886.967854][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 887.009011][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4006'. [ 887.065822][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4006'. [ 887.362878][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.393725][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 887.556664][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 887.603210][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 888.035004][T19250] atomic_op ffff888051e5b998 conn xmit_atomic 0000000000000000 [ 888.651896][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4021'. [ 889.158341][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4021'. [ 889.471875][T19287] netlink: 'syz.9.4024': attribute type 4 has an invalid length. [ 889.545806][T19287] netlink: 17 bytes leftover after parsing attributes in process `syz.9.4024'. [ 889.791355][T19296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4028'. [ 890.890638][T19324] netlink: 'syz.6.4033': attribute type 13 has an invalid length. [ 891.008370][T19325] syzkaller0: entered promiscuous mode [ 891.013914][T19325] syzkaller0: entered allmulticast mode [ 891.403697][T19317] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 891.410009][T19317] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 891.416367][T19317] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 891.422473][T19317] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 891.428632][T19317] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 891.434745][T19317] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 893.045506][T15225] Bluetooth: hci3: command 0x0c1a tx timeout [ 893.446228][T15225] Bluetooth: hci2: command 0x041b tx timeout [ 893.453077][ T5871] Bluetooth: hci6: command 0x0c1a tx timeout [ 893.453466][T19109] Bluetooth: hci0: command 0x0c1a tx timeout [ 893.459340][ T5871] Bluetooth: hci5: command 0x0c1a tx timeout [ 893.459392][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout [ 896.403703][T19346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.410701][ T30] audit: type=1326 audit(1757956308.514:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 896.453711][T19362] tipc: Enabled bearer , priority 0 [ 896.481477][ T30] audit: type=1326 audit(1757956308.514:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 896.513498][T19378] tipc: Resetting bearer [ 896.516582][T19431] loop9: detected capacity change from 0 to 512 [ 896.610652][ T30] audit: type=1326 audit(1757956308.514:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 896.693710][T19431] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 896.701908][ T30] audit: type=1326 audit(1757956308.514:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 896.724773][T19431] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 896.734955][ T30] audit: type=1326 audit(1757956308.514:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 896.765403][ T30] audit: type=1326 audit(1757956308.514:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 896.806765][T19431] EXT4-fs (loop9): 1 truncate cleaned up [ 896.817504][T19431] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.835491][ T30] audit: type=1326 audit(1757956308.514:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 896.881383][ T30] audit: type=1326 audit(1757956308.514:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 896.904409][T19440] loop8: detected capacity change from 0 to 512 [ 896.909441][T19361] tipc: Disabling bearer [ 896.985814][T19440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 897.021388][ T30] audit: type=1326 audit(1757956308.514:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 897.064657][T19440] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 897.106466][ T30] audit: type=1326 audit(1757956308.514:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19429 comm="syz.9.4056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x7ffc0000 [ 897.146650][T19443] sch_fq: defrate 9 ignored. [ 897.215476][T19440] program syz.8.4059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 897.447807][T17027] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.741807][T15222] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 898.098339][T19476] loop8: detected capacity change from 0 to 1024 [ 898.122880][T19476] ext4: Unknown parameter 'mask' [ 899.145522][T19516] pimreg: tun_chr_ioctl cmd 2147767520 [ 902.250989][T19575] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 902.293792][T19575] overlayfs: missing 'lowerdir' [ 902.982374][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'. [ 903.015713][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'. [ 903.189476][T19610] netlink: 'syz.6.4110': attribute type 13 has an invalid length. [ 903.959712][T19623] loop9: detected capacity change from 0 to 512 [ 904.122064][T19623] EXT4-fs error (device loop9): ext4_xattr_inode_iget:440: comm syz.9.4121: error while reading EA inode 32 err=-116 [ 904.191080][T19623] EXT4-fs (loop9): Remounting filesystem read-only [ 904.212513][T19623] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 904.301657][T19623] EXT4-fs (loop9): 1 orphan inode deleted [ 904.380799][T19623] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.496823][T19634] overlayfs: missing 'lowerdir' [ 904.804174][T17027] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.299126][T19656] sch_fq: defrate 9 ignored. [ 906.666580][T19683] overlayfs: upper fs does not support file handles, falling back to index=off. [ 907.807376][T19701] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 907.992331][T19701] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.062385][T19701] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.220752][T19717] sch_fq: defrate 9 ignored. [ 908.328260][T19701] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 908.578160][ T1147] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 908.993624][ T1147] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.225487][ T1147] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.294841][ T1147] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 910.115545][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4164'. [ 910.159695][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4164'. [ 910.370212][T19764] loop8: detected capacity change from 0 to 512 [ 910.421308][T19764] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 910.499868][T19764] EXT4-fs (loop8): 1 truncate cleaned up [ 910.538886][T19764] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.776426][T19791] netlink: 'syz.0.4171': attribute type 13 has an invalid length. [ 913.075914][ T1147] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.120796][ T1147] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.135139][ T1147] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.357322][ T1147] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.269931][T19805] loop7: detected capacity change from 0 to 2048 [ 914.333949][T15222] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.402312][T19418] loop7: p2 p3 p7 [ 914.625149][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4182'. [ 914.669772][T19805] loop7: p2 p3 p7 [ 914.675053][T19819] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4182'. [ 915.918712][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 915.918737][ T30] audit: type=1326 audit(1757956328.024:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19836 comm="syz.7.4189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b8098eba9 code=0x0 [ 916.254889][T19849] loop8: detected capacity change from 0 to 128 [ 916.312663][T19849] msdos: Unknown parameter 'nodohs' [ 916.565072][T19862] loop7: detected capacity change from 0 to 512 [ 916.666835][T19862] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 916.755531][T19862] EXT4-fs (loop7): 1 truncate cleaned up [ 916.837054][T19862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.011603][T19814] udevd[19814]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 917.334824][T19877] loop8: detected capacity change from 0 to 512 [ 917.543639][T19444] udevd[19444]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 917.554674][T19452] udevd[19452]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 917.591801][T19877] EXT4-fs error (device loop8): ext4_xattr_inode_iget:440: comm syz.8.4199: error while reading EA inode 32 err=-116 [ 917.610863][T19877] EXT4-fs (loop8): Remounting filesystem read-only [ 917.619163][T19877] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 917.629722][T19877] EXT4-fs (loop8): 1 orphan inode deleted [ 917.649006][T19877] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.790330][T19891] netlink: 'syz.4.4200': attribute type 13 has an invalid length. [ 917.937086][T19814] udevd[19814]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 917.947377][T19452] udevd[19452]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 917.959208][T19444] udevd[19444]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 918.131736][T19895] loop9: detected capacity change from 0 to 256 [ 918.188484][T15222] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.358900][T19895] FAT-fs (loop9): Directory bread(block 64) failed [ 918.374544][T19891] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.382278][T19891] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.426188][T19895] FAT-fs (loop9): Directory bread(block 65) failed [ 918.432828][T19895] FAT-fs (loop9): Directory bread(block 66) failed [ 918.504994][T19895] FAT-fs (loop9): Directory bread(block 67) failed [ 918.526666][T19895] FAT-fs (loop9): Directory bread(block 68) failed [ 918.533210][T19895] FAT-fs (loop9): Directory bread(block 69) failed [ 918.620354][T19895] FAT-fs (loop9): Directory bread(block 70) failed [ 918.685377][T19895] FAT-fs (loop9): Directory bread(block 71) failed [ 918.748718][T19895] FAT-fs (loop9): Directory bread(block 72) failed [ 918.755287][T19895] FAT-fs (loop9): Directory bread(block 73) failed [ 919.014486][T19895] syz.9.4203: attempt to access beyond end of device [ 919.014486][T19895] loop9: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 919.094845][T19895] syz.9.4203: attempt to access beyond end of device [ 919.094845][T19895] loop9: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 919.180033][ T30] audit: type=1800 audit(1757956331.284:4315): pid=19895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.4203" name="file1" dev="loop9" ino=1048697 res=0 errno=0 [ 919.518104][T19891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.561325][T19891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.017124][T18427] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.047830][T18427] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.112763][T18427] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.801541][T18427] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.082575][ T24] kernel write not supported for file [eventfd] (pid: 24 comm: kworker/1:0) [ 921.244917][T15246] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.517659][T19965] loop9: detected capacity change from 0 to 16 [ 921.580080][T19965] erofs (device loop9): mounted with root inode @ nid 36. [ 921.670895][ T30] audit: type=1326 audit(1757956333.754:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.9.4225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fc7d8eba9 code=0x0 [ 922.720337][T19983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 922.726642][T19983] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 922.732732][T19983] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 922.739033][T19983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 922.745136][T19983] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 922.751292][T19983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 923.102548][T20010] netlink: 'syz.8.4233': attribute type 13 has an invalid length. [ 924.096238][T15225] Bluetooth: hci3: command 0x0c1a tx timeout [ 924.806054][T15225] Bluetooth: hci4: command 0x0c1a tx timeout [ 924.806776][ T5878] Bluetooth: hci6: command 0x0c1a tx timeout [ 924.812551][ T5871] Bluetooth: hci0: command 0x0c1a tx timeout [ 924.818104][ T5878] Bluetooth: hci5: command 0x0c1a tx timeout [ 924.818177][T19109] Bluetooth: hci2: command 0x041b tx timeout [ 924.928415][T20052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 924.934731][T20052] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 924.941223][T20052] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 924.947657][T20052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 924.953776][T20052] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 924.959908][T20052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 925.005773][T20066] tipc: Enabling of bearer rejected, failed to enable media [ 925.486015][T20087] atomic_op ffff888079259198 conn xmit_atomic 0000000000000000 [ 926.239400][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4273'. [ 926.273296][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4273'. [ 926.325393][T15225] Bluetooth: hci3: command 0x0c1a tx timeout [ 926.480542][T20127] netlink: 'syz.4.4270': attribute type 13 has an invalid length. [ 926.973190][T20140] loop6: detected capacity change from 0 to 128 [ 927.001550][T20143] cgroup: fork rejected by pids controller in /syz8 [ 927.029675][T20140] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 927.045939][T15225] Bluetooth: hci2: command 0x041b tx timeout [ 927.053133][T15225] Bluetooth: hci6: command 0x0c1a tx timeout [ 927.058035][ T5871] Bluetooth: hci0: command 0x0c1a tx timeout [ 927.059520][T11358] Bluetooth: hci5: command 0x0c1a tx timeout [ 927.065119][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout [ 927.101503][T20140] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 927.351249][T20152] tipc: Enabling of bearer rejected, failed to enable media [ 927.479314][T18427] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 928.454616][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4291'. [ 928.489611][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4291'. [ 929.032780][ T3536] bridge_slave_1: left allmulticast mode [ 929.049354][ T3536] bridge_slave_1: left promiscuous mode [ 929.072431][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.100429][ T3536] bridge_slave_0: left allmulticast mode [ 929.114956][ T3536] bridge_slave_0: left promiscuous mode [ 929.161805][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.968853][T20216] loop4: detected capacity change from 0 to 2048 [ 929.999610][T20218] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4302'. [ 930.148215][T19814] loop4: p2 p3 p7 [ 930.213570][T19109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 930.227282][T19109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 930.235677][T19109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 930.272859][T19109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 930.281175][T19109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 930.377979][T20216] loop4: p2 p3 p7 [ 930.544951][ T24] IPVS: starting estimator thread 0... [ 930.658529][T20234] IPVS: using max 21 ests per chain, 50400 per kthread [ 931.003453][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.090958][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.119958][ T3536] bond0 (unregistering): Released all slaves [ 931.150464][T20218] (unnamed net_device) (uninitialized): option ad_select: invalid value (46) [ 931.272197][T20237] tipc: Enabling of bearer rejected, failed to enable media [ 931.327016][ T3536] tipc: Left network mode [ 931.842224][T20269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4310'. [ 931.921790][T20269] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4310'. [ 932.326059][T19109] Bluetooth: hci1: command tx timeout [ 933.519840][T20298] loop9: detected capacity change from 0 to 2048 [ 933.570173][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4323'. [ 933.640057][T20305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4323'. [ 933.825507][ T3536] hsr_slave_0: left promiscuous mode [ 933.884284][ T3536] hsr_slave_1: left promiscuous mode [ 933.909365][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.925860][T19452] loop9: p2 p3 p7 [ 933.943480][T20316] netlink: 'syz.6.4321': attribute type 4 has an invalid length. [ 933.956488][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.043563][T20316] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4321'. [ 934.090326][T20298] loop9: p2 p3 p7 [ 934.405628][T19109] Bluetooth: hci1: command tx timeout [ 934.906208][T20333] loop7: detected capacity change from 0 to 164 [ 935.577027][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 935.678540][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 936.485718][T19109] Bluetooth: hci1: command tx timeout [ 937.473086][T20225] chnl_net:caif_netlink_parms(): no params data found [ 937.499558][T20374] loop9: detected capacity change from 0 to 128 [ 937.617229][T20374] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4349'. [ 937.739854][T20374] (unnamed net_device) (uninitialized): option ad_select: invalid value (46) [ 937.899775][ T3536] IPVS: stop unused estimator thread 0... [ 938.030619][T15246] cgroup: fork rejected by pids controller in /syz7 [ 938.177583][T20225] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.195938][T20225] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.203161][T20225] bridge_slave_0: entered allmulticast mode [ 938.267717][T20225] bridge_slave_0: entered promiscuous mode [ 938.316150][T20225] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.323566][T20225] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.405602][T20225] bridge_slave_1: entered allmulticast mode [ 938.413588][T20225] bridge_slave_1: entered promiscuous mode [ 938.565451][T19109] Bluetooth: hci1: command tx timeout [ 938.962709][T20362] warn_alloc: 1 callbacks suppressed [ 938.962734][T20362] syz.4.4345: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 938.985909][T20398] tipc: Enabling of bearer rejected, failed to enable media [ 939.024000][T20362] ,cpuset=/,mems_allowed=0-1 [ 939.045785][T20362] CPU: 1 UID: 0 PID: 20362 Comm: syz.4.4345 Not tainted syzkaller #0 PREEMPT(full) [ 939.045832][T20362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 939.045855][T20362] Call Trace: [ 939.045867][T20362] [ 939.045881][T20362] dump_stack_lvl+0x16c/0x1f0 [ 939.045945][T20362] warn_alloc+0x248/0x3a0 [ 939.046007][T20362] ? __pfx_warn_alloc+0x10/0x10 [ 939.046090][T20362] ? hash_netport4_resize+0x1d8/0x1c50 [ 939.046136][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.046179][T20362] ? __vmalloc_node_noprof+0xad/0xf0 [ 939.046235][T20362] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 939.046286][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.046347][T20362] ? hash_netport4_resize+0x1d8/0x1c50 [ 939.046409][T20362] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 939.046467][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.046513][T20362] ? ___kmalloc_large_node+0xed/0x160 [ 939.046559][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.046612][T20362] __kvmalloc_node_noprof+0x30a/0x620 [ 939.046668][T20362] ? hash_netport4_resize+0x1d8/0x1c50 [ 939.046714][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.046759][T20362] ? __kmalloc_noprof+0x242/0x510 [ 939.046813][T20362] ? hash_netport4_resize+0x1d8/0x1c50 [ 939.046858][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.046913][T20362] ? hash_netport4_resize+0x1d8/0x1c50 [ 939.046959][T20362] hash_netport4_resize+0x1d8/0x1c50 [ 939.047008][T20362] ? __pfx_hash_netport4_add+0x10/0x10 [ 939.047062][T20362] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 939.047103][T20362] ? __pfx___mutex_lock+0x10/0x10 [ 939.047145][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.047202][T20362] ? __pfx_hash_netport4_resize+0x10/0x10 [ 939.047253][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.047306][T20362] call_ad.constprop.0+0x36d/0x940 [ 939.047355][T20362] ? __pfx_hash_netport4_resize+0x10/0x10 [ 939.047412][T20362] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 939.047459][T20362] ? __pfx___nla_validate_parse+0x10/0x10 [ 939.047509][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.047557][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.047614][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.047660][T20362] ? __nla_parse+0x40/0x60 [ 939.047709][T20362] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 939.047772][T20362] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 939.047826][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.047871][T20362] ? call_rcu_tasks_generic+0x400/0x920 [ 939.047973][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.048019][T20362] ? find_held_lock+0x2b/0x80 [ 939.048077][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.048132][T20362] nfnetlink_rcv_msg+0x9fc/0x1200 [ 939.048199][T20362] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 939.048256][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.048301][T20362] ? stack_trace_save+0x8e/0xc0 [ 939.048416][T20362] netlink_rcv_skb+0x158/0x420 [ 939.048453][T20362] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 939.048507][T20362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 939.048541][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.048610][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.048654][T20362] ? ns_capable+0xd7/0x110 [ 939.048706][T20362] nfnetlink_rcv+0x1b3/0x430 [ 939.048752][T20362] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 939.048797][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.048842][T20362] ? netlink_deliver_tap+0x1ae/0xd30 [ 939.048900][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.048945][T20362] ? is_vmalloc_addr+0x86/0xa0 [ 939.049010][T20362] netlink_unicast+0x5aa/0x870 [ 939.049059][T20362] ? __pfx_netlink_unicast+0x10/0x10 [ 939.049123][T20362] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 939.049183][T20362] ? __lock_acquire+0xb97/0x1ce0 [ 939.049258][T20362] netlink_sendmsg+0x8d1/0xdd0 [ 939.049303][T20362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.049335][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.049388][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.049433][T20362] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 939.049484][T20362] ____sys_sendmsg+0xa98/0xc70 [ 939.049529][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.049574][T20362] ? copy_msghdr_from_user+0x10a/0x160 [ 939.049637][T20362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.049695][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.049752][T20362] ___sys_sendmsg+0x134/0x1d0 [ 939.049815][T20362] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.049900][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.049985][T20362] __sys_sendmsg+0x16d/0x220 [ 939.050054][T20362] ? __pfx___sys_sendmsg+0x10/0x10 [ 939.050112][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.050158][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.050225][T20362] ? srso_alias_return_thunk+0x5/0xfbef5 [ 939.050282][T20362] do_syscall_64+0xcd/0x4e0 [ 939.050322][T20362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.050359][T20362] RIP: 0033:0x7fc89258eba9 [ 939.050389][T20362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.050426][T20362] RSP: 002b:00007fc8933b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.050461][T20362] RAX: ffffffffffffffda RBX: 00007fc8927d5fa0 RCX: 00007fc89258eba9 [ 939.050488][T20362] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000f [ 939.050511][T20362] RBP: 00007fc892611e19 R08: 0000000000000000 R09: 0000000000000000 [ 939.050536][T20362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.050560][T20362] R13: 00007fc8927d6038 R14: 00007fc8927d5fa0 R15: 00007fff84445d28 [ 939.050611][T20362] [ 939.050625][T20362] Mem-Info: [ 939.119186][T20225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.680539][T20362] active_anon:11510 inactive_anon:0 isolated_anon:0 [ 939.680539][T20362] active_file:13325 inactive_file:40693 isolated_file:0 [ 939.680539][T20362] unevictable:768 dirty:195 writeback:0 [ 939.680539][T20362] slab_reclaimable:11935 slab_unreclaimable:181313 [ 939.680539][T20362] mapped:37257 shmem:4435 pagetables:1863 [ 939.680539][T20362] sec_pagetables:0 bounce:0 [ 939.680539][T20362] kernel_misc_reclaimable:0 [ 939.680539][T20362] free:1191266 free_pcp:29413 free_cma:0 [ 939.775528][T20362] Node 0 active_anon:46540kB inactive_anon:0kB active_file:53300kB inactive_file:162568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149028kB dirty:780kB writeback:0kB shmem:16204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12984kB pagetables:7236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 939.845355][T20362] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 939.945348][T20362] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.069809][T20225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.125447][T20362] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 940.137587][T20362] Node 0 DMA32 free:891636kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42392kB inactive_anon:0kB active_file:53300kB inactive_file:161244kB unevictable:1536kB writepending:780kB present:3129332kB managed:2539452kB mlocked:0kB bounce:0kB free_pcp:94348kB local_pcp:29280kB free_cma:0kB [ 940.228333][T20362] lowmem_reserve[]: 0 0 1 1 1 [ 940.252256][T20362] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 940.342308][T20362] lowmem_reserve[]: 0 0 0 0 0 [ 940.357137][T20225] team0: Port device team_slave_0 added [ 940.368256][T20362] Node 1 Normal free:3892404kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22496kB local_pcp:10528kB free_cma:0kB [ 940.427122][T20225] team0: Port device team_slave_1 added [ 940.494665][T20362] lowmem_reserve[]: 0 0 0 0 0 [ 940.505356][T20362] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 940.531387][T20362] Node 0 DMA32: 4876*4kB (UME) 3859*8kB (UME) 2102*16kB (UME) 2125*32kB (UME) 1089*64kB (UME) 775*128kB (UME) 539*256kB (UME) 317*512kB (UME) 35*1024kB (UM) 3*2048kB (U) 64*4096kB (UM) = 925320kB [ 940.618239][T20362] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 940.643380][T20362] Node 1 Normal: 223*4kB (UE) 57*8kB (UME) 41*16kB (UME) 179*32kB (UME) 38*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3892404kB [ 940.664865][T20225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.683028][T20225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.711768][T20362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.722290][T20362] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 940.732350][T20225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.755815][T20362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.770912][T20225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.793746][T20362] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 940.815445][T20225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.855402][T20362] 55613 total pagecache pages [ 940.860102][T20362] 0 pages in swap cache [ 940.879085][T20362] Free swap = 124984kB [ 940.883247][T20362] Total swap = 124996kB [ 940.925419][T20362] 2097051 pages RAM [ 940.929262][T20362] 0 pages HighMem/MovableOnly [ 940.934437][T20362] 430226 pages reserved [ 940.956771][T20225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.989574][T20362] 0 pages cma reserved [ 941.131593][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.339276][T17027] cgroup: fork rejected by pids controller in /syz9 [ 941.413006][T20225] hsr_slave_0: entered promiscuous mode [ 941.468769][T20225] hsr_slave_1: entered promiscuous mode [ 941.593857][T20444] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 941.656787][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 941.673637][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 941.683479][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 941.693881][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 941.704520][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 942.268798][ T3536] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.525255][ T3536] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.902011][ T3536] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.765501][T19109] Bluetooth: hci0: command tx timeout [ 943.960362][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4372'. [ 943.969413][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4372'. [ 944.047830][ T3536] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.162299][T20476] loop4: detected capacity change from 0 to 2048 [ 944.249090][T19452] loop4: p2 p3 p7 [ 944.403861][ T5871] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 944.415696][ T5871] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 944.447103][ T5871] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 944.457297][ T5871] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 944.471284][ T5871] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 944.518513][T20476] loop4: p2 p3 p7 [ 944.879649][ T5229] loop4: p2 p3 p7 [ 945.397048][T20494] loop6: detected capacity change from 0 to 512 [ 945.520124][T19452] udevd[19452]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 945.572961][T20494] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.4376: error while reading EA inode 32 err=-116 [ 945.650077][T19814] udevd[19814]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 945.666234][T19444] udevd[19444]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 945.702878][T20494] EXT4-fs (loop6): Remounting filesystem read-only [ 945.755550][T20494] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 945.803505][T20494] EXT4-fs (loop6): 1 orphan inode deleted [ 945.854382][T20494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.875997][T19109] Bluetooth: hci0: command tx timeout [ 945.913974][ T3536] bridge_slave_1: left allmulticast mode [ 945.964709][ T3536] bridge_slave_1: left promiscuous mode [ 945.988562][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.999290][T19452] udevd[19452]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 946.009822][T19814] udevd[19814]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 946.017306][T20505] udevd[20505]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 946.052702][ T3536] bridge_slave_0: left allmulticast mode [ 946.079339][ T3536] bridge_slave_0: left promiscuous mode [ 946.116187][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.144092][T19814] udevd[19814]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 946.159246][T19452] udevd[19452]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 946.197692][T20505] udevd[20505]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 946.226610][T14861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.565441][T19109] Bluetooth: hci5: command tx timeout [ 947.245952][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.271703][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.297975][ T3536] bond0 (unregistering): Released all slaves [ 947.472826][ T3536] tipc: Left network mode [ 948.037172][T20448] chnl_net:caif_netlink_parms(): no params data found [ 948.178065][T19109] Bluetooth: hci0: command tx timeout [ 948.657146][T19109] Bluetooth: hci5: command tx timeout [ 948.820349][T20225] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 948.858347][T20225] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 948.877155][T20225] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 948.892195][T20225] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 949.109976][T20553] netlink: 'syz.0.4385': attribute type 13 has an invalid length. [ 949.120195][ T3536] hsr_slave_0: left promiscuous mode [ 949.165420][ T3536] hsr_slave_1: left promiscuous mode [ 949.176392][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.193974][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.213407][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.231040][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.350473][ T3536] veth1_macvtap: left promiscuous mode [ 949.382193][ T3536] veth0_macvtap: left promiscuous mode [ 949.401627][ T3536] veth1_vlan: left promiscuous mode [ 949.423433][ T3536] veth0_vlan: left promiscuous mode [ 950.252000][T19109] Bluetooth: hci0: command tx timeout [ 950.443478][ T3536] team0 (unregistering): Port device team_slave_1 removed [ 950.503645][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 950.726021][T19109] Bluetooth: hci5: command tx timeout [ 951.191938][T20577] ip6tnl1: entered allmulticast mode [ 951.231421][T20483] chnl_net:caif_netlink_parms(): no params data found [ 951.322682][T20448] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.341592][T20448] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.350057][T20448] bridge_slave_0: entered allmulticast mode [ 951.359142][T20448] bridge_slave_0: entered promiscuous mode [ 951.373192][T20448] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.380784][T20448] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.388464][T20448] bridge_slave_1: entered allmulticast mode [ 951.397157][T20448] bridge_slave_1: entered promiscuous mode [ 951.711546][T20448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.779912][T20448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.110454][ T3536] IPVS: stop unused estimator thread 0... [ 952.304154][T20448] team0: Port device team_slave_0 added [ 952.324176][T20448] team0: Port device team_slave_1 added [ 952.384158][T20483] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.403780][T20483] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.424316][T20483] bridge_slave_0: entered allmulticast mode [ 952.449516][T20483] bridge_slave_0: entered promiscuous mode [ 952.466767][T20483] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.474006][T20483] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.502322][T20483] bridge_slave_1: entered allmulticast mode [ 952.527765][T20483] bridge_slave_1: entered promiscuous mode [ 952.819825][T19109] Bluetooth: hci5: command tx timeout [ 952.875704][T20448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.901497][T20609] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 952.911564][T20448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.938060][T20609] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 952.944166][T20609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 952.950191][T20448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.974089][T20609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 952.984079][T20609] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 952.984287][T20483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.012249][T20448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.026200][T20609] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 953.035170][T20448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.066874][T20609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 953.074009][T20609] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 953.089625][T20448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.101957][T20609] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 953.139252][T20609] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 953.159968][T20483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.164805][T20609] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 953.217398][T20609] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 953.411677][T20483] team0: Port device team_slave_0 added [ 953.734601][T20448] hsr_slave_0: entered promiscuous mode [ 954.527701][T20448] hsr_slave_1: entered promiscuous mode [ 954.563455][T20448] debugfs: 'hsr0' already exists in 'hsr' [ 954.575442][T20448] Cannot create hsr debugfs directory [ 954.643027][T20483] team0: Port device team_slave_1 added [ 954.808665][T19109] Bluetooth: hci3: command 0x0c1a tx timeout [ 954.965499][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout [ 954.971604][T19109] Bluetooth: hci2: command 0x041b tx timeout [ 955.045584][T19109] Bluetooth: hci1: command 0x0c1a tx timeout [ 955.125523][T19109] Bluetooth: hci0: command 0x0c1a tx timeout [ 955.205644][T19109] Bluetooth: hci5: command 0x0c1a tx timeout [ 955.288371][T20483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.307407][T20483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.388013][T20483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.435579][T20483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.442552][T20483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.500931][T20483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.584462][T20654] loop6: detected capacity change from 0 to 512 [ 955.647149][T20654] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 955.714697][T20654] EXT4-fs (loop6): 1 truncate cleaned up [ 955.728001][T20654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.145215][T20483] hsr_slave_0: entered promiscuous mode [ 956.184496][T20483] hsr_slave_1: entered promiscuous mode [ 956.228932][T20483] debugfs: 'hsr0' already exists in 'hsr' [ 956.253252][T20483] Cannot create hsr debugfs directory [ 956.334860][T20225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.126460][T19109] Bluetooth: hci1: command 0x0c1a tx timeout [ 957.205910][T19109] Bluetooth: hci0: command 0x0c1a tx timeout [ 957.291178][T19109] Bluetooth: hci5: command 0x0c1a tx timeout [ 957.388676][T20225] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.637579][ T6052] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.644766][ T6052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.718979][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.726174][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 957.729821][T14861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.019501][T20692] loop6: detected capacity change from 0 to 128 [ 958.040256][T20448] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 958.185145][T20448] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 958.245230][T20448] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 958.336393][T20448] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 958.990804][T20225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.063116][T20724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4421'. [ 959.208398][T19109] Bluetooth: hci1: command 0x0c1a tx timeout [ 959.285510][T19109] Bluetooth: hci0: command 0x0c1a tx timeout [ 959.368388][T19109] Bluetooth: hci5: command 0x0c1a tx timeout [ 959.532704][T20483] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 959.700730][T20483] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 959.826291][T20483] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 959.879290][T20483] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 960.178131][T20483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.241091][T20483] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.347053][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.354287][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.384887][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.392110][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.660223][T20448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.818298][T20483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 960.967734][T20448] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.040356][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4428'. [ 961.049758][T20763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4428'. [ 961.296674][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.303819][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.423406][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.430613][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.585328][T20225] veth0_vlan: entered promiscuous mode [ 961.844890][T20225] veth1_vlan: entered promiscuous mode [ 961.955881][T20483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.269558][T20225] veth0_macvtap: entered promiscuous mode [ 962.323741][T20225] veth1_macvtap: entered promiscuous mode [ 962.403554][T20225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.471791][T20225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.550713][ T1147] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.608206][ T1147] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.633974][ T1147] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.714681][ T1147] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.025087][T18427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.084922][T18427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.241240][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.266657][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.460308][T20448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.575243][T20483] veth0_vlan: entered promiscuous mode [ 963.660868][T20483] veth1_vlan: entered promiscuous mode [ 963.809987][T20483] veth0_macvtap: entered promiscuous mode [ 963.923901][T20483] veth1_macvtap: entered promiscuous mode [ 964.034265][T20483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.108073][T20483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.186674][ T1147] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.229190][ T1147] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.308357][ T1147] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.365486][ T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.714437][T18427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.772179][T18427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.905038][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.926394][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.395129][T20448] veth0_vlan: entered promiscuous mode [ 965.477940][T20448] veth1_vlan: entered promiscuous mode [ 965.606974][T20448] veth0_macvtap: entered promiscuous mode [ 965.652669][T20448] veth1_macvtap: entered promiscuous mode [ 965.750942][T20448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 965.922622][T20448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.009610][ T6052] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.050515][ T6052] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.128537][ T6052] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.161445][ T6052] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.353664][T20883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4452'. [ 966.610003][T17499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.662493][T17499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.819045][T18427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.851429][T18427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.296712][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4469'. [ 968.338761][T20933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4469'. [ 970.488445][T20993] overlayfs: failed to clone upperpath [ 972.968216][T21032] overlayfs: upper fs does not support file handles, falling back to index=off. [ 973.006370][T21033] loop6: detected capacity change from 0 to 512 [ 973.057411][T21032] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 973.189497][T21033] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.4502: error while reading EA inode 32 err=-116 [ 973.256547][T21033] EXT4-fs (loop6): Remounting filesystem read-only [ 973.263195][T21033] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 973.345734][T21033] EXT4-fs (loop6): 1 orphan inode deleted [ 973.387126][T21033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 973.870554][T11712] kernel write not supported for file [eventfd] (pid: 11712 comm: kworker/0:1) [ 974.334643][T14861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.777469][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4514'. [ 974.805894][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4514'. [ 975.384574][T21089] netlink: 'syz.4.4516': attribute type 13 has an invalid length. [ 975.552767][T21093] loop6: detected capacity change from 0 to 2048 [ 975.762233][T20505] loop6: p2 p3 p7 [ 975.888466][T21093] loop6: p2 p3 p7 [ 976.591475][T20505] udevd[20505]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 976.600849][T19814] udevd[19814]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 976.624172][T19452] udevd[19452]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 976.801440][T20505] udevd[20505]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 976.844727][T19452] udevd[19452]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 976.867667][T19814] udevd[19814]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 976.990102][T21065] warn_alloc: 3 callbacks suppressed [ 976.990130][T21065] syz.9.4512: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 977.065856][T21065] CPU: 0 UID: 0 PID: 21065 Comm: syz.9.4512 Not tainted syzkaller #0 PREEMPT(full) [ 977.065908][T21065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 977.065931][T21065] Call Trace: [ 977.065943][T21065] [ 977.065957][T21065] dump_stack_lvl+0x16c/0x1f0 [ 977.066024][T21065] warn_alloc+0x248/0x3a0 [ 977.066092][T21065] ? __pfx_warn_alloc+0x10/0x10 [ 977.066172][T21065] ? hash_netport4_resize+0x1d8/0x1c50 [ 977.066219][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.066265][T21065] ? __vmalloc_node_noprof+0xad/0xf0 [ 977.066324][T21065] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 977.066376][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.066437][T21065] ? hash_netport4_resize+0x1d8/0x1c50 [ 977.066498][T21065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 977.066557][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.066602][T21065] ? ___kmalloc_large_node+0xed/0x160 [ 977.066649][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.066702][T21065] __kvmalloc_node_noprof+0x30a/0x620 [ 977.066759][T21065] ? hash_netport4_resize+0x1d8/0x1c50 [ 977.066806][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.066852][T21065] ? __kmalloc_noprof+0x242/0x510 [ 977.066907][T21065] ? hash_netport4_resize+0x1d8/0x1c50 [ 977.066954][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.067009][T21065] ? hash_netport4_resize+0x1d8/0x1c50 [ 977.067061][T21065] hash_netport4_resize+0x1d8/0x1c50 [ 977.067112][T21065] ? __pfx_hash_netport4_add+0x10/0x10 [ 977.067161][T21065] ? __pfx_hash_netport4_uadt+0x10/0x10 [ 977.067201][T21065] ? __pfx___mutex_lock+0x10/0x10 [ 977.067244][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.067301][T21065] ? __pfx_hash_netport4_resize+0x10/0x10 [ 977.067352][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.067409][T21065] call_ad.constprop.0+0x36d/0x940 [ 977.067458][T21065] ? __pfx_hash_netport4_resize+0x10/0x10 [ 977.067513][T21065] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 977.067560][T21065] ? __pfx___nla_validate_parse+0x10/0x10 [ 977.067609][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.067657][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.067715][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.067760][T21065] ? __nla_parse+0x40/0x60 [ 977.067809][T21065] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 977.067871][T21065] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 977.067926][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.067972][T21065] ? call_rcu_tasks_generic+0x400/0x920 [ 977.068081][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.068127][T21065] ? find_held_lock+0x2b/0x80 [ 977.068177][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.068233][T21065] nfnetlink_rcv_msg+0x9fc/0x1200 [ 977.068300][T21065] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 977.068357][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.068402][T21065] ? consume_skb+0xcc/0x100 [ 977.068486][T21065] ? __pfx___dev_queue_xmit+0x10/0x10 [ 977.068549][T21065] netlink_rcv_skb+0x158/0x420 [ 977.068586][T21065] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 977.068639][T21065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 977.068673][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.068743][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.068789][T21065] ? ns_capable+0xd7/0x110 [ 977.068841][T21065] nfnetlink_rcv+0x1b3/0x430 [ 977.068888][T21065] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 977.068934][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.068980][T21065] ? netlink_deliver_tap+0x1ae/0xd30 [ 977.069057][T21065] netlink_unicast+0x5aa/0x870 [ 977.069101][T21065] ? __pfx_netlink_unicast+0x10/0x10 [ 977.069165][T21065] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 977.069226][T21065] ? __lock_acquire+0xb97/0x1ce0 [ 977.069301][T21065] netlink_sendmsg+0x8d1/0xdd0 [ 977.069346][T21065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.069380][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.069433][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.069478][T21065] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 977.069530][T21065] ____sys_sendmsg+0xa98/0xc70 [ 977.069574][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.069621][T21065] ? copy_msghdr_from_user+0x10a/0x160 [ 977.069681][T21065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.069738][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.069794][T21065] ___sys_sendmsg+0x134/0x1d0 [ 977.069858][T21065] ? __pfx____sys_sendmsg+0x10/0x10 [ 977.069945][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.070029][T21065] __sys_sendmsg+0x16d/0x220 [ 977.070097][T21065] ? __pfx___sys_sendmsg+0x10/0x10 [ 977.070155][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.070201][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.070267][T21065] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.070326][T21065] do_syscall_64+0xcd/0x4e0 [ 977.070365][T21065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.070404][T21065] RIP: 0033:0x7fe0d618eba9 [ 977.070433][T21065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.070471][T21065] RSP: 002b:00007fe0d6f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.070507][T21065] RAX: ffffffffffffffda RBX: 00007fe0d63d5fa0 RCX: 00007fe0d618eba9 [ 977.070533][T21065] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000e [ 977.070558][T21065] RBP: 00007fe0d6211e19 R08: 0000000000000000 R09: 0000000000000000 [ 977.070582][T21065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.070614][T21065] R13: 00007fe0d63d6038 R14: 00007fe0d63d5fa0 R15: 00007fffe260ea98 [ 977.070669][T21065] [ 977.655192][T21065] Mem-Info: [ 977.672712][T21065] active_anon:15665 inactive_anon:0 isolated_anon:0 [ 977.672712][T21065] active_file:13325 inactive_file:40719 isolated_file:0 [ 977.672712][T21065] unevictable:768 dirty:69 writeback:0 [ 977.672712][T21065] slab_reclaimable:12204 slab_unreclaimable:178008 [ 977.672712][T21065] mapped:43159 shmem:8297 pagetables:2056 [ 977.672712][T21065] sec_pagetables:0 bounce:0 [ 977.672712][T21065] kernel_misc_reclaimable:0 [ 977.672712][T21065] free:1170537 free_pcp:47208 free_cma:0 [ 977.776869][T21065] Node 0 active_anon:65424kB inactive_anon:0kB active_file:53300kB inactive_file:162652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:175312kB dirty:292kB writeback:0kB shmem:34348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14036kB pagetables:8136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 977.809506][T21065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 977.839645][T21065] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 977.869016][T21065] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 977.896547][T21065] Node 0 DMA32 free:774952kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65776kB inactive_anon:0kB active_file:53300kB inactive_file:161328kB unevictable:1536kB writepending:292kB present:3129332kB managed:2539452kB mlocked:0kB bounce:0kB free_pcp:162348kB local_pcp:116140kB free_cma:0kB [ 978.050197][T21065] lowmem_reserve[]: 0 0 1 1 1 [ 978.055023][T21065] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 978.058242][T21122] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 978.088318][T21065] lowmem_reserve[]: 0 0 0 0 0 [ 978.095801][T21065] Node 1 Normal free:3892404kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22496kB local_pcp:10528kB free_cma:0kB [ 978.127167][T21065] lowmem_reserve[]: 0 0 0 0 0 [ 978.131931][T21065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 978.146257][T21065] Node 0 DMA32: 1255*4kB (UME) 559*8kB (UME) 87*16kB (ME) 1453*32kB (UME) 925*64kB (UME) 463*128kB (UME) 504*256kB (UME) 314*512kB (UME) 34*1024kB (UM) 2*2048kB (UM) 69*4096kB (UM) = 787172kB [ 978.165603][T21065] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 978.177962][T21065] Node 1 Normal: 223*4kB (UE) 57*8kB (UME) 41*16kB (UME) 179*32kB (UME) 38*64kB (UME) 10*128kB (UME) 6*256kB (UME) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3892404kB [ 978.247246][T21065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 978.275764][T21122] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 978.286882][T21065] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 978.325392][T21065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 978.340062][T21122] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 978.350222][T21065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 978.359913][T21122] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 978.385381][T21065] 61296 total pagecache pages [ 978.393829][T21065] 0 pages in swap cache [ 978.399292][T21122] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 978.405251][T21065] Free swap = 124996kB [ 978.409752][T21065] Total swap = 124996kB [ 978.413973][T21065] 2097051 pages RAM [ 978.425424][T21065] 0 pages HighMem/MovableOnly [ 978.430168][T21065] 430226 pages reserved [ 978.435802][T21122] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 978.455586][T21065] 0 pages cma reserved [ 978.957950][T21150] loop9: detected capacity change from 0 to 2048 [ 979.047073][T19109] Bluetooth: hci3: command 0x0c1a tx timeout [ 979.064859][T20505] loop9: p2 p3 p7 [ 979.212282][T21150] loop9: p2 p3 p7 [ 979.358835][ T5943] IPVS: starting estimator thread 0... [ 979.500346][T21164] IPVS: using max 21 ests per chain, 50400 per kthread [ 980.220679][T17499] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.327730][T19109] Bluetooth: hci2: command 0x041b tx timeout [ 980.334419][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout [ 980.406289][T19109] Bluetooth: hci0: command 0x0c1a tx timeout [ 980.485393][T19109] Bluetooth: hci5: command 0x0c1a tx timeout [ 980.535875][T20505] udevd[20505]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 980.582120][T19452] udevd[19452]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 980.594929][T19814] udevd[19814]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 980.713353][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4545'. [ 980.775946][T21177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4547'. [ 980.784840][T21177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4547'. [ 980.809359][T17499] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.958054][T21175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 981.075867][T21180] vlan1: entered promiscuous mode [ 981.080938][T21180] bond2: entered promiscuous mode [ 981.114911][T21180] vlan1: entered allmulticast mode [ 981.144994][T21180] bond2: entered allmulticast mode [ 981.268933][T21182] gretap1: entered promiscuous mode [ 981.303545][T21182] gretap1: entered allmulticast mode [ 981.332740][T21182] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 981.488546][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 981.501867][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 981.510767][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 981.522485][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 981.532709][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 981.732882][T17499] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.057718][T17499] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.201855][T17499] bridge_slave_1: left allmulticast mode [ 983.617544][ T5871] Bluetooth: hci1: command tx timeout [ 983.981749][T17499] bridge_slave_1: left promiscuous mode [ 983.989113][T17499] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.079904][T17499] bridge_slave_0: left allmulticast mode [ 984.117545][T17499] bridge_slave_0: left promiscuous mode [ 984.149560][T17499] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.582197][T17499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.606376][T17499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.628093][T17499] bond0 (unregistering): Released all slaves [ 985.685915][ T5871] Bluetooth: hci1: command tx timeout [ 986.039063][T21278] netlink: 'syz.6.4570': attribute type 4 has an invalid length. [ 986.126164][T21278] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4570'. [ 986.662086][T21197] chnl_net:caif_netlink_parms(): no params data found [ 987.375485][T17499] hsr_slave_0: left promiscuous mode [ 987.433634][T17499] hsr_slave_1: left promiscuous mode [ 987.474866][T17499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.483344][T17499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.513776][T17499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.546006][T17499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.620375][T17499] veth1_macvtap: left promiscuous mode [ 987.634805][T17499] veth0_macvtap: left promiscuous mode [ 987.652697][T17499] veth1_vlan: left promiscuous mode [ 987.675533][T17499] veth0_vlan: left promiscuous mode [ 987.765892][ T5871] Bluetooth: hci1: command tx timeout [ 987.774698][ T30] audit: type=1326 audit(1757956399.874:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.9.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d618eba9 code=0x7ffc0000 [ 987.833409][ T30] audit: type=1326 audit(1757956399.874:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.9.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d618eba9 code=0x7ffc0000 [ 987.950982][ T30] audit: type=1326 audit(1757956399.974:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.9.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0d618eba9 code=0x7ffc0000 [ 988.058364][ T30] audit: type=1326 audit(1757956399.974:4320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.9.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d618eba9 code=0x7ffc0000 [ 988.175400][ T30] audit: type=1326 audit(1757956399.974:4321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.9.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d618eba9 code=0x7ffc0000 [ 988.295472][ T30] audit: type=1326 audit(1757956399.974:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.9.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0d618eba9 code=0x7ffc0000 [ 988.434262][ T30] audit: type=1107 audit(1757956399.974:4323): pid=21301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 988.481117][ T30] audit: type=1326 audit(1757956399.974:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.9.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d618eba9 code=0x7ffc0000 [ 988.624005][ T30] audit: type=1326 audit(1757956399.974:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21301 comm="syz.9.4577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d618eba9 code=0x7ffc0000 [ 989.543438][T21319] loop9: detected capacity change from 0 to 512 [ 989.673006][T21319] EXT4-fs error (device loop9): ext4_xattr_inode_iget:440: comm syz.9.4582: error while reading EA inode 32 err=-116 [ 989.729496][T21319] EXT4-fs (loop9): Remounting filesystem read-only [ 989.762440][T21319] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 989.795387][T21319] EXT4-fs (loop9): 1 orphan inode deleted [ 989.810791][T21319] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.854722][ T5871] Bluetooth: hci1: command tx timeout [ 990.555602][T17499] team0 (unregistering): Port device team_slave_1 removed [ 990.620003][T17499] team0 (unregistering): Port device team_slave_0 removed [ 991.624065][T20483] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.640169][T21197] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.672458][T21197] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.688188][T21197] bridge_slave_0: entered allmulticast mode [ 992.745536][T21197] bridge_slave_0: entered promiscuous mode [ 992.887793][T21197] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.897997][T21197] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.916812][T21197] bridge_slave_1: entered allmulticast mode [ 992.934177][T21197] bridge_slave_1: entered promiscuous mode [ 993.131094][T21364] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4592'. [ 993.146528][T21197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.192975][T21197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.309625][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4592'. [ 993.419668][T21366] hsr_slave_0: left promiscuous mode [ 993.444379][T21366] hsr_slave_1: left promiscuous mode [ 993.524354][T21197] team0: Port device team_slave_0 added [ 993.644551][T21368] bond1: entered promiscuous mode [ 993.651246][T21368] bond1: entered allmulticast mode [ 993.657401][T21368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 993.914325][T21368] bond1 (unregistering): Released all slaves [ 994.061847][T21197] team0: Port device team_slave_1 added [ 994.253637][T21197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.307225][T21197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.364249][T21197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.503805][T21379] syzkaller0: entered promiscuous mode [ 994.526495][T21379] syzkaller0: entered allmulticast mode [ 994.583228][T21197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.623864][T21197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.682676][T21197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.984578][T21391] netlink: 'syz.0.4599': attribute type 10 has an invalid length. [ 995.324910][T21197] hsr_slave_0: entered promiscuous mode [ 995.363879][T21197] hsr_slave_1: entered promiscuous mode [ 995.965338][T21402] pim6reg: entered allmulticast mode [ 996.035439][T21404] bridge_slave_0: left allmulticast mode [ 996.041101][T21404] bridge_slave_0: left promiscuous mode [ 996.085883][T21404] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.142120][T21404] bridge_slave_1: left allmulticast mode [ 996.189568][T21404] bridge_slave_1: left promiscuous mode [ 996.231983][T21404] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.306110][T21404] bond0: (slave bond_slave_0): Releasing backup interface [ 996.362377][T21404] bond0: (slave bond_slave_1): Releasing backup interface [ 996.413210][T21393] infiniband syz!: set active [ 996.434921][T21393] infiniband syz!: added team_slave_0 [ 996.441500][T21404] team0: Port device team_slave_0 removed [ 996.479751][T21393] syz!: rxe_create_cq: returned err = -12 [ 996.490316][T21404] team0: Port device team_slave_1 removed [ 996.525416][T21393] infiniband syz!: Couldn't create ib_mad CQ [ 996.545735][T21393] infiniband syz!: Couldn't open port 1 [ 996.564308][T21405] pim6reg: left allmulticast mode [ 996.687361][T21393] RDS/IB: syz!: added [ 996.716823][T21393] smc: adding ib device syz! with port count 1 [ 996.758511][T21393] smc: ib device syz! port 1 has pnetid [ 997.140477][ T30] audit: type=1326 audit(1757956409.244:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 997.207370][ T30] audit: type=1326 audit(1757956409.274:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 997.308785][ T30] audit: type=1326 audit(1757956409.274:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 997.352591][ T30] audit: type=1326 audit(1757956409.274:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 997.449790][ T30] audit: type=1326 audit(1757956409.274:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 997.588905][ T30] audit: type=1326 audit(1757956409.274:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 997.627525][ T30] audit: type=1326 audit(1757956409.274:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 998.225390][ T30] audit: type=1326 audit(1757956409.274:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 998.369948][ T30] audit: type=1326 audit(1757956409.274:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 998.453017][ T30] audit: type=1326 audit(1757956409.274:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21420 comm="syz.7.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8430d8eba9 code=0x7ffc0000 [ 998.611520][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4615'. [ 998.624083][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4615'. [ 998.882239][T21442] loop6: detected capacity change from 0 to 2048 [ 998.977489][T21442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.085682][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4619'. [ 999.168625][T21451] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4619'. [ 999.238875][T21447] bond1: entered promiscuous mode [ 999.244030][T21447] bond1: entered allmulticast mode [ 999.250266][T21447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 999.578170][T21447] bond1 (unregistering): Released all slaves [ 999.607968][T14861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.822842][T21461] loop6: detected capacity change from 0 to 512 [ 999.854405][T21461] EXT4-fs: Ignoring removed oldalloc option [ 999.869283][T21461] EXT4-fs: Ignoring removed bh option [ 999.914061][T21461] EXT4-fs error (device loop6): ext4_iget_extra_inode:5103: inode #15: comm syz.6.4621: corrupted in-inode xattr: e_value size too large [ 999.936328][T21461] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.4621: couldn't read orphan inode 15 (err -117) [ 999.991342][T21461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1000.156671][T21461] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1000.328498][T21469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4624'. [ 1000.613581][T21197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1000.635615][T14861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.678875][T21197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1000.719824][T21197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1000.791702][T21197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1000.883698][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4629'. [ 1000.913659][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4629'. [ 1001.191437][T21197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.269397][T21197] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.367679][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.374940][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.407151][T21498] program syz.6.4634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1001.446815][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.453968][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.506544][T21500] loop7: detected capacity change from 0 to 2048 [ 1001.602665][T21500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1002.766013][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.946379][T21513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1002.952518][T21513] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1002.962924][T21513] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1002.969491][T21513] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1002.975667][T21513] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1002.981765][T21513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1002.987813][T21513] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1003.034013][T21513] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1003.277173][T20448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.404400][T21517] 9pnet: Could not find request transport: 0xffffffffffffffff [ 1003.514596][T21197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1003.663685][T21197] veth0_vlan: entered promiscuous mode [ 1003.677897][T21197] veth1_vlan: entered promiscuous mode [ 1003.887530][T21197] veth0_macvtap: entered promiscuous mode [ 1003.929848][T21197] veth1_macvtap: entered promiscuous mode [ 1004.012719][T21197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.072429][T21197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.133055][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.166640][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.191383][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.236337][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.459199][ T8695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.493296][ T8695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1004.589690][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1004.589714][ T30] audit: type=1326 audit(1757956416.694:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1004.776267][ T30] audit: type=1326 audit(1757956416.724:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1004.802156][ T30] audit: type=1326 audit(1757956416.754:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1004.825489][ T30] audit: type=1326 audit(1757956416.754:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1004.848932][ T30] audit: type=1326 audit(1757956416.754:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1004.915379][ T30] audit: type=1326 audit(1757956416.764:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1004.968404][ T5871] Bluetooth: hci2: command 0x041b tx timeout [ 1004.968553][T19109] Bluetooth: hci4: command 0x0c1a tx timeout [ 1004.974541][ T5871] Bluetooth: hci3: command 0x0c1a tx timeout [ 1005.005502][ T30] audit: type=1326 audit(1757956416.764:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1005.046371][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 1005.046399][T11358] Bluetooth: hci5: command 0x0c1a tx timeout [ 1005.052403][ T5871] Bluetooth: hci0: command 0x0c1a tx timeout [ 1005.065486][ T30] audit: type=1326 audit(1757956416.764:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1005.131095][ T8695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.140887][ T8695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.149426][T21550] loop7: detected capacity change from 0 to 2048 [ 1005.163734][ T30] audit: type=1326 audit(1757956416.764:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1005.190736][ T30] audit: type=1326 audit(1757956416.764:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21542 comm="syz.4.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc89258eba9 code=0x7ffc0000 [ 1005.279257][T21550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.023804][T21570] netlink: 'syz.3.4544': attribute type 13 has an invalid length. [ 1006.160389][T20448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.569553][T21570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.577359][T21570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.994669][T21570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.033325][T21570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.125923][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 1007.869906][T21596] loop7: detected capacity change from 0 to 512 [ 1008.018494][T21596] EXT4-fs error (device loop7): ext4_xattr_inode_iget:440: comm syz.7.4660: error while reading EA inode 32 err=-116 [ 1008.061741][T21596] EXT4-fs (loop7): Remounting filesystem read-only [ 1008.094546][T21596] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 1008.159174][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.180198][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.201623][T21596] EXT4-fs (loop7): 1 orphan inode deleted [ 1008.234905][ T1147] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.256779][T21596] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.279101][ T3536] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.687880][T20448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.067428][T21622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4665'. [ 1009.206084][ T5871] Bluetooth: hci1: command 0x0c1a tx timeout [ 1009.581985][T21628] syzkaller0: entered promiscuous mode [ 1009.599097][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 1009.599120][ T30] audit: type=1326 audit(1757956421.704:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76c6985b67 code=0x7ffc0000 [ 1009.612524][T21628] syzkaller0: entered allmulticast mode [ 1009.745386][ T30] audit: type=1326 audit(1757956421.704:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76c692ada9 code=0x7ffc0000 [ 1009.767680][T21634] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4670'. [ 1009.791326][ T30] audit: type=1326 audit(1757956421.704:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f76c698eba9 code=0x7ffc0000 [ 1009.887250][ T30] audit: type=1326 audit(1757956421.714:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76c6985b67 code=0x7ffc0000 [ 1009.960099][T21638] warning: `syz.7.4671' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1010.129523][ T30] audit: type=1326 audit(1757956421.714:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76c692ada9 code=0x7ffc0000 [ 1010.200704][ T30] audit: type=1326 audit(1757956421.714:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f76c698eba9 code=0x7ffc0000 [ 1010.279748][T21643] syzkaller0: entered promiscuous mode [ 1010.295380][T21643] syzkaller0: entered allmulticast mode [ 1010.325630][ T30] audit: type=1326 audit(1757956421.744:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76c6985b67 code=0x7ffc0000 [ 1010.350452][T21636] usb usb8: usbfs: process 21636 (syz.9.4670) did not claim interface 0 before use [ 1010.408743][ T30] audit: type=1326 audit(1757956421.744:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76c692ada9 code=0x7ffc0000 [ 1010.461059][T21651] loop7: detected capacity change from 0 to 512 [ 1010.478291][ T30] audit: type=1326 audit(1757956421.744:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f76c698eba9 code=0x7ffc0000 [ 1010.512421][T21651] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1010.587910][ T30] audit: type=1326 audit(1757956421.744:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21619 comm="syz.0.4666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76c6985b67 code=0x7ffc0000 [ 1010.633197][T21651] EXT4-fs (loop7): 1 truncate cleaned up [ 1010.677612][T21651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.487508][T21663] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.723635][T21666] loop6: detected capacity change from 0 to 512 [ 1011.803669][T21663] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.853491][T21666] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: comm syz.6.4677: error while reading EA inode 32 err=-116 [ 1011.880586][T21666] EXT4-fs (loop6): Remounting filesystem read-only [ 1011.892741][T21666] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 1011.953076][T21666] EXT4-fs (loop6): 1 orphan inode deleted [ 1011.992119][T21666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.065087][T21678] netlink: 'syz.0.4680': attribute type 13 has an invalid length. [ 1012.227719][T21663] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.599952][T21663] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.374360][T14861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.638266][ T1147] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.700852][T20448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.781386][ T1147] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.815880][ T1147] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.852967][ T1147] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.569852][T21720] sock: sock_set_timeout: `syz.3.4694' (pid 21720) tries to set negative timeout [ 1018.010890][T21772] No control pipe specified [ 1020.040626][T21778] fuse: Bad value for 'fd' [ 1021.842802][T21789] loop7: detected capacity change from 0 to 512 [ 1021.975507][T21789] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1021.989059][T21794] I/O error, dev loop9, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1022.049561][T21794] isofs_fill_super: bread failed, dev=loop9, iso_blknum=16, block=32 [ 1022.075726][T21789] EXT4-fs (loop7): 1 truncate cleaned up [ 1022.083405][T21789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.439239][T21800] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.669271][T21800] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.696365][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 1023.750947][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 1023.848292][T21800] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.037573][T21800] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.216339][ T59] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.300877][ T59] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.559102][ T59] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.611528][T20448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.617446][ T59] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.887441][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1024.887466][ T30] audit: type=1326 audit(1757956436.994:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f58eba9 code=0x7ffc0000 [ 1024.916881][ T30] audit: type=1326 audit(1757956436.994:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f58eba9 code=0x7ffc0000 [ 1025.017869][ T30] audit: type=1326 audit(1757956437.054:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f748f58eba9 code=0x7ffc0000 [ 1025.081076][T21833] loop3: detected capacity change from 0 to 512 [ 1025.125455][ T30] audit: type=1326 audit(1757956437.054:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f58eba9 code=0x7ffc0000 [ 1025.197771][T21833] EXT4-fs (loop3): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 1025.253931][ T30] audit: type=1326 audit(1757956437.054:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f58eba9 code=0x7ffc0000 [ 1025.417013][ T30] audit: type=1326 audit(1757956437.054:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f748f58eba9 code=0x7ffc0000 [ 1025.537234][ T30] audit: type=1326 audit(1757956437.054:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748f58eba9 code=0x7ffc0000 [ 1025.650710][ T30] audit: type=1326 audit(1757956437.054:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f748f58d510 code=0x7ffc0000 [ 1025.805914][ T30] audit: type=1326 audit(1757956437.054:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f748f5903d7 code=0x7ffc0000 [ 1025.925383][ T30] audit: type=1326 audit(1757956437.054:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21828 comm="syz.3.4726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f748f58eba9 code=0x7ffc0000 [ 1029.964725][T21872] input: syz1 as /devices/virtual/input/input5 [ 1030.294847][T21877] loop3: detected capacity change from 0 to 512 [ 1030.563805][T21877] EXT4-fs: Ignoring removed oldalloc option [ 1031.061388][T21877] EXT4-fs: Ignoring removed bh option [ 1031.137488][T21881] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1031.145640][T21881] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1031.153290][T21881] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1031.159446][T21881] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1031.166044][T21881] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1031.172138][T21881] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1031.209926][T21877] EXT4-fs error (device loop3): ext4_iget_extra_inode:5103: inode #15: comm syz.3.4738: corrupted in-inode xattr: e_value size too large [ 1031.281945][T21877] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.4738: couldn't read orphan inode 15 (err -117) [ 1031.340438][T21877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.166321][T21197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.529122][T11358] Bluetooth: hci1: command 0x0c1a tx timeout [ 1033.535167][T11358] Bluetooth: hci5: command 0x0c1a tx timeout [ 1033.541264][T11358] Bluetooth: hci0: command 0x0c1a tx timeout [ 1033.547366][T11358] Bluetooth: hci2: command 0x041b tx timeout [ 1033.550413][ T5871] Bluetooth: hci4: command 0x0c1a tx timeout [ 1033.553378][T11358] Bluetooth: hci3: command 0x0c1a tx timeout [ 1047.586575][T22008] pim6reg: entered allmulticast mode [ 1047.592065][T22011] pim6reg: left allmulticast mode [ 1047.828124][T22009] 9pnet_fd: p9_fd_create_tcp (22009): problem connecting socket to 127.0.0.1 [ 1051.611443][T22046] loop6: detected capacity change from 0 to 512 [ 1051.639762][T22046] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1051.703166][T22046] EXT4-fs (loop6): 1 truncate cleaned up [ 1051.720212][T22046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.697294][T14861] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.327733][T22101] bridge_slave_0: left allmulticast mode [ 1057.333415][T22101] bridge_slave_0: left promiscuous mode [ 1057.526090][T22101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.881281][T22101] bridge_slave_1: left allmulticast mode [ 1057.969058][T22101] bridge_slave_1: left promiscuous mode [ 1057.974889][T22101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.576898][T22110] loop7: detected capacity change from 0 to 512 [ 1058.644038][T22110] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1058.696097][T22101] bond0: (slave bond_slave_0): Releasing backup interface [ 1058.796774][T22101] bond0: (slave bond_slave_1): Releasing backup interface [ 1058.816396][T22110] EXT4-fs (loop7): 1 truncate cleaned up [ 1058.847682][T22110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1058.983511][T22118] loop3: detected capacity change from 0 to 512 [ 1058.990834][T22101] team0: Port device team_slave_0 removed [ 1059.046898][T22101] team0: Port device team_slave_1 removed [ 1059.080084][T22118] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1059.104220][T22101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.123835][T20448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.139270][T22118] EXT4-fs (loop3): 1 truncate cleaned up [ 1059.152082][T22118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.178862][T22101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.382661][T21197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.511759][T22157] ------------[ cut here ]------------ [ 1063.517303][T22157] verifier bug: scc exit: no visit info for call chain (1)(1) [ 1063.565600][T22157] WARNING: CPU: 1 PID: 22157 at kernel/bpf/verifier.c:1949 maybe_exit_scc+0x768/0x8d0 [ 1063.575238][T22157] Modules linked in: [ 1063.579373][T22157] CPU: 1 UID: 0 PID: 22157 Comm: syz.9.4801 Not tainted syzkaller #0 PREEMPT(full) [ 1063.589140][T22157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1063.599427][T22157] RIP: 0010:maybe_exit_scc+0x768/0x8d0 [ 1063.604928][T22157] Code: ff ff e8 6b 82 e8 ff c6 05 83 e2 c0 0e 01 90 48 89 ee 48 89 df e8 f8 47 fb ff 48 c7 c7 00 95 b5 8b 48 89 c6 e8 a9 27 a7 ff 90 <0f> 0b 90 90 e9 4e ff ff ff e8 6a ec 4d 00 e9 7f f9 ff ff 4c 8b 4c [ 1063.624673][T22157] RSP: 0018:ffffc9000bbdf500 EFLAGS: 00010282 [ 1063.630834][T22157] RAX: 0000000000000000 RBX: ffff888050e10000 RCX: ffffc9000bff9000 [ 1063.639151][T22157] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 1063.647619][T22157] RBP: ffff888050e16328 R08: 0000000000000001 R09: 0000000000000000 [ 1063.656063][T22157] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200177bea7 [ 1063.664056][T22157] R13: 0000000000000000 R14: ffff888053228c00 R15: dffffc0000000000 [ 1063.672337][T22157] FS: 00007fe0d6f676c0(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 1063.681317][T22157] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1063.688170][T22157] CR2: 00007f6a1ce3e80e CR3: 000000006248d000 CR4: 0000000000350ef0 [ 1063.696362][T22157] Call Trace: [ 1063.699646][T22157] [ 1063.702594][T22157] ? __pfx_maybe_exit_scc+0x10/0x10 [ 1063.707867][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.713529][T22157] ? check_atomic_rmw+0xa26/0x1100 [ 1063.718746][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.724416][T22157] ? check_atomic_rmw+0x81/0x1100 [ 1063.729549][T22157] do_check_common+0x20cc/0xb410 [ 1063.734587][T22157] ? __pfx_do_check_common+0x10/0x10 [ 1063.739956][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.745751][T22157] ? lockdep_hardirqs_on+0x51/0x110 [ 1063.751006][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.756711][T22157] ? kfree+0x2b4/0x4d0 [ 1063.760826][T22157] ? bpf_check+0x7cf8/0xc4d0 [ 1063.765515][T22157] bpf_check+0x8763/0xc4d0 [ 1063.770024][T22157] ? __pfx_bpf_check+0x10/0x10 [ 1063.774830][T22157] ? __lock_acquire+0xb97/0x1ce0 [ 1063.779884][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.785581][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.791477][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.797399][T22157] ? __asan_memset+0x23/0x50 [ 1063.802030][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.807739][T22157] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 1063.812798][T22157] bpf_prog_load+0xe41/0x2490 [ 1063.817585][T22157] ? __pfx_bpf_prog_load+0x10/0x10 [ 1063.822768][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.828500][T22157] __sys_bpf+0x4a3f/0x4de0 [ 1063.832955][T22157] ? __pfx___sys_bpf+0x10/0x10 [ 1063.837882][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.843545][T22157] ? cap_capable+0xb3/0x250 [ 1063.848100][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.853770][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.859508][T22157] ? do_futex+0x122/0x350 [ 1063.863887][T22157] ? __pfx_do_futex+0x10/0x10 [ 1063.868710][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.874372][T22157] ? xfd_validate_state+0x61/0x180 [ 1063.879611][T22157] __x64_sys_bpf+0x78/0xc0 [ 1063.884056][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1063.889780][T22157] ? lockdep_hardirqs_on+0x7c/0x110 [ 1063.895242][T22157] do_syscall_64+0xcd/0x4e0 [ 1063.900010][T22157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.905969][T22157] RIP: 0033:0x7fe0d618eba9 [ 1063.910409][T22157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.930174][T22157] RSP: 002b:00007fe0d6f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1063.938656][T22157] RAX: ffffffffffffffda RBX: 00007fe0d63d5fa0 RCX: 00007fe0d618eba9 [ 1063.946710][T22157] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1063.954705][T22157] RBP: 00007fe0d6211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1063.962982][T22157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.971019][T22157] R13: 00007fe0d63d6038 R14: 00007fe0d63d5fa0 R15: 00007fffe260ea98 [ 1063.979067][T22157] [ 1063.982098][T22157] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1063.989383][T22157] CPU: 1 UID: 0 PID: 22157 Comm: syz.9.4801 Not tainted syzkaller #0 PREEMPT(full) [ 1063.998765][T22157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1064.008820][T22157] Call Trace: [ 1064.012097][T22157] [ 1064.015025][T22157] dump_stack_lvl+0x3d/0x1f0 [ 1064.019643][T22157] vpanic+0x6e8/0x7a0 [ 1064.023656][T22157] ? __pfx_vpanic+0x10/0x10 [ 1064.028187][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.033840][T22157] ? maybe_exit_scc+0x768/0x8d0 [ 1064.038710][T22157] panic+0xca/0xd0 [ 1064.042461][T22157] ? __pfx_panic+0x10/0x10 [ 1064.046919][T22157] check_panic_on_warn+0xab/0xb0 [ 1064.051865][T22157] __warn+0xf6/0x3c0 [ 1064.055762][T22157] ? preempt_schedule_notrace+0x62/0xe0 [ 1064.061330][T22157] ? maybe_exit_scc+0x768/0x8d0 [ 1064.066201][T22157] report_bug+0x3c3/0x580 [ 1064.070554][T22157] ? maybe_exit_scc+0x768/0x8d0 [ 1064.075426][T22157] handle_bug+0x184/0x210 [ 1064.079764][T22157] exc_invalid_op+0x17/0x50 [ 1064.084274][T22157] asm_exc_invalid_op+0x1a/0x20 [ 1064.089130][T22157] RIP: 0010:maybe_exit_scc+0x768/0x8d0 [ 1064.094607][T22157] Code: ff ff e8 6b 82 e8 ff c6 05 83 e2 c0 0e 01 90 48 89 ee 48 89 df e8 f8 47 fb ff 48 c7 c7 00 95 b5 8b 48 89 c6 e8 a9 27 a7 ff 90 <0f> 0b 90 90 e9 4e ff ff ff e8 6a ec 4d 00 e9 7f f9 ff ff 4c 8b 4c [ 1064.114219][T22157] RSP: 0018:ffffc9000bbdf500 EFLAGS: 00010282 [ 1064.120292][T22157] RAX: 0000000000000000 RBX: ffff888050e10000 RCX: ffffc9000bff9000 [ 1064.128264][T22157] RDX: 0000000000080000 RSI: ffffffff817a4395 RDI: 0000000000000001 [ 1064.136235][T22157] RBP: ffff888050e16328 R08: 0000000000000001 R09: 0000000000000000 [ 1064.144203][T22157] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200177bea7 [ 1064.152171][T22157] R13: 0000000000000000 R14: ffff888053228c00 R15: dffffc0000000000 [ 1064.160155][T22157] ? __warn_printk+0x1a5/0x350 [ 1064.164963][T22157] ? __pfx_maybe_exit_scc+0x10/0x10 [ 1064.170177][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.175824][T22157] ? check_atomic_rmw+0xa26/0x1100 [ 1064.180956][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.186600][T22157] ? check_atomic_rmw+0x81/0x1100 [ 1064.191656][T22157] do_check_common+0x20cc/0xb410 [ 1064.196676][T22157] ? __pfx_do_check_common+0x10/0x10 [ 1064.201987][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.207634][T22157] ? lockdep_hardirqs_on+0x51/0x110 [ 1064.212876][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.218519][T22157] ? kfree+0x2b4/0x4d0 [ 1064.222602][T22157] ? bpf_check+0x7cf8/0xc4d0 [ 1064.227223][T22157] bpf_check+0x8763/0xc4d0 [ 1064.231702][T22157] ? __pfx_bpf_check+0x10/0x10 [ 1064.236493][T22157] ? __lock_acquire+0xb97/0x1ce0 [ 1064.241474][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.247121][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.252810][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.258454][T22157] ? __asan_memset+0x23/0x50 [ 1064.263063][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.268706][T22157] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 1064.273753][T22157] bpf_prog_load+0xe41/0x2490 [ 1064.278449][T22157] ? __pfx_bpf_prog_load+0x10/0x10 [ 1064.283603][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.289251][T22157] __sys_bpf+0x4a3f/0x4de0 [ 1064.293686][T22157] ? __pfx___sys_bpf+0x10/0x10 [ 1064.298465][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.304110][T22157] ? cap_capable+0xb3/0x250 [ 1064.308621][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.314276][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.319922][T22157] ? do_futex+0x122/0x350 [ 1064.324282][T22157] ? __pfx_do_futex+0x10/0x10 [ 1064.329011][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.334659][T22157] ? xfd_validate_state+0x61/0x180 [ 1064.339810][T22157] __x64_sys_bpf+0x78/0xc0 [ 1064.344242][T22157] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1064.349886][T22157] ? lockdep_hardirqs_on+0x7c/0x110 [ 1064.355110][T22157] do_syscall_64+0xcd/0x4e0 [ 1064.359620][T22157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.365522][T22157] RIP: 0033:0x7fe0d618eba9 [ 1064.369941][T22157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1064.389554][T22157] RSP: 002b:00007fe0d6f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1064.397978][T22157] RAX: ffffffffffffffda RBX: 00007fe0d63d5fa0 RCX: 00007fe0d618eba9 [ 1064.405950][T22157] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1064.413922][T22157] RBP: 00007fe0d6211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1064.421892][T22157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.429864][T22157] R13: 00007fe0d63d6038 R14: 00007fe0d63d5fa0 R15: 00007fffe260ea98 [ 1064.437866][T22157] [ 1064.441091][T22157] Kernel Offset: disabled [ 1064.445408][T22157] Rebooting in 86400 seconds..