last executing test programs: 2m20.670969333s ago: executing program 32 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) 1m55.023271685s ago: executing program 2 (id=270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000580)={0x1c, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfd, 0x2b6, &(0x7f0000000980)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf5, 0x320, &(0x7f0000000a40)="$eJzs3c9rM0Ucx/FPfmf7+JgeREQUhkcQRVzagvenSAtiQGkbwQrC1m41ZJuUbCxExOYgCP4JHnrwKIII3ryIeO3Fv8BfN0HqyYLFld1NtvmxpKla2z59vw7NNDvfmdmZnTJM02lZ2m3s+PafQV7SfZnfJQWxA8V6eva7wx+fXP/2ofh7Y1aXNzKSspLeeP/ze9907rz21cNfl3Q0/+avx0u/HD2xIf218Y6ypu6bZliW2Wq1OmGM2a77DduYVz3X8V1Tb/puu2Oc6Lqz5blmx2vt7XWN09y+O7fXdn3fOM2uabhd02mZTrtrnLedetPYtm3uzgmS5pNUduJaZlpg7bOTINBxQVKpFw57Su7eIFEox6+lf9laXCPR+IcTNB7/qXknHo6cwtjLbB4u2UmQT8a/yFjeOvH8/+mTWeY/Hjzrr2++vFytrqwZEy4FP9qv7dfi1/j6D3dUlydXh2vPbZ4mS8PwUcmEX1dfqq4smMi8nt496Mcf7L/7W/Q0Le/04xdVCdcpQ/EaxC/G8WYkvlbQ3HD8kip6ZCzeiuOXBvHKDsUX9cxTQ/G2Kvr+LbXkaTta4p7V/8GiMS++Uh2r34ryAQAAAAAAAABwE9kmcbZ/n0l+1WvZdin6xEdy3dLIRwCS/fUFVXSavr+/kLq/n9fj+au6awAAAAAAbhe/+17D8Ty3ffGEZsiT+9SaUkVBUpiQPrwXNmZqgY/2Wzx2KSwjJaooabKc3Cxt7iesF+L6vljrN0z/tKP+w0S+32ODd7KShvPEf6wR3rz35SCPldY/fvZCD8DHxcmedzyv/L92wvCdKgiC1MwqX/TBVtSHpdQbnCWROR2881hq/wSZ88sJHK8QvzOYmOfVfj99OsyYCEc/buF4Rz3/c1yuN+WHxh/JFh8AAACAG+Rs9Z+76qYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrjZz+ZaWfpZd6Cp0mzh5T/1/ETxzbJvVGK+XcfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX0N8BAAD//9XFrm4=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x24) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r2, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r1, &(0x7f0000000000)=""/49, 0x31) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r3, &(0x7f0000000440)='./file0\x00', r1, &(0x7f0000000200)='./file7\x00', 0x0) getdents64(r1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file7\x00', 0x0, 0x18}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setuid(0x0) 1m54.939733675s ago: executing program 2 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x2000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xa0}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) 1m54.707337359s ago: executing program 2 (id=277): ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3d, &(0x7f0000000100)={@local, @empty, @void, {@generic={0x88ca, "fa00"/47}}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d0926bd70000200000007000000", @ANYRES32=r8, @ANYBLOB="20000200", @ANYRES32=0x0, @ANYBLOB="00010200000000000000000000000000000000008edd000020000100", @ANYRES32=r8, @ANYBLOB="00020000ff"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1m54.648557679s ago: executing program 33 (id=277): ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3d, &(0x7f0000000100)={@local, @empty, @void, {@generic={0x88ca, "fa00"/47}}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d0926bd70000200000007000000", @ANYRES32=r8, @ANYBLOB="20000200", @ANYRES32=0x0, @ANYBLOB="00010200000000000000000000000000000000008edd000020000100", @ANYRES32=r8, @ANYBLOB="00020000ff"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1m32.562621852s ago: executing program 3 (id=579): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048040) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x812, &(0x7f0000000480)=ANY=[], 0x1, 0x2b8, &(0x7f0000000580)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x600, 0x100000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m30.971870584s ago: executing program 3 (id=587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e657665000060000280050004000100000014000700000000000000000000000800"], 0x90}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3ff, 0x5, [0x8, 0x4, 0x8, 0x6, 0x1]}, &(0x7f0000000040)=0x12) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x3, 0x8}, 0x8) 1m30.032989266s ago: executing program 3 (id=596): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xff2, &(0x7f0000000fc0)=""/4082, 0x40f00, 0x41, '\x00', 0x0, 0x95ff}, 0x94) 1m30.023607917s ago: executing program 6 (id=597): ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x3d, &(0x7f0000000100)={@local, @empty, @void, {@generic={0x88ca, "fa00"/47}}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) unshare(0x68040200) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d0926bd70000200000007000000", @ANYRES32=r5, @ANYBLOB="20000200", @ANYRES32=0x0, @ANYBLOB="00010200000000000000000000000000000000008edd000020000100", @ANYRES32=r5, @ANYBLOB="00020000ff"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1m29.936685365s ago: executing program 34 (id=597): ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x3d, &(0x7f0000000100)={@local, @empty, @void, {@generic={0x88ca, "fa00"/47}}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) unshare(0x68040200) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d0926bd70000200000007000000", @ANYRES32=r5, @ANYBLOB="20000200", @ANYRES32=0x0, @ANYBLOB="00010200000000000000000000000000000000008edd000020000100", @ANYRES32=r5, @ANYBLOB="00020000ff"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1m29.92900902s ago: executing program 3 (id=599): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@mpls_getroute={0x16, 0x1a, 0x1}, 0x1c}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62"], 0xfdef) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) unshare(0x26020480) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000002c0)=@buf) 1m28.548826153s ago: executing program 3 (id=615): syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8faa"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) 1m28.419728346s ago: executing program 3 (id=617): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x34}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff000000"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800b4000200000000000000fdffff495e00000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_int(r0, &(0x7f0000000240)=0x9, 0x12) 1m27.803518359s ago: executing program 35 (id=617): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x34}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff000000"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800b4000200000000000000fdffff495e00000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_int(r0, &(0x7f0000000240)=0x9, 0x12) 1m11.112159707s ago: executing program 7 (id=707): socket$l2tp(0x2, 0x2, 0x73) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) 1m10.225864537s ago: executing program 7 (id=712): unshare(0x2c020400) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x7, 0x0, {}, {0xee01}, 0xfff, 0x7}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000080)=@sr0, r0, &(0x7f00000001c0)={0x8, 0xff, 0x1, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x1}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffc, 0x0, 0x200000000006, 0x0, 0xfffffffffffffffe, 0x8}, 0x0, 0x0, 0x0) 1m10.072265619s ago: executing program 7 (id=715): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xf, @private2, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000240)={0x1, 0xffffffff, 0x2c6338d2}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000200)=[r6], 0x1, r4, r5, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) 1m9.113151381s ago: executing program 7 (id=719): syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) (async) r0 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') r4 = mmap$IORING_OFF_SQES(0x0, 0x8, 0x2000008, 0x11, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r4, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x6c, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}) openat2(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x3beb4240c736abb3, 0x9, 0xe}, 0x18) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x24082, 0x0) sendfile(r3, r6, &(0x7f00000004c0)=0x2, 0x1) unshare(0x8040600) (async) unshare(0x8040600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x571, &(0x7f0000001180)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) getpid() (async) r9 = getpid() kcmp(r9, r9, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2, 0x80805, 0x0) (async) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0xe, 0x0, &(0x7f00000000c0)=0x28) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) 1m8.986365764s ago: executing program 7 (id=724): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf32, 0x6, 0x7ff, 0xb1018802593101a1, 0x4, 0x85000300}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 1m8.356355656s ago: executing program 7 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0xfea7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079103000000000005c500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000280)=0xb3b, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) syz_read_part_table(0x104e, &(0x7f0000001080)="$eJzsz9EJwjAUBdCXWjH9shM4i0t0DWdQcA+//HEsF6kkGnUBkcI5hMclD3JJ8FepnEOkGGJdL+bVZzlG1+I5R2xi+17dT+mVrmXsa8yRxzKb4auor+/myzztnrXHPrrp9rOPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCCPAIAAP//S3cIVg==") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x64, r5, 0x125, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1bb807d5d6dce4303ef42bbe78"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x64}, 0x1, 0x0, 0x0, 0x49810}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02012dbd7000fcdbdf250b00000004000b001100070024fd4ad1ca65eac867ed59e0cc1a0000000900070046b391a7b400000018006e800400010004000100040002000400010075f92e675e7c0400020008"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24004080) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x20000000}) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000000)={0x20000010}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) 1m8.285610569s ago: executing program 36 (id=730): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0xfea7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079103000000000005c500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000280)=0xb3b, 0x4) r7 = socket$netlink(0x10, 0x3, 0x4) syz_read_part_table(0x104e, &(0x7f0000001080)="$eJzsz9EJwjAUBdCXWjH9shM4i0t0DWdQcA+//HEsF6kkGnUBkcI5hMclD3JJ8FepnEOkGGJdL+bVZzlG1+I5R2xi+17dT+mVrmXsa8yRxzKb4auor+/myzztnrXHPrrp9rOPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCCPAIAAP//S3cIVg==") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x64, r5, 0x125, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1bb807d5d6dce4303ef42bbe78"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x64}, 0x1, 0x0, 0x0, 0x49810}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02012dbd7000fcdbdf250b00000004000b001100070024fd4ad1ca65eac867ed59e0cc1a0000000900070046b391a7b400000018006e800400010004000100040002000400010075f92e675e7c0400020008"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x24004080) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x20000000}) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000000)={0x20000010}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) 27.708177125s ago: executing program 9 (id=1223): unshare(0x26020480) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) r1 = socket(0xa, 0x3, 0xff) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000034c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003480)={&(0x7f0000000180)={0x32e8, 0x13, 0x200, 0x70bd28, 0x25dfdbff, {0x1f, 0x4c, 0xf, 0x8a, {0x4e20, 0x4e21, [0xbf, 0x2d38, 0x5, 0xe], [0x200, 0x9, 0x86, 0x9], r2, [0x7, 0x7fffffff]}, 0x5, 0x1d}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "ed58cb78a8484fad4e991a5e6efdbc740da46d201cbf0f891f88119a397f38ab06062d0b3dd7ba237f7e95036da358f6c05bd2bb2eca836200ec01db273a51d18f3cd38432948c75c1ee256908564cca9dd6ee9a2b53b5dca9bfbcc84f3b06f9bf3d04894ac2de9fe0eed8ef9ad94f7e44af02843af96e3518b3d926b97d22ba3690d1d52ab0516a5b3c572360c633b375643ecc8b0877f03c91d835f67d4f2267980b355c741d15f08d54522de8f8d0f6167e8714e969830bb32bf335934b211de16fb1d0c882d8a57e92415ed7ede26888b13ce9b4d7dcf93f3351ec13c6d89f23011283eebef4831f0fa0b5e5d030416a87bcfd3d1bfab5e4bb3dabdd22f2967419355fe14e215794014abc430a982aaedc4c01749dbb0abb4dd0eac32b7d0ed923ae5caa845104f67622547cc933466d92fe11f24943bbec5f036a8f96a55a5ba1434a7bd6763732b51befbb2bb4bc4cea2ec0a68e3a8025a0b029219f0ad026b344c53b185639c0efc5ae0ad68208e16871592842af1bd4779db60b1c5deab087ffb2bbfe657c18860efddc4d8d05eb82dded1d45ecdcf85aafe154783a7093600680ee79e295d55fe8c485f971ecc8ee3fde592e6d0f0221fda9be74fded1c8c21e17c883e80360bbb862cd1910fc97491d051774ee97953751e6c7bffeed402d6676d581d494534a638b227e30e798bdda9f16c6522d32f19a3ef43d8d8cedd4ec3cdd979d11c3fdd6d8c5e68229ec8ed8395a1ab5a59476a37e556ab6d01f1d2ae960685fd53855e6fb364636db8addca8ffb7f993d3b297962e4ca0add14205db0a0b70bfae7dd4260c52943f1b7e5702878ac473fc402a851a8f190c87c593760f53ddd39a830eade595adaf3d47d004d5c537de4a5a2844e7b6dd8936eca549144cc12eb0d7e4400f01dcb9bd6bb5c9351dfe517ef4ae484eaedccad96fb471799307da026163062d1f15115e2e8b5936ca23a1519eaf23cb7fb8aef1523901bdf90e5ce8f1bcd6f93cb9adefa0c61b4fb1a0f2595cc539a8e70821e19f9f4122bbd38b419db33c5220f0632ca18ddede5e94ae217a2b2388d58f7b19aee751c6065cf276265c029cbf39ef5755f1382c50e52dfd107471b8ae7c49915098b6056d472aed9ba64224c8bf331f3edb86867300c530a47271368b03876ecb31ca67f33a19a373677c675e8e0b348e4043f705c1557beb28b148ffe9085851de3851a9e1597546fc6e8fb3b9c8e8d3c70714cb5e99206a6dd2d863a486d3eca47a8827ca2e546daea50e1bfc4b1b34fd98925708ae8eb34174d6b45b385b01b531a0ab54300699e36974026a29b407305bffb4132c7bb28a85a538f03cc4a3f4c7728c03e391174dbafa4e879a1763ac61436c14e3d385a8c7f257276935ee538219b42eb8796759a28636ecf3a4be8dbd860e98cbe6f07e08b48c9084c433227b58c1f46a0e093fb11df9c2576a598d417f34155e1473cf1a7799ad567c78366dc06bd01b38b996a14249bd45be2220ea2d5457c17d62ba13bd24b79436f6a649dfa3bc45fad6dd25991a997d134b742237cc160e48bd1757bf40375ce882510d1c70d7de945958b510b02187d145d473dafd043ba0e07de2c53a21bbb9bb815e0e9ac8b11e7eda20363cd05d34af95a33181bb9ee0ec03dcf2afc8ce8e211008a40317b62b62da4ec66bf476b6b2033dbb651f5171311efdf98e0ff1ee487e40afdc87aeaf8960701b53e72e8495a7c98daa6a4e3dba5b3470d7d7be86bcadc0ad059bc5bab7c6b7c8cf11e5d5eab8889f1806acad27b0a8506300c663592f07508ee99b2c49f7ac27ca9defb3508c58467c624608bd2d0a30d6a7b3a9a35a4b3b8e90fe50d04ac95730479cf74293861f605d2a78fdf23f884b6b9ee55d6443a601e0985e319f0c33ae88e435c3d585a77451debf25fa65fa2895b32bfa9d3a2893bf8d34a4bfb317f92f8eb1d9ba7d5e029dd4ee09ca11638cfab3d86afcdae02227f1d64722a2ab856e41fa944107d10f60f95691f010ac3ac43e28657afc966c9b5e1148686b3a80bafc5cce65070d655992a25414224eaf744cc794eb55e69cbe94976e9faeb1b356f7c4b550930b0d75a8181d5b39d3bfd9ba1a280f2ff058d8bfbbec5f6a506d23f3f384553f18b5b32979fc2b9d6c23086ce68a1c5934f4490c46909125aaba8cb5ce94b42ebb64ba644db7cf9ce417076292a717ffe54a5ff35d55782758b870bf1655059db750716383f8983d207f9a7c8a4ac4ad3b4e19d691d19f7875753f0f5d721bea523fccc689dd3a5399c4334c17573f2e469bde60e8ffd6185ebd80000cb93c1c6f3ef2d30104bf364dc44fab07e8477be92e1dd68d85aa0d5a21d2b9d5f855292e37e4a554905adfc76219a537a1de21ab8e545acf33b78a2a46b7d78a9d87b1c9ad7be31c299f28ab72dca27faddc8178e544eeebfa0924d36f3746929b07c652ead75f75155164e9d26e10b346135f2dd3bf9427f23e9275a41d0d6ab0cb41b1abf6b9abbfc85119183bb115038df9432f6cdf8c534bf208609abe1eeac8d7be5445bb3e658e8ab3b9ab7afd4cd4640b43126aeeae27eaf0cc458bf73970a5aa50989dadb88ae8ff3076f77bc416b3a352152c1b49b0600d31646f6743d364c641fbc6fe4279f0db763ba3698c796c793bdaf9108089621e37b3e69ca4b086aaa9e1e71d150906ee067029a4660478abff3c43a44ccd1667946046ee9a6e67db475895d47fc43358c5c0b7173a3cfb2a0ed042d7f39d8d8e4f474f680d268595fc6c1480ca98b2b2c0f9e3d228d8af45883aaf88dbdcb622da008e7c3a2b3a8416b932f8b50b6db0ce2210b08e76e8e879dcaea697b8fcea571369a5f54de56e8dcd15261703eacc3ae24573e4ad62ae4c0a0801142a03d1d31597807a0b9b5f9dc20e33a07699a27dad62530a3fae747de8dc29dd133f3d09b170304ee0e07181eb2b8849e7fba9c98660b3076961fd830f54890d23da552323697bd0032e68567c8e2847e61c84159e4bfa839c0858104e42578f6724aa682b0a371dbb35d034a028b0df1d6e7a2599458db4a395d00a9d3e3d953d61be5fc5877fa904bcc81c62c03c3c89ee950111eb91b348aab6f51eea6773f839a898d51d2a32248e3af7d55a2011473652c19b5ea6a83b6d20735c551356e2f76f32c0069c0e4447ee385c3cb44712297b72860776c4b51469a1ed46b8a2c3668f8387f80805b8a420cc1f303f01777f5f03fd4b0a8316f973c3e89d48dda22d3183116de3fa96760f29302631a03dd575ae7695445dfc8380a38bad093cc44908dac340fe5bd092994cdc5df27a42fd12ac1a64b643ad0db43115131ec6db5d9fc7d7f0117f481b0df33cbb13525f3cf390d4396c08ca475ed53508e17439ef7d1fd4bd35c25a5a5c9dcb8ca7e61a1add56e229570b82c678e39e8ed6d8c90d3ac0b0917ffe594de569a74bf7c87e3d923556414b965ca80fdd487d09ec9d9620fa71782e64170febb1bc1c2de063d4b0e43b3ea9a49e9ec914f1e5daaa73656d05a83702562ee617025b7a6b1d5dd1fde05c656da186f0462a7b0088825d79bedbb974a2e52c915bc236c1c67cd61c2b4f3a9e324401e3b3f00ff623dc8f05cea65265583108abf6e0d76867e18f54ee2b66e395bbaadcff4ad9b8020e575fb0753cf2cf6f97809a39d6836315aa75172bea73cf7444b90b75fa82f5aa762d552515bf5904281b9b81463c2b21b1a897820d4bd5bee1f76818fc3dcf3d553110092855b377a329e520e368a9570ddc6c2b8128c77571cfd7447af46abb2658248fc7137737ebf447640e27d8bed473d7c1206499e96056d0f4bd31581aa3d460b69ed2124fc4c5fe8b6c71c4f00922acbe456bfbca6c6f1f3af313ac94050e3cdbee725c65d96fd26a3ca2c4f818ed8a074a35eba6ecfff0b4419910a87f1c30c367dc0e725e4f0ca9eab83d1170f37bcfc64a28eb8fe28679ad9e34beb67eb4006d64d057d33cdb884b2f076b12e1c76a04f90e949e291f5235ebbf4ad8ff87af3103f2da0298145b868dff1438d2d1367db3b68584012187808e26277b39f89f23f379881864852ba63a846c2ad630527020426ffd9cde831e8f19cd4fe22ba9f0f0456b35f120993e2dde0d12cbdf869e6cb2affb24cd71ceeca56da116b72f6b7f8398070b1bb3a26c6eadb838053ef37d5624449f255d772cedb41c733aafb132e4e2046d4a0db0d083b857966435ef0adbdc97239a34944de5fee08741807c7b2e5625c80deac79bfac7afe2651f04457ede2b515271f8137b8e0553ad3b98c93445f4d168980038618ee611518704b3726b1a6d2c5527f4a4dba890edec47f5af3ffa7b934296da7f98926663ef3f17096ef59c50cc6e26d97bd07fe66fa207503d7ab52c7acda1081c1bd6dfe4149ea579ca49c3905c0f105d8ef6ae8aab1f98e216dfc35848460afc43a789333d55387b6bcc559521c9161372f97c83b8c8514b1bf37cb6eb8670a9223d0d928c85abf047353bfa51413c366dc3411c786edc4a30955da3f4320150e3b941a1a33bf3c851138016369816e5da0d5e1bfe4d827f40e0216b99a24e9f5cb4f647fa86f1c5d96d86474b800dd9e967a08d8aa2827f067c447e9d3da5f3db4db2c2a943f1a025fc0d87df31562020d4722c327c7d6ad273b66198d0d14f01dd14cea032b3959cc5c625ca5953046246c7ef591603373019f998c6ece5aefd554f335843bf1caf19b58756426e84a7cf4251629b7ce2dec7068d6f321ef2685b8730a58ead3c3c6b6a6d13de4a88394c9947c1221103c8d7f2ae48992180500ac675d5d30a28c59d5970f67d05c17bf7a8f7980ead0bb74755a0c5283529f43963817dc65def753a46b2a2aad049a9a9ec3f967f60ae895c90c288515574083ef9becf2ff3604c521cdd311b597d8adc5864941dc30c2cd73e2651ba0441bc0b5fce3b41bd801c1e633ffbb3709d82875de63740f226b6fa06c474298d20a5c8ed3ff93d527da3d3ed126a43ab4709927d1e412ddbf8ab41b0b0f34edf0e59251265aa89a1c10af7d02d8e8584edc33c8cc6018414b702e6d276f54e11ab9bc77bb6fa35f39a5acb4d8ee6acebc6353ed6cbaf8699e4e5bd047c22510a1e670cee4697e179a8343038ffa0eac1244616971ffad9d3a20ea4036aa6756c30998bd39dfa338e2b71f52d1aa3ed75ca113ef60e6a841304a358dfef4b75169827dee7e70ea17da2a80813c4c69ea305a9daa80689ce03d7a5a1b51453abc7eb1f888e00de3bf82af74decedd198aee46bb7c9a5de681209400faa65243c189c24130f95bacd982fd8826c5ff067cd763a398f17978c8cd87398d54fc56b5d92da901aea6be3303a5bf2f45806b160fae3e6e566add58883130077e2456c938f004a33205934f52d0c2c58e7480a33b91cb74011b32c08e1a22b636ad0dc25e1a1b984874cf24aed24892d1df60227fa123b5406597db4f9179e49ebcb8c9fc613e8017f0fa027bfe1f244e3ae78722af2d93820c3144b4b1bea92d1d07239c3015ae43751ad6e6f67d4c9cdc3f979cf76617b2db4fe6bbe446a8ef306899b721f61724f512aa0c31e59e03632b9fabd6769304a828b845b6aae9583f7e5910c60300b4d94370a3f420f0ec8f29d330038b8cf4f23ef3ec102eafb3587f219ffee312c9f79e890d7a69980a1e22afd9494cd0ba7a467d850762e2231882590c2af9eba0cdef47c0113ba4a77fa96b5063cc7cfb069cb91ba96ecb47da95c256839dda5b495"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "a9fe9ee91d6b58afc83e1d4121044a53a9a24d4cf0c57c867c5270ac2400066b5e1d407aa769ff9fbcc83e1900e72b4da2478323cdc3007a4e44acfb58cd05b1b42e77d3a858900642aceb99d20192a338318d87cb4f053fe2a964d65643eb182157555ffcff8e20e6bc66657156394abe1bd4a51497f2177562a798c68a92f875a0f150d1b1f52d21d6eb0f858022d602873dd761c956b0c72bfb33b88ba3ae366db809d722f750062667d919e44679b43d5fcdcc8b0b56ca83b11aafb62f049f22fcbc2b3de53f96238ded34308689cb17f8c225727cb41a49210a8158"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "3a9c57a444dbe1cb21a3c8cf9e22c182d48fcac8adec62f6890783d986155840901f0383831da8aa76e4809503e5173b0e317bee6996d74c1aa370aa441170c4862954931d09df4920bdd55531ca7bd3543783e90b9ff87975f2dc835454a77e06b3a8662824cd2f0e5844e7f621c106d4f38cb16077a118a6fe5979ec436547a4839016f20fb2467882a755e8fd7c3601b583166dd806538afa845741c143ceb750ecf971f216a1b065d47dc40140b763b9b2743cc2fdaaf078c506847bfa67ca3a027774dc76474ea31e747ea8a67b0b32072fa2b495d740edad143caeb72f442e06380bc8ef705e1a45230a29bd6edc8cb03591c0c4500c8d10bdbc8511b52a8fa2c637a5cd7c7430ed0de9cf62388b6aa8a5387be6210e31b191c13b56c2ba8d5e1aeb9c2b23f87403b860782e582fc24ca2fc6cad7f51106421782de3abd0db3d2392d16f27c248c6a2326aa2327424e461721186e05cdb084d4fc77f820f1c063453d731b30f61a7592cb07910b7e4595cfcc95aa1043f37eee6950bdf712ca255f07eb8c21cf051031b3a8f550d20090d6863bcd7467eed05732978239f00553fdeacf1073bb548279fc5e51191b8ca3b3e1eed6f6eb51689ab3bd5e810f4c0f520285ccfab821cfd381203c6b7cf79e421d8b2cd8b3abb3fcbd308a27a9a52edeb0819072e7a386c2f1153ccc637457c9ab261b5fbf013bac3fc798f1fd1b9d10b7ccf4ad12f631345f95d727f80406af133d8850818de247aa2d8395b83baaecca054ff0554aa66cf2009234ec5e4289d9db6dbda2878a2da5d355a961501e2c58a59e1b0d899303970f0091e4c90576cb3dbf0804c3bb0725f95dccfccc8283d53dda78425aaa670114a5411d9e4b420b5cdbbba923b2d6e85f00a30ba67dc7aa474d18584d43bd4fdd11911ec1b0cebc8cad2668d9b96148cfe167f62b3261647acdd951cd41fd0effccd5b23e960dfd72566fa17399c7b4743ebc5391ff25f0b4dfcc8b39d0daa6d41a9dc9da6216dc24102ce05fc09419d5aa74948e56bf4d31f2b4f3290a43d47090958feb0bfc6f25ca402b2d1792e73df0b1cb331b76fb154111acf6dd7bb03b4dd48d146f6940827c0c29635e88f3f6127ac81f8b446687b2728268c5ccc201de46b63b25d62617794ecb368e71486504e5155feeff18c0d15f51f4b83cc98cb12e6464a93a38ada666fc09655b54a261a99c012c7fc393050206e5a257fd5972146777101a32375ecd835b66ce2c6d404e170f3cf504bd9c62fbe4b9ca69ddd20cd7c5c64482724c5e1eaa64d68b8a8a2f54e0faedd5bef8d1b2d30ce00b6be733a63c426389c2809b99d6924e64f710be962573d38108a34c8a171664cf557fbd01e961bbbbaad523bffa283a3b54db2d67ef2969f26845ef320081843d0f367c753554eceb0ab65aa3d3804cdb56ba90aae3e8f6bb7f9975a4ada703f138571c3e6ee70d55d20c3c73158191291ecc4d109c7661ff0d8d343df936dfb920518f62566198df9350661e4665830d4c3987ebe509e657c69a60e251f98f86752168597d198a25242080608d90f804528ebe3a017550f73d4ab95d3d4db4f12bda69bd92b03fad5bf3868fe92d4c7570ef2a401263da1f7227b40839b858debe922c9c599916d0726b3eea76126f9dbf87335ce5f22eea209d49e7a1ae0be58c1c6ee85a67c62b94b70d957dda32d95928e3f038b01791644ac2e6344d93631a383e5cd1677f206cb45c703cee0eb3d0088b637fa11c0308b32d7103b768075cf5f9ff18ade5e69f8ebeb8eb61ca442e672ca7b796c967b8e40817e5c08f3ca82c6ccf40e1d66911ef4af93e756b782ff4aabe3d94d7b2359e876643f0386533ac862782a342960f3a6d83fe8d40b56394f61dc915aedac248539f188a39f39de1c972f7d1790c1216b59e09e4e0cd8736ecab74e414af6645dd874df9512342271bd2997ac5e36339742cbbc631bb03a6a27938d716b76fce85ff55b5ef5e43c7a56575e899f198c0e2fa96ab00bdd393a78c8b58a1e7a1c1cd23a2b2dbfc4eddeb9806203acc908799534d0cf2ae5735a87004da2b692096bde347c5c78c4b7d905b0042f24ef021de2e5d0269f0a3585f3d99d66c3cbccfb03139f747dc95dcd05139b4338e4f56c1c7e5da32e2917c4adafa068394ef714181b5db6d363b621d68ea1b209bf8547deeaa2435865d66c292331472ef1c6e69520f9344c0f7ecf6842fe9508287595e819e8e3b9d4061147540eca5aadbee6c6e1582ca5ffbe01a2b62a600b9812cec271f556590be2e8cad5bee9ce8a587bb63350de61914a3755b827239e6bb92b8f318df226fff9f47a8490b79c360a7676d638b8f520c930908ead1b6ba17c5dcdc54d8b33b97dbb38a7f6c40608bf9a334f4263185df4bfd1496157dd60832224ac49ab73e7b0d17fd1d5717681759e4c690f20e2e88b0f33b204487776cb726a700844b486b75cdb2beea626466b42a07e6a5d11892dff4b8c6a0a6dea7ebba264399950763c939c653589e642b994e7375e1bfceff0054a542b022184bed16bf5be8a4c65f1f524628f1bc84e6cb4ab22c4d974fce8bb393f9b234dfa378de96400e5714c9834066353bfc5935b4da5238f69588833a603d2336d345399aa757dfefd6f8c71887d1c23c1dc99d9934d1f79e821dcd2afdcd9f3257bed7f070f9e8a086061dbf51a2f06a347f8543090ce34144661c85b6ca5b8b91790dce2b65faa440e2f702a0d21e89ac88f26b54e5569edc511d614eab6be87852774197ad29d4e3b8bccbe77208bab4e41bd5c9704425cdf96586dfb177d34a8aa18b76908cc2ad11c52b3a2c12470be745f2b68c6cffe28f0000db33ab58dbfb2559aec0b2e753a4bc3a5c7011788858a0651f5ce91f85d3e54f613fe68e252efbb4ec8b8078900704a770697f6e2952bf09d05e852364f033ff7a62991b30bca6b4e997b4863e3a981db94d7a55eef1af53aa189d97eaecf199d47a2a68ca3bb0078cb03c7bd926f4de155a33a6cbc2b68b1c6d233d16025ad48161ece2c8062e0b87ef062d24df748fbd20d20211741d3142809d2d617df31443818c50ecbbc8e3d4978b2eee84d7210b07b701367d676a3c40f8b5043cc3112e13882f433da5ee92644acc3f9a8faa0eaa9a08d12dea32a4ccbb0ffe085c222769e442a17076d4c8d24f7695bd88ad2f18bce1a6ab2208e8da2c0c24b9a4de2414fdd90123ad12cf1b65103b8a6ab38b5aafebb967f4d89e92e6e46d32f0a95ef2858f4e809ad2bfe3e7a04df0e10d4c7e970de63c78d07b7d8d8e9718b7f7e2a0bdf6e58619d5b0d0e2c06bd065f1a2394cfb7fa760d0ccd04d859ec10a9cd68ffe113496dd5989eda2229f4eb62b6027d2b8cce5c4fe8af291fc4ad8275973581a65cf17bfcd4a7855c8037521ad1aaa63a977aec168cda42c9d7ce36b3823a6e316d1c4ecfbd7928ee4422b01337a78bd88aa227093460d8e10a761bf376e2e3e9a4660181ec20c20cfadcb555ae2e04f95e8e0d6dab08a02dcd9fcb57d77addcf1b7a91e6b2c8d7d31160bc7bdc517d418b226c38fd1bc2383dca2434f778aa45e6aa4795d7ed38e6cff2bbc55b042aeaa51f38f020825ba417158eba96ef733184e20a98c75c867caad1a0ed81b57ad4a735a665442f409a5a9a387b0beb451d18887c7ef7108403aa06c33f22404f7b9de2b78c0621dd0c55f7be141355d8228f6a4f10f918fb7a13a5b0b570ce7f87679d4fbfcb6630d3806849e275b46b607e7c89ab18a0b6b31f34f7fa7c2e2b633b87e21801bcf9bcab837749c1fb3b5a4561e63bb00723a6ac8150114859e0cd20871188704752a69d133c4d5bda4d177b46a29fd5372896747ac3fc49191d50a5cfceb248be54946d2089fd6bccfd3079c16fc5ec9c6b727bc4e7c72ae59bffe65c4da50ebb9badebf19100b3f5168b0d47b1a98276cdb0218a3d34e473e8bdadbd21ea59e679882a9b23cea693861e1d7f7e2217642e1e9dc00f2fa4408f0043638634e5930d865d2f94c26420f9a4ebaea2f3f26827a9f633250b6c97ba6087cba90a0c99d1474e4454a680721ddf8dd7b3e37dbc73e0c5fba3f7cabd5393b80fb7d9fa2786424e42af45a498277370704b7abd0ae135b38e781daa5e2449c446099163f079a024abb37624870d9abc9c243e260fe90079b2e3926c56caf354bc6ef209b5e07d93bd2a1d7a473bf4168e5da9274a697c9a8976f250d905dae6d8968a4eff57ec43f7f05a31cabf794120cca25acd1bd4cbbf3b5ba8120794ab66d8fb9f2f654241b1786a029816091b352b0b1e37aadfd09b05c9a73fcda12e3451e50a5b57d8273c7db417c75c8c24ae3e0d0b1cf37465e0f0d1fdaa8ce5ad2bed2a2ab892fcbd6917e6a9820faa7ad44a39fdbc671fe619ab7013e16284c757e7a00eb5a164741a671d8317dda00acf6081f84480a03a0a0aafaaaa5cc3ffc6c8d465d9608bf553b639e63deed876c3a87f3581a43013ee3031fb1f6dcea917d58faafea53bd0eb098409ef7c3dd240c501a1e8f323a7e8ead6b67303aa7c73292a5f031c3ff738c7f7e744785a5da4cd680a042ff32244729aebf9cfa292654e2810581eeae4e36beba7bb3984567084ae2b05b276213bf16c895d2efb002438ce5f5389c7584208fc56e36c4cf691a28802c2d512c391c3c0c3e26537902cbe9c5271dd48f30ce960a3f55749e7d0d4271d32f1cc52ea38c6cd3517025cf36186cc5fb06094efdd5c9efadb06a61cf0d9c6952a0dc1a53042cb4581f607c87a59f5996a531078195e652a6c6fcc78016916dc65c2efb24f4b916bd48a5d2cbaba6871cdab3b5dd9b04330c97a437de8df3994f7fd4b05825b79753d323bfcf88e1342070160a7b19451f5c3597d4c0ac8f8d1a79b6ef6f6761bc35004097c4ad19a732f4268fc8e6b48d45391823057a7e7d3e4e13b9b2f91b43bd83169157dc78f91467d36d18a1733136d4013dde00c33f18ed1785d00164acc05fdca6001e79ea4a6d622d5b215f396f7ea9825625fdd495303793bd4755221d6c0096583ab3ee23f69cfeeae3d08fed77bc5eed5e5e7bced78d269ff3a39a9cf3d217d5b2326741f35c342456a918dae59222995bb54e7337c1fcf4a866ea58e866d7e1790092bd86cbe390f32dae24e9c2b33d499909f783aee1542c09d33cb9ba41e5d0bc46eb48cff6d666713edf8f9389c3ac5d65be5328b2c2fd65bcf1676a530a71397cb90b56763ec2cdd8920b8078535f54a7a61ee1a0b18c575b3798ab064ec197d9a361cb6d513798df8635ad369fd43161b13694d72ac3815a49752574a04bd80475eda35f1d415cfa3134ef41195b24834c25a6c66028536a0e11657e96c8a0ad82c5ebc82e20a06c709d83e8f62a3cf92c84ebe0dab6889f641735dc250c263fa884b3c4133bcbacb7b3464d6cd8eb06dd662ad41899a37d7a169e11317e63e05a6d25b3e55a6f5732e26ada62c8729d8eb4171b4aecec7bf89af7e5bf7f50eddaf8bbf28cba169daf285170f071a53de3d9cfd82f9d3154019dec8e9cf260a6de86c46d876e6b5f47cb26b79457a3db63a07773834349c2af055ec9922062487bc7a216988cdd036d6bc92950a6da9c2d9515b97a5b8715e7f278081de2a8eb5cd7267346a7eefe2234603b1ce02f5e35d25ce0521a4e56283c1878d2466b4e3c64fc72623ef69df1fdacf40293e517845aadfb84d4e8b0cd64e4beca0a8f54f3523021dfa547af9f95e6362b1645cb2739b54b2f9fdcd"}, @INET_DIAG_REQ_BYTECODE={0x65, 0x1, "fc16ffd5304a4c79f33ddc87c3a4b569379647dcc3e66bd3e7f792fde54ae29e5d20f7ea0d333759bcada418b546c11f4ad7ccd61f2f5c54a072fb71f887af8dcb2ccfaf0d1623caa265beaa22d4e0bbd53e62e128c7949e1ec2409bfbea9bbb45"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "bf02d2ecbbdfcd9ecfb6e3f8e6bad64612b09085329e30c79c6bee5debfd4abda2c5c24a84137e815576ee5703db496ceff7735fbd433baa251399812e978b6aca7f9abffaaa5b541b6eca07efbc87a9f507b1ba7dc76460bd9271aa705c93356c3492de5bbb5dc152fbc29a15527bf6fc7ebf7f55c40b7654c009e22dac0dcbe42ad7acc4ddd480e2eb23563e502e1ae26f07f484aac34f7b2fff92ce2a70682c87f630b19e7c52cc77182a"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "98d52fdf0ea872ea7ff42111b5bb81a28b0ae1f2f7df95e691e251567436bd8f5d8fbb6f9eb34c2a22042b93a211665a677cd4af88e9535c5df41d6d1bc28c5499a63108e425a31ecfc6ae1d6afa5058ea3e7400d1b72a6bb2d4f5f54f1346f6d974569cf2e4840dbc8aca41f82bec0823beacdf445c4fc544d99e5db2f98c69854bfa026e767764549de3c20415"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x32e8}, 0x1, 0x0, 0x0, 0x20008014}, 0x4010) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40000102, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000000c0)={0x60, 0x6, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x5, 0x0, 0x0, 0x8, 0x48, 0x0, 0x10, 0x4}) 27.592327941s ago: executing program 9 (id=1227): socket$l2tp(0x2, 0x2, 0x73) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) 26.767196181s ago: executing program 9 (id=1239): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x7, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff65) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mq_unlink(0x0) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) 25.657997977s ago: executing program 9 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x14, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/23, 0x17}}], 0x1, 0x45833af92e4b39bf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x301, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 25.452308818s ago: executing program 9 (id=1246): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000000280)={[{@utf8no}, {@shortname_winnt}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_win95}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_win95}, {@numtail}, {@utf8no}, {@shortname_mixed}, {@rodir}]}, 0x81, 0x306, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xc2143, 0x11) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r0, &(0x7f0000000000)=""/134, 0x86) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x90) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x2000006, 0x10003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 25.10052181s ago: executing program 9 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x9, 0x0, 0x0, 0x5, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2700, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 14.012488564s ago: executing program 0 (id=1374): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) (fail_nth: 6) 13.951130259s ago: executing program 0 (id=1375): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40000041, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r6, r4, 0x4}, 0x5) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r7, &(0x7f0000000640)=@abs={0x1, 0x0, 0x4e20}, 0x6e) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e04, @multicast1}, 0xffffffffffffff89) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000040)={0x80, 0x1, 0x9, 0xf68e, 0xf, "0100f5000000000000000000800000e4018780"}) ioctl$TCSETS(r8, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x18, "00000000000700000000fffe00"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCMIWAIT(r9, 0x545c, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000240)=0x1) sendto(r2, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r10, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) ioctl$SIOCSIFHWADDR(r10, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 13.845186286s ago: executing program 0 (id=1378): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$loop(&(0x7f0000000580), 0x7, 0x100) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x800081, 0xffffffff}) sendmmsg$inet6(r3, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="a7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000840)=ANY=[], 0x68}}], 0x2, 0x2401c444) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xffffff7a}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_helper', 0x48e02, 0x0) pread64(r5, &(0x7f0000000080)=""/75, 0x8e, 0x4000000000a2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001980), r6) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3dc82abd7000fbdbdf250400fc00140001800d0001007564703a73797a58d161ac"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000840)={r2, 0x4, {0x0, 0x0, 0x0, 0x2, 0xd8c, 0x0, 0xa, 0x1e, 0x19, "fb29ddf9f8a2b853d1b659c3ecdb146097d84fbf480dd01ec59b799b5f5925558d469c6c33ae06c28bb1fb1b8de577da5f34cb24395c6578014d1dc4cb187b28", "41049e60cb0c24cd18f58561990ba89dd21a63bb1ab79cac537632dff384b5330865156dc85e76701286633e61203aa400fe7fbe69f39df05b21a70fdaef639b", "72b15831b10b168a9b71f9bcc35dcb40bc8d822bd75f0af8905547ecac0ad1fa", [0x7, 0x3]}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x3) r8 = socket(0x10, 0x803, 0x0) r9 = syz_io_uring_setup(0x4c4b, &(0x7f0000000400)={0x0, 0xed83, 0x400, 0x2, 0x2e3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r10, r11, r12, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, r8, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80000080, 0x1}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0, 0x44}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000280)}], 0x7}}], 0x1, 0x4008c50) io_uring_enter(r9, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0x3, &(0x7f0000000380)=0xd, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) 13.73367972s ago: executing program 0 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0xc00) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 12.817693288s ago: executing program 0 (id=1389): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xc2143, 0x11) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r0, &(0x7f0000000000)=""/134, 0x86) 12.663858873s ago: executing program 0 (id=1394): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noauto_da_alloc}, {@nouid32}]}, 0x7, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) file_getattr(r0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x18, 0x1400) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000004c0)={0x0, 0xc2, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff], [0x0, 0x2, 0x56c1, 0x401], [0x5, 0x0, 0x6]}) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, 0x0) ioctl$I2C_SLAVE(r0, 0x703, 0x58) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='syz1\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4000}) syz_usb_connect(0x5, 0x24, &(0x7f0000002240)={{0x12, 0x1, 0x201, 0x6d, 0x29, 0xad, 0x10, 0x4e8, 0x5f03, 0x2972, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0xd, 0x120, 0xb, "", [{{0x9, 0x4, 0xfe, 0xff, 0x0, 0xe, 0x1, 0x0, 0x5}}]}}]}}, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000002d80)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$NILFS_IOCTL_RESIZE(r3, 0x40086e8b, &(0x7f0000000100)) sendfile(r0, r0, 0x0, 0x1000000000007) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1f4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_TUPLE={0xf4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x87}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040001}, 0x20008080) 12.648195385s ago: executing program 37 (id=1394): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@noauto_da_alloc}, {@nouid32}]}, 0x7, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) file_getattr(r0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x18, 0x1400) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000004c0)={0x0, 0xc2, 0x80, 0x20203843, 0x0, [0x2], [0x80ffff], [0x0, 0x2, 0x56c1, 0x401], [0x5, 0x0, 0x6]}) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x46, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, 0x0) ioctl$I2C_SLAVE(r0, 0x703, 0x58) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='syz1\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1398, 0x11b8, 0xc8, 0x8, 0x0, 0x5803, 0x12c8, 0x2e8, 0x2e8, 0x12c8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f8) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x4000}) syz_usb_connect(0x5, 0x24, &(0x7f0000002240)={{0x12, 0x1, 0x201, 0x6d, 0x29, 0xad, 0x10, 0x4e8, 0x5f03, 0x2972, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0xd, 0x120, 0xb, "", [{{0x9, 0x4, 0xfe, 0xff, 0x0, 0xe, 0x1, 0x0, 0x5}}]}}]}}, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000002d80)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$NILFS_IOCTL_RESIZE(r3, 0x40086e8b, &(0x7f0000000100)) sendfile(r0, r0, 0x0, 0x1000000000007) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x1f4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_TUPLE={0xf4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x87}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040001}, 0x20008080) 9.736113803s ago: executing program 38 (id=1250): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, 0x9, 0x0, 0x0, 0x5, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x2700, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 9.353029742s ago: executing program 8 (id=1418): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) fsmount(r2, 0x1, 0x180) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@mcast2, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private1, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xfffffffffffffffc, 0x8000, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) sendmmsg$sock(r6, &(0x7f00000005c0)=[{{&(0x7f00000000c0)=@rc={0x1f, @none, 0xff}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)="3a7f40860e1505f56228e30bffdd624e52671fe99e4006b71264b7836317fba6100b98cf63498212783a4887b0ca75571aad7063591ed03dbcd16f796fbe75ebc34873ef1e8f18a408d44a385f0c1a42b4bbe86e9a12732ed357426b8a07e270415329bfe4fcece8bc4cb740c5aa7572bb46c6b7747dc9ab25ede82c11fe477cbbf466901b16ac198a461266be3f0ab0336f128a925b21e7694b", 0x9a}, {&(0x7f0000000440)="b49c08d0f69b72529af3d4", 0xb}, {0x0}], 0x3, &(0x7f0000000580)}}], 0x1, 0x4000) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) 8.168971025s ago: executing program 8 (id=1430): move_pages(0xffffffffffffffff, 0x3, &(0x7f00000000c0)=[&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000000e000/0x2000)=nil], &(0x7f00000001c0)=[0x3, 0x100], &(0x7f0000000200)=[0x0, 0x0], 0x6) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xc001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) 8.076438499s ago: executing program 8 (id=1431): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000611810000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 11) 8.073361498s ago: executing program 8 (id=1432): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000300)={[{@commit}]}, 0x7, 0x4f7, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f0000000200)='}\x00', 0x82080, &(0x7f0000000240)={@align=0xdac, {0x8, 0x4, 0xa39, 0x1000}}, 0x3ff, &(0x7f0000000280), &(0x7f00000002c0)=0x7f}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000080)='./file0\x00', r1, 0x4000, r0}, 0x18) mount$nfs4(&(0x7f00000003c0)='lowerdir', &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x1000, &(0x7f0000000480)={[{'\xb2'}, {'fuse\x00'}, {'ext4\x00'}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000140)=""/176, 0xb0) 7.886509226s ago: executing program 8 (id=1433): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e2a, 0x2c, @mcast2, 0x40008e}, 0x1c) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108e004000ffffffffffffffffffe7ee8e004000000000000200000000", 0x58}], 0x1) 5.704856677s ago: executing program 8 (id=1455): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0xd, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61, 0x0, 0x51]}}, &(0x7f0000000b80)=""/4096, 0x29, 0x1000, 0x0, 0x7, 0x10000}, 0x28) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, 0x0, 0x0, 0x300, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES8=r0, @ANYRES64=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x25, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x11, 0x0, @opaque="8c1ea11e3115141504"}}}}}, 0x0) 5.516200194s ago: executing program 39 (id=1455): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b80)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0xd, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61, 0x0, 0x51]}}, &(0x7f0000000b80)=""/4096, 0x29, 0x1000, 0x0, 0x7, 0x10000}, 0x28) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, 0x0, 0x0, 0x300, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES8=r0, @ANYRES64=r0], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @xdp, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8000000001000001, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x25, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x11, 0x0, @opaque="8c1ea11e3115141504"}}}}}, 0x0) 5.375083282s ago: executing program 2 (id=1417): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f"], 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x20008000) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x202f) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1000, 0x103) execve(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x4, 0xffffffffe0408800, 0x0, 0x0, 0x7, 0xa14, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df00", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000004, 0x0, 0x1000000000000000, 0x1, 0xb22f, {0x0, 0x1003, 0x8, 0x7, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x80, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008200)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x6, 0x1, 0x1000, 0x2, 0x104, 0x3, {0xffffffffffffffff, 0xfffffffffffffffc, 0x2, 0x8, 0x5, 0x5, 0x41, 0x96, 0x3d21, 0x4000, 0x0, r2, r3, 0xf73, 0x9b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000894}, 0x4) 5.205465341s ago: executing program 2 (id=1462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0xc00) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 4.202419633s ago: executing program 2 (id=1468): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 3.555825668s ago: executing program 5 (id=1473): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) openat(0xffffffffffffff9c, 0x0, 0xc00, 0x836d9fb164f927b3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x78088000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0xb36}}], 0x400000000000181, 0x9200000000000000) 2.537355116s ago: executing program 5 (id=1477): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x240}, 0xe) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000001e80)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6b, 0x4}, 0x20) 1.654220349s ago: executing program 5 (id=1480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000010000000000000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='veno', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 1.547217442s ago: executing program 5 (id=1483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x88, 0x3096, 0x8000, 0x56e5, {0xd}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x7800}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x518) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8801, 0x10) write$rfkill(r1, &(0x7f0000000140)={0x8, 0x6}, 0xfe76) truncate(&(0x7f0000000000)='./file1\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x90001) 1.470040366s ago: executing program 6 (id=1456): r0 = socket(0x26, 0x2, 0x0) unshare(0x22020600) fcntl$notify(r0, 0x402, 0x80000000) r1 = fsopen(&(0x7f0000000380)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x2) r2 = fsmount(r1, 0x1, 0x0) timer_create(0x4, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x77359400}, {r4, r5+10000000}}, 0x0) timer_delete(r3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="570000006800010003001000fdffff7f00000000000000000c00020001000000150000f46aa66b7204f2eb6a7d28fae8000c000c800800020009030001000000f33e9b0e64be78e92ee910ecf00c7056"], 0x38}, 0x1, 0x0, 0x0, 0x404c0c9}, 0x0) fchdir(r2) ioctl$DVB_DEMUX_DMX_REQBUFS(r2, 0xc0086f3c, &(0x7f0000000000)={0x5, 0x5}) 1.32818912s ago: executing program 6 (id=1485): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x7, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0x10, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x5, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x10000009, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x400000, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x4e1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@rand_addr=0x64010101, 0x0, 0x3c}, @in6=@mcast1, {0x0, 0x5, 0x2, 0x100, 0x10000000, 0xffffffffffffffff}, {0x7, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd2b, 0x0, 0xa, 0x2, 0x0, 0x34}}, 0x3d}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) sync_file_range(0xffffffffffffffff, 0x7, 0x0, 0x6) r5 = socket(0x10, 0x80003, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x9, 0xee, 0x7, 0x8}, 0x6, 0x0, 0x8, 0x265, 0x3, 0x1f, 0x5, 0xe, 0x1, 0xfffffff9, {0x4, 0x3, 0x4, 0x1, 0x6, 0x2}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x0, 0x81, 0x4, 0x2, 0x401, 0x2}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c48f2785214", @ANYRES16=r4, @ANYBLOB="010025bd700002dcdf2501000000100007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00020002000000000000000c0005001700000000000000"], 0x3c}}, 0x0) 1.258167495s ago: executing program 5 (id=1486): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000008300)={0x0, 0x0, &(0x7f00000082c0)={&(0x7f0000001300)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0x8}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000890}, 0x26000084) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b52, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x5411, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0x9801, 0x802}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r9, 0x9e98, 0x410c0}}}}}}]}, 0x48}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000180), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r11, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x20000238}]) 1.222139978s ago: executing program 6 (id=1487): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000640)={{0x2, 0x4e23, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'dvmrp0\x00'}) 1.187448623s ago: executing program 6 (id=1488): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xe2880, 0x42) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x8080, &(0x7f0000000480)={[{@noblock_validity}, {@dioread_nolock}, {}, {@nodiscard}, {@inlinecrypt}, {@noacl, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@noload}, {@nouid32}, {@noload}], [], 0x2c}, 0x81, 0x485, &(0x7f00000012c0)="$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") r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xf1b5, 0x4000, 0x3, 0x1aa}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x76, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x9d}}}, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20400, 0x0) fallocate(r7, 0x0, 0x0, 0x1000000000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r8, r6, 0x2, 0x0, @void}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) 1.107751072s ago: executing program 6 (id=1490): syz_open_dev$vim2m(&(0x7f0000000340), 0x400202, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) flistxattr(r1, 0x0, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000002dc0)={0xc000002, 0xa87, &(0x7f0000000380)=[0x3103, 0x3, 0x0, 0x4, 0x6, 0x10000, 0x40f3dcb, 0x4, 0x1, 0xfffffc00, 0x80, 0x6, 0x9, 0xfffff000, 0x1, 0x9, 0x8001, 0x8, 0x800, 0x1, 0x3, 0x4, 0xc0000000, 0x40, 0x2, 0x3, 0xe, 0x4, 0x6, 0x8, 0x687, 0x3, 0x8, 0x8000, 0x832c, 0xfffff801, 0x401, 0x2, 0x5, 0x4, 0x9, 0x401, 0x6, 0xc, 0x51, 0x5, 0x4, 0xfffffff9, 0x8, 0x0, 0x10, 0x9, 0xabda, 0x3, 0x3, 0x1, 0xffffff64, 0x7, 0x6, 0x8, 0x1, 0x4, 0x2, 0xff, 0x1, 0x3, 0x9, 0x8, 0x122, 0x5, 0x7, 0x6, 0x3, 0x200, 0x101, 0x9, 0xa9, 0x7, 0x10001, 0x0, 0x7ff, 0xfffffe00, 0x1, 0x9, 0x0, 0x6aae, 0x5a6, 0x8768, 0x1ac5, 0x2, 0x0, 0x7, 0x1, 0x200, 0x7, 0x9, 0x3, 0x8000, 0x33b00, 0x80000001, 0xa2d8, 0x6, 0x4, 0xc, 0x5, 0x5, 0x5, 0x3ff, 0x9, 0x0, 0x10001, 0x85d, 0x8, 0xf83d, 0x10, 0xffff, 0x4, 0xa, 0x3, 0x957b, 0x7fff, 0x40, 0x6, 0xc, 0x8, 0x8a0c, 0xb3c5, 0x100, 0x7e, 0x8, 0x0, 0xffff8000, 0x7fb9, 0x4, 0x8, 0x3, 0x7c2, 0x0, 0x5, 0xc, 0x9, 0x8, 0x10000, 0x1, 0x1, 0x800, 0x10, 0x45, 0x0, 0x101, 0x1bf4, 0x7fff, 0x6, 0x6, 0x0, 0x6, 0xcc, 0xffffffd5, 0x0, 0xf, 0x8, 0x6, 0x6, 0x6, 0x1, 0x6, 0xb, 0xffff0ad4, 0x3, 0x10001, 0x2, 0x5, 0x6, 0x17b, 0x5, 0x6, 0x7, 0x1, 0xc, 0x81, 0x800, 0x8, 0x0, 0xffff663e, 0x101c, 0x9, 0x100, 0x3, 0x2, 0x6, 0xffff, 0x4, 0xb1ed, 0x4, 0x1, 0x9, 0x1, 0x5, 0x9, 0xef5, 0x9, 0x2, 0x8000, 0x100, 0x5, 0xd, 0x80, 0x5, 0x6, 0x63, 0x7, 0x93, 0x4096, 0xd2, 0x6, 0xff, 0x4, 0x4, 0x3, 0x2e62, 0x2, 0x2, 0xb, 0x6, 0x5, 0x2, 0x7d, 0x80, 0x3, 0x9, 0xffffa9df, 0x6, 0x1ff, 0x5, 0x80000001, 0x5, 0x10000, 0x8000, 0x4, 0x3ff, 0x8, 0xe, 0xffffff11, 0x80000001, 0xffffffff, 0x8, 0x3ff, 0x7fff, 0xffffff7f, 0x10000, 0x7f, 0x1229, 0x7, 0xf149, 0xe, 0x40a700, 0xfffffffd, 0x9, 0x506bb09d, 0x2, 0x7, 0x8000, 0x8, 0x533, 0x1, 0x4, 0x0, 0x0, 0x400, 0x4, 0x1, 0x5, 0x4, 0xfffffffd, 0x5, 0x3, 0x6, 0x7, 0x4, 0x67ac4f09, 0x0, 0x3, 0x4, 0x8, 0x10000, 0xfffffff8, 0x1, 0xa5da, 0x5, 0xe, 0xffff, 0x0, 0x7, 0x5, 0xff, 0x2, 0x6, 0x4, 0x7f, 0x4, 0x57, 0x9, 0x4, 0x451, 0xcb, 0xc, 0x1, 0x400, 0xffff, 0x1, 0x9, 0x9, 0xd78, 0x7, 0x193, 0x8, 0x7f, 0x2013, 0x400, 0x26aa, 0x5, 0x8001, 0x1, 0x1, 0x2, 0xff, 0x81, 0x400, 0x2, 0x10, 0x4, 0x80, 0x1, 0xe7, 0xa760, 0x7ff, 0x0, 0x7, 0xd0, 0x0, 0x1, 0x955, 0x1, 0x40, 0xffff, 0x54, 0xef5, 0x9, 0x4, 0xc, 0xf40, 0x1ff, 0x4, 0x8001, 0xe, 0x0, 0xb99, 0x7, 0xc8, 0x3, 0x9, 0x3, 0xe, 0x9, 0x3, 0x3, 0x40, 0x9c3, 0x7, 0x5, 0xfffffff8, 0x11, 0x8, 0x6, 0x3ff, 0x8, 0x6, 0x5, 0x50, 0x2, 0xf, 0x0, 0x2, 0x7, 0x7, 0xb828, 0x3, 0x5000000, 0x9, 0xed, 0xaeb4, 0x0, 0xf63f, 0x7f, 0xf38e, 0x800, 0x25, 0x8, 0xfffffffb, 0x6, 0xd0, 0xfffffff7, 0x7, 0x10, 0x9, 0x4, 0x48be, 0xffffffff, 0xfffffff0, 0x8, 0x9, 0x6, 0xffff, 0xa, 0xf2, 0x7, 0x2d, 0xf755, 0x7, 0xfffffffb, 0x9, 0xfffffffa, 0x7, 0x0, 0xfff, 0xfffff236, 0x8000, 0x9, 0x5, 0xa, 0x7f, 0x2, 0xfffffc01, 0x8, 0x690, 0x9, 0x1, 0x7, 0x10001, 0x6, 0x8001, 0x7ff, 0x3a, 0x800, 0x17, 0xbbe3, 0x41, 0xfffd, 0x7, 0x7, 0xa, 0xc4de, 0x0, 0x0, 0x400, 0x3, 0x3, 0x40, 0x7fff, 0x6, 0x6, 0x8, 0x1, 0x101, 0x9, 0xae1, 0xf4, 0xfffffb2b, 0x10000, 0x0, 0x52502780, 0x6e49, 0x2, 0x400, 0x3, 0x4, 0x10000, 0x6, 0x6, 0x8001, 0x6, 0x7, 0x1, 0x7, 0x3, 0x5, 0x5a, 0x5, 0x9, 0xfffffffe, 0x4, 0xffffff93, 0x39b0, 0x1, 0xf16, 0x5, 0x4, 0x9, 0x800, 0x7, 0x0, 0x5, 0x9, 0xf, 0x3, 0x5, 0xe8a1, 0x8, 0x7e9, 0xc, 0x9, 0x2, 0x3, 0x3ff, 0x2, 0x17, 0x5, 0x2, 0x0, 0x9, 0x5, 0x36, 0x101, 0x0, 0x6, 0x7f, 0x9, 0x9, 0xfc59, 0x1, 0x10000, 0x5, 0x9, 0x7, 0x7, 0xb79, 0x1ab, 0x4, 0x3, 0x10, 0x5, 0x80000000, 0xc5ed, 0x5, 0x2, 0x4, 0x2, 0x100, 0x7f, 0x7, 0x0, 0xa1b7, 0x2, 0x9, 0x8000, 0x3, 0x584, 0xa5, 0x6f77, 0x1, 0x3800000, 0xe, 0x8, 0x5, 0xf, 0x9, 0x6, 0xb, 0x4, 0x4, 0x1, 0xe, 0x5, 0x100, 0xffffffff, 0x8, 0x9, 0x0, 0x1000, 0x8, 0x7, 0x1, 0x3, 0x3c, 0x4, 0x94, 0x3, 0xfaef, 0x5, 0xfffff88a, 0x180000, 0x2, 0x9, 0x6, 0x2, 0xd73a, 0x16, 0x2, 0xe, 0x666, 0xa9, 0x0, 0x7fff, 0x9, 0x0, 0x400, 0x1, 0x2, 0x8000, 0xfffffffb, 0xffffffa2, 0xcd5, 0x1, 0x194, 0x4, 0x4, 0x8, 0x3, 0xffffffff, 0x10000, 0x4, 0xaf, 0x3, 0x8, 0xc443, 0xfffffff9, 0x401, 0xe, 0x2, 0x5e, 0x7, 0x2, 0x9, 0x0, 0x3, 0x3, 0x4, 0x1cdf, 0x0, 0x0, 0x100, 0x4, 0x80000000, 0x0, 0x3, 0x6, 0x6, 0x6, 0xcc, 0x1, 0x35e8, 0x4dcf, 0x32, 0x2, 0x3, 0xe6, 0x5, 0x2, 0x4d1, 0x4, 0x3, 0x1, 0xe9000000, 0xd, 0x9, 0x4, 0x2, 0x45, 0x1, 0x8, 0xefbd, 0x3, 0xc00, 0x128c, 0x6, 0x6, 0x400, 0x7ff, 0xbc2, 0x0, 0x100, 0x9, 0x7, 0x3, 0x2, 0x3, 0xfffffffd, 0x9e9e, 0x6, 0x2, 0x10001, 0x36, 0xdb, 0x8, 0x74d, 0x3d7, 0x80000000, 0xffff, 0x7, 0x74, 0x8, 0x7, 0x2a, 0x3, 0x7, 0x2, 0x9, 0xdd7, 0xf260, 0x3ff, 0x9, 0x3, 0x5, 0x40, 0x2, 0xd, 0x4, 0x7, 0xffffff9e, 0x10000, 0x1ff, 0x80000000, 0x2d, 0x717, 0x81, 0x2, 0x84, 0x6, 0x90d1, 0x5, 0x85, 0x5, 0x2, 0x7f5, 0x5, 0x0, 0x80, 0x7, 0x6, 0x3, 0x2, 0x40, 0x3, 0x2bc7, 0x8, 0x2, 0x28, 0x3, 0x321, 0x3, 0x3, 0x1, 0xe76b, 0x7fffffff, 0x6, 0x2, 0x8, 0xffff, 0x2, 0x3, 0x8, 0x58, 0x80000000, 0xfb1, 0x5, 0xfffffff8, 0x8001, 0x4, 0x3, 0x8, 0x101, 0xffffff0c, 0x4, 0x5, 0xb, 0x0, 0x7f, 0xee, 0x1, 0x6, 0x10000, 0xe, 0x7, 0xdc3e, 0x3, 0x9, 0x711f, 0x1, 0x8, 0x800, 0xd59, 0xc53e, 0x6, 0x10001, 0x3, 0x0, 0x81, 0x9, 0x10, 0x2537, 0x3, 0x7, 0x6, 0x1, 0xe, 0x1, 0x3, 0x1, 0x2, 0x7ff, 0xffffffff, 0x8, 0xae4, 0x7fffffff, 0x6, 0x7, 0x4, 0x3, 0x7fffffff, 0xdc, 0xfffffffa, 0x7d000000, 0x8, 0x7ff, 0x365, 0x0, 0x80000000, 0x400, 0x7, 0x9, 0x7, 0x9ea, 0x9, 0x401, 0x80000000, 0x90f5, 0x6, 0x6, 0xffffffff, 0x10001, 0x6, 0x400, 0x8c2, 0x2, 0x4, 0x3, 0x7, 0xffffffff, 0xa, 0x2, 0x10000000, 0x5, 0x1, 0x7, 0xba, 0xfffffffd, 0x1, 0x4, 0x0, 0x2, 0x40, 0x10000, 0x8, 0x1, 0x9, 0x6, 0x1, 0x100, 0x6, 0x4, 0x3, 0x7, 0x800, 0x6, 0x7, 0x6, 0x0, 0xffffff80, 0x0, 0x9, 0x1, 0x5, 0x0, 0x5, 0x0, 0x69a, 0x9, 0x2082, 0x6, 0xe8d, 0x5, 0x4, 0x9, 0x2, 0x3, 0x8, 0xffffffff, 0xd, 0xfffffffd, 0xfe6, 0x3, 0x4, 0xd1b7, 0x8, 0x4, 0x3978800, 0x8, 0x50800000, 0xf47b, 0x80000001, 0x6, 0x0, 0x7, 0x78, 0xb4f, 0x1000, 0xfffffe29, 0xd, 0x35, 0x0, 0x9, 0x0, 0xfff, 0x80000000, 0x1ff, 0xdc, 0x0, 0x6, 0x388, 0x101, 0x3, 0x7, 0x7, 0x1, 0x2, 0x9, 0x80000001, 0x3, 0x10001, 0xfffffffe, 0x6, 0x1, 0x5, 0x5, 0x7fffffff, 0x0, 0x5, 0xff, 0x8, 0xb248, 0x5, 0x0, 0x38, 0x7, 0x0, 0x800, 0xffff, 0xfffffffa, 0x61f91dcf, 0x8, 0x9, 0x80000000, 0x9, 0x101, 0x33d, 0x10000, 0x18, 0x7, 0x3ff, 0x8, 0x2024, 0x1, 0x4, 0x9, 0x2, 0x3, 0x9, 0x6b, 0x2, 0x9, 0xfffffff8, 0x6b37fb47, 0x9, 0x4, 0x180000, 0x5, 0x0, 0x0, 0x9, 0x81, 0x4, 0xfffffff9, 0x3, 0x6, 0x5ac3, 0x2, 0x1801, 0x5, 0x8, 0x2, 0xb196, 0xffffffff, 0x1, 0xc, 0x5599, 0xfff, 0x4, 0x1, 0x6, 0x7fffffff, 0x6, 0x3, 0x1, 0x0, 0x7, 0x1000, 0x2, 0x9, 0xfffffff8, 0x4, 0x7, 0x40, 0x3, 0x58, 0x7, 0x7, 0x5, 0x1, 0x6, 0x200, 0x10, 0x3, 0x10, 0xfffffffc, 0x5, 0xdf3c, 0xfffffffd, 0x3, 0x2, 0x8, 0x4, 0x6, 0x4, 0x5, 0x80000001, 0x0, 0x4, 0x1, 0x5, 0x9d, 0x8001, 0x343, 0x1ff, 0x568f23cb, 0xfcba, 0xffffffff, 0x7, 0x7, 0x7, 0x9, 0xd1, 0x7, 0x101, 0x5, 0x7, 0x5, 0x1, 0x22, 0x0, 0xffffffff, 0x9, 0x200, 0x1, 0x3, 0x8, 0x6, 0x7fffffff, 0xfffffffa, 0xd, 0x40, 0x8, 0x3ff, 0x4, 0x40, 0x3, 0x233c, 0x3ff, 0x3, 0x3, 0x2, 0x301, 0x3, 0x401, 0xa857, 0xfffffffe, 0x0, 0x0, 0x37bd, 0x10, 0x1, 0xe, 0xd, 0x1, 0x0, 0x2, 0xb, 0x4, 0x3, 0x401, 0x4, 0xfffffff8, 0x7f, 0x5, 0x8, 0x1, 0x2, 0x8, 0x8, 0x4, 0x8, 0x80, 0x4, 0x6, 0x80, 0x2, 0x194, 0x100, 0x8, 0x4, 0x1000, 0x8, 0x3, 0xf992, 0xfdd2, 0xa0, 0x8, 0x1bc6, 0x3, 0xa5, 0x401, 0x1, 0x8, 0x5000000, 0xa, 0x1, 0x7, 0x12, 0x5, 0x0, 0x8001, 0x8, 0x72c4, 0x5, 0x8, 0x3ff, 0x0, 0x80000000, 0x6, 0x9, 0xf, 0x8, 0x9, 0x6, 0x10000, 0x0, 0x5, 0x51, 0x3, 0x2, 0x8, 0xfff, 0x0, 0x0, 0x8001, 0x7fffffff, 0x6bb, 0x9, 0x5, 0x2, 0x9, 0x8001, 0xfff, 0x7, 0x100, 0x7, 0x7, 0x3, 0x8, 0x2, 0xb1, 0x0, 0x1, 0x6, 0x372, 0x5, 0x9, 0x40, 0x0, 0x4, 0x3, 0x4, 0xfff, 0x280, 0x7, 0x1, 0x0, 0x1, 0x100, 0x3, 0x40, 0x0, 0x1, 0x3, 0xfffffff6, 0x76ed, 0x8, 0x4, 0x5, 0xffffff55, 0x7, 0x5, 0x1, 0xa, 0x3, 0x6, 0xfffffffa, 0x8, 0x599ccfaf, 0x5, 0x10000, 0x9, 0x3, 0x1, 0x7, 0x9, 0x6, 0x9, 0x8, 0x7, 0x4, 0x3, 0x1, 0x10000, 0xc35, 0xbb, 0xd1ef, 0xffffffff, 0x8000, 0x9, 0x2f74, 0x80000000, 0x4, 0x0, 0xffffff71, 0x4818a5b0, 0x2, 0x6, 0x4, 0xfff, 0x1, 0x0, 0x0, 0x7, 0x5, 0x89, 0x7, 0x2, 0x2, 0x6, 0x2, 0x80, 0x5, 0xfffffffc, 0x0, 0x8001, 0x10001, 0x2, 0xed6e, 0x2, 0x4, 0xfffffffb, 0x1, 0x3, 0x8, 0x0, 0x4000, 0x7fffffff, 0xcc1, 0x5, 0xe, 0xffffffff, 0x10000, 0xe19, 0x1f, 0x3, 0x7, 0xffffffff, 0x9, 0x7fffffff, 0x8, 0x6, 0x800, 0x98100000, 0x3, 0xfffff1e5, 0x9, 0x7, 0x5, 0x9, 0x7, 0x8, 0x7, 0x0, 0x5, 0x2, 0x5, 0xe, 0x8, 0x80000001, 0x5239, 0xfffffff8, 0x4, 0x8, 0x729, 0x3, 0x4, 0x1, 0x3, 0x8001, 0x4, 0xd600, 0x6, 0x7a8, 0x10, 0x4, 0x7f709bb5, 0xff, 0x40, 0x19f86fb6, 0x9, 0x709416d5, 0x7, 0xe, 0x4, 0xa5, 0x0, 0x3, 0x101, 0xda8e, 0xc00000, 0x4, 0x2, 0x3, 0x2, 0x400, 0xd, 0x8001, 0xd, 0xfffffffe, 0x1, 0x2, 0x5, 0x0, 0x3, 0x2b, 0x3, 0xa1, 0x3d302b96, 0x2, 0x7, 0x3, 0xde, 0x1, 0x2, 0x1, 0xffffffff, 0x80000000, 0x290c, 0x9, 0x6dc, 0xfffffffb, 0x3, 0x9, 0xfffffffc, 0x100, 0x4, 0xb90, 0xb, 0x5, 0x40, 0x1, 0x0, 0x3d, 0x2000000, 0xb195, 0x5, 0x7, 0x0, 0x56691dd9, 0x0, 0x4, 0x9, 0x1, 0x100, 0x1, 0x5, 0xf, 0x8, 0x3, 0x2, 0x8, 0xffff27f4, 0x0, 0xf000, 0x4, 0xffff39e3, 0x9280, 0x2122, 0x6, 0xff, 0x0, 0x7, 0x7, 0xf27, 0x9, 0x3, 0x7, 0x5, 0x9, 0x7, 0x6, 0x101, 0x2, 0x1000, 0xcf, 0x80000000, 0x7fff, 0x4, 0xfff, 0x0, 0x800, 0x0, 0x8, 0x1, 0x0, 0x1ff, 0xfffffffd, 0xfdd2, 0x24, 0x4, 0x6, 0x400, 0x9, 0x4, 0x2, 0x7f, 0x3ff, 0xd, 0x84a, 0x735b96c8, 0x5, 0x3, 0x331a, 0x6, 0xffffffff, 0xa, 0x3, 0x9, 0x2, 0x4, 0x9b, 0x3, 0x3ff, 0x4, 0x8, 0xe5c4, 0x10000, 0x24e, 0x3, 0x7, 0xde6, 0x2, 0x35, 0x2, 0xd, 0x1, 0x4533, 0x7, 0xfffffffe, 0x8, 0x7, 0xfffffffe, 0x2000000, 0x9, 0x4, 0x2, 0xefed, 0x3, 0x8, 0x7, 0x3, 0x2, 0x5, 0x7, 0x7, 0x3, 0xfffffff7, 0x7, 0xffff, 0x6, 0x0, 0x7, 0x1ff, 0x7, 0x0, 0xfff, 0x5, 0x3, 0xb061, 0x200, 0x6, 0x4, 0xffff0b26, 0x8, 0x10, 0x1, 0x0, 0x3, 0x7, 0x1, 0x306c8e26, 0x1, 0x5, 0xe3, 0x2, 0x2, 0x0, 0x7a04, 0x5, 0x4, 0x1, 0xb07d, 0x4ae, 0x0, 0xffffffff, 0x1, 0xde, 0x7fffffff, 0x0, 0x6, 0x401, 0x80000000, 0x6, 0xb, 0x9, 0x100, 0x8000, 0x7f, 0x1, 0x7fff, 0x8, 0x80000000, 0x1, 0xfffffffb, 0x5, 0x6, 0x30000000, 0x2, 0x3ff, 0x8000, 0x2, 0x1, 0xffffffff, 0x40, 0x1, 0x2, 0x0, 0x4, 0x8000, 0x10, 0x2, 0x7fff, 0x3b3e, 0x3, 0x63, 0x1, 0x7f, 0x3, 0x8, 0x765822d4, 0x0, 0x7fff, 0xf, 0x35, 0x6, 0x80000001, 0x7a6, 0x8, 0x9, 0x8, 0x4, 0x8, 0x6, 0xff7b, 0xfffffff9, 0x6, 0x401, 0x6, 0xf70, 0x1, 0x67, 0x1212, 0x8, 0xca58, 0x200, 0xfffff001, 0xf, 0x2f3e57c5, 0x8, 0x8, 0x1, 0x4, 0xc, 0x1, 0x4, 0x1, 0x2, 0x0, 0x9, 0x0, 0x6739, 0x22, 0x4, 0x5, 0x3, 0x4, 0x6, 0x2, 0xff, 0x6, 0x9, 0x2, 0xffff, 0x7d7b, 0x7a1c49ab, 0x8, 0x101, 0x9, 0x4, 0x6, 0x8, 0x6acb, 0x7fff, 0x4, 0x0, 0x7, 0x0, 0x6, 0xe6, 0x9, 0x10001, 0x1, 0xffff, 0x3, 0x10, 0xfffffff8, 0x324, 0x0, 0x1200000, 0x3, 0x251, 0x4, 0x4, 0x1000, 0xb6, 0x3, 0x1, 0x8, 0x18c4, 0x3, 0x0, 0xe073, 0x2, 0xfffffff8, 0x101, 0xfffffc00, 0x5, 0xfffff1f4, 0xd, 0x1ff, 0x5, 0x5, 0x0, 0x10, 0x0, 0xfffff801, 0x0, 0x0, 0x1, 0x5, 0x8, 0x200, 0x3, 0x1, 0x7, 0x8001, 0x10, 0x1, 0x9, 0x4db4, 0x52, 0xb, 0x5, 0x4, 0x1, 0x1, 0x0, 0xffff, 0x4, 0x1, 0x7, 0x2, 0x9, 0x5, 0x7, 0xe7, 0x7, 0x1, 0x5, 0x81, 0x8000, 0xffffff6e, 0xf, 0xf5, 0x6, 0x1, 0x2, 0x5, 0x1, 0x7, 0x2fc5df05, 0x9, 0x6, 0xdba2, 0x3, 0x5, 0x81, 0x81, 0x8f1f, 0x3, 0x0, 0x4, 0x4, 0x1, 0x1000, 0x100, 0x8, 0x8001, 0x9, 0x3, 0x9, 0x4, 0xb063, 0x3, 0x1, 0x5, 0x6, 0x7102, 0x5b, 0x0, 0x4, 0x40, 0x6, 0x1000, 0x80, 0x8, 0x0, 0x2, 0x7, 0x70d, 0x97, 0x3, 0x6, 0xfffffe00, 0x9, 0x9, 0x5, 0x9, 0xc8, 0x9, 0xc1, 0x7ff, 0x2, 0x1, 0x8, 0x4, 0x6, 0x7, 0x6, 0x8, 0x9, 0x2, 0xf, 0x7, 0xa, 0x61b, 0xfff, 0xaa, 0x80000000, 0x9, 0x5, 0x19, 0xc44, 0x0, 0x6, 0xfff, 0xffff7fff, 0x0, 0x3, 0xab, 0x4, 0x1200000, 0x9, 0x6, 0x1, 0x2, 0x5, 0xf18, 0x7, 0x0, 0x4, 0x395, 0x7fffffff, 0x7fff, 0x401, 0x4, 0x3, 0x5, 0x5, 0xc, 0x300a, 0x400, 0x6dda, 0x101, 0x8001, 0xfff, 0xbe1, 0xc, 0x1ff, 0x101, 0x2, 0x1, 0x6, 0x3, 0x9, 0xff, 0x1, 0xfff, 0x1, 0x80d, 0xff, 0x6, 0x900, 0x18, 0x6, 0x8, 0x780, 0x0, 0x9, 0xab5c, 0x8, 0x0, 0xbe0, 0xe46, 0x9, 0xf7, 0x2, 0xffff62d6, 0x3848, 0xc8a, 0x7, 0x2, 0x10000, 0xa0e, 0xe, 0x6, 0x4, 0x3, 0x3, 0xfffffffa, 0x3fff8, 0x7, 0x9, 0xe, 0x3, 0x2, 0x4, 0x6, 0x7f, 0x3, 0x3, 0x6, 0x0, 0xfff, 0x5, 0x4, 0x100, 0x8, 0x1, 0x7000, 0xd, 0x80000001, 0x89e2, 0x3b46, 0x8001, 0xffffff39, 0x0, 0x7, 0xfffffffe, 0xf7, 0x0, 0xe1, 0x8, 0x6, 0x0, 0x6, 0x7fff, 0x1ffe00, 0x30, 0x6, 0x7fffffff, 0x8fd, 0x100, 0x1ff, 0xe27d, 0x5, 0x7fff, 0x4, 0x0, 0x9, 0x400, 0x9, 0x9315, 0xfc05, 0x7ff, 0x43, 0xde, 0x3, 0x10001, 0x9, 0x7, 0xffffffff, 0xfffffffb, 0x1, 0x1, 0x9, 0x99, 0x2, 0x6f15, 0x5, 0x8, 0xe, 0x4, 0x1000, 0x8, 0x40, 0x10001, 0x70b, 0x7, 0x6, 0x400, 0x470e, 0x8, 0x5, 0xdfc3, 0x9, 0xb, 0x5, 0x7d, 0x9, 0x7, 0x7ff, 0x5, 0x7fff, 0x1, 0x2, 0x8000, 0x4, 0x2, 0x8, 0x7fff, 0x5, 0x10001, 0x1, 0x6, 0x4, 0x1, 0x6, 0x3, 0x7, 0x80, 0x100, 0x4, 0x9, 0x9, 0x3, 0x7, 0x3, 0x2, 0x6, 0x1, 0x9, 0xdf, 0x81, 0x6, 0x9ef6, 0x9, 0x3, 0x0, 0x2, 0xffffffff, 0x3ff, 0x6, 0x3, 0x1d6a, 0x9, 0x8a3b, 0x10, 0x3, 0x200, 0x8, 0x8, 0x40, 0x9, 0x216ff77d, 0x9, 0x5a26f6ef, 0x6, 0x3, 0x7, 0x1, 0xfff, 0xcf87, 0x0, 0x4, 0x10b, 0x0, 0x6, 0x329, 0xfffffffc, 0x7, 0x7, 0x1, 0xf700e72f, 0x0, 0x8, 0x2, 0xc000000, 0x2, 0x9, 0xfffffff9, 0xc, 0x1, 0x3, 0xffffff7f, 0x3, 0x2, 0x4, 0x2, 0x3, 0xfffffffe, 0xfffffffa, 0x0, 0x45e4, 0x5, 0x80000000, 0x0, 0x67a, 0x3, 0x0, 0x7a, 0x99, 0x800, 0xffff, 0x1, 0xfffffff4, 0x4, 0x5, 0x7, 0x1ff, 0xd, 0x1, 0x8, 0x8, 0x5, 0xfffffffa, 0x6, 0x81, 0x1, 0x7, 0x7, 0x9, 0x8000, 0x3, 0xfe00, 0xee, 0xf5a, 0xfffffffc, 0x40e2, 0x8000, 0x9, 0xfffffffa, 0x7fff, 0xd4, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x5cb, 0x9, 0x0, 0x8001, 0x5, 0x0, 0x6, 0x9, 0x10001, 0xc9b1, 0x1, 0x4, 0x1b61, 0x8, 0x5, 0x20, 0x9, 0x9, 0x80000001, 0xe8d, 0x2, 0xb93, 0x9, 0x6, 0x4, 0x9, 0x4, 0x1, 0x6, 0x100, 0x5, 0x5, 0x7f, 0xfffffff8, 0x9, 0x9, 0x5, 0x1, 0x7fffffff, 0x9, 0x436, 0x80000000, 0x0, 0x779, 0x1, 0x9, 0x2, 0x7, 0x9, 0x7fff, 0x5, 0x0, 0x6, 0xfa, 0x9, 0x0, 0x400, 0x5, 0x9, 0x8f74, 0xbb3, 0x7fffffff, 0x6, 0xfffffffc, 0xa00000, 0x10, 0x8001, 0x3, 0x7, 0x5, 0xf10c, 0x8000, 0x82, 0x2, 0xfffffffb, 0xb, 0x74a, 0x9, 0x9, 0x0, 0x9, 0x0, 0x4, 0x80000001, 0x7f, 0xfffffffd, 0x8, 0x7, 0x4, 0x8651d4d, 0x5, 0x8, 0x3, 0x5, 0x1, 0x6, 0x8, 0x1, 0xffffffff, 0x2, 0x1, 0x1, 0x4807, 0x5, 0x8, 0x8, 0x3, 0x8, 0x7f, 0xd1, 0x7, 0x400, 0x0, 0x1, 0x93b, 0xffff, 0x3, 0x5, 0x0, 0xfa, 0x8, 0x2, 0x8001, 0x1, 0x1, 0x7fffffff, 0xfb6c, 0x9, 0x4, 0x40, 0x7, 0x2, 0x9, 0x8a, 0x7e, 0xd5, 0x8, 0x80000000, 0x0, 0xd82, 0x6, 0x6, 0x32, 0x3bd47c4e, 0x8, 0x3, 0x7, 0xff, 0x9, 0x9, 0x1, 0x101, 0x2, 0x3, 0x9, 0x6, 0x4, 0x1, 0xa, 0x18e, 0xfffffba2, 0x8, 0x9, 0x9, 0x7, 0x100, 0x7, 0x8, 0x2, 0x4, 0x1, 0x9, 0x8, 0x5, 0xfcb6, 0x1, 0x7, 0x3, 0x8, 0xc274, 0x4, 0x3, 0xf06, 0x4, 0x1f, 0x4, 0x80, 0x8, 0x7, 0x4, 0xffffffc0, 0x1000, 0x1, 0x1e, 0x8, 0x100, 0x9, 0x6, 0x6, 0x7, 0x7fff, 0x2, 0x7, 0x5, 0x7, 0x7, 0x99, 0x5, 0x8, 0x16, 0xffffff9c, 0xa, 0xffffd7fc, 0x800, 0x3, 0x400, 0x9, 0x9, 0x2, 0x200, 0x0, 0xffffffff, 0x8, 0x1, 0x1, 0x0, 0xffffffff, 0x80, 0x8, 0x0, 0x5, 0x4, 0x1000, 0x7ff, 0x1d8, 0xfffffc00, 0xe75f, 0x8, 0x3, 0xffffffff, 0x8000, 0x41a7, 0x4, 0x7, 0x4, 0x4, 0x3, 0x740, 0x6, 0x7, 0x7fff, 0xf, 0x7, 0x5, 0x6, 0x200, 0x0, 0x9b83, 0x5, 0x2, 0x7f9c, 0x9, 0x8000, 0x0, 0x3, 0x5, 0x68, 0x40, 0x4, 0x78c5, 0xf, 0x8, 0x7, 0x1, 0x49, 0xfffff3cd, 0x2, 0xfff, 0xe7000000, 0x7, 0x6, 0xe, 0x0, 0x401, 0x1, 0x0, 0x9, 0x946, 0x4, 0x4, 0x2, 0x4, 0x9, 0x48, 0xde5, 0xa70, 0x6, 0xa3f, 0x81, 0x800, 0x6, 0xcf, 0x40000000, 0x0, 0x7, 0x4, 0x9, 0x0, 0x89f, 0x1, 0x7fffffff, 0x7, 0x10001, 0x9, 0x3, 0x1, 0x28, 0x10001, 0x1c0, 0xa, 0x9, 0x8, 0x5, 0x5, 0x16, 0x6, 0x9, 0x33, 0xf, 0x3780, 0xfff, 0x4, 0x3, 0x8, 0x8001, 0x1ff, 0x6, 0xb, 0x2, 0x6, 0x8, 0x1, 0x1, 0x1, 0xfffffffb, 0x1, 0x3, 0x4, 0x1, 0xf9a, 0x1, 0x3, 0xff, 0x45, 0x9, 0x2, 0x2, 0x5, 0x4a, 0x7875, 0x5, 0xc, 0x0, 0x3, 0x6b89, 0x0, 0xe849, 0x9ac2, 0x3, 0x3, 0xd, 0x9cf, 0x401, 0x3, 0x9, 0x3, 0x7, 0xbf, 0x0, 0xcd1, 0xffffffff, 0x7f0, 0xd248, 0x84, 0xe, 0x0, 0x3, 0x5, 0xff, 0x5, 0x1, 0xeab, 0x200, 0x32a, 0x3, 0xe9f1, 0x8, 0x65, 0xfffffffa, 0x0, 0x8, 0x6, 0x0, 0x200, 0x6, 0x5, 0x4, 0x2, 0x6d06, 0x3, 0x66, 0x9, 0x4, 0x9, 0xffff, 0x4, 0x40, 0xfffffff9, 0x6, 0x9, 0x5f260ae3, 0xfffffff9, 0x7, 0x8, 0x9, 0x283, 0xfff, 0x5, 0x1, 0x9, 0xdf, 0x2, 0x1, 0xffffffff, 0xffff, 0xce2, 0x0, 0xb, 0x3, 0x919a, 0x6, 0x8, 0x5, 0x6, 0x80000001, 0x3, 0x1, 0x20000, 0x0, 0x9, 0xd9, 0xfffffff9, 0x800, 0x9, 0x5, 0x4, 0xff, 0xfffffffe, 0x1, 0x7, 0x10001, 0x8, 0xfffffffb, 0x0, 0x4, 0xf, 0x6, 0x4, 0xb29, 0x0, 0x1, 0x2, 0x7, 0x200, 0x2, 0x7, 0xd, 0x9, 0x4, 0x0, 0x2, 0x5, 0x4, 0x2400000, 0x3, 0xfffffffb, 0x5, 0xd, 0x7dc, 0x9, 0x0, 0x6, 0x5, 0x5, 0x4, 0x5eb5, 0x8, 0x2, 0x628, 0x4, 0x8, 0x9, 0x9, 0x1, 0x800, 0x5, 0x7, 0x3, 0xb, 0x5ce6, 0xea0b, 0x9, 0x0, 0x7, 0x8001, 0x9, 0xcea, 0x1000, 0xfffffffb, 0x5, 0x75b, 0x5f1, 0x0, 0x1, 0x1, 0x9, 0xfffffff8, 0x30, 0x98, 0xe4, 0x1, 0x7fff, 0x5, 0x4, 0x2, 0x8286, 0x4, 0x88d, 0x400, 0x8, 0x6, 0xcd6f, 0x1233, 0x0, 0x734, 0x9, 0x40, 0xc67, 0x819d, 0x2, 0x6, 0x83, 0x5, 0x9, 0x33, 0x9, 0x0, 0x2, 0x7ff, 0x80, 0xff, 0xa65, 0xfff, 0x2, 0x3ee5, 0x3, 0x4f6, 0x5, 0x400, 0x1252, 0xfcc5, 0x2, 0x8, 0x1, 0x2], 0x8, 0x258}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x15}, 0xa) bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e040a260c"], 0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004041}, 0x40010) 1.056966365s ago: executing program 1 (id=1493): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,', 0x18) 988.431727ms ago: executing program 1 (id=1494): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = userfaultfd(0x80801) close(r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x88841) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ff8000/0x1000)=nil) 964.993986ms ago: executing program 1 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000020900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x10}}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x800}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4008050) 879.741448ms ago: executing program 1 (id=1496): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/30, 0x1e}], 0x1) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000080)={0x401, 0x1, 0x7, 0x4, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000"], 0x0}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000002180)="c9b8bc80244e92823c87c54877cfdf2cbd85dd637f7fb5fa7b71866a76d58b62e624a9c4507042049407cd9efe483d7b15e800b9e58788f5b58f6625401048a99466b01f45795049d4a1b69ffb930d3dc04f3d4cfe6d179ad1d960e1f7292842fb390d9bcf522d20fdf9efcbee23f94fb022eb7fe5bc5eedf00cf18462eb98dad2dfadf9ea66a9b70695827762236d05463ece55433cb3c793e4dcc8aa1fd295b29072c16833c6852dcd62215ce37760d4506f1820f70d466a067a93fad1fd9e5c148b2cd4d6eea9093e9ae4676c9535131e0d8f3fe2d21b2cc901a28c2b3e9b65d5b8b0f081638422ca55aeb0e9f2b1a45285d263a798c356238a63384625ff32bcdeb89198d7522c7501520592b1534f7106282d5c2cda51b613fa2b3390225a4b24e4ca01d2a230335a9ab47bc71cd808c5928872af0e1093ff3a9e83fc123188f3acd0a44898c2f13fd7f58efa656534384d6fbe649c323f51f31208edd86f3a49705b88a0a9804bfcba1f0dc8d3bc3cc448cd7b66e635f5b17d9f9a48ea5c3ad8f14d0f1cb95d5e21c85a01c15fbc52a779ca9c6b416ee2161984ce6f23c72ae0f267fcd77ec49c290cf68f11e495cd0f9be34542ff9988932c48875e0e06a3a351577f5df8d80c7e7dcd391a57bb212274f25eaca6b09c1651f64ec9a291691427fb40f61254c6b07b793c350ef8daea36f7dbbf36c92d02c1421651e800828d409979551fa7b3c242ae434ff485372d5e63d86829e6a6198e64a9b27ca3841fadf340adb7cf3451cfb43ed6bb99584ccc0eda60f9013f3be1566a51a9cf8726a338c1af274cd2ee85d97ee9fa71f4d9723895eb0252951303308c07c41d21b55c9c0141a123f888c9c3f134aa5d4d9dc9f011821b1b07b67390ab70aff8650014b90f80fbed0394afc5dc155dd25df3be78d604d148c38462d9a2aa56c66d71edf21be640e2248211ad910b30730577df5f7f97a958247d21351fd20d1ea268deed116540f98854825042d70f31f223880db56d4e04ca90e1696513ec37691a0dda9c15b23c32147875645310e05fbf5764af088af7318e5a9a4cd2e89e6b9b5269bd61ec042b4e5fa5ba7726396f9bad37a6c0c0262147bc13abe1ab091163023551817167818a81fbf9dec69ab1145f90c65bda80d0d6ddfbf3da3c9152093c4d725e83c456eeebcb481cf6fb545a8a4ad184054bd63526ccff7e1cb64fac6b0b10e8177854e81996e2e05636234ae2b9c9dc925737f2b4fc53138ff5823168cbc2b3b34f75a26bef57c749b7bdf88886681e918fed3d3233c2ef46e6c609c363c06fc7c3889b79f1d407108bfebae1ab57b71980341894199a6a7a6abc76d267002918f455df9d2efef38e49e2eb365a54f79b36aa06f31c982c334909e371982a6fcbad2692ebe22bc5cf3edfe2e4a946dd8395524c9846e4871a3ac05226543c2ecc26203d84eaac3167b5ad067f97acbdfa75985897e704c97dcadcc0f22d959f99cca49f14f52e039dcd2c865660e1f7310e7dd381cfc59b7030afd90f9f86d9b0a1304c501a3101d3167b8800180da928b0c71831021d311c798894f3049ff12cb90d19e4691bf40354e3ae0f437439cfbe91e24cc2485e84db55d13d236780abc7a807a7f2d30fade7424e40422bbcb5f38a57f8d5410096d0de60314a358f6a647d7216b11dbc603bbf3942594ec3c25dd78ccb06f8982532405b57e2ecf8db1109fddb864e44c8c7078666e3ea1b441fabc96f489eadebf44af7a446db50e59eca5acbd032f6ff903cc85c489cfcb88f31886c8e8d818b3cb0ccd5009086c0a81764f92a5115fa20b1a0b1a5ebe587f1a44173a4bcb94f0a1e8cf490fdedb683c91aa8d9be13fa70ee65cea89ae4a4635d85087a081b3b06e73961f27594346423f648e622d57cd0ef063ebfa811d0e12f8be79dec19a03eb1cef2be79faad53ff26bdeb79446a8c1436cc9ac460174d00ca2d904bc7fd15b7e6e361c5e6a1514912de46a10ef935efb461047f42007c9d86039acd0fa000f07e9bb2a1ae800be2762341f137fceb2a69ab03cf3bda4199a43e162f3a72afe72b445242663b1645f022aee64ece487d231520bf7f501303bdfa2f9add3a4af96f5128979d6bbac116b9c70fe865a9edd37d0c646cdfd2dbfc8e8ebf78dcc59a002b1db763bf412aaa7940969e0d8af791782cb8a907f4c1ab7e9495cc7fb7968408b2ce03dadcd0417071974b0332f554e7498898236189bc374105f25c04535ffdf8186591caf648673340d8591ae9cce3a7d0f82986b0bc3c2d6e3d0f3d22155b7aed7437f11fb47693ce53cf4e4531669f7b736f45ac960ec2b4f70e474d076361395e2dbced14bf5b94e894299b0e46c459f6f41f24cbe1a3e1113ea80fff54e8dd2fe331c8eea0349ba0251c88f196a95bc95f4723137940720eb0857f1e6d4af4fbf4e85b7e0e590a338e565ef76eb88c1124ccf992b36b0d6a292419bb467da06a46f91baab0cd3e47c57c9939b17ce44c91f512baecfac7a6b9440a1e1db39ccfd15d44f2adab4b1fb39cfedc5a79e079c196cdf6b071d8bbd04ee54e74652594ba10f29c31ccd85d94863dfc67f2cd132385a540890f1e82404e299a9ac2996d36edbb558c6937048399ccb0a79af4d1f4c25262d7f5b5cc150ae7becd732e90a140ebaae68e42695dc1ddd4bb465f7466db339258334c1e5eedda3ac1638d32f63860546fccd5af67fdac1baffe46dec18a41f58fc876cfef7b62fd00bc598d5a18156cb204785de12eaf4dbefcf9ad1112bdaf8b8d4e3cdfd7eb7baf10a3091c5e6ee1fff284dd9ac4bb4cb832ab0c49f4b2880f59200748463d4158339e2d626ddfd7d8547a06a019d87bbfc5bfa1e7e4801e457ddcdf47b5fb35ec522b6457736c35fbde32c491e3adb521edef77116a018208dce6bdcf9bc7432f9cdf1b8f0686efa497c0a7044e72fb6f33e475a7bdceeccccbaa13a88df68e24ff9039cee59c5f0799f7842c2d21a7a7ff2f793f12ea49e34be214ca1d9af8cd5ffeb4121f6dcca26d93c2560d9c5fea851c358562ec693e7b5ac120f345e5868a4a3951371da303ef7f50505342c28349fbb19380f4989675bf32b3bb5daa14c764d8a8b7d3a929d0a1d0e9d84845a4d0b582140bd4519a2041889a04430ac7ac71309f30c733425ae11d8a2408511a2b83124fc9f57ca3b3e99324e7cb1faef290d8c8360972e3a342b431e4548306b22a934c8739c17bba66b9afb0182c639cf5a3d3afd32153e11e02fcd0a792de471b8bac7b86e5766eece24911021b0016e8e35f6ce910dc130f74142d9335fbbbae04e88999395bb102e9cb1e09b978109e2b6fc3687eb90a136f9041c7a80b094b222ee19f8959cf40b0c8364c3f5b43ce00d7830497f52e6a96b0c9faf471aed9bf4adf151d3d7b2964113c5c11c40f19d64677ff1e3517d9ee485eefadd8549e6ebff777a6b32272bf9e79eedc851db7329e4ed58001cd7a42cb806b04440898599bfb1aaa9ede9cb6dbd09615b8d36156c3ffb5bbdfdc899e4a78d8ff512721d70cd2c21f668f783f0b655ecab4a75e7a4aaf1e644978635190d1037b1ef4d052630a2c993b5a72313093e155405f3f85ab62f4ebc5f31848e75ffed7295c4a06b6905f5faea11dfdd9e74b56a2815038ea1a5c85d8fa4b87a7055dba4eab2332d812f4f86afc1a58ba516feb699ae91071c760718ed5b8a203a399c87f38b1850fefe1adfc96e95b258b77b3fa376da3959b169b678b94d19476ec6e2c4abadf6bd8060d73dbec3a32770c2a9151ca69c5d1cfbab5fd222db28337cb45a985c0941464cbeae02a827c3eed14ad698d6c535c567f40aba69fedc02195dbb497f6458998b9cbe4e145606578396442bdab7808c7bc1832a1f2c47730809ad509e7b9af68f4373a9eaa92905e5e899c61720e2976c60fe5e0c9934d27e214b058f1fa3f47b4da08aa170ced7c174382cc790936b35569dc2a5c0979d98625f5e2549080b38e0b067cb34c2a6ac5849a8de9377dc4a2b98fbfa722e23866822694a001df97ff39c28e706f73250bacdf84eb68e285d89bacb14b3c0fd5759d942d3698ab88db2cf58e68531bd0fc6574db8535e311358e1b99e52ccc1d55fb16c21a1f1b808c09546edde39691ec84152e1a4b55e9e220834f0168c5ad08e63f55b2f25f0b2a6cb7e7ed4cbc3cafdbe4d4f584fd931ed6fd50bbc444e6f81df98bbc4df3e5b04f805c6fd539ff7cd8aab56e7a4a208de7367a920e5a5aeae73d01078a8d2605384197b22f2089f590b4ac4f5fb8ce9e0b1129e608823e37b3270a206a86d029e881a57f42812aac00cbe2f740d0bf4982554a769777f2c020dcdc677524e152330693052d9f8f9259874ca554453b936a95a5c62b242abceda57299bcfa9c2b3232ceca0c81aced0ee0a0de4f1f44e0789c131f4272ef43007d31e7f5947bc0320edee2df1e6415d5dd19d9988c964ecf443d75c851f3fa59b07b91169442c0d7ab1973cd7823bfd64c4fad357ba1588755db16e34151e098a847062d404d53df3bdb0a53d7b017a2cf50c77a52d09aff245aea91e585bbe78d69e4e466aa8fb5c05975463bf7e1308b9d2057648f4d3ce352f1e5c2a82bc69389214781579468d470ad091a84eb3cb1a6c7d95948db025a6f493666ebcf9e16754164c384b87f3693a525f696eba140945e7cc00610d58f20923f6316066197c12881d8898b2d639aabdc10b05703dd8754703ce1f984d5f8577d5d202a67636f0555bc3a72cd083f38578a83b3584e1880c332c0ab1112fb61173363c09d67d29b1e97d41ee923b41f0dbe8a32c6cdf63b1da9eae59d5c6be75bb9a48a0ab732aa594c1aa1554cf789a032177795e79ab20eda36fc4f96533b5505dea6e56aec518ccc7bdb1a15c54a8a084dfebf1c94b0e9b218e9009187181a284d4eabd006e872032efc8f8e8dad0662e2ea30c3139ec7f69b39ab4ea685426390f3f8f3a5bc3cd7f198a1aac1368877ae2c40f4aed57630647817b8d6d872b6226a2a91649826e584b492e948bb067216c7b3730bf93ef7e25bb6cff157ea0beeb4e42cfce2526271559131fff6cc3ee0efb017053c72a16571c2a8f5a80536fb989404e512e29641193b1b8727780652b1de14b2cebe235b4583f7ef48ba95c136db636e8307935ca92db6923ee342e0648b805f126bdde1567434994c97ff7fab0fa3356b5ffffb1eeb31629887ea4bfe12565d86f095df8537fa1223aecaee041d078156adab05692e1e6160bc02f2ed8686493c71d0adf3782d3407bd794c4e7cf003894464734af8de7366367e3e222cc5aa9f740851fe41cd0355fffa5c3c9aab54293309b673e5c4c173fd6623674048a0db38de3078ed7dc1a477d95746d588fbdb15c48444b3f2c229b023cdc53a7a59dfebf77f83d9ecd4daa08b2efe551c57f05fe987971b10443893e1ed1f40814d5347e1afad39e422e5b8746aa6833a384cbec935ce463356ffc38a2237493bccbf6b2a724474aa65bd8e63d6f1c85355179242dcdb7c179d143e5180627770c2eb430da431394e49d1a2f94841fb4da8e0eaf5690fba0edf765d4857828897f8a5a840f980f3e489dff6a814b361815cb2432a08ad8e77336aae327e4752368844886d56177c2980799320c29054582267d345ef96162c4d41c647ac131b732b21332f4a10a764c6ce1fdb0849da5f6f03eb8faaa64a3857a4881672f223355e63036a06050a39ff1779dc0c09d22c9a2ca7b3b94b8eb3c84bac", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000040)={r2, 0x1000, &(0x7f0000001180)=""/4096}) 712.232371ms ago: executing program 1 (id=1497): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x10, 0x101000) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x221000, 0x7a) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) (async) unshare(0x400) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket(0x10, 0x803, 0x4) getsockname$packet(r6, 0xfffffffffffffffe, &(0x7f0000000200)=0xffffffffffffff16) (async) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r5, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208001e8d61881b5d500d6354", 0x34) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aab3aaaaaa3808a886c800ba08060001080006"], 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="f257a8d6ea7bc273dfaeab96850806233b27cd7861b8677d1b4b18821951696ff393a677adfec3d69836bfc0d9735f2203ba5256e626cb82e84f6c7aa6161584be1fc20a49affc4c0fdf44b5091c958f5d0462f54dee9e3420b25e25c1f7af2cfd", 0x61, 0x20000001, &(0x7f0000000200)={0x11, 0x11, r8, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}}, 0x14) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002580)=ANY=[@ANYBLOB="70000020100081050000004cc3fa5fb4a5a192679bdb9e5f1db6000000000000000000985c62487e1954f079dc2861eb19836b1391926ff695f6754bbdd9660c6674729cbc3110001aa6decfa4fa2a6b8a380613266d459adef74798bc2d121cee0eb7c928d4c8a31125834dc54c90211095214d968c", @ANYRES64=r0, @ANYRES64=r4, @ANYRESDEC=r3, @ANYBLOB="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"], 0x70}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 697.758684ms ago: executing program 4 (id=1498): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000640)={{0x2, 0x4e23, @dev}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x4a, {0x2, 0x0, @broadcast}, 'dvmrp0\x00'}) 581.34389ms ago: executing program 4 (id=1499): prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b35, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffffff"}) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000003c0)={0x0, 0x44, '\x00', [@generic={0x68, 0xd6, "0338320506d54cb34284c30ddc735e60b7678cd1932d1bac85a2cd7302a4e18abd1d2a2f73a65d78174f095cbe1790a5f6f94cfc204f9573b263f05b609e1cbaed8c5a11ff7e5742f28bb8f4949490add2124abd67344de6c1bcf3bdda052bb8c8b6144f9685db772d4fc26e7b17576335b69eabb60f38be3bba39c90efbed5bc0a32cf72f5eb321d454358714af44097a702c68c74db17a1a15fa2f998c9929e4c50fe2a3829e221e90be0ef0b164c5751a0944c52c7a978e23d01f826ba09e56a9673d6b4d179bf191133d2b4aa5e94062050febdf"}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x4, 0x132, "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"/306}, @pad1, @ra={0x5, 0x2, 0x1d}]}, 0x230) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='((', 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8020}, 0x10) 460.255991ms ago: executing program 4 (id=1500): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x1, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x5, 0x5}) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x3df}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffb, r8, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00'}) connect$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0xf800, @none, 0x1, 0x1}, 0xe) preadv2(r6, &(0x7f0000000180)=[{&(0x7f0000000140)=""/57, 0x39}], 0x1, 0x8, 0x3, 0x1f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) sendmsg$netlink(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000a80)={0x410, 0x32, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x110, 0x149, 0x0, 0x1, [@typed={0x9, 0x12d, 0x0, 0x0, @binary="a32c8100f5"}, @typed={0x9, 0x2a, 0x0, 0x0, @str='\\:\\$\x00'}, @typed={0xc, 0x9f, 0x0, 0x0, @u64=0x7}, @typed={0xe8, 0x46, 0x0, 0x0, @binary="7d943a50a9bba761983bd8fad0a36b8e2571f4f0417806e0f0369fef5351d3507ff04da9332ef8f2b227c7aef62834837fa98f91f40c80122fcbd0d0e6bac1a37055b7a22ac7eed0ca99d9be54b759971c5b57e5aaa9d2d824b0d491d17eb418d59d43558d852645cfc48ee9ac26478e22b9e404dee7231bb7ad5e982042d7915adf5aa8f1aa03c975de3bca3f40f42ba2301642a1de9da4f27e4150298863cb694de57c1abb77eeae5c82de163f9ac3974b52430b48587fe6a8aea7ecdda5ea219a4a8b342d384ccf02cc00e9339744cdd49e0e344f65ae1fdb45f83452769c9db24f67"}]}, @nested={0x2ee, 0xd9, 0x0, 0x1, [@nested={0x4, 0x40}, @generic="5ab58d0d6aa10230db69cfb306fc55113f4c3647534aa2a18949793a5fa73fc8653b96e911be2ab27f7991b73efac506d69cb32611bc210e8f63b64fd07fe98b6465b2f80032bc2b81287f2f472309357c58a33ef7da55c0ca20858bb81ed5497573e54ae74a85ae9b5d3c6c8a5e472b758b0faa7b2c17bf4beaa0665b60ddabf7399a123f478c1d73361ff3413435da71e8c8df4c1d7cfc90ccfb7be9584c5cc19edfe9cfb54cb96053af13327d324b889b77fe7db19397b3d3e5f869194de551f1de05c1d1ffc28c9e35880e293c7dad6d180fbdea0b46300b19ee79ab142e73c7ca6b90ff7747b2a39f0aed0d6f6fe58a5cd268df9e3c", @generic="70213c719cfe14a537daca5207ac6c3acc7d0ad737803afbf5157acdec15e649eb59937befd6749fd9165c063554aa21185fa38aeed82bfdb8122f8ff3543b0e4a5c53c2977864e4ad08137ce89d8ba1ec349300d808ca70809c27355a280d76cc08d11511a1e474ecb41f1132ced300925d5b8cf09aa6ce4a814530d4f9c131c89580a7438ca70b3e6fb906310750f9bd234406e85fe427031fe8575ba4465c15397a9d03fbcfe6521af89dd038e885143e7301ea0c37ef5b2984b15a07b015a936338c46", @typed={0x11, 0x119, 0x0, 0x0, @str='/dev/net/tun\x00'}, @typed={0x8, 0x68, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0xba}, @nested={0x4, 0x25}, @nested={0x4, 0x28}, @generic="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", @nested={0x4, 0x144}]}]}, 0x410}], 0x1, &(0x7f00000007c0)=[@rights={{0x2c, 0x1, 0x1, [r7, r5, r10, 0xffffffffffffffff, 0xffffffffffffffff, r5, r7]}}, @rights={{0x18, 0x1, 0x1, [r7, r11]}}, @rights={{0x24, 0x1, 0x1, [r5, r5, r12, r7, r7]}}], 0x70, 0xc840}, 0x4000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 460.057204ms ago: executing program 1 (id=1501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) sched_setscheduler(r0, 0x0, &(0x7f0000000300)=0xfffffff8) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x0, 0x0) bind$tipc(r3, 0x0, 0x0) ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d4, 0x7, 0xf, 0xfffe, 0x7, 0x1, 0x4007f, 0x10000003, 0x4ca9d89d, 0x4, 0x1, 0x81, 0xb, 0x24004000, 0x6], 0x2, 0x4}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f00000002c0)) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df715", 0x35, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 394.517429ms ago: executing program 4 (id=1502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001f4ff00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001f4ff00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x20, 0x10, 0xcfa, 0x6, {{0x12, 0x4, 0x1, 0x34, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0x17, 0xae, [@empty, @local, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @local]}, @timestamp_addr={0x44, 0x1c, 0xb9, 0x1, 0x5, [{@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0x4}]}]}}}}}) r4 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x9, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x62}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x1) (async) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x82}], 0x2, 0x0, 0x0, 0x1) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001400b59500000000000002000a402200", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff0000000014000100fe080000000000000000000000000017"], 0x40}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000001400b595feffffff00ef00000a00fef55741bb5df3abc13884546f79bc933640d472a990edef44cb290ad8d56021cdaa789e286226e43b8aa31eb7f3094556a218f6c224cb44abc886c7b68c2f3679abdf3ed0cf28209de9c087fce03f279327c2c45b99854129e51cafc4aaa45a5b01c4b2747b6bc2d893d0d8e5", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff000000000800080052050000"], 0x34}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffe0, 0x7}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 87.503303ms ago: executing program 4 (id=1503): syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xc001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) 227.724µs ago: executing program 4 (id=1504): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r1, r3, 0x1}, 0x5) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[], 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1b9f008}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000280)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0xcd2}}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@xino_on}, {@index_off}]}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x55eb471eb70fd60d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0x86, 0x0, &(0x7f0000000380)="e46033c470d8d400eb00c15286dd11e6d2e4153f87564c0fa142a42b83f3eb460d0dcc2dda42dfb56499d49722cee4ce23d90b80fa2a3f132fcbd09f9da372a29284d19ead07854be71a9bb62b981b0e30f24a3996df91bcfe68c57f31ec1bfcf9d61fb1ad4d74d1fbd8940188b0c0a3a7170e1836ea5d15d202a9b01c742934d2fd9fa7c21e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=1505): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000000000000001"], 0x30}], 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") kernel console output (not intermixed with test programs): 121.107682][ T8241] loop4: detected capacity change from 0 to 512 [ 121.132707][ T8241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.543937][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 121.910076][ T8241] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.833: corrupted inode contents [ 121.918411][ T8241] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #2: comm syz.4.833: mark_inode_dirty error [ 121.921063][ T8241] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.833: corrupted inode contents [ 121.923994][ T8241] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.833: mark_inode_dirty error [ 121.925953][ T8241] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.833: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 121.925953][ T8241] [ 121.926861][ T8241] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #2: comm syz.4.833: corrupted inode contents [ 121.928540][ T8241] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.833: mark_inode_dirty error [ 121.928788][ T8241] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 121.953246][ T8241] FAULT_INJECTION: forcing a failure. [ 121.953246][ T8241] name failslab, interval 1, probability 0, space 0, times 0 [ 121.953282][ T8241] CPU: 0 UID: 0 PID: 8241 Comm: syz.4.833 Not tainted syzkaller #0 PREEMPT [ 121.953306][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 121.953314][ T8241] Call trace: [ 121.953317][ T8241] show_stack+0x2c/0x3c (C) [ 121.953336][ T8241] __dump_stack+0x30/0x40 [ 121.953346][ T8241] dump_stack_lvl+0xd8/0x12c [ 121.953356][ T8241] dump_stack+0x1c/0x28 [ 121.953365][ T8241] should_fail_ex+0x41c/0x590 [ 121.953377][ T8241] should_failslab+0xc4/0x120 [ 121.953385][ T8241] __kmalloc_noprof+0x108/0x6b8 [ 121.953393][ T8241] ext4_xattr_block_set+0x2d8/0x21e8 [ 121.953402][ T8241] ext4_xattr_set_handle+0x8f0/0xde4 [ 121.953409][ T8241] ext4_initxattrs+0xa8/0x11c [ 121.953417][ T8241] security_inode_init_security+0x244/0x370 [ 121.953428][ T8241] ext4_init_security+0x44/0x58 [ 121.953436][ T8241] __ext4_new_inode+0x286c/0x3308 [ 121.953446][ T8241] ext4_mkdir+0x328/0x970 [ 121.953454][ T8241] vfs_mkdir+0x2dc/0x464 [ 121.953462][ T8241] filename_mkdirat+0x228/0x3f4 [ 121.953471][ T8241] __arm64_sys_mkdirat+0x9c/0xc0 [ 121.953479][ T8241] invoke_syscall+0x98/0x244 [ 121.953490][ T8241] el0_svc_common+0xec/0x23c [ 121.953499][ T8241] do_el0_svc+0x4c/0x5c [ 121.953509][ T8241] el0_svc+0x64/0x260 [ 121.953520][ T8241] el0t_64_sync_handler+0x48/0x148 [ 121.953530][ T8241] el0t_64_sync+0x198/0x19c [ 122.151705][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.162070][ T8259] loop9: detected capacity change from 0 to 1024 [ 122.167001][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 122.280902][ T8259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.371927][ T8268] loop0: detected capacity change from 0 to 128 [ 122.464822][ T8280] overlayfs: missing 'lowerdir' [ 122.517306][ T8281] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 122.870715][ T8273] netlink: 'syz.0.841': attribute type 10 has an invalid length. [ 122.873019][ T8273] veth0_to_bond: left allmulticast mode [ 122.887823][ T8268] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 122.891310][ T8273] veth0_to_bond: entered allmulticast mode [ 122.970190][ T8292] loop0: detected capacity change from 0 to 256 [ 123.022558][ T8292] syz.0.843: attempt to access beyond end of device [ 123.022558][ T8292] loop0: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 123.029469][ T7770] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.127473][ T8307] netlink: 64 bytes leftover after parsing attributes in process `syz.9.851'. [ 124.049318][ T8318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.352322][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 124.587146][ T8328] loop9: detected capacity change from 0 to 1024 [ 124.600762][ T8328] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.615830][ T8334] loop0: detected capacity change from 0 to 256 [ 124.618964][ T8334] syz.0.859: attempt to access beyond end of device [ 124.618964][ T8334] loop0: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 124.784443][ T8344] overlay: Unknown parameter '/' [ 124.837322][ T8345] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 125.312346][ T8347] netlink: 16 bytes leftover after parsing attributes in process `syz.8.858'. [ 125.330183][ T8347] tipc: Enabling of bearer rejected, already enabled [ 125.585052][ T7770] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.650720][ T8361] netlink: 64 bytes leftover after parsing attributes in process `syz.4.867'. [ 126.013701][ T1589] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.015193][ T1589] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.019220][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 126.284404][ T30] audit: type=1400 audit(126.260:6): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 126.330240][ T30] audit: type=1400 audit(126.310:7): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 126.334710][ T8377] loop0: detected capacity change from 0 to 256 [ 126.342894][ T8377] syz.0.871: attempt to access beyond end of device [ 126.342894][ T8377] loop0: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 126.500316][ T8386] FAULT_INJECTION: forcing a failure. [ 126.500316][ T8386] name failslab, interval 1, probability 0, space 0, times 0 [ 126.503684][ T8386] CPU: 0 UID: 0 PID: 8386 Comm: syz.5.875 Not tainted syzkaller #0 PREEMPT [ 126.503705][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 126.503711][ T8386] Call trace: [ 126.503714][ T8386] show_stack+0x2c/0x3c (C) [ 126.503734][ T8386] __dump_stack+0x30/0x40 [ 126.503745][ T8386] dump_stack_lvl+0xd8/0x12c [ 126.503755][ T8386] dump_stack+0x1c/0x28 [ 126.503765][ T8386] should_fail_ex+0x41c/0x590 [ 126.503776][ T8386] should_failslab+0xc4/0x120 [ 126.503784][ T8386] kmem_cache_alloc_noprof+0x94/0x5d8 [ 126.503792][ T8386] security_inode_alloc+0x40/0x304 [ 126.503803][ T8386] inode_init_always_gfp+0x704/0xbac [ 126.503813][ T8386] alloc_inode+0x9c/0x198 [ 126.503821][ T8386] new_inode+0x20/0x50 [ 126.503830][ T8386] debugfs_get_inode+0x20/0x7c [ 126.503840][ T8386] __debugfs_create_file+0xb8/0x36c [ 126.503849][ T8386] debugfs_create_file_full+0x58/0x70 [ 126.503858][ T8386] ref_tracker_dir_debugfs+0x174/0x2f0 [ 126.503867][ T8386] alloc_netdev_mqs+0x1fc/0xf2c [ 126.503878][ T8386] __ip_tunnel_create+0x2e0/0x4b0 [ 126.503889][ T8386] ip_tunnel_ctl+0x3fc/0x810 [ 126.503898][ T8386] ipgre_tunnel_ctl+0x318/0x620 [ 126.503908][ T8386] ip_tunnel_siocdevprivate+0xf8/0x194 [ 126.503917][ T8386] dev_ifsioc+0x694/0xc74 [ 126.503927][ T8386] dev_ioctl+0x5c8/0xcf0 [ 126.503936][ T8386] sock_ioctl+0x734/0x7ec [ 126.503946][ T8386] __arm64_sys_ioctl+0x154/0x1cc [ 126.503956][ T8386] invoke_syscall+0x98/0x244 [ 126.503966][ T8386] el0_svc_common+0xec/0x23c [ 126.503975][ T8386] do_el0_svc+0x4c/0x5c [ 126.503985][ T8386] el0_svc+0x64/0x260 [ 126.503996][ T8386] el0t_64_sync_handler+0x48/0x148 [ 126.504006][ T8386] el0t_64_sync+0x198/0x19c [ 126.504048][ T8386] debugfs: out of free dentries, can not create file 'netdev@0000000018c373df' [ 126.531969][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 126.557316][ T8388] loop4: detected capacity change from 0 to 1024 [ 126.607090][ T8388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.611174][ T8396] overlay: Unknown parameter 'appraise_type' [ 126.630436][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.880'. [ 126.792822][ T8402] overlay: Unknown parameter '/' [ 126.845414][ T8403] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 127.114460][ T30] audit: type=1400 audit(127.080:8): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 127.252232][ T8409] loop9: detected capacity change from 0 to 256 [ 127.287339][ T8409] syz.9.882: attempt to access beyond end of device [ 127.287339][ T8409] loop9: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 127.358437][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c24 [ 127.371914][ T8416] netlink: 64 bytes leftover after parsing attributes in process `syz.0.886'. [ 127.972331][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.008183][ T8433] netlink: 32 bytes leftover after parsing attributes in process `syz.4.890'. [ 128.008437][ T8433] netlink: 75 bytes leftover after parsing attributes in process `syz.4.890'. [ 128.036309][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 128.146065][ T30] audit: type=1400 audit(128.130:9): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 128.310780][ T8457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.893'. [ 128.312337][ T8457] tipc: Enabling of bearer rejected, already enabled [ 128.535344][ T8460] loop9: detected capacity change from 0 to 256 [ 128.552524][ T8460] syz.9.894: attempt to access beyond end of device [ 128.552524][ T8460] loop9: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 128.644624][ T8473] loop9: detected capacity change from 0 to 128 [ 128.656035][ T8473] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.689970][ T7770] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.012223][ T8491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.012254][ T8491] IPv6: NLM_F_CREATE should be set when creating new route [ 129.013104][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.9.903'. [ 129.041243][ T8496] netlink: 64 bytes leftover after parsing attributes in process `syz.4.906'. [ 129.042279][ T30] audit: type=1400 audit(129.020:10): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=8497 comm="syz.8.905" daddr=fe80::bb dest=20002 [ 129.383773][ T4713] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 129.385916][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 129.566303][ T8526] loop8: detected capacity change from 0 to 512 [ 129.654308][ T8526] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 129.712586][ T8526] EXT4-fs error (device loop8): __ext4_iget:5533: inode #11: block 2: comm syz.8.905: invalid block [ 129.712628][ T8526] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 129.713595][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 129.713618][ C0] EXT4-fs (loop8): initial error at time 129: __ext4_iget:5533: inode 11: block 2 [ 129.713637][ C0] EXT4-fs (loop8): last error at time 129: __ext4_iget:5533: inode 11: block 2 [ 129.718200][ T8526] EXT4-fs (loop8): Remounting filesystem read-only [ 129.718735][ T8526] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.995340][ T8538] xt_time: unknown flags 0x4 [ 130.044897][ T8542] bond0: entered promiscuous mode [ 130.044929][ T8542] bond_slave_0: entered promiscuous mode [ 130.045020][ T8542] bond_slave_1: entered promiscuous mode [ 130.064969][ T8542] batadv0: entered promiscuous mode [ 130.127452][ T8551] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 130.520024][ T30] audit: type=1400 audit(130.500:11): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 130.523282][ T30] audit: type=1400 audit(130.500:12): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 130.792693][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 131.038064][ T30] audit: type=1400 audit(131.020:13): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 131.054871][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 131.100723][ T8534] loop4: detected capacity change from 0 to 8192 [ 131.107283][ T7157] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.419254][ T8534] loop4: RDSK (0) [ 131.419254][ T8534] AHDI p2 p3 p4 [ 131.419364][ T8534] loop4: p2 start 67108614 is beyond EOD, truncated [ 131.419376][ T8534] loop4: p3 size 55780 extends beyond EOD, truncated [ 131.451539][ T8580] FAULT_INJECTION: forcing a failure. [ 131.451539][ T8580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.451572][ T8580] CPU: 0 UID: 0 PID: 8580 Comm: syz.5.920 Not tainted syzkaller #0 PREEMPT [ 131.451586][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 131.451593][ T8580] Call trace: [ 131.451597][ T8580] show_stack+0x2c/0x3c (C) [ 131.451626][ T8580] __dump_stack+0x30/0x40 [ 131.451638][ T8580] dump_stack_lvl+0xd8/0x12c [ 131.451648][ T8580] dump_stack+0x1c/0x28 [ 131.451658][ T8580] should_fail_ex+0x41c/0x590 [ 131.451669][ T8580] should_fail+0x14/0x24 [ 131.451679][ T8580] should_fail_usercopy+0x20/0x30 [ 131.451686][ T8580] _inline_copy_from_user+0x3c/0x174 [ 131.451694][ T8580] kstrtouint_from_user+0xcc/0x174 [ 131.451702][ T8580] proc_fail_nth_write+0x9c/0x234 [ 131.451710][ T8580] vfs_write+0x2a4/0xa0c [ 131.451718][ T8580] ksys_write+0x12c/0x228 [ 131.451725][ T8580] __arm64_sys_write+0x84/0x98 [ 131.451732][ T8580] invoke_syscall+0x98/0x244 [ 131.451741][ T8580] el0_svc_common+0xec/0x23c [ 131.451751][ T8580] do_el0_svc+0x4c/0x5c [ 131.451760][ T8580] el0_svc+0x64/0x260 [ 131.451771][ T8580] el0t_64_sync_handler+0x48/0x148 [ 131.451781][ T8580] el0t_64_sync+0x198/0x19c [ 131.491539][ T8578] comedi comedi0: comedi_config --init_data is deprecated [ 131.511301][ T8582] netlink: 64 bytes leftover after parsing attributes in process `syz.9.921'. [ 131.835015][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 131.974624][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 132.014844][ T8597] netlink: 'syz.4.927': attribute type 11 has an invalid length. [ 132.148619][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 132.188189][ T30] audit: type=1400 audit(132.170:14): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=8602 comm="syz.4.929" daddr=fe80::bb dest=20000 [ 132.218437][ T30] audit: type=1400 audit(132.200:15): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 132.237401][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 132.710950][ T8618] syzkaller0: entered promiscuous mode [ 132.710982][ T8618] syzkaller0: entered allmulticast mode [ 132.719706][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.8.934'. [ 132.780977][ T8624] loop8: detected capacity change from 0 to 4096 [ 132.786246][ T8624] EXT4-fs: Mount option(s) incompatible with ext2 [ 133.866143][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 133.866218][ T50] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 133.927323][ T8658] netlink: 'syz.5.947': attribute type 16 has an invalid length. [ 133.927352][ T8658] netlink: 'syz.5.947': attribute type 3 has an invalid length. [ 133.927374][ T8658] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.947'. [ 134.183354][ T4713] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 134.343549][ T8673] FAULT_INJECTION: forcing a failure. [ 134.343549][ T8673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.343618][ T8673] CPU: 1 UID: 0 PID: 8673 Comm: syz.8.953 Not tainted syzkaller #0 PREEMPT [ 134.343633][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 134.343641][ T8673] Call trace: [ 134.343645][ T8673] show_stack+0x2c/0x3c (C) [ 134.343663][ T8673] __dump_stack+0x30/0x40 [ 134.343674][ T8673] dump_stack_lvl+0xd8/0x12c [ 134.343684][ T8673] dump_stack+0x1c/0x28 [ 134.343694][ T8673] should_fail_ex+0x41c/0x590 [ 134.343705][ T8673] should_fail+0x14/0x24 [ 134.343715][ T8673] should_fail_usercopy+0x20/0x30 [ 134.343721][ T8673] simple_read_from_buffer+0xc4/0x238 [ 134.343731][ T8673] proc_fail_nth_read+0x1a8/0x248 [ 134.343740][ T8673] vfs_read+0x230/0x8c8 [ 134.343747][ T8673] ksys_read+0x12c/0x228 [ 134.343753][ T8673] __arm64_sys_read+0x84/0x98 [ 134.343760][ T8673] invoke_syscall+0x98/0x244 [ 134.343770][ T8673] el0_svc_common+0xec/0x23c [ 134.343779][ T8673] do_el0_svc+0x4c/0x5c [ 134.343788][ T8673] el0_svc+0x64/0x260 [ 134.343799][ T8673] el0t_64_sync_handler+0x48/0x148 [ 134.343809][ T8673] el0t_64_sync+0x198/0x19c [ 134.499295][ T30] audit: type=1400 audit(134.480:16): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=8678 comm="syz.0.954" daddr=::ffff:0.0.0.0 dest=20002 [ 134.547148][ T30] audit: type=1400 audit(134.490:17): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=8678 comm="syz.0.954" daddr=::ffff:0.0.0.0 dest=20002 [ 135.173190][ T8695] FAULT_INJECTION: forcing a failure. [ 135.173190][ T8695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.175901][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.4.960 Not tainted syzkaller #0 PREEMPT [ 135.175919][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 135.175925][ T8695] Call trace: [ 135.175929][ T8695] show_stack+0x2c/0x3c (C) [ 135.175948][ T8695] __dump_stack+0x30/0x40 [ 135.175960][ T8695] dump_stack_lvl+0xd8/0x12c [ 135.175970][ T8695] dump_stack+0x1c/0x28 [ 135.175980][ T8695] should_fail_ex+0x41c/0x590 [ 135.175991][ T8695] should_fail+0x14/0x24 [ 135.176001][ T8695] should_fail_usercopy+0x20/0x30 [ 135.176007][ T8695] simple_read_from_buffer+0xc4/0x238 [ 135.176018][ T8695] proc_fail_nth_read+0x1a8/0x248 [ 135.176026][ T8695] vfs_read+0x230/0x8c8 [ 135.176033][ T8695] ksys_read+0x12c/0x228 [ 135.176040][ T8695] __arm64_sys_read+0x84/0x98 [ 135.176046][ T8695] invoke_syscall+0x98/0x244 [ 135.176056][ T8695] el0_svc_common+0xec/0x23c [ 135.176066][ T8695] do_el0_svc+0x4c/0x5c [ 135.176075][ T8695] el0_svc+0x64/0x260 [ 135.176086][ T8695] el0t_64_sync_handler+0x48/0x148 [ 135.176096][ T8695] el0t_64_sync+0x198/0x19c [ 135.779274][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 135.779286][ T4713] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 135.798318][ T8726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.798752][ T8726] netlink: 8 bytes leftover after parsing attributes in process `syz.9.969'. [ 135.840944][ T8729] loop9: detected capacity change from 0 to 8192 [ 135.890090][ T8729] loop9: AHDI p1 p4 [ 136.087338][ T8741] loop8: detected capacity change from 0 to 8 [ 136.090484][ T8741] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 136.090506][ T8741] unable to read xattr id index table [ 136.520383][ T8756] FAULT_INJECTION: forcing a failure. [ 136.520383][ T8756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.524626][ T8756] CPU: 1 UID: 0 PID: 8756 Comm: syz.0.977 Not tainted syzkaller #0 PREEMPT [ 136.524653][ T8756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 136.524659][ T8756] Call trace: [ 136.524663][ T8756] show_stack+0x2c/0x3c (C) [ 136.524684][ T8756] __dump_stack+0x30/0x40 [ 136.524695][ T8756] dump_stack_lvl+0xd8/0x12c [ 136.524705][ T8756] dump_stack+0x1c/0x28 [ 136.524715][ T8756] should_fail_ex+0x41c/0x590 [ 136.524726][ T8756] should_fail+0x14/0x24 [ 136.524736][ T8756] should_fail_usercopy+0x20/0x30 [ 136.524743][ T8756] _copy_from_iter+0x188/0x1064 [ 136.524751][ T8756] netlink_sendmsg+0x570/0x948 [ 136.524761][ T8756] __sock_sendmsg+0xc8/0x17c [ 136.524770][ T8756] ____sys_sendmsg+0x3d0/0x6c8 [ 136.524779][ T8756] ___sys_sendmsg+0x198/0x224 [ 136.524788][ T8756] __sys_sendmsg+0x158/0x204 [ 136.524797][ T8756] __arm64_sys_sendmsg+0x88/0x9c [ 136.524805][ T8756] invoke_syscall+0x98/0x244 [ 136.524816][ T8756] el0_svc_common+0xec/0x23c [ 136.524825][ T8756] do_el0_svc+0x4c/0x5c [ 136.524834][ T8756] el0_svc+0x64/0x260 [ 136.524846][ T8756] el0t_64_sync_handler+0x48/0x148 [ 136.524856][ T8756] el0t_64_sync+0x198/0x19c [ 136.536057][ T8758] netlink: 64 bytes leftover after parsing attributes in process `syz.9.979'. [ 136.691184][ T4717] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 136.717155][ T8767] fuse: blksize only supported for fuseblk [ 137.102863][ T8780] xt_l2tp: wrong L2TP version: 0 [ 137.171211][ T30] audit: type=1400 audit(137.150:18): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="hugetlbfs" object="_" requested=w pid=8778 comm="syz.8.987" saddr=fe88:0:7a::1 src=20003 daddr=ff02::1 dest=20000 netif=wpan0 [ 137.219791][ T8798] netlink: 64 bytes leftover after parsing attributes in process `syz.9.993'. [ 137.288668][ T4717] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 137.361074][ T8808] syz.8.996 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 137.366154][ T8808] CPU: 1 UID: 0 PID: 8808 Comm: syz.8.996 Not tainted syzkaller #0 PREEMPT [ 137.366176][ T8808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 137.366183][ T8808] Call trace: [ 137.366187][ T8808] show_stack+0x2c/0x3c (C) [ 137.366210][ T8808] __dump_stack+0x30/0x40 [ 137.366224][ T8808] dump_stack_lvl+0xd8/0x12c [ 137.366236][ T8808] dump_stack+0x1c/0x28 [ 137.366248][ T8808] dump_header+0xbc/0x3f0 [ 137.366256][ T8808] oom_kill_process+0x248/0x8a0 [ 137.366267][ T8808] out_of_memory+0xd24/0x1064 [ 137.366277][ T8808] mem_cgroup_out_of_memory+0xe8/0x170 [ 137.366288][ T8808] try_charge_memcg+0x8ec/0xc64 [ 137.366297][ T8808] obj_cgroup_charge_pages+0x30/0xb0 [ 137.366310][ T8808] __memcg_kmem_charge_page+0x1e4/0x354 [ 137.366323][ T8808] __alloc_frozen_pages_noprof+0x1ac/0x320 [ 137.366334][ T8808] alloc_pages_mpol+0x1ec/0x3c0 [ 137.366345][ T8808] alloc_frozen_pages_noprof+0xc4/0x10c [ 137.366355][ T8808] alloc_pages_noprof+0x30/0x148 [ 137.366366][ T8808] io_region_allocate_pages+0xf8/0x314 [ 137.366379][ T8808] io_create_region+0x304/0x420 [ 137.366392][ T8808] io_allocate_scq_urings+0x1a0/0x65c [ 137.366403][ T8808] io_uring_create+0x3b4/0x830 [ 137.366413][ T8808] __arm64_sys_io_uring_setup+0x284/0x290 [ 137.366424][ T8808] invoke_syscall+0x98/0x244 [ 137.366436][ T8808] el0_svc_common+0xec/0x23c [ 137.366448][ T8808] do_el0_svc+0x4c/0x5c [ 137.366459][ T8808] el0_svc+0x64/0x260 [ 137.366475][ T8808] el0t_64_sync_handler+0x48/0x148 [ 137.366488][ T8808] el0t_64_sync+0x198/0x19c [ 137.380560][ T8808] memory: usage 8kB, limit 8kB, failcnt 21 [ 137.380579][ T8808] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 137.380587][ T8808] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 137.380593][ T8808] Memory cgroup stats for /syz8/test: [ 137.380700][ T8808] cache 0 [ 137.380705][ T8808] rss 0 [ 137.380708][ T8808] rss_huge 0 [ 137.380711][ T8808] shmem 0 [ 137.380714][ T8808] mapped_file 0 [ 137.380718][ T8808] dirty 0 [ 137.380721][ T8808] writeback 0 [ 137.380725][ T8808] workingset_refault_anon 0 [ 137.380728][ T8808] workingset_refault_file 0 [ 137.380732][ T8808] swap 0 [ 137.380735][ T8808] swapcached 0 [ 137.380739][ T8808] pgpgin 0 [ 137.380742][ T8808] pgpgout 0 [ 137.380745][ T8808] pgfault 0 [ 137.380748][ T8808] pgmajfault 0 [ 137.380752][ T8808] inactive_anon 0 [ 137.380755][ T8808] active_anon 0 [ 137.380759][ T8808] inactive_file 0 [ 137.380762][ T8808] active_file 0 [ 137.380765][ T8808] unevictable 0 [ 137.380769][ T8808] hierarchical_memory_limit 8192 [ 137.380772][ T8808] hierarchical_memsw_limit 9223372036854771712 [ 137.380777][ T8808] total_cache 0 [ 137.380780][ T8808] total_rss 0 [ 137.380783][ T8808] total_rss_huge 0 [ 137.380786][ T8808] total_shmem 0 [ 137.380790][ T8808] total_mapped_file 0 [ 137.380793][ T8808] total_dirty 0 [ 137.380797][ T8808] total_writeback 0 [ 137.380800][ T8808] total_workingset_refault_anon 0 [ 137.380804][ T8808] total_workingset_refault_file 0 [ 137.380808][ T8808] total_swap 0 [ 137.380811][ T8808] total_swapcached 0 [ 137.380815][ T8808] total_pgpgin 0 [ 137.380818][ T8808] total_pgpgout 0 [ 137.380821][ T8808] total_pgfault 0 [ 137.380825][ T8808] total_pgmajfault 0 [ 137.380828][ T8808] total_inactive_anon 0 [ 137.380832][ T8808] total_active_anon 0 [ 137.380835][ T8808] total_inactive_file 0 [ 137.380839][ T8808] total_active_file 0 [ 137.380842][ T8808] total_unevictable 0 [ 137.380846][ T8808] anon_cost 0 [ 137.380849][ T8808] file_cost 0 [ 137.380853][ T8808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8/test,task_memcg=/syz8/test,task=syz.8.996,pid=8805,uid=0 [ 137.381618][ T8808] Memory cgroup out of memory: Killed process 8805 (syz.8.996) total-vm:102568kB, anon-rss:1392kB, file-rss:23316kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 137.593873][ T4717] Bluetooth: hci2: unexpected event for opcode 0x0c26 [ 137.599644][ T8835] 9p: Bad value for 'wfdno' [ 137.651350][ T8844] loop8: detected capacity change from 0 to 512 [ 137.680441][ T8844] EXT4-fs (loop8): 1 truncate cleaned up [ 137.687493][ T8844] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.720232][ T7157] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.119053][ T8862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.154656][ T8865] syz.9.1019: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 138.159152][ T8865] CPU: 1 UID: 0 PID: 8865 Comm: syz.9.1019 Not tainted syzkaller #0 PREEMPT [ 138.159170][ T8865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 138.159177][ T8865] Call trace: [ 138.159181][ T8865] show_stack+0x2c/0x3c (C) [ 138.159204][ T8865] __dump_stack+0x30/0x40 [ 138.159219][ T8865] dump_stack_lvl+0xd8/0x12c [ 138.159232][ T8865] dump_stack+0x1c/0x28 [ 138.159244][ T8865] warn_alloc+0x1bc/0x1d0 [ 138.159254][ T8865] __vmalloc_node_range_noprof+0x120/0x105c [ 138.159266][ T8865] __vmalloc_node_noprof+0xec/0x14c [ 138.159277][ T8865] vmalloc_noprof+0x3c/0x4c [ 138.159288][ T8865] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 138.159299][ T8865] dvb_demux_do_ioctl+0x3e0/0x4bc [ 138.159308][ T8865] dvb_usercopy+0x2a4/0x4d4 [ 138.159315][ T8865] dvb_demux_ioctl+0x3c/0x54 [ 138.159324][ T8865] __arm64_sys_ioctl+0x154/0x1cc [ 138.159337][ T8865] invoke_syscall+0x98/0x244 [ 138.159349][ T8865] el0_svc_common+0xec/0x23c [ 138.159361][ T8865] do_el0_svc+0x4c/0x5c [ 138.159372][ T8865] el0_svc+0x64/0x260 [ 138.159385][ T8865] el0t_64_sync_handler+0x48/0x148 [ 138.159398][ T8865] el0t_64_sync+0x198/0x19c [ 138.167331][ T8865] Mem-Info: [ 138.167346][ T8865] active_anon:2925 inactive_anon:18198 isolated_anon:0 [ 138.167346][ T8865] active_file:3028 inactive_file:14584 isolated_file:0 [ 138.167346][ T8865] unevictable:768 dirty:399 writeback:0 [ 138.167346][ T8865] slab_reclaimable:9921 slab_unreclaimable:92363 [ 138.167346][ T8865] mapped:36649 shmem:9691 pagetables:4020 [ 138.167346][ T8865] sec_pagetables:0 bounce:0 [ 138.167346][ T8865] kernel_misc_reclaimable:0 [ 138.167346][ T8865] free:1449532 free_pcp:11048 free_cma:7616 [ 138.167376][ T8865] Node 0 active_anon:11700kB inactive_anon:72792kB active_file:12112kB inactive_file:58336kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:146596kB dirty:1596kB writeback:0kB shmem:38764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:11728kB pagetables:16080kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 138.167400][ T8865] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 138.167427][ T8865] lowmem_reserve[]: 0 0 3651 3651 3651 [ 138.167446][ T8865] Node 0 Normal free:2720240kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11700kB inactive_anon:72792kB active_file:12112kB inactive_file:58336kB unevictable:3072kB writepending:1596kB zspages:432kB present:5242880kB managed:3739156kB mlocked:0kB bounce:0kB free_pcp:44192kB local_pcp:10288kB free_cma:0kB [ 138.167472][ T8865] lowmem_reserve[]: 0 0 0 0 0 [ 138.167490][ T8865] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 138.167556][ T8865] Node 0 Normal: 139*4kB (UME) 384*8kB (UME) 683*16kB (UM) 218*32kB (UM) 529*64kB (UME) 293*128kB (UE) 291*256kB (UME) 254*512kB (UME) 238*1024kB (UME) 10*2048kB (UME) 527*4096kB (UM) = 2720220kB [ 138.167711][ T8865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.167719][ T8865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 138.167725][ T8865] Node 0 hugepages_total=10 hugepages_free=10 hugepages_surp=0 hugepages_size=2048kB [ 138.167732][ T8865] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 138.167739][ T8865] 27299 total pagecache pages [ 138.167743][ T8865] 2 pages in swap cache [ 138.167746][ T8865] Free swap = 124820kB [ 138.167750][ T8865] Total swap = 124996kB [ 138.167754][ T8865] 2097152 pages RAM [ 138.167758][ T8865] 0 pages HighMem/MovableOnly [ 138.167761][ T8865] 392315 pages reserved [ 138.167764][ T8865] 8192 pages cma reserved [ 138.167768][ T8865] 1 pages hwpoisoned [ 138.249172][ T8868] FAULT_INJECTION: forcing a failure. [ 138.249172][ T8868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.249199][ T8868] CPU: 1 UID: 0 PID: 8868 Comm: syz.8.1017 Not tainted syzkaller #0 PREEMPT [ 138.249213][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 138.249220][ T8868] Call trace: [ 138.249224][ T8868] show_stack+0x2c/0x3c (C) [ 138.249240][ T8868] __dump_stack+0x30/0x40 [ 138.249251][ T8868] dump_stack_lvl+0xd8/0x12c [ 138.249261][ T8868] dump_stack+0x1c/0x28 [ 138.249270][ T8868] should_fail_ex+0x41c/0x590 [ 138.249281][ T8868] should_fail+0x14/0x24 [ 138.249291][ T8868] should_fail_usercopy+0x20/0x30 [ 138.249298][ T8868] strncpy_from_user+0x48/0x388 [ 138.249306][ T8868] strncpy_from_bpfptr+0x54/0x68 [ 138.249314][ T8868] bpf_prog_load+0x9a0/0x15f8 [ 138.249322][ T8868] __sys_bpf+0x870/0x8c8 [ 138.249328][ T8868] __arm64_sys_bpf+0xd0/0xec [ 138.249335][ T8868] invoke_syscall+0x98/0x244 [ 138.249345][ T8868] el0_svc_common+0xec/0x23c [ 138.249354][ T8868] do_el0_svc+0x4c/0x5c [ 138.249364][ T8868] el0_svc+0x64/0x260 [ 138.249374][ T8868] el0t_64_sync_handler+0x48/0x148 [ 138.249384][ T8868] el0t_64_sync+0x198/0x19c [ 138.289764][ T4717] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 138.668307][ T8891] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1028'. [ 138.962458][ T8894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.215702][ T4717] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 139.274144][ T8903] loop0: detected capacity change from 0 to 512 [ 139.295502][ T8903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.312201][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.462553][ T8910] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1035'. [ 139.539681][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1039'. [ 139.561049][ T8920] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1040'. [ 140.260462][ T8933] loop9: detected capacity change from 0 to 512 [ 140.262491][ T8933] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 140.272070][ T8933] EXT4-fs (loop9): 1 truncate cleaned up [ 140.275643][ T8933] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.298075][ T8933] EXT4-fs (loop9): shut down requested (0) [ 140.298212][ T8938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1046'. [ 140.317454][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 140.336499][ T8942] FAULT_INJECTION: forcing a failure. [ 140.336499][ T8942] name failslab, interval 1, probability 0, space 0, times 0 [ 140.336526][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.0.1047 Not tainted syzkaller #0 PREEMPT [ 140.336539][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 140.336546][ T8942] Call trace: [ 140.336550][ T8942] show_stack+0x2c/0x3c (C) [ 140.336570][ T8942] __dump_stack+0x30/0x40 [ 140.336585][ T8942] dump_stack_lvl+0xd8/0x12c [ 140.336595][ T8942] dump_stack+0x1c/0x28 [ 140.336604][ T8942] should_fail_ex+0x41c/0x590 [ 140.336623][ T8942] should_failslab+0xc4/0x120 [ 140.336631][ T8942] kmem_cache_alloc_noprof+0x94/0x5d8 [ 140.336640][ T8942] alloc_empty_file+0x6c/0x1cc [ 140.336649][ T8942] path_openat+0x7c/0x2a60 [ 140.336658][ T8942] do_file_open+0x1c8/0x2e8 [ 140.336666][ T8942] do_sys_openat2+0x114/0x1e8 [ 140.336675][ T8942] do_sys_open+0xb0/0xe0 [ 140.336684][ T8942] __arm64_sys_openat+0xa8/0xc4 [ 140.336694][ T8942] invoke_syscall+0x98/0x244 [ 140.336704][ T8942] el0_svc_common+0xec/0x23c [ 140.336714][ T8942] do_el0_svc+0x4c/0x5c [ 140.336723][ T8942] el0_svc+0x64/0x260 [ 140.336734][ T8942] el0t_64_sync_handler+0x48/0x148 [ 140.336744][ T8942] el0t_64_sync+0x198/0x19c [ 140.390296][ T8947] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1049'. [ 140.426956][ T7770] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.562665][ T30] audit: type=1400 audit(140.540:19): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=8961 comm="syz.4.1055" daddr=::7fff:fffe dest=20003 [ 140.564066][ T8962] FAULT_INJECTION: forcing a failure. [ 140.564066][ T8962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.564087][ T8962] CPU: 0 UID: 0 PID: 8962 Comm: syz.4.1055 Not tainted syzkaller #0 PREEMPT [ 140.564098][ T8962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 140.564103][ T8962] Call trace: [ 140.564106][ T8962] show_stack+0x2c/0x3c (C) [ 140.564128][ T8962] __dump_stack+0x30/0x40 [ 140.564139][ T8962] dump_stack_lvl+0xd8/0x12c [ 140.564148][ T8962] dump_stack+0x1c/0x28 [ 140.564158][ T8962] should_fail_ex+0x41c/0x590 [ 140.564169][ T8962] should_fail+0x14/0x24 [ 140.564179][ T8962] should_fail_usercopy+0x20/0x30 [ 140.564189][ T8962] simple_read_from_buffer+0xc4/0x238 [ 140.564199][ T8962] proc_fail_nth_read+0x1a8/0x248 [ 140.564208][ T8962] vfs_read+0x230/0x8c8 [ 140.564215][ T8962] ksys_read+0x12c/0x228 [ 140.564222][ T8962] __arm64_sys_read+0x84/0x98 [ 140.564229][ T8962] invoke_syscall+0x98/0x244 [ 140.564239][ T8962] el0_svc_common+0xec/0x23c [ 140.564248][ T8962] do_el0_svc+0x4c/0x5c [ 140.564258][ T8962] el0_svc+0x64/0x260 [ 140.564269][ T8962] el0t_64_sync_handler+0x48/0x148 [ 140.564279][ T8962] el0t_64_sync+0x198/0x19c [ 140.632992][ T8966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1057'. [ 140.633031][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 140.655903][ T8966] could not allocate digest TFM handle blake2s-160-x86 [ 140.656117][ T8966] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1057'. [ 140.656130][ T8966] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1057'. [ 140.882006][ T30] audit: type=1400 audit(140.860:20): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=8979 comm="syz.8.1062" daddr=ff02::1 dest=20003 [ 141.332168][ T8989] loop0: detected capacity change from 0 to 8 [ 141.342022][ T8989] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 141.342052][ T8989] unable to read xattr id index table [ 141.343267][ T8989] SQUASHFS error: zlib decompression failed, data probably corrupt [ 141.343280][ T8989] SQUASHFS error: Failed to read block 0x9b: -5 [ 141.343287][ T8989] SQUASHFS error: Unable to read metadata cache entry [99] [ 141.343294][ T8989] SQUASHFS error: Unable to read inode 0x127 [ 141.507495][ T8998] FAULT_INJECTION: forcing a failure. [ 141.507495][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 141.510905][ T8998] CPU: 1 UID: 0 PID: 8998 Comm: syz.0.1068 Not tainted syzkaller #0 PREEMPT [ 141.510925][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 141.510931][ T8998] Call trace: [ 141.510935][ T8998] show_stack+0x2c/0x3c (C) [ 141.510958][ T8998] __dump_stack+0x30/0x40 [ 141.510970][ T8998] dump_stack_lvl+0xd8/0x12c [ 141.510980][ T8998] dump_stack+0x1c/0x28 [ 141.510990][ T8998] should_fail_ex+0x41c/0x590 [ 141.511002][ T8998] should_failslab+0xc4/0x120 [ 141.511011][ T8998] __kmalloc_cache_noprof+0x94/0x5ec [ 141.511020][ T8998] fuse_alloc_forget+0x50/0x5c [ 141.511029][ T8998] fuse_lookup_name+0x15c/0x67c [ 141.511038][ T8998] fuse_lookup+0x198/0x354 [ 141.511048][ T8998] lookup_one_qstr_excl+0xe8/0x200 [ 141.511059][ T8998] __start_dirop+0xb8/0xf4 [ 141.511066][ T8998] filename_unlinkat+0x1fc/0x45c [ 141.511075][ T8998] __arm64_sys_unlinkat+0xe0/0x108 [ 141.511084][ T8998] invoke_syscall+0x98/0x244 [ 141.511094][ T8998] el0_svc_common+0xec/0x23c [ 141.511103][ T8998] do_el0_svc+0x4c/0x5c [ 141.511113][ T8998] el0_svc+0x64/0x260 [ 141.511124][ T8998] el0t_64_sync_handler+0x48/0x148 [ 141.511134][ T8998] el0t_64_sync+0x198/0x19c [ 142.445057][ T4717] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 142.651100][ T9019] input: syz1 as /devices/virtual/input/input7 [ 142.693270][ T9019] loop0: detected capacity change from 0 to 256 [ 142.765890][ T9030] FAULT_INJECTION: forcing a failure. [ 142.765890][ T9030] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.765920][ T9030] CPU: 1 UID: 0 PID: 9030 Comm: syz.4.1079 Not tainted syzkaller #0 PREEMPT [ 142.765933][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 142.765940][ T9030] Call trace: [ 142.765944][ T9030] show_stack+0x2c/0x3c (C) [ 142.765965][ T9030] __dump_stack+0x30/0x40 [ 142.765976][ T9030] dump_stack_lvl+0xd8/0x12c [ 142.765986][ T9030] dump_stack+0x1c/0x28 [ 142.765995][ T9030] should_fail_ex+0x41c/0x590 [ 142.766007][ T9030] should_fail_alloc_page+0xec/0x10c [ 142.766015][ T9030] prepare_alloc_pages+0x194/0x4a4 [ 142.766023][ T9030] __alloc_frozen_pages_noprof+0x134/0x320 [ 142.766032][ T9030] __alloc_pages_noprof+0x18/0x100 [ 142.766040][ T9030] alloc_pages_bulk_noprof+0x564/0x730 [ 142.766048][ T9030] __kasan_populate_vmalloc+0xc0/0x1d0 [ 142.766058][ T9030] alloc_vmap_area+0xdf4/0x13e8 [ 142.766067][ T9030] __get_vm_area_node+0x210/0x32c [ 142.766076][ T9030] __vmalloc_node_range_noprof+0x2c8/0x105c [ 142.766085][ T9030] __vmalloc_node_noprof+0xec/0x14c [ 142.766094][ T9030] __vmalloc_noprof+0x64/0x8c [ 142.766103][ T9030] bpf_prog_alloc_no_stats+0x60/0x488 [ 142.766111][ T9030] bpf_prog_alloc+0x48/0x110 [ 142.766118][ T9030] bpf_prog_load+0x5dc/0x15f8 [ 142.766126][ T9030] __sys_bpf+0x870/0x8c8 [ 142.766133][ T9030] __arm64_sys_bpf+0xd0/0xec [ 142.766139][ T9030] invoke_syscall+0x98/0x244 [ 142.766149][ T9030] el0_svc_common+0xec/0x23c [ 142.766159][ T9030] do_el0_svc+0x4c/0x5c [ 142.766170][ T9030] el0_svc+0x64/0x260 [ 142.766184][ T9030] el0t_64_sync_handler+0x48/0x148 [ 142.766196][ T9030] el0t_64_sync+0x198/0x19c [ 142.882217][ T9040] loop4: detected capacity change from 0 to 512 [ 142.884552][ T9040] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.887419][ T9040] EXT4-fs (loop4): 1 truncate cleaned up [ 142.887905][ T9040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.917009][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.937509][ T4717] Bluetooth: hci2: unexpected event for opcode 0x2043 [ 142.937823][ T30] audit: type=1400 audit(142.920:21): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9045 comm="syz.4.1085" daddr=fc01:: [ 143.430438][ T9064] loop9: detected capacity change from 0 to 128 [ 143.436397][ T9064] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.580894][ T30] audit: type=1400 audit(143.560:22): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9074 comm="syz.8.1096" daddr=ff02::1 dest=20010 [ 143.604977][ T9077] loop5: detected capacity change from 0 to 4096 [ 143.622236][ T9077] loop5: detected capacity change from 0 to 512 [ 143.636297][ T9077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.662133][ T5022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.279447][ T7770] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.378775][ T30] audit: type=1400 audit(144.360:23): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9122 comm="syz.9.1116" dest=2 [ 144.405887][ T9119] netlink: 'syz.4.1114': attribute type 2 has an invalid length. [ 144.435930][ T9128] FAULT_INJECTION: forcing a failure. [ 144.435930][ T9128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.435967][ T9128] CPU: 0 UID: 0 PID: 9128 Comm: syz.9.1118 Not tainted syzkaller #0 PREEMPT [ 144.435982][ T9128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 144.435988][ T9128] Call trace: [ 144.435991][ T9128] show_stack+0x2c/0x3c (C) [ 144.436009][ T9128] __dump_stack+0x30/0x40 [ 144.436019][ T9128] dump_stack_lvl+0xd8/0x12c [ 144.436029][ T9128] dump_stack+0x1c/0x28 [ 144.436038][ T9128] should_fail_ex+0x41c/0x590 [ 144.436049][ T9128] should_fail+0x14/0x24 [ 144.436059][ T9128] should_fail_usercopy+0x20/0x30 [ 144.436065][ T9128] _inline_copy_from_user+0x3c/0x174 [ 144.436075][ T9128] restore_altstack+0xa4/0x1b8 [ 144.436082][ T9128] __arm64_sys_rt_sigreturn+0x1478/0x27a8 [ 144.436092][ T9128] invoke_syscall+0x98/0x244 [ 144.436102][ T9128] el0_svc_common+0xec/0x23c [ 144.436112][ T9128] do_el0_svc+0x4c/0x5c [ 144.436121][ T9128] el0_svc+0x64/0x260 [ 144.436132][ T9128] el0t_64_sync_handler+0x48/0x148 [ 144.436142][ T9128] el0t_64_sync+0x198/0x19c [ 145.640483][ T9201] FAULT_INJECTION: forcing a failure. [ 145.640483][ T9201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.640518][ T9201] CPU: 0 UID: 0 PID: 9201 Comm: syz.9.1147 Not tainted syzkaller #0 PREEMPT [ 145.640533][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 145.640540][ T9201] Call trace: [ 145.640544][ T9201] show_stack+0x2c/0x3c (C) [ 145.640564][ T9201] __dump_stack+0x30/0x40 [ 145.640575][ T9201] dump_stack_lvl+0xd8/0x12c [ 145.640585][ T9201] dump_stack+0x1c/0x28 [ 145.640595][ T9201] should_fail_ex+0x41c/0x590 [ 145.640613][ T9201] should_fail+0x14/0x24 [ 145.640622][ T9201] should_fail_usercopy+0x20/0x30 [ 145.640630][ T9201] simple_read_from_buffer+0xc4/0x238 [ 145.640643][ T9201] proc_fail_nth_read+0x1a8/0x248 [ 145.640653][ T9201] vfs_read+0x230/0x8c8 [ 145.640660][ T9201] ksys_read+0x12c/0x228 [ 145.640667][ T9201] __arm64_sys_read+0x84/0x98 [ 145.640674][ T9201] invoke_syscall+0x98/0x244 [ 145.640684][ T9201] el0_svc_common+0xec/0x23c [ 145.640693][ T9201] do_el0_svc+0x4c/0x5c [ 145.640702][ T9201] el0_svc+0x64/0x260 [ 145.640714][ T9201] el0t_64_sync_handler+0x48/0x148 [ 145.640724][ T9201] el0t_64_sync+0x198/0x19c [ 145.967210][ T9210] loop0: detected capacity change from 0 to 256 [ 146.027099][ T9216] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 146.322573][ T9232] loop4: detected capacity change from 0 to 512 [ 146.328655][ T9232] EXT4-fs (loop4): 1 truncate cleaned up [ 146.331859][ T9232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.346270][ T9232] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1158: invalid indirect mapped block 234881024 (level 0) [ 146.349361][ T9232] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 146.350160][ T9232] EXT4-fs (loop4): Remounting filesystem read-only [ 146.411277][ T9236] loop8: detected capacity change from 0 to 4096 [ 146.413401][ T9236] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 146.489262][ T9241] loop8: detected capacity change from 0 to 8192 [ 146.514152][ T9239] 0x000000000006-0x000000020000 : "" [ 146.516606][ T9241] __nla_validate_parse: 7 callbacks suppressed [ 146.518081][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1161'. [ 146.523726][ T9239] ftl_cs: FTL header corrupt! [ 146.546283][ T9241] FAT-fs (loop8): error, invalid access to FAT (entry 0x00009e12) [ 146.546880][ T9241] syz.8.1161: attempt to access beyond end of device [ 146.546880][ T9241] loop8: rw=0, sector=40536, nr_sectors = 1 limit=8192 [ 146.574952][ T9243] loop9: detected capacity change from 0 to 8192 [ 146.627325][ T9246] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1163'. [ 146.649463][ T9248] loop9: detected capacity change from 0 to 128 [ 146.657544][ T9248] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.668822][ T9248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.672318][ T7770] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.740664][ T9256] FAULT_INJECTION: forcing a failure. [ 146.740664][ T9256] name failslab, interval 1, probability 0, space 0, times 0 [ 146.740709][ T9256] CPU: 1 UID: 0 PID: 9256 Comm: syz.9.1166 Not tainted syzkaller #0 PREEMPT [ 146.740723][ T9256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 146.740731][ T9256] Call trace: [ 146.740734][ T9256] show_stack+0x2c/0x3c (C) [ 146.740756][ T9256] __dump_stack+0x30/0x40 [ 146.740767][ T9256] dump_stack_lvl+0xd8/0x12c [ 146.740777][ T9256] dump_stack+0x1c/0x28 [ 146.740786][ T9256] should_fail_ex+0x41c/0x590 [ 146.740798][ T9256] should_failslab+0xc4/0x120 [ 146.740806][ T9256] __kmalloc_cache_noprof+0x94/0x5ec [ 146.740815][ T9256] nf_tables_newtable+0x460/0x10f4 [ 146.740824][ T9256] nfnetlink_rcv+0xc8c/0x16ec [ 146.740831][ T9256] netlink_unicast+0x600/0x7f8 [ 146.740839][ T9256] netlink_sendmsg+0x648/0x948 [ 146.740848][ T9256] __sock_sendmsg+0xc8/0x17c [ 146.740857][ T9256] ____sys_sendmsg+0x3d0/0x6c8 [ 146.740866][ T9256] ___sys_sendmsg+0x198/0x224 [ 146.740874][ T9256] __sys_sendmsg+0x158/0x204 [ 146.740883][ T9256] __arm64_sys_sendmsg+0x88/0x9c [ 146.740892][ T9256] invoke_syscall+0x98/0x244 [ 146.740902][ T9256] el0_svc_common+0xec/0x23c [ 146.740911][ T9256] do_el0_svc+0x4c/0x5c [ 146.740920][ T9256] el0_svc+0x64/0x260 [ 146.740932][ T9256] el0t_64_sync_handler+0x48/0x148 [ 146.740942][ T9256] el0t_64_sync+0x198/0x19c [ 146.969116][ T4717] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 146.969423][ T4717] Bluetooth: hci2: Injecting HCI hardware error event [ 146.970803][ T50] Bluetooth: hci2: hardware error 0x00 [ 147.196111][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.413162][ T9290] loop0: detected capacity change from 0 to 512 [ 147.415448][ T9290] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 147.420435][ T9290] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1179: bad orphan inode 16 [ 147.420723][ T9290] loop0: lost filesystem error report for type 5 error -117 [ 147.420972][ T9290] ext4_test_bit(bit=15, block=4) = 0 [ 147.420986][ T9290] EXT4-fs (loop0): 1 orphan inode deleted [ 147.421451][ T9290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.437021][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.463428][ T9293] loop0: detected capacity change from 0 to 1024 [ 147.478790][ T9293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.502937][ T9293] xt_cgroup: xt_cgroup: no path or classid specified [ 147.699564][ T9305] loop8: detected capacity change from 0 to 512 [ 147.706438][ T9305] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.714935][ T9309] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.1186'. [ 147.791063][ T9312] FAULT_INJECTION: forcing a failure. [ 147.791063][ T9312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 147.791101][ T9312] CPU: 1 UID: 0 PID: 9312 Comm: syz.9.1187 Not tainted syzkaller #0 PREEMPT [ 147.791120][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 147.791126][ T9312] Call trace: [ 147.791129][ T9312] show_stack+0x2c/0x3c (C) [ 147.791146][ T9312] __dump_stack+0x30/0x40 [ 147.791156][ T9312] dump_stack_lvl+0xd8/0x12c [ 147.791166][ T9312] dump_stack+0x1c/0x28 [ 147.791175][ T9312] should_fail_ex+0x41c/0x590 [ 147.791187][ T9312] should_fail_alloc_page+0xec/0x10c [ 147.791195][ T9312] prepare_alloc_pages+0x194/0x4a4 [ 147.791204][ T9312] __alloc_frozen_pages_noprof+0x134/0x320 [ 147.791212][ T9312] __alloc_pages_noprof+0x18/0x100 [ 147.791220][ T9312] alloc_pages_bulk_noprof+0x564/0x730 [ 147.791228][ T9312] __kasan_populate_vmalloc+0xc0/0x1d0 [ 147.791238][ T9312] alloc_vmap_area+0xdf4/0x13e8 [ 147.791247][ T9312] __get_vm_area_node+0x210/0x32c [ 147.791256][ T9312] __vmalloc_node_range_noprof+0x2c8/0x105c [ 147.791265][ T9312] __vmalloc_node_noprof+0xec/0x14c [ 147.791274][ T9312] __vmalloc_noprof+0x64/0x8c [ 147.791282][ T9312] bpf_prog_alloc_no_stats+0x60/0x488 [ 147.791291][ T9312] bpf_prog_alloc+0x48/0x110 [ 147.791298][ T9312] bpf_prog_create_from_user+0xa0/0x26c [ 147.791308][ T9312] do_seccomp+0x6fc/0xbfc [ 147.791316][ T9312] __arm64_sys_seccomp+0x84/0x98 [ 147.791324][ T9312] invoke_syscall+0x98/0x244 [ 147.791334][ T9312] el0_svc_common+0xec/0x23c [ 147.791343][ T9312] do_el0_svc+0x4c/0x5c [ 147.791352][ T9312] el0_svc+0x64/0x260 [ 147.791363][ T9312] el0t_64_sync_handler+0x48/0x148 [ 147.791373][ T9312] el0t_64_sync+0x198/0x19c [ 147.794184][ T4797] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 147.954330][ T4797] usb 1-1: Using ep0 maxpacket: 16 [ 148.073962][ T4797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.079505][ T4797] usb 1-1: config 254 has an invalid interface number: 254 but max is 0 [ 148.079536][ T4797] usb 1-1: config 254 has no interface number 0 [ 148.079563][ T4797] usb 1-1: config 254 interface 254 has no altsetting 0 [ 148.085166][ T4797] usb 1-1: language id specifier not provided by device, defaulting to English [ 148.090467][ T9317] geneve2: entered promiscuous mode [ 148.107496][ T4797] usb 1-1: New USB device found, idVendor=04e8, idProduct=5f03, bcdDevice=29.72 [ 148.107533][ T4797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.524102][ T4717] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 148.709245][ T7157] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.742186][ T4797] uvcvideo 1-1:254.254: Found UVC 0.00 device (04e8:5f03) [ 148.742225][ T4797] uvcvideo 1-1:254.254: No valid video chain found. [ 148.748928][ T4797] usb 1-1: USB disconnect, device number 2 [ 149.010643][ T9332] loop4: detected capacity change from 0 to 2048 [ 149.010995][ T9332] ext4: Unknown parameter 'appraise_type' [ 149.053793][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 149.059120][ T9335] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1195'. [ 149.144347][ T9337] netlink: 798 bytes leftover after parsing attributes in process `syz.9.1196'. [ 149.157589][ T9340] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1197: EA inode hash validation failed [ 149.158361][ T9340] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #15: comm syz.4.1197: corrupted inode contents [ 149.158377][ T9340] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 149.159566][ T9340] EXT4-fs (loop4): Remounting filesystem read-only [ 149.159579][ T9340] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -30) [ 149.159645][ T9340] EXT4-fs (loop4): 1 orphan inode deleted [ 149.160042][ T9340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.170734][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.298125][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.366851][ T9365] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 149.377939][ T9365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 149.377989][ T9365] System zones: 1-12 [ 149.391452][ T9365] EXT4-fs (loop8): 1 truncate cleaned up [ 149.391937][ T9365] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.448227][ T7157] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.463476][ T9376] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.477060][ T9379] vxcan0: tx drop: invalid da for name 0x000000000000fffe [ 149.635463][ T30] audit: type=1400 audit(149.620:24): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9373 comm="syz.9.1208" daddr=::ffff:127.0.0.1 dest=20003 [ 149.827317][ T50] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 151.020903][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1229'. [ 151.147524][ T9447] set_capacity_and_notify: 5 callbacks suppressed [ 151.149019][ T9447] loop0: detected capacity change from 0 to 512 [ 151.149231][ T9448] 9pnet_fd: Insufficient options for proto=fd [ 151.167198][ T9447] EXT4-fs (loop0): orphan cleanup on readonly fs [ 151.172819][ T9447] EXT4-fs (loop0): 1 orphan inode deleted [ 151.175540][ T9447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 151.233429][ T30] audit: type=1400 audit(151.210:25): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9446 comm="syz.4.1234" daddr=ff02::1 dest=20004 [ 151.266272][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.342094][ T9456] loop5: detected capacity change from 0 to 8192 [ 151.389307][ T9456] loop5: p1[EZD] p3 p4 [ 151.390311][ T9456] loop5: partition table partially beyond EOD, truncated [ 151.482269][ T9456] loop5: p3 start 150994944 is beyond EOD, truncated [ 151.905474][ T9474] loop0: detected capacity change from 0 to 512 [ 151.925171][ T4717] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 151.927258][ T4717] CPU: 0 UID: 0 PID: 4717 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT [ 151.927282][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 151.927293][ T4717] Workqueue: hci1 hci_rx_work [ 151.927311][ T4717] Call trace: [ 151.927315][ T4717] show_stack+0x2c/0x3c (C) [ 151.927335][ T4717] __dump_stack+0x30/0x40 [ 151.927349][ T4717] dump_stack_lvl+0xd8/0x12c [ 151.927362][ T4717] dump_stack+0x1c/0x28 [ 151.927375][ T4717] sysfs_warn_dup+0x9c/0xb8 [ 151.927388][ T4717] sysfs_create_dir_ns+0x190/0x1f4 [ 151.927400][ T4717] kobject_add_internal+0x290/0x6f0 [ 151.927410][ T4717] kobject_add_varg+0x9c/0xe8 [ 151.927419][ T4717] kobject_add+0x110/0x1c8 [ 151.927427][ T4717] device_add+0x394/0x9e0 [ 151.927436][ T4717] hci_conn_add_sysfs+0xbc/0x1e8 [ 151.927447][ T4717] le_conn_complete_evt+0xc68/0x10f8 [ 151.927457][ T4717] hci_le_conn_complete_evt+0x114/0x3d8 [ 151.927467][ T4717] hci_le_meta_evt+0x2b0/0x46c [ 151.927479][ T4717] hci_event_packet+0x4c0/0x9c8 [ 151.927489][ T4717] hci_rx_work+0x2f4/0xd78 [ 151.927497][ T4717] process_scheduled_works+0x788/0x10b8 [ 151.927508][ T4717] worker_thread+0x798/0xbd0 [ 151.927518][ T4717] kthread+0x304/0x3d4 [ 151.927527][ T4717] ret_from_fork+0x10/0x20 [ 151.927642][ T4717] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 151.927664][ T4717] Bluetooth: hci1: failed to register connection device [ 152.190365][ T9474] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1240: invalid block [ 152.190449][ T9474] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 152.193431][ T9474] EXT4-fs (loop0): Remounting filesystem read-only [ 152.193866][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 152.193886][ C1] EXT4-fs (loop0): initial error at time 152: ext4_get_branch:178: inode 11: block 4294967295 [ 152.193921][ C1] EXT4-fs (loop0): last error at time 152: ext4_get_branch:178: inode 11: block 4294967295 [ 152.194373][ T9474] EXT4-fs (loop0): 2 truncates cleaned up [ 152.197608][ T9474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.746607][ T9479] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1242'. [ 152.844225][ T9491] FAULT_INJECTION: forcing a failure. [ 152.844225][ T9491] name failslab, interval 1, probability 0, space 0, times 0 [ 152.844273][ T9491] CPU: 1 UID: 0 PID: 9491 Comm: syz.8.1245 Not tainted syzkaller #0 PREEMPT [ 152.844288][ T9491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 152.844293][ T9491] Call trace: [ 152.844296][ T9491] show_stack+0x2c/0x3c (C) [ 152.844316][ T9491] __dump_stack+0x30/0x40 [ 152.844327][ T9491] dump_stack_lvl+0xd8/0x12c [ 152.844336][ T9491] dump_stack+0x1c/0x28 [ 152.844346][ T9491] should_fail_ex+0x41c/0x590 [ 152.844357][ T9491] should_failslab+0xc4/0x120 [ 152.844365][ T9491] __kvmalloc_node_noprof+0x160/0x7d8 [ 152.844374][ T9491] bpf_compute_postorder+0x114/0x768 [ 152.844384][ T9491] bpf_check+0x1048/0x40dc [ 152.844393][ T9491] bpf_prog_load+0x1050/0x15f8 [ 152.844401][ T9491] __sys_bpf+0x870/0x8c8 [ 152.844407][ T9491] __arm64_sys_bpf+0xd0/0xec [ 152.844414][ T9491] invoke_syscall+0x98/0x244 [ 152.844424][ T9491] el0_svc_common+0xec/0x23c [ 152.844433][ T9491] do_el0_svc+0x4c/0x5c [ 152.844442][ T9491] el0_svc+0x64/0x260 [ 152.844453][ T9491] el0t_64_sync_handler+0x48/0x148 [ 152.844463][ T9491] el0t_64_sync+0x198/0x19c [ 153.021266][ T9490] loop9: detected capacity change from 0 to 256 [ 153.034229][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.056482][ T7770] FAT-fs (loop9): error, invalid access to FAT (entry 0x000003ff) [ 153.058110][ T7770] FAT-fs (loop9): Filesystem has been set read-only [ 153.062376][ T7770] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 153.065011][ T7770] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 153.078168][ T9494] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 153.316236][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 153.353796][ T4717] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 153.396568][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 153.399625][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 153.461974][ T9511] loop4: detected capacity change from 0 to 512 [ 153.471512][ T9512] loop5: detected capacity change from 0 to 256 [ 153.475007][ T9512] syz.5.1254: attempt to access beyond end of device [ 153.475007][ T9512] loop5: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 153.475261][ T9512] FAULT_INJECTION: forcing a failure. [ 153.475261][ T9512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.475274][ T9512] CPU: 1 UID: 0 PID: 9512 Comm: syz.5.1254 Not tainted syzkaller #0 PREEMPT [ 153.475283][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 153.475289][ T9512] Call trace: [ 153.475292][ T9512] show_stack+0x2c/0x3c (C) [ 153.475311][ T9512] __dump_stack+0x30/0x40 [ 153.475321][ T9512] dump_stack_lvl+0xd8/0x12c [ 153.475331][ T9512] dump_stack+0x1c/0x28 [ 153.475340][ T9512] should_fail_ex+0x41c/0x590 [ 153.475352][ T9512] should_fail+0x14/0x24 [ 153.475364][ T9512] should_fail_usercopy+0x20/0x30 [ 153.475372][ T9512] copy_folio_from_iter_atomic+0x384/0x1518 [ 153.475380][ T9512] generic_perform_write+0x4bc/0x7a4 [ 153.475389][ T9512] __generic_file_write_iter+0xfc/0x204 [ 153.475396][ T9512] generic_file_write_iter+0xb4/0x2c0 [ 153.475403][ T9512] vfs_write+0x51c/0xa0c [ 153.475411][ T9512] ksys_pwrite64+0x118/0x1ac [ 153.475417][ T9512] __arm64_sys_pwrite64+0xa8/0xc0 [ 153.475424][ T9512] invoke_syscall+0x98/0x244 [ 153.475434][ T9512] el0_svc_common+0xec/0x23c [ 153.475444][ T9512] do_el0_svc+0x4c/0x5c [ 153.475453][ T9512] el0_svc+0x64/0x260 [ 153.475464][ T9512] el0t_64_sync_handler+0x48/0x148 [ 153.475474][ T9512] el0t_64_sync+0x198/0x19c [ 153.477896][ T9512] syz.5.1254: attempt to access beyond end of device [ 153.477896][ T9512] loop5: rw=8390657, sector=1772, nr_sectors = 4 limit=256 [ 153.477909][ T9512] Buffer I/O error on dev loop5, logical block 443, lost async page write [ 153.478006][ T9512] syz.5.1254: attempt to access beyond end of device [ 153.478006][ T9512] loop5: rw=2049, sector=1776, nr_sectors = 24 limit=256 [ 153.478141][ T9512] syz.5.1254: attempt to access beyond end of device [ 153.478141][ T9512] loop5: rw=2049, sector=1832, nr_sectors = 32 limit=256 [ 153.478194][ T9512] syz.5.1254: attempt to access beyond end of device [ 153.478194][ T9512] loop5: rw=2049, sector=1896, nr_sectors = 32 limit=256 [ 153.478250][ T9512] syz.5.1254: attempt to access beyond end of device [ 153.478250][ T9512] loop5: rw=2049, sector=1960, nr_sectors = 40 limit=256 [ 153.485876][ T9511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.488913][ T9511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1253'. [ 153.590607][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.615572][ T9523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1257'. [ 153.953349][ T9530] FAULT_INJECTION: forcing a failure. [ 153.953349][ T9530] name failslab, interval 1, probability 0, space 0, times 0 [ 153.953386][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: syz.4.1258 Not tainted syzkaller #0 PREEMPT [ 153.953400][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 153.953406][ T9530] Call trace: [ 153.953410][ T9530] show_stack+0x2c/0x3c (C) [ 153.953431][ T9530] __dump_stack+0x30/0x40 [ 153.953442][ T9530] dump_stack_lvl+0xd8/0x12c [ 153.953453][ T9530] dump_stack+0x1c/0x28 [ 153.953462][ T9530] should_fail_ex+0x41c/0x590 [ 153.953474][ T9530] should_failslab+0xc4/0x120 [ 153.953482][ T9530] __kmalloc_noprof+0x108/0x6b8 [ 153.953491][ T9530] tomoyo_realpath_from_path+0xbc/0x4dc [ 153.953500][ T9530] tomoyo_path_number_perm+0x1f0/0x500 [ 153.953508][ T9530] tomoyo_file_ioctl+0x2c/0x3c [ 153.953516][ T9530] security_file_ioctl+0xdc/0x2b0 [ 153.953524][ T9530] __arm64_sys_ioctl+0xb0/0x1cc [ 153.953534][ T9530] invoke_syscall+0x98/0x244 [ 153.953544][ T9530] el0_svc_common+0xec/0x23c [ 153.953553][ T9530] do_el0_svc+0x4c/0x5c [ 153.953574][ T9530] el0_svc+0x64/0x260 [ 153.953588][ T9530] el0t_64_sync_handler+0x48/0x148 [ 153.953599][ T9530] el0t_64_sync+0x198/0x19c [ 153.953636][ T9530] ERROR: Out of memory at tomoyo_realpath_from_path. [ 155.149096][ T9549] û: renamed from bond_slave_0 [ 155.170648][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 155.170679][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 155.170696][ T9553] netlink: 'syz.0.1267': attribute type 12 has an invalid length. [ 155.614866][ T9568] loop5: detected capacity change from 0 to 1024 [ 155.680446][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1274'. [ 155.680475][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1274'. [ 155.698215][ T9575] FAULT_INJECTION: forcing a failure. [ 155.698215][ T9575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.698249][ T9575] CPU: 0 UID: 0 PID: 9575 Comm: syz.4.1275 Not tainted syzkaller #0 PREEMPT [ 155.698263][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 155.698270][ T9575] Call trace: [ 155.698274][ T9575] show_stack+0x2c/0x3c (C) [ 155.698293][ T9575] __dump_stack+0x30/0x40 [ 155.698305][ T9575] dump_stack_lvl+0xd8/0x12c [ 155.698315][ T9575] dump_stack+0x1c/0x28 [ 155.698324][ T9575] should_fail_ex+0x41c/0x590 [ 155.698336][ T9575] should_fail+0x14/0x24 [ 155.698345][ T9575] should_fail_usercopy+0x20/0x30 [ 155.698352][ T9575] simple_read_from_buffer+0xc4/0x238 [ 155.698362][ T9575] proc_fail_nth_read+0x1a8/0x248 [ 155.698371][ T9575] vfs_read+0x230/0x8c8 [ 155.698378][ T9575] ksys_read+0x12c/0x228 [ 155.698384][ T9575] __arm64_sys_read+0x84/0x98 [ 155.698391][ T9575] invoke_syscall+0x98/0x244 [ 155.698400][ T9575] el0_svc_common+0xec/0x23c [ 155.698410][ T9575] do_el0_svc+0x4c/0x5c [ 155.698419][ T9575] el0_svc+0x64/0x260 [ 155.698430][ T9575] el0t_64_sync_handler+0x48/0x148 [ 155.698440][ T9575] el0t_64_sync+0x198/0x19c [ 156.071549][ T9587] input: syz1 as /devices/virtual/input/input8 [ 156.550375][ T4717] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 156.795569][ T9607] netlink: 'syz.5.1286': attribute type 83 has an invalid length. [ 157.326357][ T9633] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1297'. [ 157.326605][ T9633] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1297'. [ 157.422409][ T9640] loop0: detected capacity change from 0 to 512 [ 157.426587][ T9640] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1300: corrupted in-inode xattr: bad e_name length [ 157.426631][ T9640] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 157.426804][ T9640] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1300: couldn't read orphan inode 15 (err -117) [ 157.426821][ T9640] loop0: lost filesystem error report for type 5 error -117 [ 157.428488][ T9640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.430838][ T9640] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.1300: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 157.447728][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.496695][ T9648] openvswitch: netlink: Actions may not be safe on all matching packets [ 157.498034][ T9648] loop0: detected capacity change from 0 to 128 [ 158.728476][ T9667] loop5: detected capacity change from 0 to 256 [ 158.793967][ T9666] loop8: detected capacity change from 0 to 8192 [ 158.825120][ T9671] fuse: Unknown parameter 'fl' [ 158.827127][ T9666] Dev loop8: unable to read partition block 1332580712448 [ 158.829005][ T9666] loop8: RDSK (10166784) unable to read partition table [ 158.829689][ T9666] loop8: partition table beyond EOD, truncated [ 158.829720][ T9666] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 159.245733][ T4717] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 159.290201][ T9716] __nla_validate_parse: 1 callbacks suppressed [ 159.291574][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 159.307833][ T9717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.308218][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1318'. [ 159.399106][ T9719] loop0: detected capacity change from 0 to 256 [ 159.450949][ T9724] FAULT_INJECTION: forcing a failure. [ 159.450949][ T9724] name failslab, interval 1, probability 0, space 0, times 0 [ 159.450981][ T9724] CPU: 0 UID: 0 PID: 9724 Comm: syz.0.1323 Not tainted syzkaller #0 PREEMPT [ 159.450995][ T9724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 159.451002][ T9724] Call trace: [ 159.451006][ T9724] show_stack+0x2c/0x3c (C) [ 159.451027][ T9724] __dump_stack+0x30/0x40 [ 159.451039][ T9724] dump_stack_lvl+0xd8/0x12c [ 159.451048][ T9724] dump_stack+0x1c/0x28 [ 159.451058][ T9724] should_fail_ex+0x41c/0x590 [ 159.451070][ T9724] should_failslab+0xc4/0x120 [ 159.451078][ T9724] __kmalloc_noprof+0x108/0x6b8 [ 159.451087][ T9724] tomoyo_realpath_from_path+0xbc/0x4dc [ 159.451096][ T9724] tomoyo_mount_permission+0x3b4/0x7e4 [ 159.451104][ T9724] tomoyo_sb_mount+0x48/0x60 [ 159.451112][ T9724] security_sb_mount+0xfc/0x308 [ 159.451122][ T9724] path_mount+0xb8/0xa88 [ 159.451132][ T9724] do_mount+0xe8/0x148 [ 159.451140][ T9724] __arm64_sys_mount+0x33c/0x388 [ 159.451149][ T9724] invoke_syscall+0x98/0x244 [ 159.451159][ T9724] el0_svc_common+0xec/0x23c [ 159.451169][ T9724] do_el0_svc+0x4c/0x5c [ 159.451178][ T9724] el0_svc+0x64/0x260 [ 159.451189][ T9724] el0t_64_sync_handler+0x48/0x148 [ 159.451199][ T9724] el0t_64_sync+0x198/0x19c [ 159.451219][ T9724] ERROR: Out of memory at tomoyo_realpath_from_path. [ 159.502769][ T30] audit: type=1400 audit(159.480:26): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9728 comm="syz.0.1324" daddr=fe80::bb dest=28195 [ 159.594638][ T9743] netlink: 'syz.0.1327': attribute type 1 has an invalid length. [ 159.776548][ T9749] binder: 9748:9749 tried to acquire reference to desc 0, got 1 instead [ 159.776782][ T9749] binder: 9748:9749 got transaction with invalid data ptr [ 159.776809][ T9749] binder: 9748:9749 transaction call to 9748:0 failed 16/29201/-14, code 0 size 35-0 line 3742 [ 159.777348][ T4960] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.782656][ T30] audit: type=1400 audit(159.760:27): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9748 comm="syz.0.1329" daddr=fc01:: dest=20003 [ 159.910724][ T4717] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 160.111181][ T9755] loop5: detected capacity change from 0 to 128 [ 160.119878][ T9755] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.144253][ T5022] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.165971][ T9760] loop5: detected capacity change from 0 to 8 [ 160.168430][ T9760] Filesystem uses "unknown" compression. This is not supported [ 160.173104][ T9759] Injecting memory failure for pfn 0x137e82 at process virtual address 0x20000000 [ 160.192181][ T9759] Memory failure: 0x137e82: unhandlable page. [ 160.192211][ T9759] Memory failure: 0x137e82: recovery action for get hwpoison page: Ignored [ 160.378281][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1333'. [ 160.493304][ T9766] loop4: detected capacity change from 0 to 2048 [ 160.538207][ T9766] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 160.845133][ T9787] netlink: 888 bytes leftover after parsing attributes in process `syz.8.1343'. [ 160.971557][ T4717] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 161.105215][ T9801] macvlan0: left allmulticast mode [ 161.193635][ T9803] loop8: detected capacity change from 0 to 128 [ 161.226641][ T9803] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 161.293466][ T7157] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.953149][ T4717] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 162.237661][ T9827] vhci_hcd vhci_hcd.2: default hub control req: 010b v0000 i0000 l0 [ 162.239520][ T30] audit: type=1400 audit(162.220:28): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9826 comm="syz.8.1352" daddr=fe80::bb dest=20000 [ 162.367812][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 162.375660][ T9834] loop8: detected capacity change from 0 to 128 [ 162.389438][ T30] audit: type=1400 audit(162.330:29): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9830 comm="syz.5.1354" daddr=ff02::1 dest=65531 [ 162.399614][ T5994] udevd[5994]: inotify_add_watch(7, /dev/loop4p21, 10) failed: No such file or directory [ 162.400697][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 162.401716][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop4p15, 10) failed: No such file or directory [ 162.413322][ T6476] udevd[6476]: inotify_add_watch(7, /dev/loop4p25, 10) failed: No such file or directory [ 162.416767][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p20, 10) failed: No such file or directory [ 162.418337][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p24, 10) failed: No such file or directory [ 162.425383][ T6479] udevd[6479]: inotify_add_watch(7, /dev/loop4p22, 10) failed: No such file or directory [ 162.427458][ T4699] udevd[4699]: inotify_add_watch(7, /dev/loop4p19, 10) failed: No such file or directory [ 162.434269][ T6470] udevd[6470]: inotify_add_watch(7, /dev/loop4p18, 10) failed: No such file or directory [ 162.777830][ T9841] loop8: detected capacity change from 0 to 256 [ 162.829175][ T9845] loop8: detected capacity change from 0 to 512 [ 162.830199][ T9845] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 162.832956][ T9845] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1359: casefold flag without casefold feature [ 162.832995][ T9845] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.833723][ T9845] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1359: couldn't read orphan inode 15 (err -117) [ 162.833748][ T9845] loop8: lost filesystem error report for type 5 error -117 [ 162.834847][ T9845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.839145][ T9845] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 4: comm syz.8.1359: lblock 0 mapped to illegal pblock 4 (length 1) [ 162.876753][ T7157] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.213464][ T9859] veth0: left allmulticast mode [ 163.302833][ T9863] loop4: detected capacity change from 0 to 512 [ 163.343229][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1366'. [ 163.446930][ T9863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.493493][ T4717] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 163.708918][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 163.896947][ T9874] loop8: detected capacity change from 0 to 2048 [ 163.898520][ T9874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.901664][ T9874] EXT4-fs (loop8): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 163.923525][ T9874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.956362][ T9882] loop0: detected capacity change from 0 to 512 [ 163.956783][ T9882] ext4: Unknown parameter 'subj_user' [ 164.109414][ T9903] loop0: detected capacity change from 0 to 256 [ 164.111004][ T9903] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.163306][ T9908] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1374'. [ 164.252828][ T7157] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.270532][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1377'. [ 164.299657][ T9915] FAULT_INJECTION: forcing a failure. [ 164.299657][ T9915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.299688][ T9915] CPU: 1 UID: 0 PID: 9915 Comm: syz.8.1376 Not tainted syzkaller #0 PREEMPT [ 164.299703][ T9915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 164.299709][ T9915] Call trace: [ 164.299712][ T9915] show_stack+0x2c/0x3c (C) [ 164.299729][ T9915] __dump_stack+0x30/0x40 [ 164.299740][ T9915] dump_stack_lvl+0xd8/0x12c [ 164.299750][ T9915] dump_stack+0x1c/0x28 [ 164.299759][ T9915] should_fail_ex+0x41c/0x590 [ 164.299771][ T9915] should_fail+0x14/0x24 [ 164.299780][ T9915] should_fail_usercopy+0x20/0x30 [ 164.299787][ T9915] _inline_copy_from_user+0x3c/0x174 [ 164.299796][ T9915] do_handle_open+0xe4/0x928 [ 164.299804][ T9915] __arm64_sys_open_by_handle_at+0x88/0x9c [ 164.299813][ T9915] invoke_syscall+0x98/0x244 [ 164.299823][ T9915] el0_svc_common+0xec/0x23c [ 164.299832][ T9915] do_el0_svc+0x4c/0x5c [ 164.299841][ T9915] el0_svc+0x64/0x260 [ 164.299852][ T9915] el0t_64_sync_handler+0x48/0x148 [ 164.299863][ T9915] el0t_64_sync+0x198/0x19c [ 164.341352][ T30] audit: type=1400 audit(164.320:30): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=9919 comm="syz.0.1378" daddr=ff02::1 dest=20004 [ 164.343010][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1380'. [ 164.350440][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.357742][ T4717] Bluetooth: hci3: Unknown advertising packet type: 0x1d [ 164.357772][ T4717] Bluetooth: hci3: Unknown advertising packet type: 0x35 [ 164.357786][ T4717] Bluetooth: hci3: Malformed LE Event: 0x0d [ 164.442749][ T9927] loop0: detected capacity change from 0 to 512 [ 164.447956][ T9925] syzkaller0: entered promiscuous mode [ 164.449007][ T9925] syzkaller0: entered allmulticast mode [ 164.454254][ T9927] EXT4-fs (loop0): Test dummy encryption mode enabled [ 164.454283][ T9927] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.472025][ T9927] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1383: bad orphan inode 131083 [ 164.472057][ T9927] loop0: lost filesystem error report for type 5 error -117 [ 164.477632][ T9927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.483439][ T9927] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 164.494977][ T9925] 0: reclassify loop, rule prio 0, protocol 800 [ 164.497377][ T9932] binder: 9931:9932 tried to acquire reference to desc 0, got 1 instead [ 164.499871][ T9932] binder: 9931:9932 got transaction to context manager from process owning it [ 164.499912][ T9932] binder: 9931:9932 transaction call to 9931:0 failed 22/29201/-22, code 0 size 0-0 line 3243 [ 164.508497][ T9932] binder: 9931:9932 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 164.508529][ T9932] binder: 9932 RLIMIT_NICE not set [ 164.508546][ T9932] binder: 9932 RLIMIT_NICE not set [ 164.508669][ T9932] binder: 9931:9932 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 164.508690][ T9932] binder: 9931:9932 unknown command 0 [ 164.508703][ T9932] binder: 9931:9932 ioctl c0306201 200002c0 returned -22 [ 164.524594][ T4797] binder: release 9931:9932 transaction 21 out, still active [ 164.524653][ T4797] binder: undelivered TRANSACTION_COMPLETE [ 164.525051][ T4797] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.552289][ T9927] overlayfs: upper fs needs to support d_type. [ 164.565370][ T4797] binder: release 9931:9932 transaction 21 in, still active [ 164.565398][ T4797] binder: send failed reply for transaction 21, target dead [ 164.894172][ T9941] FAULT_INJECTION: forcing a failure. [ 164.894172][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 164.894210][ T9941] CPU: 1 UID: 0 PID: 9941 Comm: syz.5.1386 Not tainted syzkaller #0 PREEMPT [ 164.894222][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 164.894229][ T9941] Call trace: [ 164.894232][ T9941] show_stack+0x2c/0x3c (C) [ 164.894252][ T9941] __dump_stack+0x30/0x40 [ 164.894263][ T9941] dump_stack_lvl+0xd8/0x12c [ 164.894275][ T9941] dump_stack+0x1c/0x28 [ 164.894284][ T9941] should_fail_ex+0x41c/0x590 [ 164.894296][ T9941] should_failslab+0xc4/0x120 [ 164.894304][ T9941] __kmalloc_noprof+0x108/0x6b8 [ 164.894313][ T9941] ring_buffer_read_start+0x198/0x3e8 [ 164.894324][ T9941] __tracing_open+0x618/0x790 [ 164.894332][ T9941] tracing_open+0x170/0x25c [ 164.894341][ T9941] do_dentry_open+0x5c4/0xfc0 [ 164.894352][ T9941] vfs_open+0x44/0x2dc [ 164.894361][ T9941] path_openat+0x21fc/0x2a60 [ 164.894369][ T9941] do_file_open+0x1c8/0x2e8 [ 164.894377][ T9941] do_sys_openat2+0x114/0x1e8 [ 164.894386][ T9941] do_sys_open+0xb0/0xe0 [ 164.894395][ T9941] __arm64_sys_openat+0xa8/0xc4 [ 164.894405][ T9941] invoke_syscall+0x98/0x244 [ 164.894415][ T9941] el0_svc_common+0xec/0x23c [ 164.894424][ T9941] do_el0_svc+0x4c/0x5c [ 164.894433][ T9941] el0_svc+0x64/0x260 [ 164.894444][ T9941] el0t_64_sync_handler+0x48/0x148 [ 164.894455][ T9941] el0t_64_sync+0x198/0x19c [ 165.338672][ T4709] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /316/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 165.350058][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.410280][ T6458] tipc: Disabling bearer [ 165.435488][ T9954] rdma_op 00000000af4ecf69 conn xmit_rdma 0000000000000000 [ 165.531210][ T9960] loop8: detected capacity change from 0 to 256 [ 165.554840][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.556357][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.557441][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.557870][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.558081][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.572887][ T9958] bridge2: entered promiscuous mode [ 165.635428][ T4717] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 165.637818][ T4717] CPU: 1 UID: 0 PID: 4717 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT [ 165.637837][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 165.637845][ T4717] Workqueue: hci3 hci_rx_work [ 165.637860][ T4717] Call trace: [ 165.637864][ T4717] show_stack+0x2c/0x3c (C) [ 165.637882][ T4717] __dump_stack+0x30/0x40 [ 165.637895][ T4717] dump_stack_lvl+0xd8/0x12c [ 165.637907][ T4717] dump_stack+0x1c/0x28 [ 165.637919][ T4717] sysfs_warn_dup+0x9c/0xb8 [ 165.637931][ T4717] sysfs_create_dir_ns+0x190/0x1f4 [ 165.637943][ T4717] kobject_add_internal+0x290/0x6f0 [ 165.637953][ T4717] kobject_add_varg+0x9c/0xe8 [ 165.637961][ T4717] kobject_add+0x110/0x1c8 [ 165.637970][ T4717] device_add+0x394/0x9e0 [ 165.637978][ T4717] hci_conn_add_sysfs+0xbc/0x1e8 [ 165.637990][ T4717] le_conn_complete_evt+0xc68/0x10f8 [ 165.638000][ T4717] hci_le_conn_complete_evt+0x114/0x3d8 [ 165.638009][ T4717] hci_le_meta_evt+0x2b0/0x46c [ 165.638021][ T4717] hci_event_packet+0x4c0/0x9c8 [ 165.638032][ T4717] hci_rx_work+0x2f4/0xd78 [ 165.638040][ T4717] process_scheduled_works+0x788/0x10b8 [ 165.638051][ T4717] worker_thread+0x798/0xbd0 [ 165.638062][ T4717] kthread+0x304/0x3d4 [ 165.638070][ T4717] ret_from_fork+0x10/0x20 [ 165.638096][ T4717] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 165.638113][ T4717] Bluetooth: hci3: failed to register connection device [ 165.743545][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.746409][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.746544][ T9961] bridge_slave_0: entered allmulticast mode [ 165.749808][ T9961] bridge_slave_0: entered promiscuous mode [ 165.754102][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.754187][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.754281][ T9961] bridge_slave_1: entered allmulticast mode [ 165.754760][ T9961] bridge_slave_1: entered promiscuous mode [ 165.763230][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.764989][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.773188][ T9961] team0: Port device team_slave_0 added [ 165.774533][ T9961] team0: Port device team_slave_1 added [ 165.781569][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.781595][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.781615][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.782196][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.782203][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.782220][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.795344][ T9961] hsr_slave_0: entered promiscuous mode [ 165.795649][ T9961] hsr_slave_1: entered promiscuous mode [ 165.795914][ T9961] debugfs: 'hsr0' already exists in 'hsr' [ 165.795924][ T9961] Cannot create hsr debugfs directory [ 165.942530][ T9993] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1399'. [ 166.097149][T10003] FAULT_INJECTION: forcing a failure. [ 166.097149][T10003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.097185][T10003] CPU: 1 UID: 0 PID: 10003 Comm: syz.8.1400 Not tainted syzkaller #0 PREEMPT [ 166.097199][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 166.097207][T10003] Call trace: [ 166.097210][T10003] show_stack+0x2c/0x3c (C) [ 166.097231][T10003] __dump_stack+0x30/0x40 [ 166.097243][T10003] dump_stack_lvl+0xd8/0x12c [ 166.097254][T10003] dump_stack+0x1c/0x28 [ 166.097263][T10003] should_fail_ex+0x41c/0x590 [ 166.097276][T10003] should_fail+0x14/0x24 [ 166.097285][T10003] should_fail_usercopy+0x20/0x30 [ 166.097292][T10003] simple_read_from_buffer+0xc4/0x238 [ 166.097303][T10003] proc_fail_nth_read+0x1a8/0x248 [ 166.097312][T10003] vfs_read+0x230/0x8c8 [ 166.097319][T10003] ksys_read+0x12c/0x228 [ 166.097325][T10003] __arm64_sys_read+0x84/0x98 [ 166.097332][T10003] invoke_syscall+0x98/0x244 [ 166.097342][T10003] el0_svc_common+0xec/0x23c [ 166.097352][T10003] do_el0_svc+0x4c/0x5c [ 166.097361][T10003] el0_svc+0x64/0x260 [ 166.097376][T10003] el0t_64_sync_handler+0x48/0x148 [ 166.097386][T10003] el0t_64_sync+0x198/0x19c [ 166.559109][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1403'. [ 166.670783][ T9961] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.671985][T10052] loop4: detected capacity change from 0 to 512 [ 166.678519][ T9961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.678839][ T9961] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.681434][ T9961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.682755][ T9961] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.686909][ T9961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.688639][ T9961] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.692223][ T9961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 166.697941][T10052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.746457][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.751244][ T9961] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.753209][ T5455] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.753250][ T5455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.760077][ T5455] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.760117][ T5455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.801862][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.291721][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.310060][ T9961] veth0_vlan: entered promiscuous mode [ 167.312420][ T9961] veth1_vlan: entered promiscuous mode [ 167.322441][ T9961] veth0_macvtap: entered promiscuous mode [ 167.325524][ T9961] veth1_macvtap: entered promiscuous mode [ 167.332902][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.338558][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.390873][ T5466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.390901][ T5466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.403661][ T5466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.403818][ T5466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.409483][ T5455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.409517][ T5455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.415049][ T5466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.415423][ T5466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.664780][ T4717] Bluetooth: hci0: command tx timeout [ 167.942406][ T30] audit: type=1400 audit(167.920:31): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=10135 comm="syz.4.1413" daddr=ff01::1 [ 167.952048][T10142] loop5: detected capacity change from 0 to 1024 [ 167.967259][T10142] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.006844][T10142] xt_cgroup: xt_cgroup: no path or classid specified [ 168.232301][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.232557][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.311953][T10154] loop4: detected capacity change from 0 to 8192 [ 168.365740][T10154] loop4: p1 < > p2 p4 [ 168.365770][T10154] loop4: partition table partially beyond EOD, truncated [ 168.365891][T10154] loop4: p1 start 67109119 is beyond EOD, truncated [ 168.365914][T10154] loop4: p2 size 201326600 extends beyond EOD, truncated [ 168.371381][T10154] loop4: p4 size 393216 extends beyond EOD, truncated [ 168.509928][T10174] IPv6: sit1: Disabled Multicast RS [ 168.510254][T10174] sit1: entered allmulticast mode [ 168.520825][T10174] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 168.520904][T10174] overlayfs: overlapping lowerdir path [ 168.540138][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.793797][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.801826][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.811411][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.813227][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.838680][ T5022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.864499][T10183] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1418'. [ 169.005591][T10200] loop5: detected capacity change from 0 to 256 [ 169.108198][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 169.108659][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 169.192558][T10217] use of bytesused == 0 is deprecated and will be removed in the future, [ 169.195105][T10217] use the actual size instead. [ 169.223017][T10217] loop5: detected capacity change from 0 to 512 [ 169.224953][T10217] ext4: Invalid gid '0x00000000ffffffff' [ 169.271799][ T30] audit: type=1400 audit(169.250:32): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="hugetlbfs" object="_" requested=w pid=10224 comm="syz.1.1423" saddr=fe80::aa daddr=fe80::aa dest=16385 netif=wpan0 [ 169.303035][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.306838][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.306948][T10172] bridge_slave_0: entered allmulticast mode [ 169.313171][T10172] bridge_slave_0: entered promiscuous mode [ 169.314060][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.314090][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.314164][T10172] bridge_slave_1: entered allmulticast mode [ 169.314611][T10172] bridge_slave_1: entered promiscuous mode [ 169.365694][T10172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.370535][T10172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.396302][T10172] team0: Port device team_slave_0 added [ 169.401565][T10172] team0: Port device team_slave_1 added [ 169.415472][T10172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.418016][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.418060][T10172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.420473][ T30] audit: type=1400 audit(169.400:33): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=10234 comm="syz.5.1426" daddr=ff02::1 dest=20004 [ 169.429012][T10172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.430279][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.434972][T10172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.482474][T10172] hsr_slave_0: entered promiscuous mode [ 169.488916][T10172] hsr_slave_1: entered promiscuous mode [ 169.489169][T10172] debugfs: 'hsr0' already exists in 'hsr' [ 169.489187][T10172] Cannot create hsr debugfs directory [ 169.835749][T10256] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 169.846957][ T4724] Bluetooth: hci0: command tx timeout [ 169.955105][ T7770] tipc: Resetting bearer [ 169.982083][ T7770] tipc: Disabling bearer [ 169.989478][T10248] usb3503 0-0008: unknown mode is requested [ 169.989510][T10248] usb3503 0-0008: usb3503_probe: probed in standby mode [ 169.990596][T10248] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 170.062733][T10263] FAULT_INJECTION: forcing a failure. [ 170.062733][T10263] name failslab, interval 1, probability 0, space 0, times 0 [ 170.062770][T10263] CPU: 1 UID: 0 PID: 10263 Comm: syz.8.1431 Not tainted syzkaller #0 PREEMPT [ 170.062781][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 170.062786][T10263] Call trace: [ 170.062789][T10263] show_stack+0x2c/0x3c (C) [ 170.062806][T10263] __dump_stack+0x30/0x40 [ 170.062818][T10263] dump_stack_lvl+0xd8/0x12c [ 170.062827][T10263] dump_stack+0x1c/0x28 [ 170.062836][T10263] should_fail_ex+0x41c/0x590 [ 170.062848][T10263] should_failslab+0xc4/0x120 [ 170.062857][T10263] __kmalloc_cache_node_noprof+0x98/0x60c [ 170.062866][T10263] __get_vm_area_node+0x188/0x32c [ 170.062875][T10263] __vmalloc_node_range_noprof+0x2c8/0x105c [ 170.062885][T10263] __vmalloc_node_noprof+0xec/0x14c [ 170.062894][T10263] vzalloc_noprof+0x3c/0x4c [ 170.062902][T10263] bpf_check+0x13c/0x40dc [ 170.062912][T10263] bpf_prog_load+0x1050/0x15f8 [ 170.062921][T10263] __sys_bpf+0x870/0x8c8 [ 170.062928][T10263] __arm64_sys_bpf+0xd0/0xec [ 170.062935][T10263] invoke_syscall+0x98/0x244 [ 170.062946][T10263] el0_svc_common+0xec/0x23c [ 170.062955][T10263] do_el0_svc+0x4c/0x5c [ 170.062964][T10263] el0_svc+0x64/0x260 [ 170.062975][T10263] el0t_64_sync_handler+0x48/0x148 [ 170.062985][T10263] el0t_64_sync+0x198/0x19c [ 170.063496][T10263] warn_alloc: 2 callbacks suppressed [ 170.063509][T10263] syz.8.1431: vmalloc error: size 544, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 170.063542][T10263] CPU: 1 UID: 0 PID: 10263 Comm: syz.8.1431 Not tainted syzkaller #0 PREEMPT [ 170.063551][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 170.063556][T10263] Call trace: [ 170.063558][T10263] show_stack+0x2c/0x3c (C) [ 170.063570][T10263] __dump_stack+0x30/0x40 [ 170.063582][T10263] dump_stack_lvl+0xd8/0x12c [ 170.063592][T10263] dump_stack+0x1c/0x28 [ 170.063602][T10263] warn_alloc+0x1bc/0x1d0 [ 170.063615][T10263] __vmalloc_node_range_noprof+0x2e8/0x105c [ 170.063625][T10263] __vmalloc_node_noprof+0xec/0x14c [ 170.063634][T10263] vzalloc_noprof+0x3c/0x4c [ 170.063644][T10263] bpf_check+0x13c/0x40dc [ 170.063652][T10263] bpf_prog_load+0x1050/0x15f8 [ 170.063659][T10263] __sys_bpf+0x870/0x8c8 [ 170.063666][T10263] __arm64_sys_bpf+0xd0/0xec [ 170.063673][T10263] invoke_syscall+0x98/0x244 [ 170.063682][T10263] el0_svc_common+0xec/0x23c [ 170.063691][T10263] do_el0_svc+0x4c/0x5c [ 170.063700][T10263] el0_svc+0x64/0x260 [ 170.063710][T10263] el0t_64_sync_handler+0x48/0x148 [ 170.063720][T10263] el0t_64_sync+0x198/0x19c [ 170.065661][T10263] Mem-Info: [ 170.065675][T10263] active_anon:2986 inactive_anon:27665 isolated_anon:0 [ 170.065675][T10263] active_file:3741 inactive_file:16034 isolated_file:0 [ 170.065675][T10263] unevictable:773 dirty:404 writeback:0 [ 170.065675][T10263] slab_reclaimable:10197 slab_unreclaimable:95418 [ 170.065675][T10263] mapped:38864 shmem:21975 pagetables:3918 [ 170.065675][T10263] sec_pagetables:0 bounce:0 [ 170.065675][T10263] kernel_misc_reclaimable:0 [ 170.065675][T10263] free:1439436 free_pcp:5903 free_cma:7616 [ 170.065705][T10263] Node 0 active_anon:11944kB inactive_anon:110660kB active_file:14964kB inactive_file:64136kB unevictable:3092kB isolated(anon):0kB isolated(file):0kB mapped:155456kB dirty:1616kB writeback:0kB shmem:87900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11844kB pagetables:15672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 170.065727][T10263] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 170.065750][T10263] lowmem_reserve[]: 0 0 3651 3651 3651 [ 170.065769][T10263] Node 0 Normal free:2679856kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11944kB inactive_anon:110660kB active_file:14964kB inactive_file:64136kB unevictable:3092kB writepending:1616kB zspages:0kB present:5242880kB managed:3739156kB mlocked:20kB bounce:0kB free_pcp:23612kB local_pcp:15664kB free_cma:0kB [ 170.065791][T10263] lowmem_reserve[]: 0 0 0 0 0 [ 170.065807][T10263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 170.065863][T10263] Node 0 Normal: 1322*4kB (UME) 11*8kB (UME) 15*16kB (UME) 283*32kB (UME) 406*64kB (UE) 282*128kB (UE) 300*256kB (UME) 258*512kB (UM) 240*1024kB (UME) 19*2048kB (UME) 515*4096kB (UM) = 2679760kB [ 170.065935][T10263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 170.065941][T10263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 170.065948][T10263] Node 0 hugepages_total=10 hugepages_free=10 hugepages_surp=0 hugepages_size=2048kB [ 170.065954][T10263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 170.065960][T10263] 41718 total pagecache pages [ 170.065964][T10263] 0 pages in swap cache [ 170.065967][T10263] Free swap = 124996kB [ 170.065970][T10263] Total swap = 124996kB [ 170.065973][T10263] 2097152 pages RAM [ 170.065976][T10263] 0 pages HighMem/MovableOnly [ 170.065980][T10263] 392315 pages reserved [ 170.065983][T10263] 8192 pages cma reserved [ 170.065986][T10263] 2 pages hwpoisoned [ 170.125872][T10267] loop8: detected capacity change from 0 to 512 [ 170.160720][T10267] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1432: bg 0: block 5: invalid block bitmap [ 170.160757][T10267] loop8: lost filesystem error report for type 5 error -117 [ 170.163641][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 170.163668][ C1] EXT4-fs (loop8): initial error at time 170: ext4_validate_block_bitmap:432 [ 170.163684][ C1] EXT4-fs (loop8): last error at time 170: ext4_validate_block_bitmap:432 [ 170.165585][T10267] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 170.165624][T10267] loop8: lost filesystem error report for type 5 error -117 [ 170.166869][T10267] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1432: invalid indirect mapped block 3 (level 2) [ 170.166898][T10267] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 170.167698][T10267] EXT4-fs (loop8): 1 orphan inode deleted [ 170.167711][T10267] EXT4-fs (loop8): 1 truncate cleaned up [ 170.175669][T10267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.220065][T10267] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 170.261121][ T7631] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.270650][ T7157] EXT4-fs error (device loop8): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 170.272968][ T7157] EXT4-fs error (device loop8): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 170.464588][ T7631] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.499086][T10285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1436'. [ 170.501338][T10291] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1437'. [ 170.508436][T10290] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1437'. [ 170.556740][ T30] audit: type=1400 audit(170.540:34): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=10294 comm="syz.1.1438" daddr=ff02::1 dest=20004 [ 170.560897][T10279] loop5: detected capacity change from 0 to 32768 [ 170.578677][ T7631] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.608901][T10279] loop5: p9 p11 p16 [ 170.640892][ T7631] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.650846][T10310] trusted_key: syz.1.1441 sent an empty control message without MSG_MORE. [ 170.684205][T10172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.687096][T10314] FAULT_INJECTION: forcing a failure. [ 170.687096][T10314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.687148][T10314] CPU: 1 UID: 0 PID: 10314 Comm: syz.5.1442 Not tainted syzkaller #0 PREEMPT [ 170.687162][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 170.687169][T10314] Call trace: [ 170.687173][T10314] show_stack+0x2c/0x3c (C) [ 170.687193][T10314] __dump_stack+0x30/0x40 [ 170.687204][T10314] dump_stack_lvl+0xd8/0x12c [ 170.687214][T10314] dump_stack+0x1c/0x28 [ 170.687223][T10314] should_fail_ex+0x41c/0x590 [ 170.687235][T10314] should_fail+0x14/0x24 [ 170.687244][T10314] should_fail_usercopy+0x20/0x30 [ 170.687251][T10314] _inline_copy_from_user+0x3c/0x174 [ 170.687259][T10314] kstrtouint_from_user+0xcc/0x174 [ 170.687266][T10314] proc_fail_nth_write+0x9c/0x234 [ 170.687275][T10314] vfs_write+0x2a4/0xa0c [ 170.687282][T10314] ksys_write+0x12c/0x228 [ 170.687289][T10314] __arm64_sys_write+0x84/0x98 [ 170.687296][T10314] invoke_syscall+0x98/0x244 [ 170.687305][T10314] el0_svc_common+0xec/0x23c [ 170.687315][T10314] do_el0_svc+0x4c/0x5c [ 170.687324][T10314] el0_svc+0x64/0x260 [ 170.687335][T10314] el0t_64_sync_handler+0x48/0x148 [ 170.687345][T10314] el0t_64_sync+0x198/0x19c [ 170.695831][T10315] loop1: detected capacity change from 0 to 512 [ 170.704379][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 170.706172][T10172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.708744][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 170.709048][T10172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.713075][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.719442][T10172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.744409][T10172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.754092][T10315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.844670][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop5p16, 10) failed: No such file or directory [ 170.846815][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop5p11, 10) failed: No such file or directory [ 170.850186][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory [ 170.883751][ T4717] Bluetooth: hci5: command tx timeout [ 170.931661][ T7631] bridge_slave_1: left allmulticast mode [ 170.931699][ T7631] bridge_slave_1: left promiscuous mode [ 170.931781][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.936684][ T7631] bridge_slave_0: left allmulticast mode [ 170.936715][ T7631] bridge_slave_0: left promiscuous mode [ 170.936795][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.042310][ T7631] bond0 (unregistering): left promiscuous mode [ 171.042342][ T7631] bond_slave_0: left promiscuous mode [ 171.042433][ T7631] bond_slave_1: left promiscuous mode [ 171.046108][ T7631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.068329][ T7631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.105891][ T7631] bond0 (unregistering): Released all slaves [ 171.176429][T10172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.179919][ T7631] tipc: Left network mode [ 171.312220][T10172] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.316416][ T3790] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.316460][ T3790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.319986][ T3790] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.320034][ T3790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.701123][ T7631] batadv0: left promiscuous mode [ 171.702933][ T9961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.731086][ T7631] hsr_slave_0: left promiscuous mode [ 171.733323][ T7631] hsr_slave_1: left promiscuous mode [ 171.733686][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.733699][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.742863][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.742894][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.749980][ T7631] veth1_macvtap: left promiscuous mode [ 171.750025][ T7631] veth0_macvtap: left promiscuous mode [ 171.750117][ T7631] veth1_vlan: left promiscuous mode [ 171.750156][ T7631] veth0_vlan: left promiscuous mode [ 172.056973][ T4717] Bluetooth: hci0: command tx timeout [ 172.162294][ T7631] team0 (unregistering): Port device team_slave_1 removed [ 172.168322][ T7631] team0 (unregistering): Port device team_slave_0 removed [ 172.278073][ T7157] tipc: Resetting bearer [ 172.302355][ T7157] tipc: Disabling bearer [ 172.343086][ T30] audit: type=1400 audit(172.320:35): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=10428 comm="syz.5.1450" daddr=ff02::1 dest=20004 [ 172.345879][T10433] fuse: Invalid rootmode [ 172.400281][T10443] comedi comedi0: bad chanlist[0]=0x00200004 chan=4 range length=2 [ 172.411433][T10172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.422643][ T7157] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.449252][T10172] veth0_vlan: entered promiscuous mode [ 172.456201][T10172] veth1_vlan: entered promiscuous mode [ 172.468490][T10172] veth0_macvtap: entered promiscuous mode [ 172.471255][T10172] veth1_macvtap: entered promiscuous mode [ 172.512278][T10172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.527494][T10172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.595109][ T7635] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.595197][ T7635] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.595230][ T7635] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.595252][ T7635] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.640654][ T7635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.640687][ T7635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.641170][ T7635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.641179][ T7635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.702502][ T7631] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.731218][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.732459][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'. [ 172.732465][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.732992][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.737145][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.742703][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.812285][ T7631] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.882281][ T7631] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.966992][ T4724] Bluetooth: hci5: command tx timeout [ 172.972416][T10501] loop2: detected capacity change from 0 to 512 [ 172.974659][T10501] EXT4-fs (loop2): Test dummy encryption mode enabled [ 172.976063][T10501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.981853][ T7631] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.991838][T10501] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1462: bad orphan inode 131083 [ 172.994253][T10501] loop2: lost filesystem error report for type 5 error -117 [ 173.019787][T10501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.043038][T10501] overlayfs: upper fs needs to support d_type. [ 173.093217][T10501] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 13: comm syz.2.1462: path /: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 173.274305][ T7631] bridge_slave_1: left allmulticast mode [ 173.274339][ T7631] bridge_slave_1: left promiscuous mode [ 173.274438][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.282352][ T7631] bridge_slave_0: left allmulticast mode [ 173.285668][ T7631] bridge_slave_0: left promiscuous mode [ 173.285774][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.534257][ T7631] team0: Port device bridge0 removed [ 173.558416][ T7631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.589754][ T7631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.627430][ T7631] bond0 (unregistering): Released all slaves [ 173.643300][T10526] FAULT_INJECTION: forcing a failure. [ 173.643300][T10526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.643334][T10526] CPU: 1 UID: 0 PID: 10526 Comm: syz.5.1464 Not tainted syzkaller #0 PREEMPT [ 173.643349][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 173.643356][T10526] Call trace: [ 173.643360][T10526] show_stack+0x2c/0x3c (C) [ 173.643381][T10526] __dump_stack+0x30/0x40 [ 173.643392][T10526] dump_stack_lvl+0xd8/0x12c [ 173.643402][T10526] dump_stack+0x1c/0x28 [ 173.643412][T10526] should_fail_ex+0x41c/0x590 [ 173.643423][T10526] should_fail+0x14/0x24 [ 173.643433][T10526] should_fail_usercopy+0x20/0x30 [ 173.643440][T10526] _inline_copy_from_user+0x3c/0x174 [ 173.643448][T10526] map_lookup_elem+0x584/0x854 [ 173.643455][T10526] __sys_bpf+0x5a4/0x8c8 [ 173.643462][T10526] __arm64_sys_bpf+0xd0/0xec [ 173.643469][T10526] invoke_syscall+0x98/0x244 [ 173.643479][T10526] el0_svc_common+0xec/0x23c [ 173.643488][T10526] do_el0_svc+0x4c/0x5c [ 173.643498][T10526] el0_svc+0x64/0x260 [ 173.643508][T10526] el0t_64_sync_handler+0x48/0x148 [ 173.643518][T10526] el0t_64_sync+0x198/0x19c [ 173.748621][T10467] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.748796][T10467] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.748878][T10467] bridge_slave_0: entered allmulticast mode [ 173.749334][T10467] bridge_slave_0: entered promiscuous mode [ 173.764384][ T7631] tipc: Left network mode [ 173.766670][T10467] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.766709][T10467] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.766815][T10467] bridge_slave_1: entered allmulticast mode [ 173.770986][T10467] bridge_slave_1: entered promiscuous mode [ 173.786449][T10467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.789438][T10467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.798445][T10467] team0: Port device team_slave_0 added [ 173.800359][T10467] team0: Port device team_slave_1 added [ 173.861337][T10467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.861372][T10467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.861621][T10467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.871703][T10467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.871720][T10467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.871739][T10467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.893305][T10467] hsr_slave_0: entered promiscuous mode [ 173.923899][T10467] hsr_slave_1: entered promiscuous mode [ 173.924208][T10467] debugfs: 'hsr0' already exists in 'hsr' [ 173.924221][T10467] Cannot create hsr debugfs directory [ 173.952432][T10172] EXT4-fs error (device loop2): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /1/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 174.063899][T10548] Injecting memory failure for pfn 0x164003 at process virtual address 0x20003000 [ 174.072031][T10548] Memory failure: 0x164003: recovery action for dirty LRU page: Recovered [ 174.082061][ T7631] hsr_slave_0: left promiscuous mode [ 174.082500][ T7631] hsr_slave_1: left promiscuous mode [ 174.082749][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.082762][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.089037][ T7631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.089064][ T7631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.096771][ T7631] veth1_macvtap: left promiscuous mode [ 174.096818][ T7631] veth0_macvtap: left promiscuous mode [ 174.096877][ T7631] veth1_vlan: left promiscuous mode [ 174.096910][ T7631] veth0_vlan: left promiscuous mode [ 174.364479][ T7631] team0 (unregistering): Port device team_slave_1 removed [ 174.371652][ T7631] team0 (unregistering): Port device team_slave_0 removed [ 174.553099][ T4724] Bluetooth: hci4: unexpected event for opcode 0x0c26 [ 174.573122][T10590] netlink: 'syz.5.1472': attribute type 2 has an invalid length. [ 174.940836][T10609] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 174.951037][ T4724] Bluetooth: hci1: command tx timeout [ 175.113134][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 175.122784][ T30] audit: type=1400 audit(175.100:36): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=10613 comm="syz.1.1475" daddr=ff02::1 dest=20001 [ 175.135426][T10614] syzkaller0: entered promiscuous mode [ 175.136599][T10614] syzkaller0: entered allmulticast mode [ 175.748686][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 175.750338][T10638] loop1: detected capacity change from 0 to 2048 [ 175.770919][T10638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.954593][T10649] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 175.955673][T10649] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 175.955724][T10649] EXT4-fs (loop1): This should not happen!! Data will be lost [ 175.955724][T10649] [ 175.955772][T10649] EXT4-fs (loop1): Total free blocks count 0 [ 175.955808][T10649] EXT4-fs (loop1): Free/Dirty block details [ 175.955855][T10649] EXT4-fs (loop1): free_blocks=2415919504 [ 175.955902][T10649] EXT4-fs (loop1): dirty_blocks=48 [ 175.955940][T10649] EXT4-fs (loop1): Block reservation details [ 175.955973][T10649] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 176.133533][T10467] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 176.140987][T10467] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.141365][T10467] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.150480][T10467] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.150962][T10467] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.155282][T10467] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.155844][T10467] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.158682][T10467] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.200821][T10467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.206177][T10467] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.208116][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.208164][ T7631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.210256][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.210279][ T7635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.243202][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 176.351993][T10467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.409222][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 176.431968][T10467] veth0_vlan: entered promiscuous mode [ 176.436167][T10467] veth1_vlan: entered promiscuous mode [ 176.447046][T10467] veth0_macvtap: entered promiscuous mode [ 176.448526][T10467] veth1_macvtap: entered promiscuous mode [ 176.464002][T10467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.465526][T10467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.467148][ T7635] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.488410][ T15] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.488530][ T15] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.489507][ T15] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.548763][ T7635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.548795][ T7635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.587502][ T7635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.587529][ T7635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.641211][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 176.658637][ T9961] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 176.659399][ T9961] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.681221][T10720] loop5: detected capacity change from 0 to 1024 [ 176.834765][T10720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.855715][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.856232][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.860558][T10720] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.1483: Freeing blocks not in datazone - block = 0, count = 16 [ 176.870303][T10720] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1483: bg 0: block 112: padding at end of block bitmap is not set [ 176.901137][ T5466] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.901174][ T5466] EXT4-fs (loop5): This should not happen!! Data will be lost [ 176.901174][ T5466] [ 176.901204][ T5466] EXT4-fs (loop5): Total free blocks count 0 [ 176.901218][ T5466] EXT4-fs (loop5): Free/Dirty block details [ 176.901232][ T5466] EXT4-fs (loop5): free_blocks=16 [ 176.901245][ T5466] EXT4-fs (loop5): dirty_blocks=16 [ 176.901255][ T5466] EXT4-fs (loop5): Block reservation details [ 176.901265][ T5466] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 176.914846][ T5022] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 176.915547][ T5022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.936972][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 176.981991][T10748] loop6: detected capacity change from 0 to 512 [ 176.982316][T10748] EXT4-fs: inline encryption not supported [ 176.982327][T10748] ext4: Unknown parameter 'noacl.sb' [ 177.172989][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 177.427216][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 177.623059][ T30] audit: type=1400 audit(177.600:37): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=10810 comm="syz.4.1499" daddr=fe88::5 [ 177.798448][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1502'. [ 178.151468][T10841] loop5: detected capacity change from 0 to 512 [ 178.158213][T10842] loop4: detected capacity change from 0 to 1024 [ 178.160969][T10842] EXT4-fs: inline encryption not supported [ 178.162802][T10842] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.175635][T10841] [ 178.176084][T10841] ====================================================== [ 178.177316][T10841] WARNING: possible circular locking dependency detected [ 178.178569][T10841] syzkaller #0 Not tainted [ 178.179328][T10841] ------------------------------------------------------ [ 178.180577][T10841] syz.5.1505/10841 is trying to acquire lock: [ 178.181606][T10841] ffff0000d530ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 178.183357][T10841] [ 178.183357][T10841] but task is already holding lock: [ 178.184628][T10841] ffff0000f10ec260 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 178.186301][T10841] [ 178.186301][T10841] which lock already depends on the new lock. [ 178.186301][T10841] [ 178.188092][T10841] [ 178.188092][T10841] the existing dependency chain (in reverse order) is: [ 178.189620][T10841] [ 178.189620][T10841] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 178.190838][T10841] down_write+0x50/0xc0 [ 178.191604][T10841] ext4_destroy_inline_data+0x30/0x114 [ 178.192565][T10841] ext4_do_writepages+0x3e4/0x3bc0 [ 178.193496][T10841] ext4_writepages+0x198/0x2dc [ 178.194377][T10841] do_writepages+0x284/0x47c [ 178.195231][T10841] filemap_writeback+0x230/0x2bc [ 178.196148][T10841] file_write_and_wait_range+0xb0/0x138 [ 178.197154][T10841] mmb_fsync_noflush+0x80/0x1bc [ 178.198058][T10841] ext4_sync_file+0x37c/0xf20 [ 178.198956][T10841] vfs_fsync_range+0x120/0x140 [ 178.199878][T10841] ext4_buffered_write_iter+0x24c/0x2ec [ 178.200905][T10841] ext4_file_write_iter+0x1dc/0x134c [ 178.201898][T10841] vfs_write+0x51c/0xa0c [ 178.202719][T10841] ksys_pwrite64+0x118/0x1ac [ 178.203569][T10841] __arm64_sys_pwrite64+0xa8/0xc0 [ 178.204515][T10841] invoke_syscall+0x98/0x244 [ 178.205394][T10841] el0_svc_common+0xec/0x23c [ 178.206297][T10841] do_el0_svc+0x4c/0x5c [ 178.207100][T10841] el0_svc+0x64/0x260 [ 178.207892][T10841] el0t_64_sync_handler+0x48/0x148 [ 178.208860][T10841] el0t_64_sync+0x198/0x19c [ 178.209728][T10841] [ 178.209728][T10841] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 178.211151][T10841] __lock_acquire+0x17c0/0x2ebc [ 178.212077][T10841] lock_acquire+0x140/0x364 [ 178.212884][T10841] percpu_down_read_internal+0x5c/0x294 [ 178.213853][T10841] ext4_writepages+0x170/0x2dc [ 178.214724][T10841] do_writepages+0x284/0x47c [ 178.215583][T10841] __writeback_single_inode+0x140/0x1880 [ 178.216652][T10841] writeback_single_inode+0x400/0xb20 [ 178.217619][T10841] write_inode_now+0x170/0x208 [ 178.218523][T10841] iput+0x7cc/0xc2c [ 178.219272][T10841] ext4_xattr_block_set+0x1460/0x21e8 [ 178.220326][T10841] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 178.221374][T10841] __ext4_expand_extra_isize+0x2a4/0x378 [ 178.222389][T10841] __ext4_mark_inode_dirty+0x394/0x828 [ 178.223388][T10841] ext4_evict_inode+0x798/0xfb8 [ 178.224261][T10841] evict+0x4c0/0x74c [ 178.224996][T10841] iput+0x8f0/0xc2c [ 178.225720][T10841] ext4_process_orphan+0x24c/0x2c0 [ 178.226706][T10841] ext4_orphan_cleanup+0x7d4/0xd20 [ 178.227689][T10841] ext4_fill_super+0x4628/0x4e14 [ 178.228691][T10841] get_tree_bdev_flags+0x388/0x43c [ 178.229686][T10841] get_tree_bdev+0x2c/0x3c [ 178.230522][T10841] ext4_get_tree+0x28/0x38 [ 178.231410][T10841] vfs_get_tree+0x90/0x28c [ 178.232274][T10841] fc_mount+0x24/0xac [ 178.233006][T10841] do_new_mount+0x2a4/0x538 [ 178.233916][T10841] path_mount+0x5f0/0xa88 [ 178.234747][T10841] do_mount+0xe8/0x148 [ 178.235539][T10841] __arm64_sys_mount+0x33c/0x388 [ 178.235577][T10842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.238466][T10841] invoke_syscall+0x98/0x244 [ 178.239348][T10841] el0_svc_common+0xec/0x23c [ 178.240234][T10841] do_el0_svc+0x4c/0x5c [ 178.241084][T10841] el0_svc+0x64/0x260 [ 178.241835][T10841] el0t_64_sync_handler+0x48/0x148 [ 178.242783][T10841] el0t_64_sync+0x198/0x19c [ 178.243603][T10841] [ 178.243603][T10841] other info that might help us debug this: [ 178.243603][T10841] [ 178.245323][T10841] Possible unsafe locking scenario: [ 178.245323][T10841] [ 178.246499][T10841] CPU0 CPU1 [ 178.247369][T10841] ---- ---- [ 178.248252][T10841] lock(&ei->xattr_sem); [ 178.248967][T10841] lock(&sbi->s_writepages_rwsem); [ 178.250348][T10841] lock(&ei->xattr_sem); [ 178.251492][T10841] rlock(&sbi->s_writepages_rwsem); [ 178.252375][T10841] [ 178.252375][T10841] *** DEADLOCK *** [ 178.252375][T10841] [ 178.253708][T10841] 3 locks held by syz.5.1505/10841: [ 178.254578][T10841] #0: ffff0000d12100d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 178.256260][T10841] #1: ffff0000d1210640 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 178.257914][T10841] #2: ffff0000f10ec260 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 178.259693][T10841] [ 178.259693][T10841] stack backtrace: [ 178.260688][T10841] CPU: 0 UID: 0 PID: 10841 Comm: syz.5.1505 Not tainted syzkaller #0 PREEMPT [ 178.262232][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 178.263888][T10841] Call trace: [ 178.264433][T10841] show_stack+0x2c/0x3c (C) [ 178.265233][T10841] __dump_stack+0x30/0x40 [ 178.265949][T10841] dump_stack_lvl+0xd8/0x12c [ 178.266724][T10841] dump_stack+0x1c/0x28 [ 178.267426][T10841] print_circular_bug+0x328/0x330 [ 178.268279][T10841] check_noncircular+0x158/0x174 [ 178.269093][T10841] __lock_acquire+0x17c0/0x2ebc [ 178.269974][T10841] lock_acquire+0x140/0x364 [ 178.270728][T10841] percpu_down_read_internal+0x5c/0x294 [ 178.271621][T10841] ext4_writepages+0x170/0x2dc [ 178.272432][T10841] do_writepages+0x284/0x47c [ 178.273192][T10841] __writeback_single_inode+0x140/0x1880 [ 178.274152][T10841] writeback_single_inode+0x400/0xb20 [ 178.275050][T10841] write_inode_now+0x170/0x208 [ 178.275858][T10841] iput+0x7cc/0xc2c [ 178.276518][T10841] ext4_xattr_block_set+0x1460/0x21e8 [ 178.277428][T10841] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 178.278447][T10841] __ext4_expand_extra_isize+0x2a4/0x378 [ 178.279416][T10841] __ext4_mark_inode_dirty+0x394/0x828 [ 178.280302][T10841] ext4_evict_inode+0x798/0xfb8 [ 178.281121][T10841] evict+0x4c0/0x74c [ 178.281786][T10841] iput+0x8f0/0xc2c [ 178.282469][T10841] ext4_process_orphan+0x24c/0x2c0 [ 178.283336][T10841] ext4_orphan_cleanup+0x7d4/0xd20 [ 178.284210][T10841] ext4_fill_super+0x4628/0x4e14 [ 178.285023][T10841] get_tree_bdev_flags+0x388/0x43c [ 178.285863][T10841] get_tree_bdev+0x2c/0x3c [ 178.286594][T10841] ext4_get_tree+0x28/0x38 [ 178.287358][T10841] vfs_get_tree+0x90/0x28c [ 178.288163][T10841] fc_mount+0x24/0xac [ 178.288867][T10841] do_new_mount+0x2a4/0x538 [ 178.289647][T10841] path_mount+0x5f0/0xa88 [ 178.290364][T10841] do_mount+0xe8/0x148 [ 178.291047][T10841] __arm64_sys_mount+0x33c/0x388 [ 178.291918][T10841] invoke_syscall+0x98/0x244 [ 178.292712][T10841] el0_svc_common+0xec/0x23c [ 178.293510][T10841] do_el0_svc+0x4c/0x5c [ 178.294221][T10841] el0_svc+0x64/0x260 [ 178.294916][T10841] el0t_64_sync_handler+0x48/0x148 [ 178.295759][T10841] el0t_64_sync+0x198/0x19c [ 178.307460][T10841] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1505: iget: bad extra_isize 90 (inode size 256) [ 178.310146][T10841] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 178.310324][T10841] EXT4-fs (loop5): Remounting filesystem read-only [ 178.313307][T10841] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 178.315226][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 178.315248][ C0] EXT4-fs (loop5): initial error at time 178: ext4_xattr_inode_iget:441: inode 11 [ 178.315267][ C0] EXT4-fs (loop5): last error at time 178: ext4_xattr_inode_iget:441: inode 11 [ 178.321908][T10841] EXT4-fs (loop5): 1 orphan inode deleted [ 178.325711][T10841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.341275][ T5022] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.349356][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.373668][ T4724] Bluetooth: hci1: command tx timeout [ 180.803029][ T30] audit: type=1400 audit(180.780:38): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 181.098321][ T30] audit: type=1400 audit(181.080:39): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 181.284209][ T30] audit: type=1400 audit(181.270:40): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 181.291288][ T30] audit: type=1400 audit(181.270:41): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 181.443697][ T4724] Bluetooth: hci1: command tx timeout [ 181.761786][ T30] audit: type=1400 audit(181.740:42): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 181.850273][ T30] audit: type=1400 audit(181.830:43): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 181.903673][ T30] audit: type=1400 audit(181.890:44): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 182.290996][ T30] audit: type=1400 audit(182.270:45): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 183.523795][ T4724] Bluetooth: hci1: command tx timeout [ 184.803104][ T30] audit: type=1400 audit(184.780:46): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 185.098396][ T30] audit: type=1400 audit(185.080:47): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 185.851196][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 185.851231][ T30] audit: type=1400 audit(185.830:51): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 185.903925][ T30] audit: type=1400 audit(185.890:52): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 186.291178][ T30] audit: type=1400 audit(186.270:53): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="hugetlbfs" requested=w pid=4399 comm="dhcpcd" daddr=ff02::2 [ 187.363955][ T1589] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.363995][ T1589] ieee802154 phy1 wpan1: encryption failed: -22