last executing test programs: 52.186608423s ago: executing program 2 (id=109): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = accept4$tipc(r1, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x800) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x1, 0x2}, 0x10) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x1008026, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40e8662e, &(0x7f0000000000)={0xc550, 0x40000000000002, 0x10, 0xb, 0x5, 0x1}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffe9d, 0x0, 0x0, &(0x7f0000000140), 0x18, 0x4c00}, 0x0) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 51.934816834s ago: executing program 2 (id=113): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x7}, {0x20, 0x7f, 0x1, 0xfffff00c}, {0x6, 0xff, 0xff, 0x7}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) unshare(0x22020600) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./tracing/events/enable\x00', &(0x7f00000000c0)={0x802c0, 0x8}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x2040800) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x3}, 0xe) connect$unix(r3, 0x0, 0x0) connect$unix(r3, &(0x7f0000000440)=@file={0x1}, 0x6e) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000040), 0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xa0000006}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x18}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, &(0x7f0000000780)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r7, 0xcc8c, 0x8000, 0x8, 0x5, 0xfffffffc}, 0x14) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f00000002c0)="2a73ed358f24411201f067", 0xb}], 0x1}}], 0x1, 0x0) 51.581349319s ago: executing program 2 (id=118): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000003c0)=0x204, 0x4) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @private=0xa010100}, 0x56) pread64(r1, &(0x7f0000000140)=""/245, 0xf5, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000002c0)=""/13, &(0x7f0000000300)=0x20) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e00000000000100030000000080000040820100", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000050000000d00000000000000", @ANYRES32, @ANYBLOB="f2e310d5d2199b726ec285c001cfb595ffa4dd22be3e5937bf056338848ec0a7572a66e086a21010fe8b935e5099f81b16c5bfd96d339d3aa47ee878444e934edefa9aca6e6dd6486df908decfee837c17085ace61ead54f039096a600"/106, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000080)="2dfb385bc4941080a3506b40569eea3bc7c866ad53703d6cbffbf0f06507737b18a7fa407257d50c8843855e5589c0b410a231c54e960b63ce2664ecc0b1b6fa444f3afc9f4702b1bee33fcd0320e5dfeeda0eab9644165c806e4e2d5bce43124929c4064d93c1c8714fbbbdf4e6a58ad1332f09ecfe2ead3504262ed14a30e54e685f09a5d755cf052bb5801c4fb93d4deddfc5cd1aa7243e7fca8c44335f845bc25e43c5505181946a042855018cb08f3dca628f031bdde71a50f53c6aff5fae6a8ac6ad018efa798c074d1e95e6b39b2c3deff89b110ca7b458e8da32", &(0x7f0000000180)=""/66}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x4e20, @broadcast}, 0x10) 51.547535771s ago: executing program 2 (id=119): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x0, 0x9, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nodioread_nolock}, {@noload}]}, 0x1, 0x790, &(0x7f00000007c0)="$eJzs3ctrXFUYAPDvTpKmSauJIGhdBQQNlE5Mja2Ci4oLESwUdG0bJtNQM8mUzKQ0IWCLFNwIKi4E3XTto4ILtz62+l+4kJaqabHiQiJ3Hu20mWknaTITmd8PTuac+8g535z7OHfuZSaAnjWW/slEHIiID5OIkdr0JCIGKrn+iGPV5W6trebSlMT6+pt/JJVlbq6t5qJhndS+WuHJiPjxUsTBzMZ6S8src9OFQn6xVp4oz5+dKC2vHDozPz2bn80vHJmcmjp89IWjR7Yv1r9+Wdl/7aPXnv362D/vPXHlg5+SOBb7a/Ma49guYzFWe08G0rfwLq9ud2VdlnS7AWxJumv2VffyOBAj0VfJtTDUyZYBADtlHQDoQYkxAAD0mPrnADfXVnP11N1PJDrr+isRsbcaf/3+ZnVOf+2e3d7KfdDhm8ldd0aSiBjdhvrHIuLz797+Mk1R6wf30oBOuHAxIk6Njm08/icbnlnYrOfuN3N9sPIyds/kXjv/QDd9n45/Xmw2/svcHv9Ek/HPYJN9dysevP9nrm5DNS2l47+XG55tu9UQf81oX630SGXMN5CcPlPIp8e2RyNiPAYG0/JkZdHmI7fxG//eaFV/4/jvz4/f+SKtP329s0Tmav/g3evMTJenHzbuuusXI57qbxZ/crv/kxbj3xNt1vH6S+9/1mpeGn8abz1tjH9nrV+OeKZp/9/py6T184nvRkRlc5iobxRNfPPrp8Ot6m/s/zSl9devBToh7f/h+8c/mjQ+r1nafB0/Xx75odW8B8fffPvfk7xVye+pTTs/XS4vTkbsSd7YOP3wnXXr5fryafzjTzff/6vVNt/+02vCU23G33/t96+2Hv/OSuOf2VT/bz5z5dZcX6v62+v/qUpuvDalneNfuw18mPcOAAAAAAAAAAAAAAAAAAAAAAAAANqViYj9kWSyt/OZTDZb/Q3vx2M4UyiWygdPF5cWZqLyW9mjMZCpf9XlSMP3oU7Wvg+/Xj58T/n5iHgsIj4ZHKqUs7liYabbwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAzb4Wv/+f+m2w260DAHbM3m43AADoOOd/AOg9mzv/D+1YOwCAznH9DwC9p+3z/6mdbQcA0Dmu/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhJ44fT9P632urubQ8c255aa547tBMvjSXnV/KZXPFxbPZ2WJxtpDP5orzLf/RhepLoVg8OxULS+cnyvlSeaK0vHJyvri0UD55Zn56Nn8yP9CxyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgfaXllbnpQiG/2AOZby9VY97K6kPdbvwuy/THrmjGxszA7mjG/z/TeJQY6tLRCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD3+y8AAP///6ArKA==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x102, 0x89) read$FUSE(r1, &(0x7f0000003000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xf4, r4, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8c0}, 0x20040084) r5 = syz_clone(0x200000, &(0x7f00000002c0)="105be6d8da964fda4e2111c755695156eeec02a4fbd46973154ae4c701cb2d8229d8433a0db23d3289b88ca923f5502cafb08922d566a5d04ec1a177d058faf682af70b8e9ec83637cac3e820e6d871f6cf0a79eb037e391a0f2aacabec2da07c9114d5b0363c70a607bf983b1809f4dd420b382e79089e1804aed98abba941bc1af374f4d73fe1d3b0635c61cb7070e4a62dc0d99ec3807b55f8dc3e3077f1839eae2f35dd163a8a0a5fbc108173a5bbf1f892adbade8e07e6b2c1fcd069bdfb50cd652c12b53cd723eeb4b1f598677d84ef3bd21300e32b3784f0b44f4", 0xde, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="a0b0a054ac2adb") capget(&(0x7f0000000600)={0x20080522, r5}, &(0x7f0000000640)={0x3, 0x1d, 0xc, 0x7, 0x0, 0x3}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000002fc0)={0x3, 0x8, {0xffffffffffffffff}, {0xee01}, 0x6, 0x3}) mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x2000004, &(0x7f0000000500)=ANY=[@ANYRES32=r6, @ANYRESDEC=r2, @ANYBLOB=',rootcontext=user_u,seclabel,euid<', @ANYRESDEC=r7, @ANYBLOB="4d3c2fad916822bb6c0979eab08385754f9a0d72a0d6659ec4188bde8be2f0285db1f3892610f2f9eea8ace2e94cde31af4c8ff9e6783165a16651d9bc3329b24a94c62e96e646e86fd86752b21a450ecb2ab87f32ee7b32bbfad118234e8ad63129ec966cb9a987d07684d601576253d1eb32c402c251f2d866dc24d06d3044866b942c8624abc7f4cf9110d493424a3eb670d222f26a8cc90bc58f7fb649"]) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000080)=0x6e, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETSF2(r9, 0x402c542d, &(0x7f0000000000)={0x3, 0x1, 0x5, 0x2, 0x8, "5d2ca36a07330aee0c2d8ba4dc41a6f45009d1", 0x2, 0x2}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000140)={0x1, 0x3, 0x1000, 0x5d, &(0x7f0000000040)="aeeb3bd90b3f6f17f6cc808f8c3b8fd9559c4c8820c4da3c83a4c86d00eb5397ba7a79641c5b892e0dde24a8b9cf00dcc995b39b42a837fa21056e741b65d1614d5b7165efc0c2039e60ad781c4a1187cf4c8c3e4c418338490a7ab9c7", 0x43, 0x0, &(0x7f00000000c0)="b39d3cd10aa1a3f3697db1aed666ce7b1a804ff91448a94beb8c47e09cf7770e5b79c29304fbd64f35568d77cd0cbd0a6ea5802cc77ffe26723ea436fb2c6cd377a5a6"}) 51.442133613s ago: executing program 2 (id=123): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000180)="27031c00160014000218", 0xa}, {&(0x7f00000001c0)="7d3ed2ea1f0f610c0784c6ce65c9e34b1100301a03df46a4853ed1b3f1dc15563b3298170e2d0ec9d768dd44b0a6338c5035a45e89", 0x35}], 0x2}, 0x400c0c8) 51.092579108s ago: executing program 2 (id=130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) 50.941148905s ago: executing program 32 (id=130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x12e8, 0x1120, 0x178, 0xc, 0x1120, 0x178, 0x1218, 0x258, 0x258, 0x1218, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1120, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1348) 47.650225837s ago: executing program 1 (id=171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008850}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0066680e4ef932b1ac65760000020201080000000000000800020000061800028014004180080000e30000000008000200ac1414aae1dfd7480975f27f570f0c4be68ab5a3cf519a2840fb6f048bb72a9ef659ba8016425676c8b28c279ea003664906b92bbe617cd9"], 0x2c}, 0x1, 0x0, 0x0, 0x24040080}, 0x8000) 47.559044965s ago: executing program 1 (id=173): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000000)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 47.556248273s ago: executing program 1 (id=174): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2, 0xf422, 0x20}, 0xc) 47.51480325s ago: executing program 1 (id=176): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000002180)={0xb, @win={{0x7f, 0x8, 0x0, 0xffff7fff}, 0x5, 0x6, 0x0, 0x7, 0x0, 0x7}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sock_ops=0x3, r1, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) (async, rerun: 32) r3 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") (rerun: 32) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0x400c6615, 0x0) (async) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) (async) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x406, r7) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000300)={0xa000200e}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000080)={0x1}) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000340)={0x2e, 0x4, 0x0, {0x0, 0xca, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100001000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000bb000012346c000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000ffffffe5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006465666c61746500"/236], 0x138}}, 0x0) close(r9) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006}) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async, rerun: 32) write$cgroup_int(r8, &(0x7f00000002c0)=0xfffffffffffffff9, 0x12) (rerun: 32) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) (async) ptrace$poke(0x420f, r12, 0x0, 0x6) 46.654853602s ago: executing program 1 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r3, 0x60d796b290511a17, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x34}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf251200000008000300", @ANYRES32=r4, @ANYBLOB="06001a0102"], 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) 46.037472739s ago: executing program 1 (id=189): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='/', 0x1) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000480)=""/146, 0x92}], 0x2}, 0x9528}], 0x1, 0x10022, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040), 0x4) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 45.932944903s ago: executing program 33 (id=189): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f00000000c0)='/', 0x1) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000480)=""/146, 0x92}], 0x2}, 0x9528}], 0x1, 0x10022, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040), 0x4) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2.819066981s ago: executing program 0 (id=497): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000020c0)=0x9, 0x4) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000002c0)={0x1, 0x7ff, 0x0, 0x10000000, 0x2, "fbe20c8a515d59d2476aa3068d94a8009b1b10", 0xde37, 0x4005}) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x2) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x81, 0x101a00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.sectors\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000180)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80000003, 0x2, 0x0, 0x0, 0x12, 0x1c, "3be8aaab78fc179fd116ba5853f1aca783dda1af1ea89de2b7000000001f000000ffe71100", "2809e8dbe108598948224ad54afab420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000350bc8b100", "c7db08b3551265406c7f306003d80700", [0x9, 0x9]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c03, r4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x11) read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0xfffffe39) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) 2.739249546s ago: executing program 0 (id=500): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000d80)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x6a9b}}, 0x18) unshare(0x2040400) io_setup(0x2, &(0x7f0000001080)=0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) io_submit(r4, 0x1, &(0x7f0000001740)=[&(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x9, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1415, 0x801}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0], 0x70}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000004d0100000004000480080002000100000008000100000000001c000880041407"], 0x44}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 2.729967591s ago: executing program 4 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000140)={0x5, 0x20, "7ea30bfa1a36fc01517b7b1ba325e2786447d32a8a4a1a8e", {0x0, 0xab}, 0x8}) r3 = socket$netlink(0x10, 0x3, 0x4) syz_clone3(&(0x7f0000000400)={0x10220000, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280), {0x30}, &(0x7f0000000580)=""/178, 0xb2, &(0x7f0000000540)=""/63, &(0x7f00000003c0)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) r5 = fanotify_init(0x9, 0x40000) write$binfmt_elf64(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4622000005"], 0x40) r6 = syz_open_procfs(r4, &(0x7f00000001c0)='ns\x00') r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000980)={0x2, @win={{0x4, 0x7, 0x2, 0x40}, 0x2, 0xc, 0x0, 0xd, 0x0, 0x8}}) sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x7ff) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0xc}) write(r3, &(0x7f00000004c0)="2700000014000707030e0000120f0a0011000100fe601c8d14afa7841610817233b021f4246d67", 0x27) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="40574c060a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$BLKGETNRZONES(r2, 0x80041285, &(0x7f0000000480)=0x4) 2.647089024s ago: executing program 5 (id=503): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff1800ff86dd6000000000103aff00000000000000000000ffffac1414bbff020000000000000000000000000001860090780001fe000000000000000000665998874fc485e7824a796d12420e8edd304f9f9cad50f63487660b88cff2c4da7a204e10b24fd80c0e739b6bf68da46d0ca8eae3debf9d9744b2f0d9b3ccc8d5a25a018ceaeed4abeeed71a6dc4c0b79aa12cf43e965d244fe6bdea6e4c9d0602dd1c2015fe710a1cead96fc7b557c8fb96f3e761a8deedeca2d8894d253bd"], 0x0) 2.646114094s ago: executing program 5 (id=504): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000001040)=ANY=[@ANYBLOB='filter'], &(0x7f0000000080)=0x28) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x7, 0x25) 2.644541665s ago: executing program 4 (id=505): r0 = socket$inet(0x2, 0x2, 0x0) unshare(0x400) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00"], 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10000080}, 0x40000) r3 = socket(0x2a, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 2.626174604s ago: executing program 5 (id=506): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000140)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0xce, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000540001002abd70000200000007000000", @ANYRES32=r6, @ANYBLOB="095f220801000064cedfdc434621570920d0df709fc08154d0763371a46b0e3d1ce4a94f96129776398394fef932970a56ef87236182ec1263b2ce432e580de8ad8d2ac2871a6a387d640e72150b3282517aa5e7d8f3e85376fd61a7dd5767a6d73817ee07e7a77bda8e8d966fb66eb5b246b359f2a7b4e8ac151883616eb52fdaf149d4e3106030742fc90f4a1965d7fecf8bbf5016d80babfacc57a89eda8c8ddf7056448e5ced20b9d3a4064c91c658f71b6a7e2ef55f6109c813dde823", @ANYRES32=r6, @ANYBLOB="00020200e000000200000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080c0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) 2.601615757s ago: executing program 0 (id=507): io_uring_setup(0x522e, &(0x7f0000000000)={0x0, 0x5ab9, 0x40000, 0x2, 0x25}) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) 2.526825317s ago: executing program 0 (id=508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x3}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0xeff, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b9", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@ccm_128={{0x304}, "dd861a6daad1a467", "0400", "00ff0008", "13b7c6e964d2cca3"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000060c0)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2e407a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb3f168df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e030736d0fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x194}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000000c0)=@IORING_OP_GETXATTR={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a40), 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='he', 0x2}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)=""/270, 0x10e}], 0x1}, 0x40) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, &(0x7f0000000400)=""/16, 0xfffffffffffffde6}, 0x40) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='gadgetfs\x00', 0x3, &(0x7f00000000c0)=',+.\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x702, 0x36, 0x0, &(0x7f0000001080)="e460334470b8d480eb00c15286dd08d8829f5fb5e2eb3b56fddaa2b27da9d81c20bfde92a3cd98f29389530882794568195b29c77653", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_GETDRIVER(r9, 0x41045508, &(0x7f0000000540)={0x0, "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"}) tkill(0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) getgid() 2.24263091s ago: executing program 4 (id=515): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x22e, &(0x7f0000000100)="$eJzs3T9rU1EYB+C39i8FSQehKIJXXJxCW3FvkQpiQFEy6GSxKUpTCw0UdGjd/BL6FXR0FRzE1S8gglTBxW4VhEh6Q2PTpE1pkyv2eZa+3Ht+Pee8hFwy5OTB+aXF+eXKwubmRoyM9MXAdEzHVl+Mxanoj9TzAAD+J1vVavysprJeCwDQG57/AHDydPj8v93DJQEAXXaYz//DvVkSANBld+/dvzlTKMzeSZKRiKUXq8XVYvo3vT+zEI+jHKWYiFz8jqjuSOvrNwqzE0nNt7EoLq3X8+urxf7d+cnIxVjr/GSS2p0fjNF6/vNolGIqcnGmdX6qZX4oLl/6a/585OLTw1iOcsxHLdvIr00mybVbhab88PY4AAAAAAAAAAAAAAAAAAAAAADohnyyo+n8nl/bZ+zk8+3up/nOzwdqPp9nIM4NZL17AAAAAAAAAAAAAAAAAAAA+DdUnj5bnCuXSyv7FU8+vn5/0JgOi776vEf9P0cvTl/8+rLdmP7D9ed4i3cX9hkzGBGZt660Uvmw8ejslcr41Y4GD0XEcS+j1oi9V9q+tH7kIrrUjTc97Hxtj3uv1BwYH381Pfd27cv3Tufq+VsRAAAAAAAAAAAAAAAAAACceI0v/Wa9EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADITuP3/7tXZL1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4EwAA//+80ZyC") bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='ccgx-ucsi 0x', 0xc) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) 1.753848639s ago: executing program 5 (id=522): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1be2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r3, 0x891d, &(0x7f0000000540)="4272fc17efa83712c68d933a") connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x5e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_rdma(0x10, 0x3, 0x14) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/fscaps', 0x88102, 0xb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c61737400000000040002801400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$KDSKBLED(r4, 0x4b65, 0x6e8) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, 0x0, 0x0) getpid() 1.639323917s ago: executing program 0 (id=523): dup(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x5a001) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x212f0) add_key(0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) 1.315003909s ago: executing program 4 (id=524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x40, 0x305, &(0x7f0000000200)="$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") sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffffe]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80, 0x80000001}]) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="c0000000070a030000000000000000000100000814000580080002400000000208000140000000600c000640000000000000000234000580080001400000003a080001400000008908000240000000010800014000000089080002400000000008000140000000014c000480380001800d00010073796e70726f7879000000002400028008000340000a0600014000070000080003400000001306000140000d0000100001800b0001006f626a72656600000c000640000000000000000428d4"], 0xc0}, 0x1, 0x0, 0x0, 0x4004055}, 0x20000000) 1.227946865s ago: executing program 6 (id=525): r0 = socket$inet(0x2, 0x2, 0x0) unshare(0x400) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a000310"], 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, 0x0, 0x0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x10000080}, 0x40000) r3 = socket(0x2a, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 1.144439735s ago: executing program 4 (id=526): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xe8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x94, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x60, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x29, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3a, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x78}}, 0x4008010) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.00710781s ago: executing program 4 (id=527): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x97a6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, 0x0) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write(r0, &(0x7f0000000000)="240000001afe5f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 929.19742ms ago: executing program 3 (id=528): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 816.016991ms ago: executing program 5 (id=529): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1bf) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd08, &(0x7f0000000000)) 797.609615ms ago: executing program 3 (id=530): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) setns(0xc9, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 750.001473ms ago: executing program 0 (id=531): r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x4, 0x30314752, 0x2, @discrete={0x213a, 0x7fffffff}}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000280)=0x6, 0x4) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x800, 0x503140) ptrace$getsig(0x4202, r1, 0x80000000, &(0x7f0000000180)) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000002c0)=""/248) 619.017121ms ago: executing program 6 (id=532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000030000000002000000020000000300000000000000000000010500000008000000000000000100000500000000000000000100"], 0x0, 0x5a}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f00000009c0), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}}}], 0x20}, 0x0) 495.908513ms ago: executing program 3 (id=533): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1fffff, 0x200000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x2b, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8b) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r4, 0x16, 0x0, @void}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000280)=[{{0x3, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x8) 130.673847ms ago: executing program 6 (id=534): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 96.133393ms ago: executing program 3 (id=535): sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff, 0x0, 0xe78cf40b}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 95.702883ms ago: executing program 5 (id=536): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="880000000000000071116800000000008510000002000000850000008a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 94.698259ms ago: executing program 6 (id=537): mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002180)={r0, 0x0, 0x2c, 0xcc, &(0x7f0000000040)="06964b7d13c5d7dc7d31bc3fdabc7e80932f7e422d84fc60720931d6ce28191353d4d0e90f0697400d39140d", &(0x7f0000000080)=""/204, 0x1, 0x0, 0x1000, 0x1000, &(0x7f0000000180)="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", &(0x7f0000001180)="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", 0x3, 0x0, 0x1}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002200)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002240)={r0, r1, 0xe, 0x0, @void}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000022c0)=@o_path={&(0x7f0000002280)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002340)={r2, &(0x7f0000002300)="18a508b0a35a02126b9757bb8f052fa1204b6b956a41b340fc31600c9ecaf9456d131846e2e28d838ca7718486056322539ad573d599c5f34c5c9484f35f69"}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002380)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002440)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, &(0x7f0000002400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xb}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xff000000, 0xffffffff], 'ip6erspan0\x00', 'lo\x00', {}, {0xff}, 0x29, 0xf, 0x5, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x46}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) sendto$inet(r3, &(0x7f0000002740)="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", 0x1000, 0x4000, &(0x7f0000003740)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000003780)) getpid() ioctl$FIOCLEX(r3, 0x5451) mount$cgroup2(0x0, &(0x7f00000037c0)='./file0\x00', &(0x7f0000003800), 0x170044, &(0x7f0000003840)={[{@favordynmods}, {@pids_localevents}, {@memory_recursiveprot}, {}, {@memory_hugetlb_accounting}, {@memory_localevents}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@subj_role}, {@obj_type={'obj_type', 0x3d, 'rpfilter\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0xacc}}]}) read$FUSE(r3, &(0x7f0000003940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005980), 0x2, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f00000059c0)={0xa0, 0x0, r4, {{0x1, 0x2, 0x8, 0x7, 0x9, 0x6, {0x2, 0x2, 0x4, 0x0, 0x5, 0x8, 0x2, 0xd4c6bf7a, 0x6, 0xc000, 0x9, r5, r6, 0xfffffffa, 0x8}}, {0x0, 0x5}}}, 0xa0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000005a80), 0x422300, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000005ac0)=0x100, 0x4) mmap$panthor(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x4) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005c80)=0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000005cc0)={{0x1, 0x1, 0x18, r2, {0x2, 0x8000}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000005d80)={0x16, 0x9, &(0x7f0000005b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0xc, 0x6, 0x3, 0x0, 0xfffffffffffffff0}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}]}, &(0x7f0000005b80)='GPL\x00', 0x10, 0x85, &(0x7f0000005bc0)=""/133, 0x41100, 0x3c, '\x00', 0x0, @flow_dissector, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x1, &(0x7f0000005d00)=[r1, r10, r2], &(0x7f0000005d40)=[{0x3, 0x5, 0x3, 0x5}], 0x10, 0x34}, 0x94) syz_ublk_setup_queues(r8, 0x0, &(0x7f0000005e40)={0x0, 0x7e64, 0x10, 0x3, 0xf2, 0x0, r3}, &(0x7f0000005ec0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x601a, 0x8000, 0x1, 0x29b, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x343f, 0x1, 0x0, 0xe0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc3fe, 0x24010, 0x3, 0x35d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x63c1, 0x4000, 0x2, 0x32c, 0x0, r3}, 0xffffffffffffffff}], 0x4, &(0x7f0000007140)={0x2e, 0x9a, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x1, 0x540, 0x0, &(0x7f0000006140)=@buf_max_buf="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"}}, &(0x7f00000071c0)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_ublk_process_io(r12, 0x1, 0x5, &(0x7f0000008200)=@ublk_io_commit_and_fetch_sqe={0x2e, 0x24, 0x0, r3, 0xc0107521, 0x0, 0x0, 0x0, 0x0, {0xfff8}, 0x0, r13, '\x00', {0x2, 0x239, 0x2, &(0x7f0000007200)=@buf_max_buf="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"}}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000008280)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x2, 0x21, 0xf2, 0x67, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4}]}}, {0x0, 0x8, 0x0, @private=0xa010101, "27d79f542a1f8552335e87ece67fa77e063eab328e0e94740937143367e780f107ff2dce632a5129422dd68a67be1145fcb66a90eacf5f90bc70d8317eca36bab40c781fb2a1d3c3a682afe3319113791767d8048f83f6ecc7cc1119760d33e161405bef2b17057fbb8ca794493f88625e55a9db5e53608fdb3c70ec9f6697dcf315b24f0cd4083cd202dc9e0d830a70050151decf75ddfb450b8449b571a63f35e7a27be755eb5a9c10b83b26dd2aefd740c301965c3b438ebaa1a0cdcc9407281386a26f8b4da861dc140069164122e9ba"}}}}}, &(0x7f00000083c0)={0x1, 0x4, [0x6ad, 0x855, 0x656, 0x455]}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000008400)={0x0, 0x2}, &(0x7f0000008440)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000008480)={r14, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x105}}, 0x8, 0x40, 0x1, 0x10000, 0x84, 0x7fff, 0x4}, 0x9c) 38.889539ms ago: executing program 3 (id=538): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x34}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0x8}, 0x1c) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000400)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7ff) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xf}, {0x0, 0x1}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9}}]}, 0x2c}}, 0x24040084) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800dd8d00000000fcdbdf2502101000ff0400060000002008001e0001000000040008"], 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYBLOB="b2044ae45a58677bde66955af70cdd06a7e1cf6bc5bdfe93e02b6c4e9c81af3b6ae348af2bc6e1c56194d5bd3064c1248844282aa59f98f5bce1bc680b48f9653a53764b766cccac169ae74d4827be73acff", @ANYRES32=r9, @ANYBLOB="06001600ea"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x90) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00032bbd7000fb5bdf250100080000007e3c1e0000080008000100000005000d001e00000008000500e000000208000800040000000c00030001"], 0x40}, 0x1, 0x0, 0x0, 0x480}, 0x80) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r11 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_procfs(r11, &(0x7f00000000c0)='personality\x00') read$FUSE(r12, &(0x7f0000000880)={0x2020}, 0xa2) 38.367335ms ago: executing program 6 (id=539): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x29, "04000787b64d173dbd2100eca6aa0825476b045c4a935fa54f323c1829a00700e5cd0516af6df14979"}}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) 10.811969ms ago: executing program 6 (id=540): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}, 0x1, 0xfeffff}, 0x0) 0s ago: executing program 3 (id=541): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)=""/94, 0x5e}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000340)}], 0x9, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42) write(r1, &(0x7f0000000080)="fdbbc3b51ff9f815b92885ab2b158a64feabf5bd402139677c76e95940727d80613a3eb2b54196587a3cd7088e5c32f11d76048499092d6e0e0e5df6cc9f59be2f5eef0638ab7c2568fc533102019dd92723ce94a514412e4a770567852eef09df2aca9532d390e4754b0aa925842b328f5ac2a7f4cd88199a88a74b8587e542127cdff9f569559d83d511e1807c7c7c43d48c0ee3e6b4199353b8f3e604754d02d9e7d9d842e6ce81714283d697476aeb57b8455f6dd1f7a7f495055dee92b5eec0f14406f594bb0a8eb0a5820d958d5952fadff36ac8877d340066efe34c963ab717e15dce5a2edddb81c3f825d48a73b815ad7e5b7617a5", 0xf9) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r2, 0x0, 0x0, 0x80000) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e21, @broadcast}], 0x48) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x60600) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000580)={0x100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x8201, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000300)) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x2b, 0x3, 0x11, 0x12, 0x5, 0x0, 0x0, 0x80000128, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) kernel console output (not intermixed with test programs): k, BSSID 50:50:50:50:50:50 [ 31.172407][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.178946][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.179340][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.182371][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.194866][ T1225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.194912][ T1225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.194934][ T1225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.194951][ T1225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.194968][ T1225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.194984][ T1225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.195000][ T1225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.208641][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.208668][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.229873][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.229903][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.240457][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.240489][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.250386][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.250414][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.285756][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.285783][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.299835][ T4905] loop4: detected capacity change from 0 to 2048 [ 31.302495][ T4905] ======================================================= [ 31.302495][ T4905] WARNING: The mand mount option has been deprecated and [ 31.302495][ T4905] and is ignored by this kernel. Remove the mand [ 31.302495][ T4905] option from the mount to silence this warning. [ 31.302495][ T4905] ======================================================= [ 31.312150][ T4905] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 31.393972][ T4911] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 31.399577][ T4909] loop4: detected capacity change from 0 to 512 [ 31.456075][ T4725] Bluetooth: hci0: command tx timeout [ 31.456230][ T4725] Bluetooth: hci3: command tx timeout [ 31.456311][ T4725] Bluetooth: hci4: command tx timeout [ 31.456447][ T4712] Bluetooth: hci2: command tx timeout [ 31.469896][ T4909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.673323][ T4909] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 31.969831][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.163714][ T4935] xt_NFQUEUE: number of total queues is 0 [ 32.682486][ T4936] xt_CT: No such helper "netbios-ns" [ 32.746580][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 32.758250][ T4932] team0: Port device team_slave_1 removed [ 32.787605][ T4944] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 33.533073][ T4725] Bluetooth: hci3: command tx timeout [ 33.533110][ T4725] Bluetooth: hci0: command tx timeout [ 33.533189][ T4712] Bluetooth: hci4: command tx timeout [ 33.533361][ T4722] Bluetooth: hci2: command tx timeout [ 33.651671][ T4970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 34.152349][ T4992] Injecting memory failure for pfn 0x132447 at process virtual address 0x20000000 [ 34.160687][ T4992] Memory failure: 0x132447: Sending SIGBUS to syz.0.27:4992 due to hardware memory corruption [ 34.163524][ T4992] Memory failure: 0x132447: recovery action for dirty LRU page: Recovered [ 34.163549][ T4992] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 34.167565][ T4992] Memory failure: 0x219270: unhandlable page. [ 34.169162][ T4992] Memory failure: 0x219270: recovery action for get hwpoison page: Ignored [ 34.209654][ T4999] loop3: detected capacity change from 0 to 128 [ 34.213611][ T4999] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.216629][ T4999] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 34.216789][ T4999] FAT-fs (loop3): FAT read failed (blocknr 32) [ 34.238669][ T5001] Zero length message leads to an empty skb [ 34.250865][ T4826] IPVS: starting estimator thread 0... [ 34.332999][ T5003] IPVS: using max 60 ests per chain, 144000 per kthread [ 34.366750][ T5016] fuse: Bad value for 'fd' [ 34.367054][ T5016] fuse: Bad value for 'fd' [ 34.378399][ T5018] bond0: option all_slaves_active: invalid value (253) [ 34.426473][ T5027] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 34.429244][ T5027] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 34.481404][ T5025] xt_hashlimit: size too large, truncated to 1048576 [ 34.515112][ T5025] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 34.515153][ T5025] overlayfs: failed to set xattr on upper [ 34.515177][ T5025] overlayfs: ...falling back to redirect_dir=nofollow. [ 34.515182][ T5025] overlayfs: ...falling back to uuid=null. [ 34.515191][ T5025] overlayfs: maximum fs stacking depth exceeded [ 34.587015][ T5040] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.50' sets config #0 [ 34.644399][ T5047] FAULT_INJECTION: forcing a failure. [ 34.644399][ T5047] name failslab, interval 1, probability 0, space 0, times 1 [ 34.644435][ T5047] CPU: 1 UID: 0 PID: 5047 Comm: syz.4.51 Not tainted syzkaller #0 PREEMPT [ 34.644449][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 34.644457][ T5047] Call trace: [ 34.644461][ T5047] show_stack+0x2c/0x3c (C) [ 34.644479][ T5047] __dump_stack+0x30/0x40 [ 34.644491][ T5047] dump_stack_lvl+0xd8/0x12c [ 34.644501][ T5047] dump_stack+0x1c/0x28 [ 34.644510][ T5047] should_fail_ex+0x41c/0x590 [ 34.644519][ T5047] should_failslab+0xc4/0x120 [ 34.644527][ T5047] __kmalloc_noprof+0x108/0x6b8 [ 34.644536][ T5047] tomoyo_encode2+0x10c/0x330 [ 34.644545][ T5047] tomoyo_encode+0x34/0x50 [ 34.644553][ T5047] tomoyo_realpath_from_path+0x488/0x4dc [ 34.644561][ T5047] tomoyo_path_number_perm+0x1f0/0x500 [ 34.644569][ T5047] tomoyo_file_ioctl+0x2c/0x3c [ 34.644577][ T5047] security_file_ioctl+0xdc/0x2b0 [ 34.644585][ T5047] __arm64_sys_ioctl+0xb0/0x1cc [ 34.644596][ T5047] invoke_syscall+0x98/0x244 [ 34.644606][ T5047] el0_svc_common+0xec/0x23c [ 34.644615][ T5047] do_el0_svc+0x4c/0x5c [ 34.644625][ T5047] el0_svc+0x64/0x260 [ 34.644634][ T5047] el0t_64_sync_handler+0x44/0x104 [ 34.644642][ T5047] el0t_64_sync+0x198/0x19c [ 34.645554][ T5047] ERROR: Out of memory at tomoyo_realpath_from_path. [ 34.678236][ T5051] loop4: detected capacity change from 0 to 512 [ 34.686698][ T5049] loop2: detected capacity change from 0 to 4096 [ 34.688553][ T5049] EXT4-fs: inline encryption not supported [ 34.696532][ T5049] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.696571][ T5049] EXT4-fs (loop2): Test dummy encryption mode enabled [ 34.699740][ T5049] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 34.719585][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 34.756642][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.765387][ T5051] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.54: corrupted xattr block 33: invalid header [ 34.766147][ T5051] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.54: corrupted xattr block 33: invalid header [ 34.770677][ T5051] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.54: corrupted xattr block 33: invalid header [ 34.956660][ T5068] loop3: detected capacity change from 0 to 512 [ 34.975634][ T5068] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.58: corrupted in-inode xattr: e_value size too large [ 34.978716][ T5068] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.979314][ T5068] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.58: couldn't read orphan inode 15 (err -117) [ 34.983836][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 34.983847][ C0] EXT4-fs (loop3): initial error at time 34: ext4_iget_extra_inode:5180: inode 15 [ 34.983865][ C0] EXT4-fs (loop3): last error at time 34: ext4_iget_extra_inode:5180: inode 15 [ 34.990577][ T5068] loop3: lost filesystem error report for type 5 error -117 [ 34.991895][ T5068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.160551][ T5072] FAULT_INJECTION: forcing a failure. [ 35.160551][ T5072] name failslab, interval 1, probability 0, space 0, times 0 [ 35.160615][ T5072] CPU: 1 UID: 0 PID: 5072 Comm: syz.3.58 Not tainted syzkaller #0 PREEMPT [ 35.160632][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.160640][ T5072] Call trace: [ 35.160644][ T5072] show_stack+0x2c/0x3c (C) [ 35.160665][ T5072] __dump_stack+0x30/0x40 [ 35.160679][ T5072] dump_stack_lvl+0xd8/0x12c [ 35.160690][ T5072] dump_stack+0x1c/0x28 [ 35.160699][ T5072] should_fail_ex+0x41c/0x590 [ 35.160708][ T5072] should_failslab+0xc4/0x120 [ 35.160718][ T5072] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 35.160729][ T5072] __alloc_skb+0x1f0/0x610 [ 35.160741][ T5072] netlink_alloc_large_skb+0xd4/0x114 [ 35.160751][ T5072] netlink_sendmsg+0x4c4/0x948 [ 35.160761][ T5072] __sock_sendmsg+0xc8/0x17c [ 35.160770][ T5072] ____sys_sendmsg+0x3d0/0x6c8 [ 35.160779][ T5072] ___sys_sendmsg+0x198/0x224 [ 35.160789][ T5072] __sys_sendmsg+0x158/0x204 [ 35.160798][ T5072] __arm64_sys_sendmsg+0x88/0x9c [ 35.160807][ T5072] invoke_syscall+0x98/0x244 [ 35.160818][ T5072] el0_svc_common+0xec/0x23c [ 35.160827][ T5072] do_el0_svc+0x4c/0x5c [ 35.160837][ T5072] el0_svc+0x64/0x260 [ 35.160847][ T5072] el0t_64_sync_handler+0x44/0x104 [ 35.160855][ T5072] el0t_64_sync+0x198/0x19c [ 35.358935][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.379191][ T5075] bridge_slave_0: default FDB implementation only supports local addresses [ 35.543684][ T50] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 35.543905][ T50] Bluetooth: hci1: Injecting HCI hardware error event [ 35.544685][ T50] Bluetooth: hci1: hardware error 0x00 [ 35.611899][ T4722] Bluetooth: hci2: command tx timeout [ 35.611942][ T4722] Bluetooth: hci4: command tx timeout [ 35.611976][ T4722] Bluetooth: hci0: command tx timeout [ 35.611993][ T4722] Bluetooth: hci3: command tx timeout [ 35.871409][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.920467][ T5114] loop4: detected capacity change from 0 to 512 [ 35.933535][ T5114] EXT4-fs: Ignoring removed oldalloc option [ 35.939227][ T5114] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.953809][ T5118] FAULT_INJECTION: forcing a failure. [ 35.953809][ T5118] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.953843][ T5118] CPU: 1 UID: 0 PID: 5118 Comm: syz.3.74 Not tainted syzkaller #0 PREEMPT [ 35.953855][ T5118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.953865][ T5118] Call trace: [ 35.953869][ T5118] show_stack+0x2c/0x3c (C) [ 35.953893][ T5118] __dump_stack+0x30/0x40 [ 35.953906][ T5118] dump_stack_lvl+0xd8/0x12c [ 35.953916][ T5118] dump_stack+0x1c/0x28 [ 35.953926][ T5118] should_fail_ex+0x41c/0x590 [ 35.953935][ T5118] should_fail+0x14/0x24 [ 35.953941][ T5118] should_fail_usercopy+0x20/0x30 [ 35.953949][ T5118] simple_read_from_buffer+0xc4/0x238 [ 35.953960][ T5118] proc_fail_nth_read+0x1a8/0x248 [ 35.953968][ T5118] vfs_read+0x230/0x8c8 [ 35.953976][ T5118] ksys_read+0x12c/0x228 [ 35.953982][ T5118] __arm64_sys_read+0x84/0x98 [ 35.953989][ T5118] invoke_syscall+0x98/0x244 [ 35.954000][ T5118] el0_svc_common+0xec/0x23c [ 35.954009][ T5118] do_el0_svc+0x4c/0x5c [ 35.954019][ T5118] el0_svc+0x64/0x260 [ 35.954028][ T5118] el0t_64_sync_handler+0x44/0x104 [ 35.954036][ T5118] el0t_64_sync+0x198/0x19c [ 35.981008][ T5114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.043832][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.113789][ T5130] loop3: detected capacity change from 0 to 128 [ 36.136576][ T5130] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.191841][ T5139] syz_tun: entered allmulticast mode [ 36.195948][ T5139] dvmrp6: entered allmulticast mode [ 36.235111][ T5138] syz_tun: left allmulticast mode [ 36.307267][ T5150] loop2: detected capacity change from 0 to 512 [ 36.308583][ T5150] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.325772][ T5150] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 36.326913][ T5150] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.86: attempt to clear invalid blocks 2 len 1 [ 36.326932][ T5150] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 36.332588][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 36.332617][ C1] EXT4-fs (loop2): initial error at time 36: ext4_clear_blocks:876: inode 13 [ 36.332653][ C1] EXT4-fs (loop2): last error at time 36: ext4_clear_blocks:876: inode 13 [ 36.334570][ T5150] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 36.335452][ T5150] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.86: invalid indirect mapped block 1819239214 (level 0) [ 36.335476][ T5150] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 36.349504][ T5150] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.86: invalid indirect mapped block 1819239214 (level 1) [ 36.349545][ T5150] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 36.358884][ T5150] EXT4-fs (loop2): 1 truncate cleaned up [ 36.359397][ T5150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.455095][ T5159] loop4: detected capacity change from 0 to 512 [ 36.478577][ T5159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.480703][ T5159] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.497942][ T4713] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.829256][ T5174] netlink: 32 bytes leftover after parsing attributes in process `syz.0.93'. [ 36.923723][ T4720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.935215][ T5181] netlink: 'syz.2.97': attribute type 32 has an invalid length. [ 36.937194][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 36.937218][ T5181] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 37.102772][ T5201] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 37.703934][ T4725] Bluetooth: hci2: command tx timeout [ 37.715544][ T4722] Bluetooth: hci4: command tx timeout [ 37.723979][ T4712] Bluetooth: hci0: command tx timeout [ 37.757636][ T50] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 37.996211][ T5207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'. [ 38.205004][ T5221] loop2: detected capacity change from 0 to 128 [ 38.419200][ T5232] netlink: 'syz.0.114': attribute type 21 has an invalid length. [ 38.419237][ T5232] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.420390][ T5232] IPv6: Can't replace route, no match found [ 38.475759][ T5239] FAULT_INJECTION: forcing a failure. [ 38.475759][ T5239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.475787][ T5239] CPU: 1 UID: 0 PID: 5239 Comm: syz.0.115 Not tainted syzkaller #0 PREEMPT [ 38.475801][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 38.475807][ T5239] Call trace: [ 38.475810][ T5239] show_stack+0x2c/0x3c (C) [ 38.475828][ T5239] __dump_stack+0x30/0x40 [ 38.475838][ T5239] dump_stack_lvl+0xd8/0x12c [ 38.475848][ T5239] dump_stack+0x1c/0x28 [ 38.475858][ T5239] should_fail_ex+0x41c/0x590 [ 38.475866][ T5239] should_fail+0x14/0x24 [ 38.475872][ T5239] should_fail_usercopy+0x20/0x30 [ 38.475879][ T5239] _inline_copy_from_user+0x3c/0x174 [ 38.475891][ T5239] copy_msghdr_from_user+0xb8/0x194 [ 38.475901][ T5239] ___sys_sendmsg+0x14c/0x224 [ 38.475910][ T5239] __sys_sendmsg+0x158/0x204 [ 38.475919][ T5239] __arm64_sys_sendmsg+0x88/0x9c [ 38.475929][ T5239] invoke_syscall+0x98/0x244 [ 38.475939][ T5239] el0_svc_common+0xec/0x23c [ 38.475948][ T5239] do_el0_svc+0x4c/0x5c [ 38.475958][ T5239] el0_svc+0x64/0x260 [ 38.475967][ T5239] el0t_64_sync_handler+0x44/0x104 [ 38.475975][ T5239] el0t_64_sync+0x198/0x19c [ 38.760248][ T5241] loop3: detected capacity change from 0 to 512 [ 38.760640][ T5241] EXT4-fs: Ignoring removed bh option [ 38.760669][ T5241] EXT4-fs: Ignoring removed bh option [ 38.760708][ T5241] EXT4-fs: Ignoring removed bh option [ 38.773243][ T5241] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.795245][ T5251] capability: warning: `syz.2.119' uses deprecated v2 capabilities in a way that may be insecure [ 38.801829][ T5251] loop2: detected capacity change from 0 to 2048 [ 38.806544][ T5241] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.116: Directory hole found for htree leaf block 0 [ 38.807265][ T5241] EXT4-fs (loop3): Remounting filesystem read-only [ 38.821372][ T4720] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 38.843463][ T5251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.868650][ T5251] 9pnet_virtio: no channels available for device 127.0.0.1 [ 38.896186][ T4713] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.899546][ T4713] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 38 [ 38.900681][ T4713] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 38 [ 38.917443][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 38.947492][ T1225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.014982][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.017152][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.019037][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.021036][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.022855][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.028624][ T1225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.146586][ T5283] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 39.167749][ T5286] loop3: detected capacity change from 0 to 128 [ 39.177442][ T1225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.177966][ T5286] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.199037][ T5258] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.425505][ T5273] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.425591][ T5273] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.425662][ T5273] bridge_slave_0: entered allmulticast mode [ 39.426130][ T5273] bridge_slave_0: entered promiscuous mode [ 39.428418][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.428544][ T5273] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.428612][ T5273] bridge_slave_1: entered allmulticast mode [ 39.430770][ T5273] bridge_slave_1: entered promiscuous mode [ 39.448337][ T5273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.451925][ T5273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.462131][ T5273] team0: Port device team_slave_0 added [ 39.463701][ T5273] team0: Port device team_slave_1 added [ 39.470619][ T5273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.470734][ T5273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.470752][ T5273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.471417][ T5273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.471425][ T5273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.471439][ T5273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.482966][ T5273] hsr_slave_0: entered promiscuous mode [ 39.483347][ T5273] hsr_slave_1: entered promiscuous mode [ 39.483546][ T5273] debugfs: 'hsr0' already exists in 'hsr' [ 39.483556][ T5273] Cannot create hsr debugfs directory [ 39.508321][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.509103][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.509385][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.509704][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.509929][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.610842][ T5310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.131'. [ 39.610875][ T5310] tipc: Invalid UDP bearer configuration [ 39.611069][ T5310] tipc: Enabling of bearer rejected, failed to enable media [ 39.615296][ T5310] netlink: 108 bytes leftover after parsing attributes in process `syz.1.131'. [ 40.029408][ T4720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.081388][ T5324] loop3: detected capacity change from 0 to 1024 [ 40.082512][ T5324] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 40.082524][ T5324] EXT4-fs (loop3): group descriptors corrupted! [ 40.098052][ T1225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.114414][ T5301] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.115896][ T5301] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.117614][ T5301] bridge_slave_0: entered allmulticast mode [ 40.119314][ T5301] bridge_slave_0: entered promiscuous mode [ 40.121379][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.124712][ T5301] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.126327][ T5301] bridge_slave_1: entered allmulticast mode [ 40.134931][ T5301] bridge_slave_1: entered promiscuous mode [ 40.163077][ T5301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.166466][ T5301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.183748][ T5331] syzkaller0: entered promiscuous mode [ 40.183783][ T5331] syzkaller0: entered allmulticast mode [ 40.282579][ T5301] team0: Port device team_slave_0 added [ 40.284765][ T5301] team0: Port device team_slave_1 added [ 40.289019][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 40.320411][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 40.391919][ T5301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.391943][ T5301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.391969][ T5301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.392605][ T5301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.392621][ T5301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.392643][ T5301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.418731][ T5301] hsr_slave_0: entered promiscuous mode [ 40.420761][ T5301] hsr_slave_1: entered promiscuous mode [ 40.422524][ T5301] debugfs: 'hsr0' already exists in 'hsr' [ 40.423815][ T5301] Cannot create hsr debugfs directory [ 40.476073][ T1225] bridge_slave_1: left allmulticast mode [ 40.476109][ T1225] bridge_slave_1: left promiscuous mode [ 40.476529][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.501007][ T1225] bridge_slave_0: left allmulticast mode [ 40.501042][ T1225] bridge_slave_0: left promiscuous mode [ 40.501148][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.616776][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.644112][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.648139][ T5355] loop1: detected capacity change from 0 to 512 [ 40.648969][ T5355] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.682447][ T1225] bond0 (unregistering): Released all slaves [ 40.760969][ T5367] loop1: detected capacity change from 0 to 512 [ 40.797044][ T5367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.852405][ T5378] netlink: 64 bytes leftover after parsing attributes in process `syz.0.151'. [ 40.950940][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 40.954877][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 40.978599][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.028207][ T5394] netlink: 84 bytes leftover after parsing attributes in process `syz.3.155'. [ 41.040874][ T5394] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 41.040904][ T5394] loop5: partition table partially beyond EOD, truncated [ 41.041024][ T5394] loop5: p1 size 487441168 extends beyond EOD, truncated [ 41.054885][ T50] Bluetooth: hci0: command tx timeout [ 41.070111][ T4727] udevd[4727]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 41.083167][ T5404] FAULT_INJECTION: forcing a failure. [ 41.083167][ T5404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.085904][ T5404] CPU: 0 UID: 0 PID: 5404 Comm: syz.3.157 Not tainted syzkaller #0 PREEMPT [ 41.085927][ T5404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 41.085935][ T5404] Call trace: [ 41.085939][ T5404] show_stack+0x2c/0x3c (C) [ 41.085961][ T5404] __dump_stack+0x30/0x40 [ 41.085972][ T5404] dump_stack_lvl+0xd8/0x12c [ 41.085982][ T5404] dump_stack+0x1c/0x28 [ 41.085992][ T5404] should_fail_ex+0x41c/0x590 [ 41.086000][ T5404] should_fail+0x14/0x24 [ 41.086007][ T5404] should_fail_usercopy+0x20/0x30 [ 41.086014][ T5404] simple_read_from_buffer+0xc4/0x238 [ 41.086025][ T5404] proc_fail_nth_read+0x1a8/0x248 [ 41.086033][ T5404] vfs_read+0x230/0x8c8 [ 41.086040][ T5404] ksys_read+0x12c/0x228 [ 41.086047][ T5404] __arm64_sys_read+0x84/0x98 [ 41.086054][ T5404] invoke_syscall+0x98/0x244 [ 41.086064][ T5404] el0_svc_common+0xec/0x23c [ 41.086074][ T5404] do_el0_svc+0x4c/0x5c [ 41.086083][ T5404] el0_svc+0x64/0x260 [ 41.086092][ T5404] el0t_64_sync_handler+0x44/0x104 [ 41.086101][ T5404] el0t_64_sync+0x198/0x19c [ 41.153594][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.154'. [ 41.156816][ T5413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.164697][ T1225] hsr_slave_0: left promiscuous mode [ 41.166081][ T1225] hsr_slave_1: left promiscuous mode [ 41.166501][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.166520][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.175233][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.175262][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.182756][ T1225] veth1_macvtap: left promiscuous mode [ 41.182810][ T1225] veth0_macvtap: left promiscuous mode [ 41.183650][ T1225] veth1_vlan: left promiscuous mode [ 41.183695][ T1225] veth0_vlan: left promiscuous mode [ 41.309569][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 41.317007][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 41.414835][ T5435] set_capacity_and_notify: 3 callbacks suppressed [ 41.414870][ T5435] loop0: detected capacity change from 0 to 256 [ 41.531706][ T50] Bluetooth: hci1: command tx timeout [ 41.559847][ T5438] loop1: detected capacity change from 0 to 512 [ 41.563188][ T5438] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.163: inode has both inline data and extents flags [ 41.563224][ T5438] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.563332][ T5438] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.163: couldn't read orphan inode 15 (err -117) [ 41.563345][ T5438] loop1: lost filesystem error report for type 5 error -117 [ 41.563851][ T5438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.584569][ T5446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 41.586323][ T5446] overlayfs: failed to set xattr on upper [ 41.587800][ T5446] overlayfs: ...falling back to uuid=null. [ 41.602180][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.715421][ T5273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.738409][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.738782][ T5273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.747916][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.764261][ T5273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.778952][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.802939][ T5484] loop1: detected capacity change from 0 to 256 [ 41.815433][ T5273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.831278][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.839936][ T5301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.849788][ T5301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.856794][ T5301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.859192][ T5301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.914116][ T1225] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.923211][ T5301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.928139][ T5301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.929093][ T5301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.935807][ T5301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.032805][ T1225] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.060830][ T5273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.066388][ T5273] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.077818][ T5273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.080030][ T5273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.090498][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.090544][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.091141][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.091161][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.118182][ T5301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.124350][ T5301] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.130765][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.130822][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.131365][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.131385][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.375758][ T1225] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.409770][ T5301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.441142][ T1225] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.505355][ T5273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.551795][ T1225] bridge_slave_1: left allmulticast mode [ 42.551826][ T1225] bridge_slave_1: left promiscuous mode [ 42.551925][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.557209][ T1225] bridge_slave_0: left allmulticast mode [ 42.558343][ T1225] bridge_slave_0: left promiscuous mode [ 42.559984][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.627029][ T5539] loop3: detected capacity change from 0 to 512 [ 42.670441][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.695035][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.711255][ T1225] bond0 (unregistering): Released all slaves [ 42.757435][ T5563] binder: 5559:5563 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 42.757482][ T5563] binder: 5559:5563 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 42.757495][ T5563] binder: 5559:5563 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 42.797108][ T5301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.853004][ T5584] loop1: detected capacity change from 0 to 128 [ 42.882497][ T5584] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.939167][ T5273] veth0_vlan: entered promiscuous mode [ 42.946294][ T5273] veth1_vlan: entered promiscuous mode [ 42.980065][ T5594] binder: 5592:5594 tried to acquire reference to desc 0, got 1 instead [ 42.983907][ T5594] binder: 5592:5594 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 42.986385][ T5594] binder: 5594 RLIMIT_NICE not set [ 42.989390][ T5594] binder: 5594 RLIMIT_NICE not set [ 42.991194][ T5594] binder: release 5592:5594 transaction 13 out, still active [ 42.991230][ T5594] binder: release 5592:5594 transaction 6 in, still active [ 42.997554][ T5594] binder: undelivered TRANSACTION_COMPLETE [ 42.998956][ T5594] binder: 5594 RLIMIT_NICE not set [ 43.000270][ T5594] binder: 5594 RLIMIT_NICE not set [ 43.001375][ T5594] binder: 5594:5592 reply target not found [ 43.002713][ T5594] binder: 5592:5594 transaction reply to 0:0 failed 14/29189/0, code 0 size 0-0 line 3184 [ 43.004490][ T5594] binder: send failed reply for transaction 13, target dead [ 43.005811][ T5594] binder: send failed reply for transaction 6 to 5592:5594 [ 43.021843][ T4805] binder: undelivered TRANSACTION_ERROR: 29190 [ 43.021871][ T4805] binder: undelivered TRANSACTION_ERROR: 29189 [ 43.056695][ T5595] tipc: Started in network mode [ 43.056730][ T5595] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 43.056816][ T5595] tipc: Enabled bearer , priority 10 [ 43.093634][ T5612] binder: 5611:5612 Release 1 refcount change on invalid ref 3 ret -22 [ 43.102925][ T1225] hsr_slave_0: left promiscuous mode [ 43.104514][ T1225] hsr_slave_1: left promiscuous mode [ 43.104795][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.104805][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.105816][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.105827][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.110047][ T1225] veth1_macvtap: left promiscuous mode [ 43.110072][ T1225] veth0_macvtap: left promiscuous mode [ 43.110129][ T1225] veth1_vlan: left promiscuous mode [ 43.110162][ T1225] veth0_vlan: left promiscuous mode [ 43.132156][ T50] Bluetooth: hci0: command tx timeout [ 43.232232][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 43.251386][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 43.318243][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 43.318905][ T5273] veth0_macvtap: entered promiscuous mode [ 43.320256][ T5273] veth1_macvtap: entered promiscuous mode [ 43.326534][ T5612] warning: `syz.3.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 43.330798][ T5301] veth0_vlan: entered promiscuous mode [ 43.335491][ T5301] veth1_vlan: entered promiscuous mode [ 43.340618][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.345676][ T5273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.401916][ T3570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.402035][ T3570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.402064][ T3570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.402084][ T3570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.416287][ T5301] veth0_macvtap: entered promiscuous mode [ 43.417519][ T5301] veth1_macvtap: entered promiscuous mode [ 43.421366][ T5301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.426991][ T5301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.430556][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.430654][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.430683][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.430706][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.475555][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.475594][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.530428][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.530459][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.544830][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.544863][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.556618][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.556667][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.570528][ T5641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 43.592049][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.614567][ T50] Bluetooth: hci1: command tx timeout [ 43.681149][ T4717] EXT4-fs error (device loop1): ext4_lookup:1785: inode #11: comm syz-executor: iget: checksum invalid [ 43.689677][ T4717] EXT4-fs error (device loop1): ext4_lookup:1785: inode #11: comm syz-executor: iget: checksum invalid [ 44.127458][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 44.172118][ T26] tipc: Node number set to 8432298 [ 44.193518][ T5697] VFS: Mount too revealing [ 44.278071][ T5603] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.284427][ T30] audit: type=1400 audit(44.270:2): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=5711 comm="syz.5.188" daddr=::1c9a:e7ff:fe9a:6f34 [ 44.368211][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.377983][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 44.445126][ T4712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.447200][ T4712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.449263][ T4712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.451081][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.453894][ T4712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.503663][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.543079][ T5734] loop5: detected capacity change from 0 to 512 [ 44.604563][ T5734] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.655907][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.666632][ T5734] EXT4-fs (loop5): 1 orphan inode deleted [ 44.667122][ T5734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.755217][ T5758] mmap: syz.0.198 (5758) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.799436][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.858825][ T5301] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.864440][ T30] audit: type=1400 audit(44.850:3): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=5762 comm="syz.4.200" daddr=::ffff:172.20.20.170 [ 44.914564][ T5771] loop4: detected capacity change from 0 to 256 [ 44.944891][ T5758] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 45.244508][ T5774] __nla_validate_parse: 2 callbacks suppressed [ 45.245063][ T5774] netlink: 80 bytes leftover after parsing attributes in process `syz.4.204'. [ 45.252969][ T40] bridge_slave_1: left allmulticast mode [ 45.253004][ T40] bridge_slave_1: left promiscuous mode [ 45.253102][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.283890][ T40] bridge_slave_0: left allmulticast mode [ 45.283921][ T40] bridge_slave_0: left promiscuous mode [ 45.284001][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.308119][ T40] dvmrp6: left allmulticast mode [ 45.337935][ T5791] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 45.350949][ T5786] loop4: detected capacity change from 0 to 512 [ 45.354392][ T5786] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.364428][ T5786] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.207: Invalid block bitmap block 0 in block_group 0 [ 45.368498][ T5786] loop4: lost filesystem error report for type 5 error -117 [ 45.369591][ T5786] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.372970][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 45.372984][ C1] EXT4-fs (loop4): initial error at time 45: ext4_read_block_bitmap_nowait:483 [ 45.372998][ C1] EXT4-fs (loop4): last error at time 45: ext4_read_block_bitmap_nowait:483 [ 45.381079][ T5786] loop4: lost filesystem error report for type 5 error -117 [ 45.384790][ T5786] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.207: attempt to clear invalid blocks 983261 len 1 [ 45.390109][ T5786] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.398018][ T5786] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.207: Invalid inode table block 0 in block_group 0 [ 45.398053][ T5786] loop4: lost filesystem error report for type 5 error -117 [ 45.404776][ T5786] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 45.408600][ T5786] loop4: lost filesystem error report for type 5 error -117 [ 45.409046][ T5786] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 45.412542][ T5786] loop4: lost filesystem error report for type 5 error -117 [ 45.413376][ T5786] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.207: Invalid inode table block 0 in block_group 0 [ 45.417692][ T5786] loop4: lost filesystem error report for type 5 error -117 [ 45.417934][ T5786] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 45.421453][ T5786] loop4: lost filesystem error report for type 5 error -117 [ 45.424027][ T5786] EXT4-fs error (device loop4): ext4_truncate:4691: inode #11: comm syz.4.207: mark_inode_dirty error [ 45.427868][ T5786] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.428209][ T5786] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 45.432802][ T5786] loop4: lost filesystem error report for type 5 error -117 [ 45.433058][ T5786] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.207: Invalid inode table block 0 in block_group 0 [ 45.437130][ T5786] loop4: lost filesystem error report for type 5 error -117 [ 45.438393][ T5786] EXT4-fs (loop4): 1 truncate cleaned up [ 45.441979][ T5786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.456001][ T5786] netlink: 12 bytes leftover after parsing attributes in process `syz.4.207'. [ 45.457258][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 45.492157][ T5807] Bluetooth: MGMT ver 1.23 [ 45.612068][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.631758][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.672384][ T40] bond0 (unregistering): Released all slaves [ 45.675405][ T40] bond1 (unregistering): Released all slaves [ 45.691857][ T4712] Bluetooth: hci1: command tx timeout [ 45.757971][ T5808] bond1: Removing last arp target with arp_interval on [ 45.771407][ T5828] FAULT_INJECTION: forcing a failure. [ 45.771407][ T5828] name failslab, interval 1, probability 0, space 0, times 0 [ 45.776345][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz.5.215 Not tainted syzkaller #0 PREEMPT [ 45.776368][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 45.776377][ T5828] Call trace: [ 45.776382][ T5828] show_stack+0x2c/0x3c (C) [ 45.776402][ T5828] __dump_stack+0x30/0x40 [ 45.776414][ T5828] dump_stack_lvl+0xd8/0x12c [ 45.776424][ T5828] dump_stack+0x1c/0x28 [ 45.776434][ T5828] should_fail_ex+0x41c/0x590 [ 45.776442][ T5828] should_failslab+0xc4/0x120 [ 45.776451][ T5828] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 45.776460][ T5828] __alloc_skb+0x1f0/0x610 [ 45.776470][ T5828] netlink_alloc_large_skb+0xd4/0x114 [ 45.776480][ T5828] netlink_sendmsg+0x4c4/0x948 [ 45.776489][ T5828] __sock_sendmsg+0xc8/0x17c [ 45.776498][ T5828] ____sys_sendmsg+0x3d0/0x6c8 [ 45.776507][ T5828] ___sys_sendmsg+0x198/0x224 [ 45.776516][ T5828] __sys_sendmsg+0x158/0x204 [ 45.776525][ T5828] __arm64_sys_sendmsg+0x88/0x9c [ 45.776535][ T5828] invoke_syscall+0x98/0x244 [ 45.776545][ T5828] el0_svc_common+0xec/0x23c [ 45.776555][ T5828] do_el0_svc+0x4c/0x5c [ 45.776564][ T5828] el0_svc+0x64/0x260 [ 45.776573][ T5828] el0t_64_sync_handler+0x44/0x104 [ 45.776582][ T5828] el0t_64_sync+0x198/0x19c [ 45.777092][ T5810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.817077][ T5832] netlink: 24 bytes leftover after parsing attributes in process `syz.5.216'. [ 45.875117][ T5273] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.383490][ T4400] 8021q: adding VLAN 0 to HW filter on device eth4 [ 46.395295][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.396847][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.396933][ T5724] bridge_slave_0: entered allmulticast mode [ 46.397396][ T5724] bridge_slave_0: entered promiscuous mode [ 46.413972][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.414012][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.414087][ T5724] bridge_slave_1: entered allmulticast mode [ 46.414525][ T5724] bridge_slave_1: entered promiscuous mode [ 46.441907][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.491622][ T4712] Bluetooth: hci3: command tx timeout [ 46.523402][ T5874] loop3: detected capacity change from 0 to 256 [ 46.523787][ T5874] vfat: Unknown parameter 'uni_xlµÐ•Wl8Çf8' [ 46.554605][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.564495][ T5724] team0: Port device team_slave_0 added [ 46.566636][ T5724] team0: Port device team_slave_1 added [ 46.575402][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.576951][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.582243][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.589206][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.589235][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.589250][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.605770][ T5724] hsr_slave_0: entered promiscuous mode [ 46.606120][ T5724] hsr_slave_1: entered promiscuous mode [ 46.606319][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 46.606329][ T5724] Cannot create hsr debugfs directory [ 47.599828][ T30] audit: type=1400 audit(47.580:4): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=5900 comm="syz.3.229" daddr=fe80::bb dest=3 [ 47.610104][ T5906] nvmet: adding nsid 1 to subsystem testnqn [ 47.639108][ T5910] loop5: detected capacity change from 0 to 7 [ 47.639326][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639347][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639362][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639375][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639393][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639411][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639424][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639431][ T5910] ldm_validate_partition_table(): Disk read failed. [ 47.639442][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639454][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639466][ T5910] Buffer I/O error on dev loop5, logical block 0, async page read [ 47.639479][ T5910] Dev loop5: unable to read RDB block 0 [ 47.639505][ T5910] loop5: unable to read partition table [ 47.639560][ T5910] loop5: partition table beyond EOD, truncated [ 47.639568][ T5910] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 47.743923][ T5920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.230'. [ 47.776981][ T4712] Bluetooth: hci1: command tx timeout [ 47.821649][ T40] hsr_slave_0: left promiscuous mode [ 47.883140][ T40] hsr_slave_1: left promiscuous mode [ 47.883484][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.883514][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.912915][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.914526][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.962058][ T40] veth1_macvtap: left promiscuous mode [ 47.964134][ T40] veth0_macvtap: left promiscuous mode [ 47.964216][ T40] veth1_vlan: left promiscuous mode [ 47.964251][ T40] veth0_vlan: left promiscuous mode [ 48.262431][ T40] team0 (unregistering): Port device team_slave_0 removed [ 48.382318][ T4400] 8021q: adding VLAN 0 to HW filter on device eth5 [ 48.581715][ T4712] Bluetooth: hci3: command tx timeout [ 48.852530][ T4400] 8021q: adding VLAN 0 to HW filter on device eth6 [ 48.858313][ T5724] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.886319][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.887526][ T5724] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.925510][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.926038][ T5724] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.943521][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.973132][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.974481][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.974882][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.975229][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.975455][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 49.112709][ T5724] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.134855][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.239378][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.241598][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.243497][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.245791][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.247790][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.303492][ T4400] 8021q: adding VLAN 0 to HW filter on device eth7 [ 49.370020][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.380665][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.406045][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.406103][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.406632][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.406651][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.461629][ T4712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 49.464389][ T4712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 49.465763][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 49.466556][ T4712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 49.466805][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 49.502945][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.522232][ T30] audit: type=1400 audit(49.510:5): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 49.523427][ T30] audit: type=1400 audit(49.510:6): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 49.554162][ T5724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.692745][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.862205][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.918874][ T6032] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.244'. [ 49.965177][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.966755][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.968237][ T5965] bridge_slave_0: entered allmulticast mode [ 49.969897][ T5965] bridge_slave_0: entered promiscuous mode [ 49.992272][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.992320][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.992401][ T5965] bridge_slave_1: entered allmulticast mode [ 49.992856][ T5965] bridge_slave_1: entered promiscuous mode [ 50.001033][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.001093][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.001168][ T5986] bridge_slave_0: entered allmulticast mode [ 50.001995][ T5986] bridge_slave_0: entered promiscuous mode [ 50.050319][ T30] audit: type=1400 audit(50.030:7): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 50.070796][ T6047] loop3: detected capacity change from 0 to 512 [ 50.086770][ T6047] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.246: corrupted in-inode xattr: invalid ea_ino [ 50.086799][ T6047] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.086995][ T6047] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.246: couldn't read orphan inode 15 (err -117) [ 50.087019][ T6047] loop3: lost filesystem error report for type 5 error -117 [ 50.087620][ T6047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.088821][ T6047] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.246: bg 0: block 4: invalid block bitmap [ 50.093500][ T6047] 9p: Bad value for 'rfdno' [ 50.124946][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.125001][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.137123][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.139697][ T5965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.140690][ T5965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.163099][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.163857][ T30] audit: type=1400 audit(50.150:8): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 50.167259][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.168763][ T5986] bridge_slave_1: entered allmulticast mode [ 50.170517][ T5986] bridge_slave_1: entered promiscuous mode [ 50.191684][ T5965] team0: Port device team_slave_0 added [ 50.192575][ T5965] team0: Port device team_slave_1 added [ 50.202696][ T5986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.203708][ T5986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.217787][ T5986] team0: Port device team_slave_0 added [ 50.222205][ T5986] team0: Port device team_slave_1 added [ 50.229421][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.231450][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.238627][ T5986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.241313][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.241343][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.241366][ T5965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.253832][ T5965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.253855][ T5965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.253989][ T5965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.261741][ T5986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.261753][ T5986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.261770][ T5986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.307522][ T5986] hsr_slave_0: entered promiscuous mode [ 50.307907][ T5986] hsr_slave_1: entered promiscuous mode [ 50.339691][ T5965] hsr_slave_0: entered promiscuous mode [ 50.340053][ T5965] hsr_slave_1: entered promiscuous mode [ 50.340265][ T5965] debugfs: 'hsr0' already exists in 'hsr' [ 50.340275][ T5965] Cannot create hsr debugfs directory [ 50.651572][ T4712] Bluetooth: hci3: command tx timeout [ 50.702536][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 50.704211][ T5724] veth0_vlan: entered promiscuous mode [ 50.707621][ T5724] veth1_vlan: entered promiscuous mode [ 50.843023][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.904951][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.905036][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.905110][ T6006] bridge_slave_0: entered allmulticast mode [ 50.905581][ T6006] bridge_slave_0: entered promiscuous mode [ 50.912673][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.912746][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.912845][ T6006] bridge_slave_1: entered allmulticast mode [ 50.913310][ T6006] bridge_slave_1: entered promiscuous mode [ 50.935908][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.051937][ T4712] Bluetooth: hci0: command tx timeout [ 51.072353][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.093044][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.145293][ T5724] veth0_macvtap: entered promiscuous mode [ 51.148958][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.248'. [ 51.156044][ T6006] team0: Port device team_slave_0 added [ 51.158040][ T6006] team0: Port device team_slave_1 added [ 51.160030][ T5724] veth1_macvtap: entered promiscuous mode [ 51.215458][ T6094] loop3: detected capacity change from 0 to 512 [ 51.220507][ T6094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.236666][ T6094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.243425][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.278698][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.279791][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.279805][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.285428][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.285441][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.285459][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.301589][ T4712] Bluetooth: hci1: command tx timeout [ 51.306564][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.309769][ T6006] hsr_slave_0: entered promiscuous mode [ 51.310106][ T6006] hsr_slave_1: entered promiscuous mode [ 51.310319][ T6006] debugfs: 'hsr0' already exists in 'hsr' [ 51.310344][ T6006] Cannot create hsr debugfs directory [ 51.503219][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.541543][ T4712] Bluetooth: hci2: command tx timeout [ 51.542438][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 51.552838][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.661018][ T5778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.661043][ T5778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.662175][ T5778] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.662658][ T5778] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.662720][ T5778] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.662746][ T5778] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.686951][ T5778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.686979][ T5778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.827326][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.844252][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 51.933750][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.6.191'. [ 51.960900][ T6146] loop6: detected capacity change from 0 to 256 [ 51.963664][ T6146] vfat: Unknown parameter 'unõúýÀX ÿݬŒðfNi_xlate' [ 52.072747][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.083463][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 52.086947][ T6149] loop6: detected capacity change from 0 to 128 [ 52.087381][ T6149] ext4: Unknown parameter 'dont_appraise' [ 52.328675][ T6153] xt_hashlimit: size too large, truncated to 1048576 [ 52.335441][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 52.412675][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.585376][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 52.636435][ T6177] loop3: detected capacity change from 0 to 8 [ 52.644412][ T6177] SQUASHFS error: zlib decompression failed, data probably corrupt [ 52.644450][ T6177] SQUASHFS error: Failed to read block 0x4de: -5 [ 52.644458][ T6177] SQUASHFS error: Unable to read data cache entry [4de] [ 52.644464][ T6177] SQUASHFS error: Unable to read page, block 4de, size 1 [ 52.644599][ T6177] SQUASHFS error: Unable to read data cache entry [4de] [ 52.644605][ T6177] SQUASHFS error: Unable to read page, block 4de, size 1 [ 52.644642][ T6177] SQUASHFS error: Unable to read data cache entry [4de] [ 52.644647][ T6177] SQUASHFS error: Unable to read page, block 4de, size 1 [ 52.644664][ T6177] SQUASHFS error: Unable to read data cache entry [4de] [ 52.644669][ T6177] SQUASHFS error: Unable to read page, block 4de, size 1 [ 52.734060][ T4712] Bluetooth: hci3: command tx timeout [ 52.778751][ T6194] loop6: detected capacity change from 0 to 512 [ 52.813248][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.947552][ T5986] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.974714][ T5986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.986574][ T5986] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.004452][ T5986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 53.011884][ T5986] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.076869][ T5986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 53.078692][ T5986] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.102885][ T5986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 53.131826][ T4712] Bluetooth: hci0: command tx timeout [ 53.302009][ T40] bridge_slave_1: left allmulticast mode [ 53.302044][ T40] bridge_slave_1: left promiscuous mode [ 53.302281][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.392255][ T4712] Bluetooth: hci1: command tx timeout [ 53.500526][ T40] bridge_slave_0: left allmulticast mode [ 53.502615][ T40] bridge_slave_0: left promiscuous mode [ 53.508883][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.611898][ T4712] Bluetooth: hci2: command tx timeout [ 53.645891][ T4805] hid-generic 0005:007F:B010.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 53.665704][ T6226] fido_id[6226]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.691895][ T40] bridge_slave_1: left allmulticast mode [ 53.691930][ T40] bridge_slave_1: left promiscuous mode [ 53.692022][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.696801][ T40] bridge_slave_0: left allmulticast mode [ 53.696823][ T40] bridge_slave_0: left promiscuous mode [ 53.696886][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.053628][ T40] bridge_slave_1: left allmulticast mode [ 54.055190][ T40] bridge_slave_1: left promiscuous mode [ 54.059553][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.123105][ T40] bridge_slave_0: left allmulticast mode [ 54.123143][ T40] bridge_slave_0: left promiscuous mode [ 54.123233][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.158097][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.269'. [ 54.454971][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.541800][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.563001][ T40] bond0 (unregistering): Released all slaves [ 54.754903][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.812242][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.832625][ T40] bond0 (unregistering): Released all slaves [ 54.835099][ T40] bond1 (unregistering): Released all slaves [ 55.062299][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.141810][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.182353][ T40] bond0 (unregistering): Released all slaves [ 55.211777][ T4712] Bluetooth: hci0: command tx timeout [ 55.411852][ T6244] team0: Port device team_slave_1 removed [ 55.451980][ T4712] Bluetooth: hci1: command tx timeout [ 55.487336][ T5986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.492481][ T5986] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.574282][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.574331][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.581431][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.581513][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.736671][ T4712] Bluetooth: hci2: command tx timeout [ 55.988357][ T4400] 8021q: adding VLAN 0 to HW filter on device eth12 [ 55.993333][ T30] audit: type=1400 audit(55.980:9): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 55.993683][ T30] audit: type=1400 audit(55.980:10): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 55.994221][ T30] audit: type=1400 audit(55.980:11): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 55.994707][ T30] audit: type=1400 audit(55.980:12): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 55.995218][ T30] audit: type=1400 audit(55.980:13): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 55.997150][ T30] audit: type=1400 audit(55.980:14): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 55.997237][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.6.276'. [ 55.998440][ T30] audit: type=1400 audit(55.980:15): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 56.124375][ T5986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.130532][ T6297] syzkaller0: entered promiscuous mode [ 56.130574][ T6297] syzkaller0: entered allmulticast mode [ 56.804098][ T6315] FAULT_INJECTION: forcing a failure. [ 56.804098][ T6315] name failslab, interval 1, probability 0, space 0, times 0 [ 56.806785][ T6315] CPU: 1 UID: 0 PID: 6315 Comm: syz.3.280 Not tainted syzkaller #0 PREEMPT [ 56.806802][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 56.806807][ T6315] Call trace: [ 56.806810][ T6315] show_stack+0x2c/0x3c (C) [ 56.806828][ T6315] __dump_stack+0x30/0x40 [ 56.806839][ T6315] dump_stack_lvl+0xd8/0x12c [ 56.806849][ T6315] dump_stack+0x1c/0x28 [ 56.806858][ T6315] should_fail_ex+0x41c/0x590 [ 56.806866][ T6315] should_failslab+0xc4/0x120 [ 56.806874][ T6315] kmem_cache_alloc_noprof+0x94/0x5d8 [ 56.806883][ T6315] mas_alloc_nodes+0x234/0x2d8 [ 56.806892][ T6315] mas_preallocate+0x434/0x6e0 [ 56.806898][ T6315] __split_vma+0x2bc/0x884 [ 56.806906][ T6315] vms_gather_munmap_vmas+0x3d0/0x101c [ 56.806916][ T6315] mmap_region+0x710/0x1c38 [ 56.806923][ T6315] do_mmap+0xa50/0xf0c [ 56.806932][ T6315] vm_mmap_pgoff+0x298/0x46c [ 56.806941][ T6315] ksys_mmap_pgoff+0x364/0x5b4 [ 56.806949][ T6315] __arm64_sys_mmap+0x110/0x12c [ 56.806959][ T6315] invoke_syscall+0x98/0x244 [ 56.806969][ T6315] el0_svc_common+0xec/0x23c [ 56.806979][ T6315] do_el0_svc+0x4c/0x5c [ 56.806989][ T6315] el0_svc+0x64/0x260 [ 56.806997][ T6315] el0t_64_sync_handler+0x44/0x104 [ 56.807005][ T6315] el0t_64_sync+0x198/0x19c [ 57.159312][ T6308] syzkaller0: entered promiscuous mode [ 57.160622][ T6308] syzkaller0: entered allmulticast mode [ 57.291537][ T4712] Bluetooth: hci0: command tx timeout [ 57.300235][ T6336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 57.405388][ T6339] loop6: detected capacity change from 0 to 8192 [ 57.524495][ T30] audit: type=1400 audit(57.500:16): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=6345 comm="syz.3.285" daddr=::ffff:0.0.0.0 dest=20002 [ 57.524534][ T30] audit: type=1400 audit(57.510:17): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=6345 comm="syz.3.285" daddr=fe88::104 dest=20004 [ 57.531925][ T4712] Bluetooth: hci1: command tx timeout [ 57.576248][ T30] audit: type=1400 audit(57.560:18): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 57.588280][ T6347] loop6: detected capacity change from 0 to 128 [ 57.588651][ T6347] vfat: Unknown parameter 'É:)@¹¸IskÙ' [ 57.606798][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.287'. [ 57.611179][ T5986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.627276][ T5965] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.635825][ T5965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.636172][ T5965] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.652648][ T5965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.654585][ T5965] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.680688][ T6359] netlink: 'syz.3.289': attribute type 2 has an invalid length. [ 57.693469][ T5965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.695270][ T5965] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.704129][ T6361] Bluetooth: MGMT ver 1.23 [ 57.732678][ T5965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.771679][ T4712] Bluetooth: hci2: command tx timeout [ 58.051410][ T6366] loop3: detected capacity change from 0 to 512 [ 58.056230][ T6366] EXT4-fs: Ignoring removed oldalloc option [ 58.057040][ T6366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.067954][ T5986] veth0_vlan: entered promiscuous mode [ 58.070660][ T6366] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 58.070738][ T6366] EXT4-fs (loop3): 1 truncate cleaned up [ 58.071829][ T6366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.283894][ T5986] veth1_vlan: entered promiscuous mode [ 58.374186][ T6408] netlink: 72 bytes leftover after parsing attributes in process `syz.6.294'. [ 58.392415][ T40] hsr_slave_0: left promiscuous mode [ 58.393780][ T40] hsr_slave_1: left promiscuous mode [ 58.394070][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.394083][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.398565][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.398592][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.486495][ T6413] netlink: 64 bytes leftover after parsing attributes in process `syz.6.294'. [ 58.571995][ T40] hsr_slave_0: left promiscuous mode [ 58.591585][ T40] hsr_slave_1: left promiscuous mode [ 58.591902][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.591915][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.632276][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.632305][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.773436][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.782375][ T40] hsr_slave_0: left promiscuous mode [ 58.811605][ T40] hsr_slave_1: left promiscuous mode [ 58.812262][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.812275][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.825291][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.825321][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.903271][ T40] veth1_macvtap: left promiscuous mode [ 58.903322][ T40] veth0_macvtap: left promiscuous mode [ 58.903377][ T40] veth1_vlan: left promiscuous mode [ 58.903412][ T40] veth0_vlan: left promiscuous mode [ 59.261573][ T40] veth1_macvtap: left promiscuous mode [ 59.261616][ T40] veth0_macvtap: left promiscuous mode [ 59.261720][ T40] veth1_vlan: left promiscuous mode [ 59.261767][ T40] veth0_vlan: left promiscuous mode [ 59.381583][ T40] veth1_macvtap: left promiscuous mode [ 59.381621][ T40] veth0_macvtap: left promiscuous mode [ 59.381666][ T40] veth1_vlan: left promiscuous mode [ 59.381702][ T40] veth0_vlan: left promiscuous mode [ 59.742360][ T6422] loop3: detected capacity change from 0 to 512 [ 59.747350][ T6422] EXT4-fs: inline encryption not supported [ 59.749086][ T6422] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.763071][ T6422] EXT4-fs (loop3): 1 truncate cleaned up [ 59.763539][ T6422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.811769][ T40] team0 (unregistering): Port device team_slave_1 removed [ 59.842381][ T40] team0 (unregistering): Port device team_slave_0 removed [ 60.041741][ T40] team0 (unregistering): Port device team_slave_1 removed [ 60.052311][ T40] team0 (unregistering): Port device team_slave_0 removed [ 60.371867][ T40] team0 (unregistering): Port device team_slave_1 removed [ 60.376813][ T40] team0 (unregistering): Port device team_slave_0 removed [ 60.473010][ T5986] veth0_macvtap: entered promiscuous mode [ 60.475851][ T5986] veth1_macvtap: entered promiscuous mode [ 60.479873][ T5965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.626719][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.629986][ T5986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.635617][ T1070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.635708][ T1070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.635787][ T1070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.640911][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.703185][ T5965] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.706699][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.706757][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.707652][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.707673][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.883660][ T6453] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 60.885407][ T6453] tipc: Enabled bearer , priority 10 [ 60.967612][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.967641][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.021668][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 61.034698][ T5778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.034731][ T5778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.077628][ T6006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.108333][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.114146][ T6006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.135667][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 61.135702][ T30] audit: type=1400 audit(61.120:21): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 61.135723][ T30] audit: type=1400 audit(61.120:22): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 61.135738][ T30] audit: type=1400 audit(61.120:23): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 61.135752][ T30] audit: type=1400 audit(61.120:24): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 61.135766][ T30] audit: type=1400 audit(61.120:25): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 61.135778][ T30] audit: type=1400 audit(61.120:26): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 61.135792][ T30] audit: type=1400 audit(61.120:27): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 61.159499][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.161155][ T6006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.195497][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.195865][ T6006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.216326][ T6006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.218227][ T6510] hsr0: entered allmulticast mode [ 61.218256][ T6510] hsr_slave_0: entered allmulticast mode [ 61.218287][ T6510] hsr_slave_1: entered allmulticast mode [ 61.222026][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'. [ 61.251772][ T6510] hsr_slave_0: left promiscuous mode [ 61.271700][ T6510] hsr_slave_1: left promiscuous mode [ 61.293803][ T6510] hsr0 (unregistering): left allmulticast mode [ 61.302067][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 61.326894][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.306'. [ 61.343764][ T6523] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 61.350325][ T6524] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.362074][ T1070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.384110][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.389186][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.392626][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.392671][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.396992][ T5535] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.397033][ T5535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.423496][ T6006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.423530][ T6006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.436345][ T6539] netlink: 5332 bytes leftover after parsing attributes in process `syz.3.308'. [ 61.488828][ T6548] netlink: 'syz.3.309': attribute type 2 has an invalid length. [ 61.535659][ T5965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.638856][ T5965] veth0_vlan: entered promiscuous mode [ 61.646418][ T5965] veth1_vlan: entered promiscuous mode [ 61.697089][ T5965] veth0_macvtap: entered promiscuous mode [ 61.699390][ T5965] veth1_macvtap: entered promiscuous mode [ 61.708396][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.726201][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.734826][ T5965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.735661][ T6580] bonding: no command found in bonding_masters - use +ifname or -ifname [ 61.822504][ T30] audit: type=1400 audit(61.810:28): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 61.822556][ T30] audit: type=1400 audit(61.810:29): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=4400 comm="dhcpcd" daddr=ff02::2 [ 61.831610][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 61.860354][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.860384][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.880325][ T5535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.880355][ T5535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.911749][ T5535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.911935][ T5535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.911967][ T5535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.911992][ T5535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.997053][ T6006] veth0_vlan: entered promiscuous mode [ 62.019844][ T6610] loop4: detected capacity change from 0 to 1024 [ 62.030007][ T6610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.044431][ T6006] veth1_vlan: entered promiscuous mode [ 62.050098][ T6006] veth0_macvtap: entered promiscuous mode [ 62.051147][ T6006] veth1_macvtap: entered promiscuous mode [ 62.067394][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.075992][ T6610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.076406][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.182721][ T5778] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.182884][ T5778] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.182919][ T5778] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.182943][ T5778] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.216950][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.216983][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.246095][ T5535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.246123][ T5535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.269044][ T6642] syz_tun: entered allmulticast mode [ 62.280841][ T6641] syz_tun: left allmulticast mode [ 62.340639][ T30] audit: type=1400 audit(62.320:30): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=",:" requested=w pid=6648 comm="syz.0.319" daddr=fe80::bb dest=20000 [ 62.375996][ T6653] 8021q: VLANs not supported on ip6tnl0 [ 62.378298][ T6651] netlink: 'syz.6.318': attribute type 1 has an invalid length. [ 62.395728][ T6651] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 62.398520][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.318'. [ 62.399846][ T6651] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.524415][ T6683] sctp: [Deprecated]: syz.3.325 (pid 6683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 62.524415][ T6683] Use struct sctp_sack_info instead [ 62.552829][ T6686] loop5: detected capacity change from 0 to 256 [ 62.671383][ T6697] No such timeout policy "syz1" [ 62.703247][ T6700] loop5: detected capacity change from 0 to 256 [ 62.708932][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 62.891569][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 63.475838][ T6769] bonding: no command found in bonding_masters - use +ifname or -ifname [ 63.550811][ T6776] netlink: 'syz.3.332': attribute type 1 has an invalid length. [ 63.574841][ T6776] bond2: (slave veth0_to_bond): Releasing backup interface [ 63.619147][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 63.623596][ T6776] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 63.627242][ T6778] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.941567][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 64.493953][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495207][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.501022][ T9] cfg80211: failed to load regulatory.db [ 64.511125][ T6788] netlink: 'syz.0.335': attribute type 12 has an invalid length. [ 64.574251][ T6793] loop3: detected capacity change from 0 to 1024 [ 64.574611][ T6793] EXT4-fs: Ignoring removed bh option [ 64.584973][ T6793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.601149][ T6797] Injecting memory failure for pfn 0x133ebe at process virtual address 0x20000000 [ 64.605044][ T6797] Memory failure: 0x133ebe: Sending SIGBUS to syz.0.339:6797 due to hardware memory corruption [ 64.605091][ T6797] Memory failure: 0x133ebe: recovery action for dirty LRU page: Recovered [ 64.605112][ T6797] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 64.605205][ T6797] Memory failure: 0x219270: Sending SIGBUS to syz.0.339:6797 due to hardware memory corruption [ 64.605224][ T6797] Memory failure: 0x219270: recovery action for already poisoned page: Failed [ 64.663107][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.981559][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 65.064988][ T6610] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.096651][ T6806] netlink: 'syz.6.344': attribute type 1 has an invalid length. [ 65.098389][ T6806] netlink: 32 bytes leftover after parsing attributes in process `syz.6.344'. [ 65.112075][ T1010] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.139611][ T6812] loop5: detected capacity change from 0 to 256 [ 65.206261][ T5965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.232155][ T6821] loop6: detected capacity change from 0 to 512 [ 65.233900][ T6821] EXT4-fs: inline encryption not supported [ 65.241917][ T6821] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 65.246520][ T6821] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.350: invalid indirect mapped block 2683928664 (level 1) [ 65.249782][ T6821] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 65.251504][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 65.251532][ C1] EXT4-fs (loop6): initial error at time 65: ext4_free_branches:1023: inode 13 [ 65.251562][ C1] EXT4-fs (loop6): last error at time 65: ext4_free_branches:1023: inode 13 [ 65.260442][ T6821] EXT4-fs (loop6): 1 truncate cleaned up [ 65.262355][ T6821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.271455][ T6821] EXT4-fs (loop6): shut down requested (2) [ 65.273426][ T1010] usb 1-1: Using ep0 maxpacket: 8 [ 65.308796][ T6828] loop4: detected capacity change from 0 to 1024 [ 65.312329][ T6828] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 65.312396][ T6828] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.318992][ T6828] jbd2_journal_init_inode: Cannot locate journal superblock [ 65.319023][ T6828] EXT4-fs (loop4): Could not load journal inode [ 65.383779][ T5724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.436947][ T6844] netlink: 72 bytes leftover after parsing attributes in process `syz.6.355'. [ 65.437373][ T6844] netlink: 64 bytes leftover after parsing attributes in process `syz.6.355'. [ 65.460279][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.6.356'. [ 65.468327][ T6846] netlink: 48 bytes leftover after parsing attributes in process `syz.6.356'. [ 65.470395][ T6846] netlink: 48 bytes leftover after parsing attributes in process `syz.6.356'. [ 65.533004][ T6850] process 'syz.4.358' launched './file0' with NULL argv: empty string added [ 65.537658][ T6850] netlink: 'syz.4.358': attribute type 1 has an invalid length. [ 65.539855][ T6850] netlink: 'syz.4.358': attribute type 2 has an invalid length. [ 65.634726][ T6854] loop3: detected capacity change from 0 to 256 [ 65.676424][ T6863] Soft offlining pfn 0x219270 at process virtual address 0x20ffc000 [ 65.678128][ T6863] Soft offline: 0x219270: page already poisoned [ 65.685445][ T6864] netlink: 332 bytes leftover after parsing attributes in process `syz.6.356'. [ 65.685484][ T6864] netlink: 160 bytes leftover after parsing attributes in process `syz.6.356'. [ 65.710963][ T6866] loop4: detected capacity change from 0 to 2048 [ 65.855001][ T6866] loop4: p1 < > p3 [ 65.857949][ T6866] loop4: p3 size 134217728 extends beyond EOD, truncated [ 65.896601][ T1010] usb 1-1: unable to get BOS descriptor or descriptor too short [ 65.896716][ T1010] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.897868][ T1010] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 65.897888][ T1010] usb 1-1: can't read configurations, error -71 [ 65.994761][ T4728] udevd[4728]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 66.003695][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 66.011559][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 66.163243][ T6882] netlink: 'syz.4.371': attribute type 5 has an invalid length. [ 66.298322][ T6897] bond0: option arp_interval: invalid value (+v) [ 66.299905][ T6897] bond0: option arp_interval: allowed values 0 - 2147483647 [ 66.319481][ T6899] binder: 6898:6899 tried to acquire reference to desc 0, got 1 instead [ 66.356283][ T24] binder: release 6898:6899 transaction 26 out, still active [ 66.356315][ T24] binder: undelivered TRANSACTION_COMPLETE [ 66.356382][ T24] binder: send failed reply for transaction 19 to 6898:6899 [ 66.443895][ T4826] binder: undelivered TRANSACTION_COMPLETE [ 66.444792][ T4826] binder: undelivered TRANSACTION_ERROR: 29189 [ 66.444829][ T4826] binder: send failed reply for transaction 26, target dead [ 67.051695][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 67.629327][ T6925] loop5: detected capacity change from 0 to 256 [ 67.630998][ T6925] vfat: Unknown parameter 'rodFñ/`)y_'ffff8000939aab80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 90.370123][ T7515] ^ [ 90.370128][ T7515] ffff8000939aac00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 90.370133][ T7515] ffff8000939aac80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 90.370137][ T7515] ================================================================== [ 90.415482][ T7515] Disabling lock debugging due to kernel taint [ 90.416679][ T7515] Unable to handle kernel paging request at virtual address ffff8000939aabe0 [ 90.418252][ T7515] KASAN: probably user-memory-access in range [0x000000049cd55f00-0x000000049cd55f07] [ 90.419911][ T7515] Mem abort info: [ 90.420566][ T7515] ESR = 0x0000000096000047 [ 90.421390][ T7515] EC = 0x25: DABT (current EL), IL = 32 bits [ 90.422791][ T7515] SET = 0, FnV = 0 [ 90.423540][ T7515] EA = 0, S1PTW = 0 [ 90.424295][ T7515] FSC = 0x07: level 3 translation fault [ 90.425633][ T7515] Data abort info: [ 90.426361][ T7515] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 90.427523][ T7515] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 90.428662][ T7515] GCS = 0, Overlay = 0, DirtyBit = 0 [ 90.429716][ T7515] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b049000 [ 90.431144][ T7515] [ffff8000939aabe0] pgd=0000000000000000, p4d=1000000221341003, pud=1000000221342003, pmd=1000000106ce6403, pte=0000000000000000 [ 90.433886][ T7515] Internal error: Oops: 0000000096000047 [#1] SMP [ 90.435124][ T7515] Modules linked in: [ 90.435834][ T7515] CPU: 0 UID: 0 PID: 7515 Comm: syz.3.541 Tainted: G B L syzkaller #0 PREEMPT [ 90.437575][ T7515] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 90.438493][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 90.440259][ T7515] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 90.441669][ T7515] pc : sys_imageblit+0xc30/0x1758 [ 90.442603][ T7515] lr : sys_imageblit+0xc28/0x1758 [ 90.443478][ T7515] sp : ffff800092467570 [ 90.444221][ T7515] x29: ffff8000924675f0 x28: dfff800000000000 x27: ffff8000939a9bf8 [ 90.445718][ T7515] x26: ffff8000939aabe0 x25: ffff0000c2471eb1 x24: 0000000000000004 [ 90.447211][ T7515] x23: 0000000000000000 x22: ffff8000939aabe0 x21: 0000000000000000 [ 90.448646][ T7515] x20: ffff0000c2471eb2 x19: ffff8000924675c8 x18: 1fffe00034bb7428 [ 90.450118][ T7515] x17: 0000000000000003 x16: ffff800088b37000 x15: ffff800088bed220 [ 90.451512][ T7515] x14: ffff0001a5dba14c x13: 0000000000000001 x12: 0000000000000000 [ 90.452985][ T7515] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000000 [ 90.454454][ T7515] x8 : ffff0000cf29ba80 x7 : 0000000000000000 x6 : ffff8000803b6ef8 [ 90.455936][ T7515] x5 : 0000000000000000 x4 : 0000000000000008 x3 : ffff8000802f62f4 [ 90.457449][ T7515] x2 : 0000000000000000 x1 : ffff0000cf29ba80 x0 : ffff8000939aabe0 [ 90.458916][ T7515] Call trace: [ 90.459533][ T7515] sys_imageblit+0xc30/0x1758 (P) [ 90.460476][ T7515] drm_fbdev_shmem_defio_imageblit+0x38/0x144 [ 90.461630][ T7515] soft_cursor+0x534/0x6bc [ 90.462456][ T7515] bit_cursor+0xaac/0x112c [ 90.463247][ T7515] fbcon_cursor+0x344/0x498 [ 90.464034][ T7515] set_cursor+0x1a0/0x200 [ 90.464778][ T7515] putconsxy+0x60/0xac [ 90.465498][ T7515] vcs_write+0x670/0xae4 [ 90.466260][ T7515] vfs_write+0x2a4/0xa0c [ 90.467024][ T7515] ksys_write+0x12c/0x228 [ 90.467818][ T7515] __arm64_sys_write+0x84/0x98 [ 90.468641][ T7515] invoke_syscall+0x98/0x244 [ 90.469454][ T7515] el0_svc_common+0xec/0x23c [ 90.470287][ T7515] do_el0_svc+0x4c/0x5c [ 90.471016][ T7515] el0_svc+0x64/0x260 [ 90.471725][ T7515] el0t_64_sync_handler+0x44/0x104 [ 90.472614][ T7515] el0t_64_sync+0x198/0x19c [ 90.473441][ T7515] Code: aa1a03e0 97b7a66d aa1a03e0 d34416e9 (f8008415) [ 90.474653][ T7515] ---[ end trace 0000000000000000 ]--- [ 90.811357][ T7515] Kernel panic - not syncing: Oops: Fatal exception [ 90.812570][ T7515] SMP: stopping secondary CPUs [ 90.813459][ T7515] Kernel Offset: disabled [ 90.814249][ T7515] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 90.815421][ T7515] Memory Limit: none [ 91.144900][ T7515] Rebooting in 86400 seconds..