last executing test programs: 3m57.04373952s ago: executing program 2 (id=52): bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="40003300d0000000ffffffffffff08021100000050505050505070000f03"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50010000100001002cbc700000000008fc000000000000000000000000000001fe880000000000000000000400c95b9ca2257deeb1ab100963652f23a483c9f2", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff640101000000000032000000000000000000000000000000000000000700000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000fcffffffffffffff0000000000000000090000000000000001000000000000000008400000000000090000000000000092020000000000000010000000000000000000000000000007350000020004002c00000000000000600002006362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000006e000b000018002000000000000000007ffffffe00001818"], 0x150}}, 0x44050) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xfff7, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r8 = socket$packet(0x11, 0x2, 0x300) syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') sendto$packet(r8, 0x0, 0x0, 0x8045, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3m56.80662492s ago: executing program 2 (id=54): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r3], 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ppoll(0x0, 0x0, &(0x7f0000006580)={0x0, 0x989680}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xffffffe4) 3m56.722509724s ago: executing program 2 (id=57): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18}, './file1\x00'}) r1 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMGETINFO(r1, 0x80204d01, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast1, 0x4e22, 0x0, 'sh\x00', 0x36, 0x3, 0x1f}, 0x2c) syz_emit_ethernet(0xfa, &(0x7f0000000440)={@local, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x3}, {0x80}, {0x0, 0x0, 0x1}, {0x1ff, 0x0, 0x1}, {0x6, 0x0, 0x1}, {}, {0x8, 0x0, 0x1}], @llc={@snap={0x0, 0x1, "95cf", "00860f", 0x3a1e64bf85db44ce, "3452293d4cbe1594cc6a3cfc1216e01572e797b2c06e2b9e18cda1c416825233174ba15934ada7b6ab4b462b3c7d3e592a210e954de4e8b12b0c7e202317deb36e12f80a611ec7bcef97663bb299bcf6a31057fa87e71e9172e695a00000f62589ea0898620562af6838ec92fc7a86df4b67ef1fe0ec8214d3271a1a789f1b17c90cfd3b50f904e963df223442dd10262e9c3a0066edf26171294fec4bf994b1ee522ee2642ad590cf351e4915a729418ace9da3679f053573b1fbe322ff52"}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='sub:*v', 0x6) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000040)={0xffff, 0x10000, 0x2, 0x1}, 0x10) 3m56.441190649s ago: executing program 2 (id=60): syz_emit_ethernet(0x52, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1, 0x108}]}, @generic={0x7, 0x7, "04030e0000"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'wlan1\x00', 0x200}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") setxattr$security_ima(&(0x7f0000000400)='./file1\x00', &(0x7f0000000140), &(0x7f0000000440)=ANY=[], 0x700, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0xfffffffd, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5555555555550101}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r5, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x142, 0x60) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='3', 0x4e) 3m56.187355561s ago: executing program 2 (id=61): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x7e, 0x31, 0xf01, 0x0, 0xfffffddb, 0x7ff, 0x0}) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) setns(0xc9, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000006, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r8 = memfd_create(&(0x7f0000002a40)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad;\x92\n\x8d\xb6I\x1fQ\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\xa7Wd\xa4Eu\x8cs\xe0\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceYH\x8f\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xbf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xb6\x87\xa43\xdc50V-\x13F\xb6&\xcb\xa3\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xad\xcf`*8&\feeV\x17U=(\xff\xe5t\xe4\xe6\xd8\x8f\x81\xa02\xfed\xde\x03\xdbN98\xb1\x8b\xccg2_\xc4bA\xf1\xf8\xfb\xf8\xd0\xfb_\x1e\"\xedF\x17$\x9e\xd8\xae\xc1\xaf\xee%\x1c\xc6V\x17\x03\xa6&\xa86\xc3\xd5\x02\x10g\x02(EI\x8d\x19\xefJ\xc1x\x92\x8c\x05\xb9\xd2Y\xa0\x13|\x95\xce\x86in\xd4\xd0\xb4\x02?gl\x8f\x1e\xa0\xe5\xf9\xe5\xc9\x9eG\xa9\x14\xff\xe2p\xb4\xda\x1b\t\xc7t\xe3\xe8\xb2\xa5\\\xc6\f\r\xb4\xc1o\x9aS\xf2+\xf7\r04\xb3\xf8\xe38\v\xa4\xbdf', 0x1) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r8, 0xbc4cd000) read$FUSE(r7, &(0x7f0000000640)={0x2020}, 0x2020) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x80043, 0x0) ioctl$TCFLSH(r9, 0x540b, 0x8000000000000001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r4, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) 3m55.802154826s ago: executing program 2 (id=65): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="381cab68"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x888, 0x4) 3m55.756703694s ago: executing program 32 (id=65): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="381cab68"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x888, 0x4) 3m52.064679032s ago: executing program 1 (id=91): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x0, 0x0, 0x0, 0x0, 0x700}}) 3m52.0471393s ago: executing program 1 (id=92): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xf) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, 0x7, 0x2) futex(0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x10c}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async, rerun: 64) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) getdents64(r5, 0x0, 0x0) (async) lseek(r5, 0x200, 0x1) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f000070c000/0xb000)=nil, 0xb000, 0x2000001, 0x10, r1, 0x967d2000) (async, rerun: 32) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000f40)=ANY=[], 0x123) 3m51.050461977s ago: executing program 1 (id=107): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x345100, 0x1d1) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009965, r2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0xb7) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r8 = io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0xebb9, 0x80, 0x0, 0x215}) io_uring_register$IORING_REGISTER_MEM_REGION(r8, 0x22, &(0x7f0000002480)={&(0x7f0000002440)={0x0, 0x0, 0x0, 0x7fffffff, 0x10000}, 0x1}, 0x1) r9 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7f, 0x2000) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_CREATE(0xffffffffffffffff, 0xc028644b, &(0x7f0000000280)={0x0, 0x6, 0x320000, 0x9, 0xc0000000, 0x0, 0xd}) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r9, 0xc008644c, &(0x7f00000002c0)={r10}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_crypto(r9, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1000006924110c02c79849dd65970029bd7000fbdbd9663d0267dfbc390d94f15135eda3c6f2410f0fc38af553450b724f4b9e230312243b4ee04130d82f8ab9cff8502065d009609ef1f5e81aa27dbba0dc020000005c936274d53b50d41b0e74f8712553dc41edb19e085004192bf8a60d4f5106af0270780bb3ca8a08058f86623de63900000000000000"], 0x10}, 0x1, 0x0, 0x0, 0x24000051}, 0x20041001) 3m50.39452164s ago: executing program 0 (id=115): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000017c0)={0x48, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "21031796eaff439f527f051611b600d6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x8008089) 3m49.416346765s ago: executing program 1 (id=119): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTaC90LCFWVEBUnDm1I3CiKXUexK5rQQ3rkXolKnID/gBsHpJ44cOMGNy7lgFSgAjVIHIxmPEndxE4CceIm/v2kycx7M/X3Xtz3nudFnhfA0LoUEZsRcS4i7kTEVJ6f5Ftcb2/pdS9fPFzYevFwIYlW69bfk+x8mhcd/yb1Vv6a4xHx/e9E/CjZG7exvrEyX61W1vL0dLO2Ot1Y37i6XMhzynOzczMfX/uo3Le6vlf79fNvL9/4wW9/86Vnf9j85k/SYk3+9EJ2rrMe/dSuejEmO/JGI+LGcQQbkNH8/w+nT9raPhMR72ftfypGsncTADjLWq2paE11pgGAsy69/5+MpFDK5wImo1AoldpzeO/GRKFabzSvTNXv31uMbA7rYhQLd5erlZl8rvBiFJM0PZsdv0qXX0s/rlyLiHci4vHY+ex8aaFeXRzkBx8AGGJv7Rr//zXWHv87FQdVOADg+IwPugAAwIkz/gPA8DH+A8Dw+R/Gf98OBIAzwv0/AAwf4z8ADJ8Dx/9HJ1MOAOBEfO/mzXRrbbWff739pO6ri5XGSql2f6G0UF9bLS3V60vVSmmh1Tro9ar1+urshzvJxvrG7Vr9/r3m7eXa/FLldsWzBABg8N557+mf0kF/85Pz2RYdazkYq+FsKwy6AMDAjAy6AMDA+D4PDK9D3OObBoAzrssSvW35BEHS64InFn+F0+ry583/w7A6yvy/uQM43f6/+f9v9b0cwMkzhsPwarUSa/4DwJAxxw/0/Pt/rucjQp70vywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwWkxmW1IoZWuBb6Y/C6VSxIWIuBjF5O5ytTITEW9HxB/HimNpenbQhQYAjqjw1yRf/+vy1AeTu8+eS/49lu0j4sc/v/WzB/PN5tpsmv+PnfzmkzT/fHOtfG4QFQAAOl3fm5WN3+V833Ej//LFw4Xt7SSL+PzT9uKiadytfGufGY3RbD8exYiY+GeSp9vSzysjfYi/+SgiPrdd//F40BFhMpsDaa98ujt+GvtC3+N3/v53xy+8Vt9Cdi7dF7PfxWdjV+GAAz39tN1P5m0vbeJ5+yvEpWzfvf2PZz3U0aX9X9pct/b0f4Wd/m9kT/wka/OXdtL7l+T5h7/77p7M1lT73KOIL4x2i5/sxE+697/FDw5Zxz9/8cvv9zrX+kXE5a71316RupZ1s9PN2up0Y33j6nJtfqmyVLlXLs/Nzs18fO2j8nQ2R93++ftuMf72yZW3e8VP6z/RI/74/vWPrx2y/r/8z50ffmWf+N/4avf3/9194qdj4tcPGX9+4nrP5bvT+Is96n/A+x9XDhn/2V82Fg95KQBwAhrrGyvz1Wpl7YCD9LPmQdc4OPxBem//BhQjO4jNiM6ckSO8YDYpERFdr0k/Ub8ZVT6ug2Rg0X/V7xccdM8EHLdXjX7QJQEAAAAAAAAAAAAAAHpprG+sjHX/tlbfDgZdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6u/wYAAP//ydTDwA==") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) ioctl$KDENABIO(r0, 0x4b36) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @mcast2, 0x7ff}}, 0x24) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x4, 0x200, &(0x7f0000000880)="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"}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@mcast1, @in=@multicast1}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) close(0x3) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xa7}, @in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x85, &(0x7f0000000200)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa7614a93ec085d1d3caf76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808fdd3b04603f0cd79529f6d4b86ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec33"}, &(0x7f0000000500)=0x90) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) pwrite64(r8, &(0x7f0000000180)="95", 0xffaf, 0x10001) 3m49.33964449s ago: executing program 0 (id=120): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000004800d96d28bd7000fedbdf250a003800", @ANYRES32, @ANYBLOB="0100000014000100fcf8000000000000000000000000000014000100fe8000000000000000000000000000aa080002"], 0xb4}}, 0x80) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async, rerun: 32) r2 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) (rerun: 32) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x26, 0x2, 0x3, "a677c17a067fd75f4600000069aece62bd255776000000000000004000", 0x31324d59}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x400}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={r5, @multicast2, @multicast2}, 0xc) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) fremovexattr(r4, &(0x7f0000000180)=@known='system.posix_acl_default\x00') 3m49.239422756s ago: executing program 0 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x8cff) 3m49.165570127s ago: executing program 0 (id=124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo(r4, r3, 0x1f, &(0x7f00000003c0)={0x14, 0x1851, 0xc}) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) open_by_handle_at(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="0c000000fe0000"], 0x0) capset(&(0x7f00000001c0)={0x20071026, r3}, &(0x7f0000000200)={0x6, 0x5, 0x4, 0xfffffffc, 0x10, 0x6}) chdir(&(0x7f0000000380)='./file0\x00') mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050a00000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) 3m49.107367811s ago: executing program 0 (id=126): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) openat$rtc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x2) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x39b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000100)) sendto$inet6(r4, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffd, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) shutdown(r4, 0x1) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000440)={0x0, 0x0, {0xa, 0x0, 0x3001, 0x6, 0xc, 0x0, 0x1, 0x4}}) 3m48.990243686s ago: executing program 1 (id=129): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f00000001c0)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4aa, &(0x7f0000000000)={[{@nodiscard}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@oldalloc}, {@usrjquota, 0x22}, {@lazytime}, {@jqfmt_vfsv0}, {@dax}]}, 0x1, 0x461, &(0x7f0000001200)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) listen(r0, 0xfffffffc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000"], 0xfc}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000002a40)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9000e", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x2, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x6, 0x1, 0xce, 0x5}]}}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 3m48.865495133s ago: executing program 0 (id=130): syz_emit_ethernet(0x42, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x5, 0x0, 0x64, 0x300, 0x2, 0x11, 0x6, @empty, @local}}}}}}, 0x0) 3m48.765187031s ago: executing program 33 (id=130): syz_emit_ethernet(0x42, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x5, 0x0, 0x64, 0x300, 0x2, 0x11, 0x6, @empty, @local}}}}}}, 0x0) 3m48.47389467s ago: executing program 1 (id=137): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40041, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 3m48.357261007s ago: executing program 34 (id=137): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40041, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 40.942235341s ago: executing program 7 (id=588): syz_read_part_table(0x1070, &(0x7f0000001080)="$eJzszb1JBEEYBuB3uZ31DgVjK7ANU4sSDazA1MAObMHUkgSDT2actQU5eB6W5fvjnfCvTh/tNkk9JqccxuiYvK+/25d5Vdfpy69Kvuui6r6ypCXZekRSVXtgLXvT8vC2tmNuxnjoxd08bOO/9YRcXY7mM0953ZLnZBlft+awlzNlvrX9hQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAmfsJAAD//zx1JVA=") r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x38, 0x1, 0x70bd24, 0xfffffffc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x20004812}, 0x40080) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001680)=@filter={'filter\x00', 0xe, 0x1, 0x9f6, [0x0, 0x20000000, 0x20000030, 0x200009c6], 0x0, 0x0, &(0x7f0000000000)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x6, 0x4, 0x201, 'veth1_to_bridge\x00', 'macvtap0\x00', 'bridge_slave_1\x00', 'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff], 0x936, 0x936, 0x966, [@realm={{'realm\x00', 0x0, 0x10}, {{0x5, 0x80000001, 0x1}}}, @among={{'among\x00', 0x0, 0x868}, {{@offset=0xc, @offset=0x438, 0x1, {[0xfffffffe, 0x40, 0xffffdc0a, 0x4, 0xbef4, 0xe00, 0x8, 0xb, 0x3, 0xffff, 0x5, 0x8, 0xb, 0x7, 0x8, 0x0, 0x6, 0x2, 0x101, 0x2, 0x5, 0x3, 0x5, 0x6, 0xc, 0x3, 0x5833, 0x401, 0x2d, 0x8000, 0x161, 0x8, 0xe8a5, 0xd1, 0x5, 0x6, 0x4, 0x1ca, 0xfa13, 0x4, 0x2, 0xfffffffc, 0x6, 0xff, 0x4, 0x2, 0x7, 0x8, 0x5, 0xfffffff7, 0x81, 0x3, 0x4, 0x5, 0x6, 0x6, 0xffffffff, 0x28, 0x10001, 0x4, 0x229b, 0x7, 0x6, 0x8000, 0xf0000000, 0x8, 0xfffffffd, 0x3, 0x1ff, 0x7fff, 0x1, 0x29, 0x2, 0x63f56c26, 0x8001, 0xffffff80, 0x25d, 0x4, 0x3, 0x8a, 0x6, 0x4f74, 0xb6f, 0x81, 0x6daf829e, 0x5, 0x8, 0x6, 0x8, 0x6, 0x3, 0x2, 0x0, 0x80, 0x800, 0x2b, 0x43019a77, 0x5, 0x6, 0x1ff, 0x4, 0xfffffffd, 0x3, 0xfffff801, 0x9, 0x7, 0x8, 0x0, 0x2a3, 0x9, 0xffffffdf, 0xfffffffe, 0xb4, 0x8, 0x7, 0xff, 0x9, 0x0, 0x3, 0x4, 0x5, 0x4, 0x6, 0x40, 0x9, 0x3ff, 0x7d, 0x81, 0x800, 0x1, 0x1, 0x2, 0x7ff, 0x41ea, 0x0, 0x7f, 0xffffffff, 0xffffff00, 0x7ff, 0x0, 0x3, 0x95, 0x9, 0x80000001, 0x5, 0x3, 0xfffffffd, 0x3, 0x5, 0x1, 0x31f, 0x3, 0xec, 0x10, 0x2, 0x6, 0x5, 0x6, 0x0, 0x10000, 0x5, 0x6, 0x24c, 0x4f5, 0x3, 0x9, 0x0, 0x5, 0x4, 0x40, 0x3, 0x10001, 0xfffffffa, 0x60000000, 0x4d6, 0xceb, 0x0, 0x1002, 0x7, 0x9, 0x7, 0x6, 0x10, 0x8, 0xfffffffe, 0x2d89, 0xfffff0f9, 0x6, 0x29, 0x4, 0x1000, 0x5, 0x5, 0x4, 0x10001, 0x3, 0x5, 0x5, 0x401, 0x0, 0x5, 0x2, 0x9, 0xcd, 0xff, 0xc, 0x5, 0x15, 0x4, 0x3, 0x9, 0x10, 0xd, 0xe0, 0x5, 0xfcc3, 0x7, 0x3, 0xd0f5, 0x1000, 0x9, 0xae4, 0x8001, 0x8, 0x1ff, 0x100, 0x1, 0xc318, 0xfff, 0xfff, 0x4, 0x0, 0xc, 0x5, 0x81, 0x2b01cb5a, 0x3, 0x1, 0x6bb6, 0xffff5f30, 0xffffffff, 0x4, 0x9, 0x1c, 0x2, 0xf, 0x1, 0x5, 0x4bbe, 0x0, 0x2, 0x1, 0x7ff, 0x8, 0xffff, 0x58501893], 0x3, [{[0x1, 0x9], @multicast1}, {[0x4], @broadcast}, {[0x6, 0x9], @multicast2}]}, {[0x5, 0x4, 0x3, 0xa, 0x42, 0xf75, 0x0, 0x88, 0xffffff01, 0xb32, 0x3ff, 0x8, 0x7, 0x9, 0x1da, 0x8, 0x8, 0x9, 0xb46, 0x2a, 0x7, 0x80, 0xba, 0x3, 0xf, 0x7ff, 0x0, 0x3ff, 0x9, 0x2, 0xcdb0, 0xfffffffd, 0x401, 0x55, 0x2d1, 0xd, 0x78, 0x0, 0x7, 0xffff, 0x2, 0x791, 0x0, 0x0, 0xc00000, 0x19eef161, 0x9, 0x0, 0x79, 0xfffffffe, 0x7, 0x7f, 0xb3, 0x2, 0x480000, 0xb, 0x10, 0x0, 0x0, 0x5, 0xd, 0x3ff, 0x6, 0x8, 0x7, 0xffffffff, 0x7fffffff, 0x94, 0x6f4000, 0x5, 0x0, 0x0, 0xfffffffc, 0x5, 0xb, 0x4, 0x0, 0x100, 0xd, 0x5, 0x5, 0xd75, 0x9, 0x18e, 0x5, 0x7, 0xff, 0x2, 0x7, 0x6, 0xff, 0x2, 0x401, 0x0, 0x2, 0x4, 0x8000, 0x3, 0x200, 0x4, 0x1, 0x754000, 0x1, 0x5, 0x4d, 0x5, 0x8, 0x0, 0x0, 0x0, 0x1ff, 0x81, 0x3, 0xb33, 0x10, 0x101, 0x9, 0x8, 0x0, 0x1, 0x100, 0x92f7, 0x8b25, 0x2, 0xffffffff, 0x7, 0x4, 0x2, 0x9, 0x2, 0x80, 0x0, 0x1000, 0xfffff1b8, 0x3fa8, 0x6, 0x9, 0x6be, 0x400, 0x2, 0x3, 0xfffffff5, 0x1, 0x40, 0x2, 0x5, 0xffffffff, 0xb5, 0x7fff, 0x80, 0x5, 0x39e8, 0x5, 0x8000, 0x8, 0x5, 0x9, 0x6499, 0xfffffffb, 0x8000, 0x8, 0x5, 0x1, 0x2, 0x101, 0x10001, 0x8, 0x8, 0xffffffff, 0x6, 0x5, 0x6a855ce7, 0x9, 0x81, 0x3, 0x4, 0x80000000, 0x6, 0x9, 0x9, 0x1, 0x7ff, 0x5, 0x23a, 0x8001, 0xffffffff, 0xbc54, 0x4, 0x2, 0xb50, 0x101, 0x0, 0x4, 0xea, 0x9, 0x80, 0xe4, 0xae, 0x2, 0x80000000, 0xe, 0x7fffffff, 0x2, 0x3ff, 0x2, 0x0, 0x4b, 0x9, 0x8, 0x7, 0x7, 0x3, 0x15, 0x8, 0x80000000, 0x64a, 0x4, 0xfffffffd, 0x7f, 0x6, 0x6, 0x2, 0x7, 0xffffffff, 0x7, 0x4, 0x3, 0x1, 0x40, 0x7fffffff, 0x36, 0x5, 0xd, 0x5d20fa5e, 0x4, 0x4, 0xffffffcc, 0x2, 0x0, 0x2, 0xf, 0x2, 0x8, 0x3e291bc9, 0x7, 0x4, 0x8, 0x3a, 0x200000, 0x50, 0x0, 0x5, 0x1ff, 0x7fffffff, 0xb66, 0x80000001, 0xfffffffc], 0x3, [{[0x10, 0x2], @remote}, {[0xe3, 0x10000], @multicast1}, {[0xfffffff7, 0xe], @local}]}}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x19}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0xa6e) 40.733229256s ago: executing program 7 (id=592): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000030800000000000004000000850000004f000000180100002020782500000000002000800000000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000007b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0/../file0\x00', &(0x7f0000000040)={0xc2800, 0x0, 0x10}, 0x18) r5 = syz_pidfd_open(r3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x63, 0xffffffff, 0x40}) setns(r5, 0x20000000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r6, 0x0, 0x7, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x53, 0x2) 40.677821899s ago: executing program 7 (id=594): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) 40.585251986s ago: executing program 7 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) tee(r0, r0, 0xc, 0x8) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000000c0)) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prlimit64(0x0, 0x2, &(0x7f0000000040)={0xfffffffffffffffc, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x20ffc004) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x282, 0x0) read$FUSE(r2, 0x0, 0x0) setpgid(r1, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xffff) fstat(r4, 0x0) chdir(&(0x7f0000000180)='./file1\x00') sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x34000c24) syz_read_part_table(0x5e3, &(0x7f0000001100)="$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") r5 = getpgid(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f000000aac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000008580)=[{0x18, 0x1, 0x1, "0dd150"}], 0x18}}], 0x2, 0x408c0) setpgid(0x0, r5) 39.67633996s ago: executing program 7 (id=609): syz_read_part_table(0x5df, &(0x7f0000000000)="$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") 39.254344621s ago: executing program 7 (id=616): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000280)="dd2776fad4957e770bbb268dd6ffa80800000000bc000000000000210d0000b3718fc788a18df4830f0eaaa8fa013242fa9380d4240000000000040000002acbaf8e8e6f", 0x44) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000073011b00000000009576387e852a488a1ed72ff73e054a38e3def3ba5b116cc90d6cf82cf11f21bb97553046758f41b70480901b9c4f73ab78286f90b06de7c76350437f3bef830d3aa5d9762d2a6f58d2f172fe2f1bd90e99518cd598bba9aff46d431ee43cb8c346053ea0b7069788d3e53cd3b25240fec1fc8e2630b082366a039b3a280cb5a29f11073021a8820b761ebaa273e4459741af24057bb67ada144de6c5fc60267363a05673159d9c1307049e9ef03d7d1e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xfffffffffffffd1b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@barrier}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000300)={0x0, 0x3d}) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) setpriority(0x1, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r4, &(0x7f0000000300)="a7a96c5a4d5f4d7cbd4fe2c7925d93e1920dfe465315c81f0d51131cf90d056c26dbfbb61532bc6dbee9e4688070d97f50f7d9a557f6682a0000000000fd9f53389766473c5700007f46eb3ef687243eb6d40cdfdbe53e4c5245f8b980a9a6abe2a2372a360060ac10cbd80f18f7992a2b19da94b50e05007f7e0000faeb182e3a51eb1a3a57cc39191c0d74d1551626185e1546e2681086b7d880396e5607499c2191d4e52345cf159b3016c58835f2f8d8249c1e0c2f228a0a30e649810eaef4c14010c32302750616f99b31305d11", 0xd0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000009c0)={&(0x7f0000000400), 0xc, &(0x7f0000000980)={&(0x7f0000000440)={0x18, 0x1404, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000090}, 0xc010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1, 0x400, 0x2, 0x2c2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x48, 0x0, r5, 0x0, 0x0, 0x0, 0x40000000, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001cf30000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13f8ff000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0xffffffffffffff1e}, 0x48) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x720, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x25}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r5) chdir(0x0) socket$inet6(0xa, 0x800, 0x0) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 39.205488026s ago: executing program 35 (id=616): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000280)="dd2776fad4957e770bbb268dd6ffa80800000000bc000000000000210d0000b3718fc788a18df4830f0eaaa8fa013242fa9380d4240000000000040000002acbaf8e8e6f", 0x44) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000073011b00000000009576387e852a488a1ed72ff73e054a38e3def3ba5b116cc90d6cf82cf11f21bb97553046758f41b70480901b9c4f73ab78286f90b06de7c76350437f3bef830d3aa5d9762d2a6f58d2f172fe2f1bd90e99518cd598bba9aff46d431ee43cb8c346053ea0b7069788d3e53cd3b25240fec1fc8e2630b082366a039b3a280cb5a29f11073021a8820b761ebaa273e4459741af24057bb67ada144de6c5fc60267363a05673159d9c1307049e9ef03d7d1e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xfffffffffffffd1b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000040)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@barrier}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$eJzs3M1vVFUbAPDnTqel5eOlLy+vCgGtgpH40dLyIQsTo9GEhUajLjCu6rQQpICBmgghWl1gjAtD4t64NPEvcGF0Y9SViS5xb0iIYQO6uubOvbcfwwxt6dApzO+XXOac+8E5z5x7Zs49904D6FpD2T9JxMaIuBwRmyOi2rjDUP5y49qF2t/XLtSSSNPX/0qyw+L6tQu14r+oL5kN+Yo0LfLrmpR78a2I8ampyTNFfmT65LsjZ8+df+r4yfFjk8cmT40dOrR/386+g2MH2hJnFtf17R+c3rHt8JuXXq4dufT2z99k9d1YbC/jaKeh/N1t6tF2F9Zhm+alk2oHK8KyZO3WWyyXI+3piYHZbZvjxY87WjngTqs2+34uzKTAPSwbqAPdqPyiz65/y2Wx8UIbxx4dd/W5PKIs7hvFkm+pRqXYp7fh+rad+iPiyMw/X2ZL3KF5CACA+b7Pxj9PNhv/VeK+efv9p7iHMhgR/42ILRHxv4jYGhH/j6jve39EPLDM8hvvkNw8/qlcWZBNe5ZZwq1l479nintbC8d/5egvBnuK3KZ6/L3J0eNTk3uL92RP9K7L8qMLDlnohxd++7xx3WfFNPvQvPFftmTlL4ywcqVxgm5ifHp85ZHnrn4Usb3aLP5kdqCfRMS2iNh+m2Ucf/zrHa22NYu/HAsvqg1XIulXEY/l7T8TDfGXkpb3J0efPjh2YKQ/pib3jpRnxYLD6n759eKrrcpfUfxtkLX/+qbnf1797Box6Y84e+78ifr92rO3Ucgfn9SSFpu2FvH3toz/5vO/tjuiL3mjnu4r9ype+5KXspeBcv3749PTZ8bmji3z9dfRPP49u+biH4+5/r8lvzyL5PfXZo/fGREPRsRDRds9HBGPRMSuW4T/0/O732m1rXX732JWvo2y+Cdatv93aZrGYJaaa//lJ3pO/Phtq/LTRc//rP3311N7ijVL+fxbagVX/AYCAADAXaBSfwY+qQzPpiuV4eH8Gf6tsb5SjYgnjp5+79RE/qz8YPRWypmuzfPmQ0eLueEyP9aQ31fMG3/RM1DPD9dOT010Onjochsa+n9a9P/Mn+291QKsRffUE33Asuj/0L30f+he+j90r2frT/vNdLoawGrra776w9WuB9ARyx//99+RegCrz/U/dK96/7/e6VoAneD7H7pSy9/GV1b0k/+7NVFdG9VomhhYG9UoE1FZdJ/KGqnq0hKvfJp3ibVSnzJRXfIfs7jNxLqmm5p+XBzeuLofTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv2bwAAAP//3Irhpw==") ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000300)={0x0, 0x3d}) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) setpriority(0x1, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r4, &(0x7f0000000300)="a7a96c5a4d5f4d7cbd4fe2c7925d93e1920dfe465315c81f0d51131cf90d056c26dbfbb61532bc6dbee9e4688070d97f50f7d9a557f6682a0000000000fd9f53389766473c5700007f46eb3ef687243eb6d40cdfdbe53e4c5245f8b980a9a6abe2a2372a360060ac10cbd80f18f7992a2b19da94b50e05007f7e0000faeb182e3a51eb1a3a57cc39191c0d74d1551626185e1546e2681086b7d880396e5607499c2191d4e52345cf159b3016c58835f2f8d8249c1e0c2f228a0a30e649810eaef4c14010c32302750616f99b31305d11", 0xd0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000009c0)={&(0x7f0000000400), 0xc, &(0x7f0000000980)={&(0x7f0000000440)={0x18, 0x1404, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000090}, 0xc010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1, 0x400, 0x2, 0x2c2}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x48, 0x0, r5, 0x0, 0x0, 0x0, 0x40000000, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0xffffffffffffff1e}, 0x48) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x720, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x25}}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r5) chdir(0x0) socket$inet6(0xa, 0x800, 0x0) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 18.114826432s ago: executing program 3 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.994475882s ago: executing program 3 (id=883): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x18}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090e000000ff000e000a004e22"], 0x70}}, 0x8810) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) ioctl(0xffffffffffffffff, 0x5, &(0x7f0000000280)="82f37e97996a7358b8") r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) syz_open_dev$vim2m(0x0, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3, 0x1}, 0x18, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x410, &(0x7f0000000b80)={[{@numtail}, {@numtail}, {@nonumtail}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@uni_xlate}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@quiet}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x3, 0x28b, &(0x7f00000008c0)="$eJzs3UFrI2UYAOB3mqRJ9JAcPInQAT14Kq2/oFUqiAVByUE9aLEtSCcULASqYuzJX+Av8Pd4Ef/Awl532duWZdlZ0pmkSUmyZEmbsvs8l7583/vOvPPNR3uarz9+0D05PD07vvj9QTQaSaztxE5cJtGOtRj6M6b6//H0cQDgnrvM83iSF+rF0PlkRm1GZXXt1psDAG7F+N//VfcCANyNb7797svd/f29r9O0EdH9q9dJovhZzO8ex8+RxVFsRSueR+QjRfz5F/t7UU0H2vFRt9/rDCq7P/xbXn/3UcRV/Xa0oj29fjstjNX3e51avFPefyeLo6/+iVa8N73+kyn10VmPjz8c638zWvHfT3EaWRyWvQ3r/9hO08/yv5/+9v1gdFCf9Hud+iivzK7c6YsBAAAAAAAAAAAAAAAAAAAAAOCNtpmOtCfP3xke/D9nfs75QP2x83m20jTNkyL/ur4a71ejuspnBwAAAAAAAAAAAAAAAAAAgPvi7PzXk4MsO/plqcHws/6DLHt4YypeTCbXI2LOBT9tFleaca+NRRp7lud5VMrWsiRiseeqRf2q8tXJlQVXrFk8YFKN5b2CZDTSHJ/aGFvMZhHMWd6Fg0ZcBcPddXKQzHu5g6ARy99+gyAvtt/EVGVm1frNkXLbxZTk5py7r7/7Wj3nrRlTSUTURos5/zq15a7hHf0CAgAAAAAAAAAAAAAAAAAARq4/+p0yebGChgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgBa7///8CQb8snpWTVwZBNcqRFT8iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb4GXAQAA//+1wGeE") madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) socket$inet6(0xa, 0x3, 0x1) 17.521963315s ago: executing program 5 (id=895): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000320000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f2030203120312072") 17.452567054s ago: executing program 6 (id=898): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000016"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount(0x0, 0x0, 0x0, 0x2100000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = syz_ublk_setup_io_uring(0x6186, &(0x7f0000000240)={0x0, 0xb2cf, 0x40, 0x3, 0xd6, 0x0, r3}, &(0x7f00000002c0), &(0x7f0000000500), &(0x7f0000000540)) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000980)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000480)=@sco={0x1f, @none}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x79a}}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r9, 0x29, 0x35, 0x0, &(0x7f0000000300)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r11) exit(0x9) r12 = socket$unix(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="a00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000005e000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000040006"], 0xa0}}, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r13, 0x891f, &(0x7f0000000000)={'bond0\x00', @ifru_addrs=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x2}}}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0) 17.386048537s ago: executing program 5 (id=900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) r1 = io_uring_setup(0x62d2, &(0x7f00000004c0)={0x0, 0x3503, 0x400, 0x0, 0x2e0}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) (rerun: 64) write$UHID_CREATE2(r2, &(0x7f0000000540)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000000000)={0x80, 0xfffffffb, 0x5}, 0x0) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, 0xffffffffffffffff, 0x37}, 0x14) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x472dc1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb70300000000f8fdb704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) fcntl$notify(r0, 0x402, 0x80000029) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x8, r0, 0x1}) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x4) 17.323302198s ago: executing program 8 (id=901): migrate_pages(0x0, 0x3, &(0x7f0000000000)=0x2, &(0x7f00000000c0)=0x91e9) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b17, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000001c0)={0x0, 0xffff, 0x0, 0x0, r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffef00000000f1eb000085000000360000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="181a7c0000000000000700000000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 17.106786378s ago: executing program 3 (id=902): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, r0, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) chdir(0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa62d6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0x2, 0x12, r5, 0x8000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fanotify_init(0xf00, 0x1000) socket(0xa, 0x5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x1e, 0x0, &(0x7f0000000280)) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) r7 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x0, 0xfff, 0x8, @mcast2, @empty, 0x10, 0x7, 0x377, 0x5}}) setsockopt$inet6_tcp_int(r7, 0x6, 0x9, &(0x7f0000000000)=0x7, 0x4) 17.104724507s ago: executing program 8 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000180001002dbd7000fddbdf250220300cff02c807007c00000c00090003003b22", @ANYRES32=0x0, @ANYBLOB="08001e80"], 0x30}, 0x1, 0x0, 0x0, 0x8840}, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000094}, 0x0) (async, rerun: 32) fcntl$getown(r1, 0x9) (rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000034000000030a01030000000000000000050000adf4c74e0073797a30000000000900030073797a320000000008000a4000000003140000000b0a010200000000000000000000000a140000001100010000000000000000000000000a"], 0x90}}, 0x40044) (async) semget$private(0x0, 0x0, 0x10) 16.60666243s ago: executing program 5 (id=904): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, r2, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) 16.598652278s ago: executing program 8 (id=905): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000001900)=[0x0], 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000080)=[r6, r6], 0x2, r4, r5, 0x3, 0x0, 0xfff7ffff, 0x6, {0xac7c, 0x1, 0x3, 0x67, 0xb4b, 0x1, 0x2, 0x10, 0x12f, 0xe154, 0x1000, 0x0, 0x6, 0xfffffffc, "fe1d00003413000000000020b42717e47f00"}}) 16.521024828s ago: executing program 6 (id=906): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) 16.468983885s ago: executing program 6 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000320000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f") 16.406571478s ago: executing program 8 (id=909): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000001500), &(0x7f0000000440)=0x4) r2 = socket(0x848000000015, 0x805, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0100000003"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000200)=@tcp, 0x4}, 0x20) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x1b) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69}, 0x42) 16.406094421s ago: executing program 5 (id=910): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x13, 0x141000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3d, &(0x7f0000000040), 0x8) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r2, 0x4010e501, &(0x7f0000000100)={r2}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000240)={0x4, 0xc, 0x2, 0x41, 0x0, 0x5, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x4, 0x800) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f00000000c0)=0x2fe) 16.397465974s ago: executing program 4 (id=911): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0x20004018) 16.380844466s ago: executing program 6 (id=913): bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xc6ac, 0x458480) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000001680)={r2, 0xd, 0x2, 0xffffffffffffd31b}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001700)={r3, &(0x7f0000000680)="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", &(0x7f00000016c0)=@tcp6=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x8045, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 16.33474847s ago: executing program 8 (id=914): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2840, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x100000, 0x0, 0x0}) 16.334026576s ago: executing program 5 (id=915): r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, &(0x7f0000000480)="fa46c1d8b4c5", 0x6, 0x4000, &(0x7f00000005c0)={0x23, 0xd, 0x3b, 0xf}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20040804, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "d63bfe84fa5b58ff", "b046f1c17a242e252881d895738d4c7a008817c6cdeff1469b23f51c41fdae17", "f6a82539", "acf760f7d7de25ea"}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0xd6a6, 0xfffffffb, 0x528, 0xd, 0xe8, 0xc, 0x7fff, 0x3, 0xaa, 0x6, 0x0, 0x80000000, 0x4, 0x8, 0x2, 0x5, 0x2, 0x6, 0x5, 0x7ff, 0x43, 0x101, 0x600, 0x1ff, 0x9, 0x6, 0x3, 0xdd, 0x800, 0xf, 0x5, 0x2, 0x1, 0x7f, 0x1, 0x1, 0x0, 0x7, 0x5805, 0x2, 0x8, 0x8, 0x1000, 0x0, 0x6, 0x32, 0x0, 0x4af, 0x10001, 0xfffffffc, 0x2, 0x1, 0x80000000, 0x6, 0x1, 0x1, 0x100, 0xd, 0x9, 0x7, 0x6, 0xfffffff8, 0x7, 0xe22, 0xff, 0xf, 0x2, 0x4, 0x0, 0x402, 0x80000001, 0x6, 0x7, 0x3ff, 0x2, 0x5, 0xc, 0x8, 0xe9, 0x3, 0x3ff, 0x4d4b, 0x1, 0x5, 0x3, 0xfffffff4, 0xb6a, 0x1, 0x8, 0x570c, 0x1, 0x4, 0x1, 0xff, 0x3, 0x9, 0x4, 0x0, 0x80, 0xa0a2, 0x2a, 0x8, 0x1, 0x7fff, 0x3, 0x2, 0x10001, 0x3ff, 0x9, 0x7, 0x4, 0x7, 0x7fff, 0x8, 0x8, 0x3, 0x6, 0xffffffff, 0x47, 0x743fa18c, 0xbaa3, 0xe, 0x9, 0x226, 0x0, 0xfff, 0x9, 0x8, 0x4, 0x3ff, 0x6, 0x79e6, 0x0, 0xfffffffb, 0x4, 0x8, 0x9, 0x2, 0x10, 0x7, 0xd5, 0x2, 0x1, 0x6, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x6, 0xfffff001, 0x1, 0x6f62, 0x344, 0x0, 0x7, 0x0, 0x2, 0x7, 0x7, 0x8, 0x9, 0x2, 0x0, 0x0, 0x9, 0x401, 0x4, 0x1, 0x4, 0x6, 0x934, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff, 0x2, 0x8000, 0x8, 0x80010, 0xfffffff2, 0x100, 0x7, 0xdb, 0x7fff, 0x3, 0xd5, 0x2, 0x0, 0x15, 0xffff, 0x7295, 0x4, 0x3dd, 0x0, 0x3, 0x9, 0x4, 0xb, 0x10001, 0xd01, 0x7, 0x6, 0xfffffff9, 0x7, 0x0, 0x2, 0x4564, 0x1, 0x5c6, 0x653b, 0x2, 0x0, 0xffffffb1, 0x7, 0xab3, 0x3, 0x3, 0x80000000, 0xffff, 0x7ff, 0xe339, 0x6, 0xe, 0x7, 0x7, 0xa, 0x9, 0x2, 0x8, 0x4, 0x6, 0x5, 0xfffffff4, 0x7, 0x80, 0x3, 0x1c000000, 0x7, 0x3, 0x5, 0x49c, 0x81, 0x80000000, 0xa, 0x4, 0x3, 0x14, 0x3, 0xff, 0x4, 0x9, 0x0, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') cachestat(r4, &(0x7f0000000040)={0xffffffffffffffff, 0xd6f}, &(0x7f00000000c0), 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x10, &(0x7f0000000040)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @map_idx={0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x20, &(0x7f0000000100)=""/32, 0x41100, 0x40, '\x00', r3, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x7, 0x5, 0x7}, {0x4, 0x1, 0x0, 0x7}], 0x10, 0x4}, 0x94) 16.333313431s ago: executing program 4 (id=916): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x141440, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000005c0)={0x2, 0x8, 0x4, 0x0, 0x2, 0x0, 0x10, 0x5, 0xffffffff, 0x3, 0x30, 0xdb, 0x0, 0x0, 0x0}) 16.271595124s ago: executing program 4 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) (fail_nth: 18) 16.206285948s ago: executing program 3 (id=918): r0 = syz_open_dev$video(0x0, 0x8, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x614e00, 0x100) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb, 0xe911}}, 0x20cc03) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[r0, r2, r0]}, 0x3) ioctl$TCSBRKP(0xffffffffffffffff, 0x545d, 0x40000020000000) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0xfb, 0x1}}}, 0x5) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 16.126020111s ago: executing program 4 (id=919): getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "ac8c124857634e9587b874f1e89972fc6c9249cc56d4346204b5d8e437d23c0e2c9377af52097ade3870"}, &(0x7f0000000040)=0x32) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r0, 0xffffffe7}, &(0x7f00000000c0)=0x8) (async) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0xffff, &(0x7f0000000140)=0x4) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001400)=0x0, &(0x7f0000001440)=0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000017c0)={r2, 0xe0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f00000015c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001600), &(0x7f0000001640), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x16, 0x15, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xdad}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x7f, 0x1000, &(0x7f0000000400)=""/4096, 0x41100, 0x2, '\x00', r4, @flow_dissector, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x2, 0xe, 0xa, 0x2}, 0x10, r6, r2, 0x0, &(0x7f0000001800)=[r2]}, 0x94) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000001a00)={0x0, 0x7, 0x6, 0x66fb, 0xfffffffd}) getpeername$packet(r2, &(0x7f0000001c80)={0x11, 0x0, 0x0}, &(0x7f0000001cc0)=0x14) (async, rerun: 32) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001d40)={0x0, 0xfffffff8}, 0xc) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001dc0)=r7}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x0, 0x23, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, @exit]}, &(0x7f0000001b80)='GPL\x00', 0x420, 0x93, &(0x7f0000001bc0)=""/147, 0x41100, 0x11, '\x00', r8, 0x0, r2, 0x8, &(0x7f0000001d00)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=[r2, r2, r9, r10, r2], 0x0, 0x10, 0xbbe}, 0x94) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001f80), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x74, r12, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8001}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xc5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x81}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000000) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002100), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_PAUSE_GET(r13, &(0x7f00000022c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002280)={&(0x7f0000002140)={0x128, r14, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4263bc1c7bac6861}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000002300)={'veth0_to_hsr\x00', 0x7}) (async, rerun: 32) recvmsg$inet_nvme(r2, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/21, 0x15}, 0x20) (rerun: 32) ioctl$BTRFS_IOC_INO_PATHS(r11, 0xc0389423, &(0x7f0000003440)={0x818, 0x28, [0x854b, 0x2, 0xf, 0xd], &(0x7f0000003400)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000036c0)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0xa847, '\x00', 0x0, r2, 0x1, 0x4, 0x2}, 0x50) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000003740)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003800)={0x6, 0x1e, &(0x7f0000003500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf74f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x0, 0x8, 0x1, 0x4, 0xffffffffffffffe0, 0x1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003600)='GPL\x00', 0x3a, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000003680)={0x2, 0x2, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003780)=[r2, r16, r17], &(0x7f00000037c0)=[{0x3, 0x5, 0x5, 0x3}, {0x2, 0x2, 0x6}], 0x10, 0x5}, 0x94) (async) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000038c0)=""/155) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r17, 0xc04064a0, &(0x7f0000003a80)={&(0x7f0000003980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000039c0)=[0x0], &(0x7f0000003a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0], 0x9, 0x1, 0x8, 0x4}) 16.125436437s ago: executing program 5 (id=920): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'geneve0\x00', 0x7}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRES16], 0x50}}, 0x240400c4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r7}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 16.124904138s ago: executing program 8 (id=921): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x9, 0x3}, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x5, 0x0, 0x1, 0x2a}, 0x14) r1 = fsopen(&(0x7f0000002200)='ubifs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000340)={[{@abort}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@jqfmt_vfsv1}, {@resgid}, {@nolazytime}, {@nobh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x484, &(0x7f0000000b80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) readv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/69, 0x45}], 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffff13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 16.095622199s ago: executing program 3 (id=922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008d1}, 0x4000080) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00 \x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 16.075989784s ago: executing program 6 (id=923): ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)=0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'gre0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x8000000a) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @ib={0x1b, 0x2, 0x8707, {"fabb47e2024c9007cdb659d44bc6c9ce"}, 0x52558922, 0x8, 0x10009}, @in6={0xa, 0x4e24, 0x8b, @mcast1, 0x3}}}, 0x118) sendfile(r2, r2, &(0x7f0000000f40), 0x400) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$hiddev(&(0x7f00000022c0), 0x1, 0x14080) ioctl$HIDIOCAPPLICATION(r5, 0x4802, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000006000008877fbacfe1416e000030a83079f03b18000440c2011e0845013f2325f000709200b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x8, &(0x7f0000002240)={0x653, 0x86}, &(0x7f0000002280)) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) writev(r4, &(0x7f0000002180)=[{&(0x7f0000000f80)="e04758335da6568cf58339b23f8d2dc476a495aedad39691592bd6875b67f9102af73f77f834ba4860cc8f8d0e7968045635a1682a525a21e370794c8c3850ca03e867b12188e4c06a7ad670e384e7e57026ea555ae56907a05cd75f5c2ade65d05d27cfd6f00915cea1ef53ed2f3bd7f3eaa22cb037f5c96f2158bf8ccfe7faf2688f55fdff3ecd60b792211cbcc165d3553692a320d6b3f2347b3fd560b5b108fb21c1af523dbe8150c405bff59f1c48e197cda79e510b9ab58bd9917005", 0xbf}, {&(0x7f0000001040)="63f02be0605054ba54aaf8405d54f807ce67c198848d1044024f5ffd422e0857d3e9b70dd6afddd46cf2414752b771565a26972afa7a8ebd818b9817e65fe5efd5ea1aab9e484b4a5513079870dc3d72af0ea1ca56a1dd4aa2196807bc05a4e020", 0x61}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="6074b1", 0x3}, {&(0x7f0000002100)="e2a5cc90b9ac790360dcd0c5c5de4abe991f51ff1721c53945c74b8529eb5c01dc562a51038e3cda205aaae8ebc6a01b715c0c44d4b8dd25dc610b3b8d4ca2fd286ec4c98ab9a57391eb51d9240b3a1d", 0x50}], 0x5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x1) fsetxattr$smack_xattr_label(r0, &(0x7f0000000f00)='security.SMACK64\x00', &(0x7f0000002200)={'/.,'}, 0x4, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$I2C_RETRIES(r6, 0x701, 0x8) 15.942374571s ago: executing program 4 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$dri(0x0, 0x8001, 0x40002) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000740)="f2", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000000440)="f5", 0xffe0}], 0x4d}}], 0x2, 0x240000d4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) rt_tgsigqueueinfo(r3, r3, 0x9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') read$FUSE(r6, &(0x7f0000001840)={0x2020}, 0x2020) sendmsg$SMC_PNETID_DEL(r6, 0x0, 0x8000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x5c, r1, 0x1, 0x3, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}]}]}]}, 0x5c}, 0x1, 0x41000000, 0x0, 0x4004840}, 0x4048092) 15.941855732s ago: executing program 6 (id=925): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x973, 0x2, 0x40, 0xb44fab9f3b06120, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0xc}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x80, 0x7, 0x1, 0x3, {{0x12, 0x4, 0x3, 0x39, 0x48, 0x65, 0x0, 0x88, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@timestamp={0x44, 0x28, 0xe, 0x0, 0x6, [0x4, 0x80, 0xa3c, 0x4, 0x0, 0x7, 0x3, 0x3, 0xfffffbff]}, @lsrr={0x83, 0xb, 0x52, [@multicast2, @local]}, @noop]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x154, 0x154, 0x6, [@var={0xe, 0x0, 0x0, 0xe, 0x4, 0x1}, @union={0x1, 0x9, 0x0, 0x5, 0x0, 0x9, [{0xa, 0x4, 0xffffff85}, {0xa, 0x0, 0x5f87}, {0x10, 0x3, 0x8}, {0x1, 0x1, 0x7ff}, {0x6, 0x3, 0x6}, {0xc, 0x2, 0xfffffffb}, {0x0, 0x0, 0x5}, {0x8, 0x3, 0x7}, {0xd, 0x4}]}, @enum64={0x6, 0x6, 0x0, 0x13, 0x1, 0x7, [{0xc, 0x7f, 0x8}, {0x9, 0x8, 0x7}, {0x7, 0x5, 0x1000}, {0x10, 0xc, 0x9}, {0x8, 0xffffffff, 0x2}, {0x4, 0x7553bb83, 0x2}]}, @union={0x0, 0x6, 0x0, 0x5, 0x1, 0x4, [{0x7, 0x0, 0x3}, {0x4, 0x3, 0x40000000}, {0xb, 0x2, 0x3}, {0x0, 0x1, 0x8}, {0x5, 0x0, 0x1}, {0x6, 0x5, 0x7}]}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @typedef={0xa}, @volatile={0xe}]}, {0x0, [0x0, 0x2e, 0x61, 0x5f]}}, &(0x7f00000004c0)=""/203, 0x172, 0xcb, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', r4, r5, 0x1, 0x1, 0x2}, 0x50) listen(r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8410, 0x505e5}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048c2}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) 15.886783783s ago: executing program 3 (id=926): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000804, &(0x7f0000000b40)={[{@commit={'commit', 0x3d, 0x7fffffff}}]}, 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x2000000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d312c6e6f6e756d7461696c3d302c757466383d312c6e6f6e756d7461696c3d302c636f6465706167653d3836322c636865636b3d7374726963742c696f636861727365743d63703835372c757466383d302c696f636861727365743d6370313235302c696f636861727365743d6d616363656c7469632c757466383d302c00683047dc26bcd1d49acc85c22ce7045d4133396fd2d4e046f0118e81e469"], 0x3, 0x28e, &(0x7f0000000280)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dba3dcfe40000000711012000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) mount$nfs(&(0x7f0000000100)=';\x80.', 0x0, 0x0, 0x19000c, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@usrquota}, {@errors_remount}]}, 0x2, 0x5b9, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000003e00070100000000", @ANYRES32=r3, @ANYBLOB="0c000180060006003b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000008001f0000000000", 0x24) setxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x1, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) cachestat(r6, &(0x7f0000000040)={0x7f, 0x2}, &(0x7f000009de80), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000c40)={'wg1\x00'}) 15.103558989s ago: executing program 4 (id=927): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd050056000800542b000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 1.226035562s ago: executing program 36 (id=925): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x973, 0x2, 0x40, 0xb44fab9f3b06120, 0xffffffffffffffff, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0xc}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x80, 0x7, 0x1, 0x3, {{0x12, 0x4, 0x3, 0x39, 0x48, 0x65, 0x0, 0x88, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@timestamp={0x44, 0x28, 0xe, 0x0, 0x6, [0x4, 0x80, 0xa3c, 0x4, 0x0, 0x7, 0x3, 0x3, 0xfffffbff]}, @lsrr={0x83, 0xb, 0x52, [@multicast2, @local]}, @noop]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x154, 0x154, 0x6, [@var={0xe, 0x0, 0x0, 0xe, 0x4, 0x1}, @union={0x1, 0x9, 0x0, 0x5, 0x0, 0x9, [{0xa, 0x4, 0xffffff85}, {0xa, 0x0, 0x5f87}, {0x10, 0x3, 0x8}, {0x1, 0x1, 0x7ff}, {0x6, 0x3, 0x6}, {0xc, 0x2, 0xfffffffb}, {0x0, 0x0, 0x5}, {0x8, 0x3, 0x7}, {0xd, 0x4}]}, @enum64={0x6, 0x6, 0x0, 0x13, 0x1, 0x7, [{0xc, 0x7f, 0x8}, {0x9, 0x8, 0x7}, {0x7, 0x5, 0x1000}, {0x10, 0xc, 0x9}, {0x8, 0xffffffff, 0x2}, {0x4, 0x7553bb83, 0x2}]}, @union={0x0, 0x6, 0x0, 0x5, 0x1, 0x4, [{0x7, 0x0, 0x3}, {0x4, 0x3, 0x40000000}, {0xb, 0x2, 0x3}, {0x0, 0x1, 0x8}, {0x5, 0x0, 0x1}, {0x6, 0x5, 0x7}]}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @typedef={0xa}, @volatile={0xe}]}, {0x0, [0x0, 0x2e, 0x61, 0x5f]}}, &(0x7f00000004c0)=""/203, 0x172, 0xcb, 0x1, 0x5, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', r4, r5, 0x1, 0x1, 0x2}, 0x50) listen(r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8410, 0x505e5}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048c2}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}}, 0x1) 1.125554337s ago: executing program 37 (id=921): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x9, 0x3}, 0x4) bind$packet(r0, &(0x7f0000000040)={0x11, 0x5, 0x0, 0x1, 0x2a}, 0x14) r1 = fsopen(&(0x7f0000002200)='ubifs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000340)={[{@abort}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@jqfmt_vfsv1}, {@resgid}, {@nolazytime}, {@nobh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x484, &(0x7f0000000b80)="$eJzs3MuPFMUfAPBv9z748frtiPjgoayikWjcZRdUDh7AaOJBExM94HHdXQiysIZdEyFEFw94NCTejUcT/wJPejHqycSr3g0JMVxAT216pnsfszOTYZjdAebzSYap6q5O1Xeqa6a6i94A+tZo/k8SsSMi/oiIkVp2bYHR2tvtm5en/7l5eTqJLHv376Ra7tbNy9Nl0fK47WVmqZbf16DehYuXzk7Nzc1eKPLji+c+Gl+4eOnFM+emTs+enj0/eezY0SMTr7w8+VJ1/3Cjxiftx5m36dbeT+f373nz/WtvT5+89sEv3yVl/HVxdMlog20DZeLZLlfWaztXpZPBIjHQo8bQtryL8u4aqo7/kRiIweV9I/HG5z1tHLChsizLtjTbmcRSBjzAkuh1C4DeKH/q8+vf8rVpk497wI0TtQugPO7bxau2ZzDSosxQ3fVtN+VXWyeX/v06f8XG3IcAAFjjhxO19/XzvzQeXVXueLE2VImIhyJiV0Q8HBG7I+KRiGrZxyLi8ZVDsnaWZ+oXSdbPf9LrHYbWlnz+92qxtrV2/lfO/qIyUOR2VuMfSk6dmZs9HBH/j4hDMbQlz0+0qOPH13//stm+0YisnP/lr7z+ci5YtCOtP2ZmanGq84jXunElYu9go/iT5ZWAvB/3RMTeA53Vceb5b/c32ze6av7bOP4WBjtrz2rZNxHP1fp/KeriLyWt1yfH/xdzs4fHy7NivV9/u/pOs/rvKv4uyPt/W8Pzfzn+SrJ6vXahum3dOdnK1T+/aHhNM9RW/On1wbob1Pn5P5y8V02X68KfTC0uXpiIGE7eKrYfX9k+uXJsmS/L5/EfOth4/O+KlU9iX0TkJ/ETEfFkRBwo2v5URDwdEQdbxP/za8982GzfvdD/M3fU/3eeGDj70/drKq20iD+JBv1/tJo6VGxp5/uveXNW7nnkYXX6uQEAAMD9JI2IHZGkY8vpNB0bq/1/+d2xLZ2bX1h84dT8x+dnas8IVGIoLe90jay6HzpR3DEo85PFZX6ZP1LcN/5qYGs1PzY9PzfT6+Chz21vMv5zf3l+Ax58XVhHA+5TnY7/LMs+63JTgE3m9x/6l/EP/avB+N9al2/6NwKA+1uj3//lC/vK5rYF2Fzm/9C/jH/oX8Y/9C/jH/rS3TzXXySutHjYvr1E/v1z183YxESW9aj24d7HvpyI9J5oxkYlotJm4TQiNqwZld59CL3+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiO/wIAAP//cAfiFg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) readv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/69, 0x45}], 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffff13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 1.048135787s ago: executing program 38 (id=920): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'geneve0\x00', 0x7}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRES16], 0x50}}, 0x240400c4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f0000000140), &(0x7f0000000180)=r7}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 40.770366ms ago: executing program 39 (id=926): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000804, &(0x7f0000000b40)={[{@commit={'commit', 0x3d, 0x7fffffff}}]}, 0x1, 0x4bf, &(0x7f0000000540)="$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") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000180)=0x8) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x2000000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d312c6e6f6e756d7461696c3d302c757466383d312c6e6f6e756d7461696c3d302c636f6465706167653d3836322c636865636b3d7374726963742c696f636861727365743d63703835372c757466383d302c696f636861727365743d6370313235302c696f636861727365743d6d616363656c7469632c757466383d302c00683047dc26bcd1d49acc85c22ce7045d4133396fd2d4e046f0118e81e469"], 0x3, 0x28e, &(0x7f0000000280)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dba3dcfe40000000711012000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) mount$nfs(&(0x7f0000000100)=';\x80.', 0x0, 0x0, 0x19000c, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@usrquota}, {@errors_remount}]}, 0x2, 0x5b9, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000003e00070100000000", @ANYRES32=r3, @ANYBLOB="0c000180060006003b000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000200)="240000001a005f0400f9f4070009040180202000000000000000000008001f0000000000", 0x24) setxattr(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='overlay\x00', 0x1, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) cachestat(r6, &(0x7f0000000040)={0x7f, 0x2}, &(0x7f000009de80), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000c40)={'wg1\x00'}) 0s ago: executing program 40 (id=927): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd050056000800542b000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) kernel console output (not intermixed with test programs): cting memory failure for pfn 0x13bb60 at process virtual address 0x20b00000 [ 49.420769][ T5813] Memory failure: 0x13bb60: recovery action for clean LRU page: Recovered [ 49.420786][ T5813] Injecting memory failure for pfn 0x13bb70 at process virtual address 0x20b10000 [ 49.420835][ T5813] Memory failure: 0x13bb70: recovery action for clean LRU page: Recovered [ 49.429541][ T5813] Injecting memory failure for pfn 0x13bd60 at process virtual address 0x20b20000 [ 49.429632][ T5813] Memory failure: 0x13bd60: recovery action for clean LRU page: Recovered [ 49.429655][ T5813] Injecting memory failure for pfn 0x117ca8 at process virtual address 0x20b30000 [ 49.429688][ T5813] Memory failure: 0x117ca8: recovery action for clean LRU page: Recovered [ 49.429697][ T5813] Injecting memory failure for pfn 0x13222a at process virtual address 0x20b34000 [ 49.429725][ T5813] Memory failure: 0x13222a: recovery action for clean LRU page: Recovered [ 49.429738][ T5813] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20b36000 [ 49.429747][ T5813] Memory failure: 0x2190ff: unhandlable page. [ 49.429752][ T5813] Memory failure: 0x2190ff: recovery action for reserved kernel page: Ignored [ 49.467224][ T5821] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.550435][ T5824] loop7: detected capacity change from 0 to 128 [ 49.583579][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.160'. [ 49.583595][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.7.160'. [ 49.583612][ T5824] netlink: 'syz.7.160': attribute type 19 has an invalid length. [ 49.583621][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.160'. [ 49.845293][ T5836] loop7: detected capacity change from 0 to 512 [ 49.906378][ T5836] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 49.906530][ T5836] EXT4-fs (loop7): orphan cleanup on readonly fs [ 49.906692][ T5836] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 49.906816][ T5836] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.907769][ T5836] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 49.909525][ T5836] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #16: comm syz.7.164: inode has both inline data and extents flags [ 49.909547][ T5836] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 49.909749][ T5836] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.164: couldn't read orphan inode 16 (err -117) [ 49.909765][ T5836] loop7: lost filesystem error report for type 5 error -117 [ 49.910346][ T5836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.942676][ T51] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 49.944069][ T5831] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.164: iget: bad i_size value: 360287970189639690 [ 49.970330][ T5829] netlink: 12 bytes leftover after parsing attributes in process `syz.5.163'. [ 49.988574][ T5620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.034518][ T5829] usb 1-1: USB disconnect, device number 2 [ 50.042581][ T5829] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 50.083994][ T5851] loop3: detected capacity change from 0 to 512 [ 50.106073][ T5851] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 50.108669][ T5851] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.170: invalid indirect mapped block 2683928664 (level 1) [ 50.109877][ T5851] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 50.111023][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 50.111042][ C0] EXT4-fs (loop3): initial error at time 50: ext4_free_branches:1023: inode 13 [ 50.111060][ C0] EXT4-fs (loop3): last error at time 50: ext4_free_branches:1023: inode 13 [ 50.119002][ T5851] EXT4-fs (loop3): 1 truncate cleaned up [ 50.119465][ T5851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.127106][ T5851] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.170: invalid indirect mapped block 480848489 (level 1) [ 50.197652][ T5851] EXT4-fs (loop3): shut down requested (2) [ 50.229906][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.243882][ T5829] hub 1-0:1.0: USB hub found [ 50.250248][ T5829] hub 1-0:1.0: 1 port detected [ 50.322186][ T5875] loop6: detected capacity change from 0 to 2048 [ 50.359990][ T5875] loop6: p2 p3 < > p4 < p5 > [ 50.360023][ T5875] loop6: partition table partially beyond EOD, truncated [ 50.360865][ T5875] loop6: p3 start 4225 is beyond EOD, truncated [ 50.394004][ T1154] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.414724][ C0] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 50.491296][ T51] Bluetooth: hci1: command tx timeout [ 50.509829][ T5883] team0 (unregistering): Port device team_slave_0 removed [ 50.540688][ T5883] team0 (unregistering): Port device team_slave_1 removed [ 50.541430][ T1154] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 50.542366][ T1154] usb 1-1: Dual-Role OTG device on HNP port [ 50.542580][ T1154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.575420][ T1154] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, b2:e4:13:73:54:bd [ 50.718819][ T51] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 50.789342][ T2769] bond0: (slave bond_slave_0): interface is now down [ 50.789376][ T2769] bond0: (slave bond_slave_1): interface is now down [ 50.811581][ T2769] bond0: (slave bond_slave_0): interface is now down [ 50.811612][ T2769] bond0: (slave bond_slave_1): interface is now down [ 50.813535][ T2769] bond0: now running without any active interface! [ 50.891799][ T51] Bluetooth: hci5: command tx timeout [ 51.352470][ T5982] sctp: [Deprecated]: syz.4.193 (pid 5982) Use of int in max_burst socket option deprecated. [ 51.352470][ T5982] Use struct sctp_assoc_value instead [ 51.352800][ T5982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.193'. [ 51.353521][ T5982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.193'. [ 51.354625][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 51.535401][ T6003] loop6: detected capacity change from 0 to 256 [ 51.539232][ T6003] vfat: Unknown parameter './my_debugfs' [ 51.642865][ T51] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 51.845165][ T6034] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.846641][ T6034] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 51.871507][ T6032] IPVS: length: 24 != 312 [ 51.930625][ T6043] FAULT_INJECTION: forcing a failure. [ 51.930625][ T6043] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 51.930660][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.6.198 Tainted: G L syzkaller #0 PREEMPT [ 51.930677][ T6043] Tainted: [L]=SOFTLOCKUP [ 51.930681][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 51.930688][ T6043] Call trace: [ 51.930692][ T6043] show_stack+0x2c/0x3c (C) [ 51.930712][ T6043] __dump_stack+0x30/0x40 [ 51.930727][ T6043] dump_stack_lvl+0xd8/0x12c [ 51.930737][ T6043] dump_stack+0x1c/0x28 [ 51.930747][ T6043] should_fail_ex+0x41c/0x590 [ 51.930760][ T6043] should_fail_alloc_page+0xec/0x10c [ 51.930775][ T6043] prepare_alloc_pages+0x194/0x484 [ 51.930783][ T6043] __alloc_frozen_pages_noprof+0x180/0x648 [ 51.930791][ T6043] __alloc_pages_noprof+0x18/0x100 [ 51.930798][ T6043] alloc_pages_bulk_noprof+0x610/0x7d8 [ 51.930805][ T6043] __kasan_populate_vmalloc+0xc0/0x1d0 [ 51.930815][ T6043] alloc_vmap_area+0xdf4/0x13e8 [ 51.930823][ T6043] __get_vm_area_node+0x210/0x32c [ 51.930831][ T6043] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 51.930848][ T6043] __vmalloc_node_noprof+0xec/0x14c [ 51.930857][ T6043] __vmalloc_noprof+0x64/0x8c [ 51.930865][ T6043] bpf_check+0xd58/0x243c [ 51.930880][ T6043] bpf_prog_load+0xf4c/0x1554 [ 51.930890][ T6043] __sys_bpf+0x7d4/0x82c [ 51.930899][ T6043] __arm64_sys_bpf+0xd0/0xec [ 51.930907][ T6043] invoke_syscall+0x98/0x244 [ 51.930917][ T6043] el0_svc_common+0xec/0x23c [ 51.930927][ T6043] do_el0_svc+0x4c/0x5c [ 51.930937][ T6043] el0_svc+0x64/0x260 [ 51.930946][ T6043] el0t_64_sync_handler+0x44/0x104 [ 51.930955][ T6043] el0t_64_sync+0x198/0x19c [ 52.070386][ T6052] netlink: 'syz.4.207': attribute type 1 has an invalid length. [ 52.083929][ T6048] syzkaller0: entered promiscuous mode [ 52.083967][ T6048] syzkaller0: entered allmulticast mode [ 52.087597][ T6052] netlink: 'syz.4.207': attribute type 10 has an invalid length. [ 52.090293][ T6052] dummy0: entered promiscuous mode [ 52.099117][ T6048] tipc: Started in network mode [ 52.099187][ T6048] tipc: Node identity 56714c04b281, cluster identity 4711 [ 52.099373][ T6048] tipc: Enabled bearer , priority 0 [ 52.102258][ T6047] tipc: Resetting bearer [ 52.116609][ T6047] tipc: Disabling bearer [ 52.402103][ T6065] FAULT_INJECTION: forcing a failure. [ 52.402103][ T6065] name failslab, interval 1, probability 0, space 0, times 0 [ 52.402144][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.7.213 Tainted: G L syzkaller #0 PREEMPT [ 52.402165][ T6065] Tainted: [L]=SOFTLOCKUP [ 52.402170][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 52.402177][ T6065] Call trace: [ 52.402181][ T6065] show_stack+0x2c/0x3c (C) [ 52.402200][ T6065] __dump_stack+0x30/0x40 [ 52.402216][ T6065] dump_stack_lvl+0xd8/0x12c [ 52.402228][ T6065] dump_stack+0x1c/0x28 [ 52.402240][ T6065] should_fail_ex+0x41c/0x590 [ 52.402253][ T6065] should_failslab+0xc4/0x120 [ 52.402266][ T6065] kmem_cache_alloc_noprof+0x94/0x5d4 [ 52.402279][ T6065] vm_area_dup+0x34/0x5c8 [ 52.402289][ T6065] __split_vma+0x1a8/0x83c [ 52.402300][ T6065] vma_modify+0x11ac/0x18f0 [ 52.402311][ T6065] vma_modify_flags+0x228/0x33c [ 52.402322][ T6065] madvise_vma_behavior+0x155c/0x3370 [ 52.402333][ T6065] madvise_walk_vmas+0x4c8/0x9bc [ 52.402345][ T6065] madvise_do_behavior+0x5f0/0x7c0 [ 52.402356][ T6065] do_madvise+0x28c/0x2f0 [ 52.402367][ T6065] __arm64_sys_madvise+0xac/0xc8 [ 52.402378][ T6065] invoke_syscall+0x98/0x244 [ 52.402390][ T6065] el0_svc_common+0xec/0x23c [ 52.402402][ T6065] do_el0_svc+0x4c/0x5c [ 52.402413][ T6065] el0_svc+0x64/0x260 [ 52.402424][ T6065] el0t_64_sync_handler+0x44/0x104 [ 52.402434][ T6065] el0t_64_sync+0x198/0x19c [ 52.553106][ T51] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 52.739428][ T6060] gadgetfs expected dummy_udc controller not usbip-vudc [ 52.739475][ T6060] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 52.739801][ T6060] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 52.870308][ T6097] loop6: detected capacity change from 0 to 8 [ 52.882176][ T6097] SQUASHFS error: Failed to read block 0x62: -5 [ 52.882216][ T6097] squashfs image failed sanity check [ 52.971908][ T51] Bluetooth: hci5: command tx timeout [ 53.016141][ T6108] openvswitch: netlink: Key 25 has unexpected len 4 expected 16 [ 53.175410][ T6122] EXT4-fs: Ignoring removed nobh option [ 53.176293][ T6122] EXT4-fs: Mount option(s) incompatible with ext3 [ 53.336522][ T51] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 53.437201][ T6141] Injecting memory failure for pfn 0x11ed58 at process virtual address 0x20000000 [ 53.465157][ T6141] Memory failure: 0x11ed58: Sending SIGBUS to syz.7.227:6141 due to hardware memory corruption [ 53.467470][ T6141] Memory failure: 0x11ed58: recovery action for dirty LRU page: Recovered [ 53.467524][ T6141] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20001000 [ 53.467634][ T6141] Memory failure: 0x2190ff: Sending SIGBUS to syz.7.227:6141 due to hardware memory corruption [ 53.467659][ T6141] Memory failure: 0x2190ff: recovery action for already poisoned page: Failed [ 53.533237][ T6153] bridge0: port 3(syz_tun) entered blocking state [ 53.534766][ T6153] bridge0: port 3(syz_tun) entered disabled state [ 53.536221][ T6153] syz_tun: entered allmulticast mode [ 53.544121][ T6153] syz_tun: entered promiscuous mode [ 53.545570][ T6153] bridge0: port 3(syz_tun) entered blocking state [ 53.545615][ T6153] bridge0: port 3(syz_tun) entered forwarding state [ 53.755047][ T6171] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.807366][ T6175] set_capacity_and_notify: 1 callbacks suppressed [ 53.807592][ T6175] loop4: detected capacity change from 0 to 1024 [ 53.812118][ T6175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.027285][ T6186] loop7: detected capacity change from 0 to 2048 [ 54.079600][ T6192] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 54.079633][ T6192] PKCS7: Only support pkcs7_signedData type [ 54.166401][ T6199] loop6: detected capacity change from 0 to 2048 [ 54.187767][ T6192] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.219789][ T6199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.287739][ T6220] __nla_validate_parse: 8 callbacks suppressed [ 54.287818][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.244'. [ 54.306998][ T6210] loop5: detected capacity change from 0 to 512 [ 54.308853][ T6199] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 54.315321][ T6199] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.317988][ T6199] EXT4-fs (loop6): This should not happen!! Data will be lost [ 54.317988][ T6199] [ 54.318032][ T6199] EXT4-fs (loop6): Total free blocks count 0 [ 54.318050][ T6199] EXT4-fs (loop6): Free/Dirty block details [ 54.318077][ T6199] EXT4-fs (loop6): free_blocks=4096 [ 54.318096][ T6199] EXT4-fs (loop6): dirty_blocks=16 [ 54.318109][ T6199] EXT4-fs (loop6): Block reservation details [ 54.318121][ T6199] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 54.334884][ T6197] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.350330][ T6229] loop7: detected capacity change from 0 to 512 [ 54.353315][ T6224] loop4: detected capacity change from 0 to 8 [ 54.368647][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.243'. [ 54.373981][ T6229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.388592][ T6229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.419125][ T6229] tipc: Started in network mode [ 54.419139][ T6229] tipc: Node identity 1, cluster identity 4711 [ 54.419146][ T6229] tipc: Node number set to 1 [ 54.419857][ T6229] netlink: 65 bytes leftover after parsing attributes in process `syz.7.247'. [ 54.420011][ T6224] SQUASHFS error: Unable to read directory block [631:26] [ 54.477695][ T5620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.616224][ T6236] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 54.618507][ T6236] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 54.627810][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.249'. [ 54.727904][ T6256] loop7: detected capacity change from 0 to 256 [ 55.019009][ T6261] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (12) [ 55.072784][ T40] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.184743][ T6273] loop5: detected capacity change from 0 to 256 [ 56.420034][ T6298] pim6reg: entered allmulticast mode [ 56.446568][ T6299] loop7: detected capacity change from 0 to 256 [ 56.508120][ T6307] netlink: 68 bytes leftover after parsing attributes in process `syz.3.265'. [ 56.698390][ T6315] FAULT_INJECTION: forcing a failure. [ 56.698390][ T6315] name failslab, interval 1, probability 0, space 0, times 0 [ 56.698437][ T6315] CPU: 1 UID: 0 PID: 6315 Comm: syz.7.267 Tainted: G L syzkaller #0 PREEMPT [ 56.698454][ T6315] Tainted: [L]=SOFTLOCKUP [ 56.698458][ T6315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.698464][ T6315] Call trace: [ 56.698467][ T6315] show_stack+0x2c/0x3c (C) [ 56.698486][ T6315] __dump_stack+0x30/0x40 [ 56.698498][ T6315] dump_stack_lvl+0xd8/0x12c [ 56.698510][ T6315] dump_stack+0x1c/0x28 [ 56.698521][ T6315] should_fail_ex+0x41c/0x590 [ 56.698534][ T6315] should_failslab+0xc4/0x120 [ 56.698547][ T6315] __kmalloc_cache_noprof+0x94/0x5fc [ 56.698555][ T6315] do_eventfd+0x88/0x280 [ 56.698564][ T6315] __arm64_sys_eventfd2+0x64/0x7c [ 56.698572][ T6315] invoke_syscall+0x98/0x244 [ 56.698584][ T6315] el0_svc_common+0xec/0x23c [ 56.698596][ T6315] do_el0_svc+0x4c/0x5c [ 56.698607][ T6315] el0_svc+0x64/0x260 [ 56.698618][ T6315] el0t_64_sync_handler+0x44/0x104 [ 56.698628][ T6315] el0t_64_sync+0x198/0x19c [ 56.944725][ T6320] openvswitch: netlink: IP tunnel dst address not specified [ 56.993456][ T6322] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.993641][ T6322] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.086828][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.088951][ T6322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.240093][ T6351] loop7: detected capacity change from 0 to 128 [ 57.255759][ T6351] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.337855][ T40] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.337907][ T40] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.337928][ T40] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.482484][ T6358] FAULT_INJECTION: forcing a failure. [ 57.482484][ T6358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 57.485216][ T6358] CPU: 1 UID: 0 PID: 6358 Comm: syz.4.274 Tainted: G L syzkaller #0 PREEMPT [ 57.485243][ T6358] Tainted: [L]=SOFTLOCKUP [ 57.485248][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 57.485254][ T6358] Call trace: [ 57.485258][ T6358] show_stack+0x2c/0x3c (C) [ 57.485282][ T6358] __dump_stack+0x30/0x40 [ 57.485296][ T6358] dump_stack_lvl+0xd8/0x12c [ 57.485308][ T6358] dump_stack+0x1c/0x28 [ 57.485320][ T6358] should_fail_ex+0x41c/0x590 [ 57.485333][ T6358] should_fail_alloc_page+0xec/0x10c [ 57.485347][ T6358] prepare_alloc_pages+0x194/0x484 [ 57.485355][ T6358] alloc_pages_bulk_noprof+0x10c/0x7d8 [ 57.485363][ T6358] __kasan_populate_vmalloc+0xc0/0x1d0 [ 57.485374][ T6358] alloc_vmap_area+0xdf4/0x13e8 [ 57.485383][ T6358] __get_vm_area_node+0x210/0x32c [ 57.485392][ T6358] get_vm_area_caller+0x94/0xc8 [ 57.485401][ T6358] vmap+0xf8/0x214 [ 57.485410][ T6358] bpf_ringbuf_alloc+0x178/0x3d8 [ 57.485423][ T6358] ringbuf_map_alloc+0x1c8/0x2cc [ 57.485434][ T6358] map_create+0xa6c/0x153c [ 57.485444][ T6358] __sys_bpf+0x308/0x82c [ 57.485453][ T6358] __arm64_sys_bpf+0xd0/0xec [ 57.485461][ T6358] invoke_syscall+0x98/0x244 [ 57.485473][ T6358] el0_svc_common+0xec/0x23c [ 57.485485][ T6358] do_el0_svc+0x4c/0x5c [ 57.485496][ T6358] el0_svc+0x64/0x260 [ 57.485506][ T6358] el0t_64_sync_handler+0x44/0x104 [ 57.485516][ T6358] el0t_64_sync+0x198/0x19c [ 57.603539][ T5620] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.686170][ T6373] FAULT_INJECTION: forcing a failure. [ 57.686170][ T6373] name failslab, interval 1, probability 0, space 0, times 0 [ 57.686207][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.7.281 Tainted: G L syzkaller #0 PREEMPT [ 57.686225][ T6373] Tainted: [L]=SOFTLOCKUP [ 57.686229][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 57.686235][ T6373] Call trace: [ 57.686239][ T6373] show_stack+0x2c/0x3c (C) [ 57.686258][ T6373] __dump_stack+0x30/0x40 [ 57.686271][ T6373] dump_stack_lvl+0xd8/0x12c [ 57.686283][ T6373] dump_stack+0x1c/0x28 [ 57.686294][ T6373] should_fail_ex+0x41c/0x590 [ 57.686307][ T6373] should_failslab+0xc4/0x120 [ 57.686320][ T6373] kmem_cache_alloc_noprof+0x94/0x5d4 [ 57.686333][ T6373] anon_vma_fork+0x84/0x4d4 [ 57.686345][ T6373] dup_mmap+0x7d4/0x1998 [ 57.686355][ T6373] copy_mm+0xe8/0x324 [ 57.686364][ T6373] copy_process+0x173c/0x332c [ 57.686372][ T6373] kernel_clone+0x234/0x9fc [ 57.686381][ T6373] __arm64_sys_clone+0x168/0x1d4 [ 57.686390][ T6373] invoke_syscall+0x98/0x244 [ 57.686402][ T6373] el0_svc_common+0xec/0x23c [ 57.686413][ T6373] do_el0_svc+0x4c/0x5c [ 57.686425][ T6373] el0_svc+0x64/0x260 [ 57.686435][ T6373] el0t_64_sync_handler+0x44/0x104 [ 57.686445][ T6373] el0t_64_sync+0x198/0x19c [ 57.723451][ T6373] netlink: 'syz.7.281': attribute type 34 has an invalid length. [ 57.794333][ T6382] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 57.867629][ T6390] netlink: 28 bytes leftover after parsing attributes in process `syz.7.287'. [ 57.958620][ T6398] ext4: Bad value for 'min_batch_time' [ 57.983238][ T6402] FAULT_INJECTION: forcing a failure. [ 57.983238][ T6402] name failslab, interval 1, probability 0, space 0, times 0 [ 57.985859][ T6402] CPU: 1 UID: 0 PID: 6402 Comm: syz.4.292 Tainted: G L syzkaller #0 PREEMPT [ 57.985881][ T6402] Tainted: [L]=SOFTLOCKUP [ 57.985885][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 57.985890][ T6402] Call trace: [ 57.985894][ T6402] show_stack+0x2c/0x3c (C) [ 57.985915][ T6402] __dump_stack+0x30/0x40 [ 57.985927][ T6402] dump_stack_lvl+0xd8/0x12c [ 57.985937][ T6402] dump_stack+0x1c/0x28 [ 57.985946][ T6402] should_fail_ex+0x41c/0x590 [ 57.985958][ T6402] should_failslab+0xc4/0x120 [ 57.985968][ T6402] __kmalloc_cache_noprof+0x94/0x5fc [ 57.985976][ T6402] alloc_fs_context+0x7c/0xba4 [ 57.985984][ T6402] fs_context_for_mount+0x34/0x44 [ 57.985992][ T6402] do_new_mount+0x158/0x538 [ 57.986001][ T6402] path_mount+0x5f0/0xa88 [ 57.986009][ T6402] do_mount+0xe8/0x148 [ 57.986018][ T6402] __arm64_sys_mount+0x33c/0x388 [ 57.986027][ T6402] invoke_syscall+0x98/0x244 [ 57.986037][ T6402] el0_svc_common+0xec/0x23c [ 57.986047][ T6402] do_el0_svc+0x4c/0x5c [ 57.986056][ T6402] el0_svc+0x64/0x260 [ 57.986065][ T6402] el0t_64_sync_handler+0x44/0x104 [ 57.986074][ T6402] el0t_64_sync+0x198/0x19c [ 58.103841][ T6403] loop6: p1 < > p4 < > [ 58.156172][ T6406] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.181279][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 58.183657][ T4942] udevd[4942]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 58.190270][ T6406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.195341][ T6406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.321338][ T14] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 58.321374][ T14] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.321394][ T14] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 58.321425][ T14] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.321443][ T14] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 58.321454][ T14] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.321469][ T14] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 58.321479][ T14] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.492766][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.496272][ T24] cfg80211: failed to load regulatory.db [ 95.282470][ T1248] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.356517][ T1248] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.427129][ T1248] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.455407][ T1248] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.576930][ T1248] bridge_slave_1: left allmulticast mode [ 95.576967][ T1248] bridge_slave_1: left promiscuous mode [ 95.577066][ T1248] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.583308][ T1248] bridge_slave_0: left allmulticast mode [ 95.583335][ T1248] bridge_slave_0: left promiscuous mode [ 95.583539][ T1248] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.649297][ T1248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.671063][ T1248] bond_slave_0: left promiscuous mode [ 95.672683][ T1248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.701145][ T1248] bond_slave_1: left promiscuous mode [ 95.701849][ T1248] bond0 (unregistering): Released all slaves [ 95.849017][ T4398] 8021q: adding VLAN 0 to HW filter on device eth8 [ 95.900401][ T1248] hsr_slave_0: left promiscuous mode [ 95.902722][ T1248] hsr_slave_1: left promiscuous mode [ 95.904182][ T1248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.905830][ T1248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.907685][ T1248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.909210][ T1248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.913883][ T1248] veth1_macvtap: left promiscuous mode [ 95.915107][ T1248] veth0_macvtap: left promiscuous mode [ 95.916313][ T1248] veth1_vlan: left promiscuous mode [ 95.917375][ T1248] veth0_vlan: left promiscuous mode [ 96.009508][ T1248] team0 (unregistering): Port device team_slave_1 removed [ 96.023615][ T1248] team0 (unregistering): Port device team_slave_0 removed [ 96.074935][ T4398] 8021q: adding VLAN 0 to HW filter on device eth9 [ 96.209164][ T4398] 8021q: adding VLAN 0 to HW filter on device eth10 [ 96.338473][ T4398] 8021q: adding VLAN 0 to HW filter on device eth11 [ 125.931443][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.611263][ T4718] Bluetooth: hci0: command 0x0406 tx timeout [ 163.851151][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 168.972140][ T4712] Bluetooth: hci3: command 0x0406 tx timeout [ 168.973548][ T4718] Bluetooth: hci1: command 0x0406 tx timeout [ 184.340946][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 187.371999][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.571746][ T6660] : renamed from virt_wifi0 [ 214.153685][ T6693] netlink: 'syz.5.303': attribute type 1 has an invalid length. [ 214.255096][ T6693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.268554][ T6701] bond1: (slave veth3): Enslaving as an active interface with a down link [ 214.282573][ T6693] bond1: (slave dummy0): making interface the new active one [ 214.285081][ T6693] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 214.289197][ T6693] netlink: 'syz.5.303': attribute type 10 has an invalid length. [ 214.290751][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.5.303'. [ 214.292533][ T6693] dummy0: entered promiscuous mode [ 214.569091][ T6693] bond1: (slave dummy0): Releasing active interface [ 214.632460][ T6714] siw: device registration error -23 [ 215.113855][ T6748] netlink: 'syz.6.322': attribute type 10 has an invalid length. [ 215.114461][ T6748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 215.115084][ T6748] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 215.210503][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 215.254940][ T6772] set_capacity_and_notify: 3 callbacks suppressed [ 215.255229][ T6769] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 215.260098][ T6772] loop4: detected capacity change from 0 to 256 [ 215.474376][ T6781] loop6: detected capacity change from 0 to 256 [ 215.485182][ T6781] FAT-fs (loop6): Directory bread(block 1285) failed [ 215.489467][ T6781] FAT-fs (loop6): Directory bread(block 1286) failed [ 215.489521][ T6781] FAT-fs (loop6): Directory bread(block 1287) failed [ 215.489661][ T6781] FAT-fs (loop6): Directory bread(block 1288) failed [ 215.559868][ T6785] tipc: Can't bind to reserved service type 0 [ 215.564882][ T6785] FAT-fs (loop6): Directory bread(block 1285) failed [ 215.567822][ T6785] FAT-fs (loop6): Directory bread(block 1286) failed [ 215.570614][ T6785] FAT-fs (loop6): Directory bread(block 1287) failed [ 215.570674][ T6785] FAT-fs (loop6): Directory bread(block 1288) failed [ 215.570748][ T6785] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 215.620063][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.335'. [ 215.620106][ T6786] openvswitch: netlink: nsh attr 0 has unexpected len 5 expected 0 [ 215.960830][ T6790] loop5: detected capacity change from 0 to 2048 [ 215.963048][ T6792] loop7: detected capacity change from 0 to 256 [ 215.967712][ T6792] vfat: Unknown parameter 'euid>000000000000' [ 215.987251][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.7.337'. [ 215.987304][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.337'. [ 216.433537][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 216.433574][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 216.625655][ T6822] loop6: detected capacity change from 0 to 256 [ 216.627564][ T6822] vfat: Unknown parameter 'euid>000000000000' [ 216.631978][ T6822] netlink: 16 bytes leftover after parsing attributes in process `syz.6.345'. [ 216.632006][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.6.345'. [ 216.731911][ T4721] Bluetooth: hci5: command 0x0406 tx timeout [ 217.336898][ T6835] loop7: detected capacity change from 0 to 256 [ 217.402229][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 217.460225][ T6837] netlink: 'syz.4.349': attribute type 1 has an invalid length. [ 217.468149][ T6837] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.487640][ T6837] bond2: (slave veth3): Enslaving as an active interface with a down link [ 217.492886][ T6837] netlink: 'syz.4.349': attribute type 10 has an invalid length. [ 217.492932][ T6837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.349'. [ 217.587168][ T6846] loop4: detected capacity change from 0 to 512 [ 217.598084][ T6846] EXT4-fs (loop4): 1 truncate cleaned up [ 217.599221][ T6846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.629466][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.881525][ T6860] fuse: Bad value for 'fd' [ 217.911763][ T6860] fuse: Bad value for 'fd' [ 218.022252][ T6870] syzkaller0: entered promiscuous mode [ 218.025673][ T6870] syzkaller0: entered allmulticast mode [ 218.145185][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.151904][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.205436][ T6897] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 218.217123][ T6894] loop7: detected capacity change from 0 to 4096 [ 218.221480][ T6894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 218.221502][ T6894] EXT4-fs (loop7): Test dummy encryption mode enabled [ 218.232152][ T6894] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.721361][ T6917] loop6: detected capacity change from 0 to 512 [ 218.723337][ T6917] EXT4-fs: Ignoring removed bh option [ 218.774314][ T6917] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.372: corrupted in-inode xattr: e_value size too large [ 218.774352][ T6917] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 218.774543][ T6917] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.372: couldn't read orphan inode 15 (err -117) [ 218.774563][ T6917] loop6: lost filesystem error report for type 5 error -117 [ 218.775880][ T6917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.143549][ T5620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.863372][ T6935] loop4: detected capacity change from 0 to 512 [ 219.879452][ T6935] EXT4-fs (loop4): Test dummy encryption mode enabled [ 219.881172][ T6935] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.376: inode has both inline data and extents flags [ 219.881204][ T6935] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.881739][ T6935] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.376: couldn't read orphan inode 15 (err -117) [ 219.881765][ T6935] loop4: lost filesystem error report for type 5 error -117 [ 219.882337][ T6935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.887887][ T6935] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 220.278012][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.532845][ T6948] fscrypt: AES-256-XTS using blk-crypto-fallback [ 220.891058][ T4721] Bluetooth: hci5: command 0x0406 tx timeout [ 221.075628][ T6955] loop5: detected capacity change from 0 to 4096 [ 221.084919][ T6955] EXT4-fs (loop5): Test dummy encryption mode enabled [ 221.099033][ T6955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.186253][ T6955] nfs: Unknown parameter 'mask' [ 221.229770][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.257495][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.411778][ T6969] loop4: detected capacity change from 0 to 512 [ 221.415888][ T6969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.438225][ T6969] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 221.440145][ T6969] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 221.441969][ T6969] System zones: 0-1, 15-15, 18-18, 34-34 [ 221.446884][ T6969] EXT4-fs (loop4): orphan cleanup on readonly fs [ 221.447757][ T6969] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 221.529241][ T6969] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 221.661023][ T6969] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 221.663458][ T6969] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.385: bg 0: block 40: padding at end of block bitmap is not set [ 221.663481][ T6969] loop4: lost filesystem error report for type 5 error -117 [ 221.670901][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 221.670935][ C0] EXT4-fs (loop4): initial error at time 221: ext4_validate_block_bitmap:445 [ 221.670940][ T6969] EXT4-fs (loop4): Remounting filesystem read-only [ 221.670957][ C0] [ 221.670962][ C0] EXT4-fs (loop4): last error at time 221: ext4_validate_block_bitmap:445 [ 221.671922][ T6969] EXT4-fs (loop4): 1 truncate cleaned up [ 221.672392][ T6969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 221.788656][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.859780][ T6985] __nla_validate_parse: 6 callbacks suppressed [ 221.859822][ T6985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 221.900277][ T6985] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 221.975894][ T6988] loop4: detected capacity change from 0 to 512 [ 221.983639][ T6988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.275931][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 222.288423][ T6985] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 222.324379][ T6985] bond1 (unregistering): Released all slaves [ 222.664528][ T7006] fuse: Bad value for 'fd' [ 222.711944][ T7010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.397'. [ 222.756402][ T7013] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.180507][ T7031] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 223.185040][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.5.405'. [ 223.210611][ T7031] can: request_module (can-proto-0) failed. [ 223.251939][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.407'. [ 223.251970][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.6.407'. [ 223.296104][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.7.409'. [ 223.299293][ T7046] netlink: 'syz.7.409': attribute type 9 has an invalid length. [ 223.302016][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.409'. [ 223.308127][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.317123][ T7046] bridge_slave_1 (unregistering): left allmulticast mode [ 223.320477][ T7046] bridge_slave_1 (unregistering): left promiscuous mode [ 223.323590][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.358629][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.403570][ T7061] netlink: 32 bytes leftover after parsing attributes in process `syz.5.414'. [ 223.409997][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.463902][ T7048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.475499][ T7068] overlayfs: missing 'workdir' [ 223.496093][ T7069] netlink: 20 bytes leftover after parsing attributes in process `syz.7.416'. [ 223.547462][ T7075] loop7: detected capacity change from 0 to 8 [ 223.548083][ T7075] FAULT_INJECTION: forcing a failure. [ 223.548083][ T7075] name failslab, interval 1, probability 0, space 0, times 0 [ 223.548206][ T7075] CPU: 0 UID: 0 PID: 7075 Comm: syz.7.418 Tainted: G L syzkaller #0 PREEMPT [ 223.548219][ T7075] Tainted: [L]=SOFTLOCKUP [ 223.548223][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 223.548227][ T7075] Call trace: [ 223.548230][ T7075] show_stack+0x2c/0x3c (C) [ 223.548248][ T7075] __dump_stack+0x30/0x40 [ 223.548259][ T7075] dump_stack_lvl+0xd8/0x12c [ 223.548269][ T7075] dump_stack+0x1c/0x28 [ 223.548278][ T7075] should_fail_ex+0x41c/0x590 [ 223.548290][ T7075] should_failslab+0xc4/0x120 [ 223.548304][ T7075] kmem_cache_alloc_noprof+0x94/0x5d4 [ 223.548315][ T7075] do_getname+0x48/0x234 [ 223.548323][ T7075] __arm64_sys_mkdirat+0x88/0xc0 [ 223.548332][ T7075] invoke_syscall+0x98/0x244 [ 223.548343][ T7075] el0_svc_common+0xec/0x23c [ 223.548352][ T7075] do_el0_svc+0x4c/0x5c [ 223.548362][ T7075] el0_svc+0x64/0x260 [ 223.548371][ T7075] el0t_64_sync_handler+0x44/0x104 [ 223.548380][ T7075] el0t_64_sync+0x198/0x19c [ 223.646079][ T30] audit: type=1326 audit(223.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7080 comm="syz.5.421" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa83782e8 code=0x0 [ 223.888254][ T7103] fuse: Bad value for 'fd' [ 223.915567][ T7105] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 223.920449][ T7107] syzkaller0: entered promiscuous mode [ 223.920476][ T7107] syzkaller0: entered allmulticast mode [ 224.403408][ T7111] capability: warning: `syz.6.433' uses 32-bit capabilities (legacy support in use) [ 224.421391][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.424924][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.588332][ T7120] FAULT_INJECTION: forcing a failure. [ 224.588332][ T7120] name failslab, interval 1, probability 0, space 0, times 0 [ 224.588368][ T7120] CPU: 1 UID: 0 PID: 7120 Comm: syz.7.436 Tainted: G L syzkaller #0 PREEMPT [ 224.588387][ T7120] Tainted: [L]=SOFTLOCKUP [ 224.588391][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 224.588397][ T7120] Call trace: [ 224.588400][ T7120] show_stack+0x2c/0x3c (C) [ 224.588421][ T7120] __dump_stack+0x30/0x40 [ 224.588436][ T7120] dump_stack_lvl+0xd8/0x12c [ 224.588448][ T7120] dump_stack+0x1c/0x28 [ 224.588459][ T7120] should_fail_ex+0x41c/0x590 [ 224.588472][ T7120] should_failslab+0xc4/0x120 [ 224.588485][ T7120] __kmalloc_cache_noprof+0x94/0x5fc [ 224.588494][ T7120] usb_control_msg+0x90/0x378 [ 224.588505][ T7120] hub_ext_port_status+0x154/0x5a4 [ 224.588516][ T7120] hub_activate+0x59c/0x15c4 [ 224.588528][ T7120] hub_resume+0x64/0x2bc [ 224.588540][ T7120] usb_resume_interface+0x214/0x3c0 [ 224.588551][ T7120] usb_resume_both+0x494/0x798 [ 224.588561][ T7120] usb_runtime_resume+0x24/0x34 [ 224.588572][ T7120] __rpm_callback+0x124/0x2f8 [ 224.588581][ T7120] rpm_callback+0x70/0x138 [ 224.588589][ T7120] rpm_resume+0xab8/0x10d8 [ 224.588602][ T7120] __pm_runtime_resume+0xfc/0x180 [ 224.588615][ T7120] usb_autoresume_device+0x2c/0x118 [ 224.588625][ T7120] usbdev_open+0x164/0x674 [ 224.588633][ T7120] chrdev_open+0x398/0x3e8 [ 224.588645][ T7120] do_dentry_open+0x5c4/0xfc0 [ 224.588656][ T7120] vfs_open+0x44/0x2dc [ 224.588667][ T7120] path_openat+0x1084/0x18f4 [ 224.588677][ T7120] do_file_open+0x1c8/0x2e8 [ 224.588687][ T7120] do_sys_openat2+0x114/0x1e8 [ 224.588698][ T7120] do_sys_open+0xb0/0xe0 [ 224.588709][ T7120] __arm64_sys_openat+0xa8/0xc4 [ 224.588721][ T7120] invoke_syscall+0x98/0x244 [ 224.588733][ T7120] el0_svc_common+0xec/0x23c [ 224.588744][ T7120] do_el0_svc+0x4c/0x5c [ 224.588756][ T7120] el0_svc+0x64/0x260 [ 224.588766][ T7120] el0t_64_sync_handler+0x44/0x104 [ 224.588776][ T7120] el0t_64_sync+0x198/0x19c [ 224.698681][ T7129] loop7: detected capacity change from 0 to 512 [ 224.704145][ T7129] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 224.716211][ T7129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.735427][ T5620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.739046][ T7131] loop5: detected capacity change from 0 to 128 [ 224.742471][ T7131] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.789349][ T7137] loop7: detected capacity change from 0 to 4096 [ 224.793279][ T7137] ext4: Bad value for 'max_batch_time' [ 224.832931][ T7139] vlan2: entered promiscuous mode [ 224.834214][ T7139] bond0: entered promiscuous mode [ 224.836048][ T7139] bond_slave_0: entered promiscuous mode [ 224.838599][ T7139] bond_slave_1: entered promiscuous mode [ 224.989755][ T7154] loop6: detected capacity change from 0 to 1024 [ 224.990202][ T7154] EXT4-fs: Ignoring removed bh option [ 225.004920][ T7157] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 225.006971][ T6333] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 225.015641][ T7158] fuse: Unknown parameter 'ôv <ý' [ 225.034876][ T7154] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.039811][ T7157] syzkaller1: entered promiscuous mode [ 225.039830][ T7157] syzkaller1: entered allmulticast mode [ 225.075149][ T7154] autofs: Unknown parameter '' [ 225.096624][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.157503][ T7176] loop6: detected capacity change from 0 to 1024 [ 225.158904][ T7165] bridge_slave_1: left allmulticast mode [ 225.158945][ T7165] bridge_slave_1: left promiscuous mode [ 225.159082][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.167428][ T7176] EXT4-fs: Ignoring removed orlov option [ 225.167469][ T7176] EXT4-fs: Ignoring removed bh option [ 225.169157][ T7176] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 225.173778][ T7165] bridge_slave_0: left allmulticast mode [ 225.173981][ T7165] bridge_slave_0: left promiscuous mode [ 225.174080][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.424631][ T7209] binfmt_misc: register: failed to install interpreter ./file2 [ 225.428163][ T7207] loop7: detected capacity change from 0 to 2048 [ 226.031099][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.031271][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.051294][ T7222] dummy0: left promiscuous mode [ 226.086933][ T7236] loop6: detected capacity change from 0 to 256 [ 226.090749][ T7236] vfat: Unknown parameter 'uð$oa’ni_xlate' [ 226.138319][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.144957][ T7222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.224774][ T7246] netlink: 'syz.5.466': attribute type 1 has an invalid length. [ 226.286358][ T7251] loop6: detected capacity change from 0 to 512 [ 226.294611][ T7251] EXT4-fs: Ignoring removed nobh option [ 226.309775][ T7251] EXT4-fs (loop6): 1 truncate cleaned up [ 226.310335][ T7251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.349262][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.387007][ T7259] netlink: 'syz.5.466': attribute type 10 has an invalid length. [ 226.401222][ T1248] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.402325][ T1248] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.402365][ T1248] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.402387][ T1248] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.423634][ T7260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.449659][ T7246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.466844][ T7249] bond2: (slave veth5): Enslaving as an active interface with a down link [ 226.470107][ T7256] dummy0: left promiscuous mode [ 226.471372][ T7256] bond2: (slave dummy0): making interface the new active one [ 226.471640][ T7256] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 226.495080][ T7255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.514686][ T7259] dummy0: entered promiscuous mode [ 226.523874][ T7259] bond2: (slave dummy0): Releasing active interface [ 226.677522][ T7298] Bluetooth: MGMT ver 1.23 [ 226.683447][ T7300] loop4: detected capacity change from 0 to 512 [ 226.982402][ T7255] ipvlan2: entered allmulticast mode [ 226.982430][ T7255] bond2: entered allmulticast mode [ 226.987882][ T7255] bond2: (slave ipip1): refused to change device type [ 227.017919][ T7303] loop5: detected capacity change from 0 to 2048 [ 227.082205][ T7303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.103883][ T7309] loop7: detected capacity change from 0 to 2048 [ 227.437546][ T7315] loop4: detected capacity change from 0 to 128 [ 227.444576][ T7315] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.490413][ T7320] __nla_validate_parse: 10 callbacks suppressed [ 227.492851][ T7320] netlink: 64 bytes leftover after parsing attributes in process `syz.6.485'. [ 227.508767][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 227.556264][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.486'. [ 227.558257][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.6.486'. [ 227.804310][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.908295][ T7357] loop6: detected capacity change from 0 to 256 [ 227.977417][ T7365] openvswitch: netlink: Key type 4118 is out of range max 32 [ 228.009422][ T5352] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.042228][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.494'. [ 228.116899][ T7377] loop4: detected capacity change from 0 to 1024 [ 228.132466][ T7377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.137684][ T7377] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.142210][ T7377] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 228.144692][ T7377] EXT4-fs (loop4): orphan cleanup on readonly fs [ 228.157546][ T7390] netlink: 28 bytes leftover after parsing attributes in process `syz.5.498'. [ 228.161451][ T7377] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #3: block 3: comm syz.4.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.166436][ T7377] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.167962][ T7377] Quota error (device loop4): write_blk: dquota write failed [ 228.171154][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 228.171168][ C1] EXT4-fs (loop4): initial error at time 228: ext4_map_blocks:832: inode 3: block 3 [ 228.171189][ C1] EXT4-fs (loop4): last error at time 228: ext4_map_blocks:832: inode 3: block 3 [ 228.177149][ T7377] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 228.180511][ T7377] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 228.184290][ T7377] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.493: Failed to acquire dquot type 0 [ 228.186993][ T7377] loop4: lost filesystem error report for type 5 error -117 [ 228.190284][ T7377] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 3: comm syz.4.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.196852][ T7377] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.198304][ T7377] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 228.198340][ T7377] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.493: Failed to acquire dquot type 0 [ 228.198364][ T7377] loop4: lost filesystem error report for type 5 error -117 [ 228.199642][ T7399] loop6: detected capacity change from 0 to 512 [ 228.205175][ T7399] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.500: corrupted in-inode xattr: invalid ea_ino [ 228.205197][ T7399] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 228.205338][ T7399] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.500: couldn't read orphan inode 15 (err -117) [ 228.205354][ T7399] loop6: lost filesystem error report for type 5 error -117 [ 228.205918][ T7399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.208556][ T7377] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.493: Freeing blocks not in datazone - block = 0, count = 4096 [ 228.208574][ T7377] loop4: lost filesystem error report for type 5 error -117 [ 228.224554][ T7377] EXT4-fs error (device loop4): ext4_map_blocks:790: inode #3: block 3: comm syz.4.493: lblock 3 mapped to illegal pblock 3 (length 1) [ 228.232645][ T7377] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.237273][ T7377] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 228.237317][ T7377] EXT4-fs error (device loop4): ext4_acquire_dquot:7069: comm syz.4.493: Failed to acquire dquot type 0 [ 228.237350][ T7377] loop4: lost filesystem error report for type 5 error -117 [ 228.238627][ T7377] EXT4-fs (loop4): 1 orphan inode deleted [ 228.243278][ T7377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.244779][ T7377] EXT4-fs: Cannot specify journal on remount [ 228.244976][ T7377] EXT4-fs error (device loop4): ext4_search_dir:1476: inode #2: block 16: comm syz.4.493: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 228.265529][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.316138][ T7413] loop5: detected capacity change from 0 to 1024 [ 228.316538][ T7413] ext4: Unknown parameter 'permit_directio' [ 228.695451][ T7428] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 228.775869][ T7432] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 228.775939][ T7432] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 228.776710][ T7432] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 228.777724][ T7432] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.504: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 228.777751][ T7432] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 228.777945][ T7432] EXT4-fs (loop4): no journal found [ 228.777954][ T7432] EXT4-fs (loop4): can't get journal size [ 228.779178][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.780929][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 228.780942][ C0] EXT4-fs (loop4): initial error at time 228: ext4_ext_check_inode:521: inode 3 [ 228.780958][ C0] EXT4-fs (loop4): last error at time 228: ext4_ext_check_inode:521: inode 3 [ 228.793476][ T7432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.836865][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.972401][ T7457] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 229.002799][ T7457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.044829][ T5620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.330002][ T7477] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 229.338049][ T7477] EXT4-fs (loop5): 1 truncate cleaned up [ 229.339876][ T7477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.363480][ T7467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.363669][ T7467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.367054][ T7477] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6537: inode #12: comm syz.5.515: bad extra_isize 62 (inode size 256) [ 229.371138][ T7477] EXT4-fs (loop5): Remounting filesystem read-only [ 229.386435][ T7467] netlink: 48 bytes leftover after parsing attributes in process `syz.7.511'. [ 229.390996][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.511'. [ 229.391008][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.391020][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.400784][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.400815][ T7467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.415646][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.475096][ T7485] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.522585][ T7489] fuse: Unknown parameter '0xffffffffffffffff' [ 229.525417][ T7490] fuse: Unknown parameter '0xffffffffffffffff' [ 229.526304][ T7485] overlayfs: invalid origin (0000007900edeaedda59bf6b49b6923c9864af2cf26237d9d87dfae8e78347ef7d63bd77cf7bbb4f4d4df4204f1d1f1d3e76f2eee2eb1f2e3cb0f1f997df2f16) [ 229.544473][ T5175] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.317535][ T7522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.335524][ T7522] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:337: inode #15: comm syz.4.527: verity file corrupted; can't find descriptor [ 230.338934][ T7522] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 230.343506][ T7522] fuse: Bad value for 'fd' [ 230.368222][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.570627][ T7530] FAULT_INJECTION: forcing a failure. [ 230.570627][ T7530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.570683][ T7530] CPU: 0 UID: 0 PID: 7530 Comm: syz.4.528 Tainted: G L syzkaller #0 PREEMPT [ 230.570700][ T7530] Tainted: [L]=SOFTLOCKUP [ 230.570704][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 230.570709][ T7530] Call trace: [ 230.570712][ T7530] show_stack+0x2c/0x3c (C) [ 230.570731][ T7530] __dump_stack+0x30/0x40 [ 230.570742][ T7530] dump_stack_lvl+0xd8/0x12c [ 230.570753][ T7530] dump_stack+0x1c/0x28 [ 230.570762][ T7530] should_fail_ex+0x41c/0x590 [ 230.570773][ T7530] should_fail+0x14/0x24 [ 230.570783][ T7530] should_fail_usercopy+0x20/0x30 [ 230.570793][ T7530] copy_folio_from_iter_atomic+0x384/0x1518 [ 230.570806][ T7530] generic_perform_write+0x4bc/0x7a4 [ 230.570817][ T7530] shmem_file_write_iter+0x10c/0x134 [ 230.570831][ T7530] vfs_write+0x51c/0xa0c [ 230.570843][ T7530] ksys_write+0x12c/0x228 [ 230.570853][ T7530] __arm64_sys_write+0x84/0x98 [ 230.570864][ T7530] invoke_syscall+0x98/0x244 [ 230.570874][ T7530] el0_svc_common+0xec/0x23c [ 230.570884][ T7530] do_el0_svc+0x4c/0x5c [ 230.570893][ T7530] el0_svc+0x64/0x260 [ 230.570903][ T7530] el0t_64_sync_handler+0x44/0x104 [ 230.570912][ T7530] el0t_64_sync+0x198/0x19c [ 230.874915][ T7534] FAULT_INJECTION: forcing a failure. [ 230.874915][ T7534] name failslab, interval 1, probability 0, space 0, times 0 [ 230.874953][ T7534] CPU: 1 UID: 0 PID: 7534 Comm: syz.5.530 Tainted: G L syzkaller #0 PREEMPT [ 230.874971][ T7534] Tainted: [L]=SOFTLOCKUP [ 230.874975][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 230.874982][ T7534] Call trace: [ 230.874985][ T7534] show_stack+0x2c/0x3c (C) [ 230.875004][ T7534] __dump_stack+0x30/0x40 [ 230.875017][ T7534] dump_stack_lvl+0xd8/0x12c [ 230.875029][ T7534] dump_stack+0x1c/0x28 [ 230.875040][ T7534] should_fail_ex+0x41c/0x590 [ 230.875053][ T7534] should_failslab+0xc4/0x120 [ 230.875065][ T7534] __kmalloc_cache_noprof+0x94/0x5fc [ 230.875074][ T7534] input_allocate_device+0x54/0x2a0 [ 230.875088][ T7534] uinput_ioctl_handler+0x14c/0x11f8 [ 230.875097][ T7534] uinput_ioctl+0x38/0x4c [ 230.875105][ T7534] __arm64_sys_ioctl+0x154/0x1cc [ 230.875118][ T7534] invoke_syscall+0x98/0x244 [ 230.875131][ T7534] el0_svc_common+0xec/0x23c [ 230.875142][ T7534] do_el0_svc+0x4c/0x5c [ 230.875154][ T7534] el0_svc+0x64/0x260 [ 230.875164][ T7534] el0t_64_sync_handler+0x44/0x104 [ 230.875174][ T7534] el0t_64_sync+0x198/0x19c [ 231.230399][ T7552] set_capacity_and_notify: 7 callbacks suppressed [ 231.232556][ T7552] loop6: detected capacity change from 0 to 128 [ 231.350233][ T7554] loop5: detected capacity change from 0 to 256 [ 231.558373][ T7553] netlink: 160 bytes leftover after parsing attributes in process `syz.5.536'. [ 231.867008][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 231.894690][ T7575] loop4: detected capacity change from 0 to 512 [ 231.907252][ T7575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 231.909251][ T7575] System zones: 1-12 [ 231.911039][ T7575] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 231.912885][ T7575] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 231.921508][ T7575] EXT4-fs (loop4): 1 truncate cleaned up [ 231.932638][ T7575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.978760][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.989192][ T7580] loop6: detected capacity change from 0 to 512 [ 231.992727][ T7580] EXT4-fs: Ignoring removed bh option [ 232.062847][ T7580] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.072380][ T7580] EXT4-fs error (device loop6): ext4_resize_begin:60: comm syz.6.546: resize_inode disabled but reserved GDT blocks non-zero [ 232.207773][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.294857][ T7610] loop4: detected capacity change from 0 to 512 [ 232.302495][ T7610] EXT4-fs (loop4): Test dummy encryption mode enabled [ 232.316064][ T7610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.383655][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.547294][ T7622] syzkaller0: entered promiscuous mode [ 232.547351][ T7622] syzkaller0: entered allmulticast mode [ 232.726425][ T6338] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 232.735498][ T7640] loop4: detected capacity change from 0 to 256 [ 232.736323][ T7640] vfat: Unknown parameter 'shortnamrtname' [ 232.737499][ T6338] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 232.742372][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 232.742404][ T7640] netlink: 'syz.4.558': attribute type 7 has an invalid length. [ 232.751012][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.564'. [ 232.753076][ T7640] netlink: 68 bytes leftover after parsing attributes in process `syz.4.558'. [ 232.850566][ T7659] netlink: 72 bytes leftover after parsing attributes in process `syz.5.567'. [ 232.855043][ T7659] loop5: detected capacity change from 0 to 512 [ 232.860485][ T7659] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.567: iget: bad extended attribute block 1 [ 232.860530][ T7659] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.860913][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 232.860924][ C1] EXT4-fs (loop5): initial error at time 232: ext4_orphan_get:1403: inode 15 [ 232.860944][ C1] EXT4-fs (loop5): last error at time 232: ext4_orphan_get:1403: inode 15 [ 232.863609][ T7659] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.567: couldn't read orphan inode 15 (err -117) [ 232.863635][ T7659] loop5: lost filesystem error report for type 5 error -117 [ 232.867223][ T7659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.958208][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.060174][ T7667] loop5: detected capacity change from 0 to 2048 [ 233.075808][ T7667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.094252][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.147245][ T7671] netlink: 536 bytes leftover after parsing attributes in process `syz.5.572'. [ 233.167407][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.573'. [ 233.178967][ T7674] vlan2: entered promiscuous mode [ 233.179001][ T7674] bond0: entered promiscuous mode [ 233.179026][ T7674] bond_slave_0: entered promiscuous mode [ 233.179109][ T7674] bond_slave_1: entered promiscuous mode [ 233.179173][ T7674] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 233.218428][ T7678] loop5: detected capacity change from 0 to 2048 [ 233.220117][ T7678] ext4: Unknown parameter 'measure' [ 233.240175][ T7678] overlay: filesystem on ./file0 not supported as upperdir [ 233.244158][ T7678] overlay: filesystem on ./file0 not supported as upperdir [ 233.246159][ T7679] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.247260][ T7679] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.247326][ T7679] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.247402][ T7679] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.247459][ T7679] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.247545][ T7679] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.251863][ T7678] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.251991][ T7678] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.252073][ T7678] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.252138][ T7678] overlayfs: failed lookup in lower (newroot/100, name='file0', err=-40): overlapping layers [ 233.294573][ T7682] loop5: detected capacity change from 0 to 2048 [ 233.301709][ T7682] ext4: Unknown parameter '' [ 233.316923][ T7690] FAULT_INJECTION: forcing a failure. [ 233.316923][ T7690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.316963][ T7690] CPU: 0 UID: 0 PID: 7690 Comm: syz.6.577 Tainted: G L syzkaller #0 PREEMPT [ 233.316979][ T7690] Tainted: [L]=SOFTLOCKUP [ 233.316982][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 233.316991][ T7690] Call trace: [ 233.316994][ T7690] show_stack+0x2c/0x3c (C) [ 233.317017][ T7690] __dump_stack+0x30/0x40 [ 233.317031][ T7690] dump_stack_lvl+0xd8/0x12c [ 233.317043][ T7690] dump_stack+0x1c/0x28 [ 233.317054][ T7690] should_fail_ex+0x41c/0x590 [ 233.317067][ T7690] should_fail+0x14/0x24 [ 233.317078][ T7690] should_fail_usercopy+0x20/0x30 [ 233.317091][ T7690] move_addr_to_user+0x1cc/0x358 [ 233.317102][ T7690] do_getsockname+0x170/0x1dc [ 233.317111][ T7690] __sys_getsockname+0xbc/0x124 [ 233.317120][ T7690] __arm64_sys_getsockname+0x88/0xa0 [ 233.317130][ T7690] invoke_syscall+0x98/0x244 [ 233.317142][ T7690] el0_svc_common+0xec/0x23c [ 233.317154][ T7690] do_el0_svc+0x4c/0x5c [ 233.317166][ T7690] el0_svc+0x64/0x260 [ 233.317177][ T7690] el0t_64_sync_handler+0x44/0x104 [ 233.317187][ T7690] el0t_64_sync+0x198/0x19c [ 233.343608][ T7682] ext4: Unknown parameter '' [ 233.364690][ T7682] ext4: Unknown parameter '' [ 233.404304][ T7682] ext4: Unknown parameter '' [ 233.435294][ T7682] ext4: Unknown parameter '' [ 233.507180][ T7682] ext4: Unknown parameter '' [ 233.522717][ T7682] ext4: Unknown parameter '' [ 233.551791][ T7682] ext4: Unknown parameter '' [ 233.595114][ T7682] ext4: Unknown parameter '' [ 233.603890][ T7690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.604104][ T7690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.632569][ T7700] overlayfs: conflicting lowerdir path [ 233.666629][ T7682] ext4: Unknown parameter '' [ 233.692334][ T7682] ext4: Unknown parameter '' [ 233.703018][ T7704] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.737448][ T7682] ext4: Unknown parameter '' [ 233.763965][ T14] IPVS: starting estimator thread 0... [ 233.766329][ T7682] ext4: Unknown parameter '' [ 233.786130][ T7682] ext4: Unknown parameter '' [ 233.814400][ T7714] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 233.861263][ T7711] IPVS: using max 45 ests per chain, 108000 per kthread [ 233.887913][ T7682] ext4: Unknown parameter '' [ 233.935605][ T30] audit: type=1326 audit(233.920:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.3.587" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb59782e8 code=0x0 [ 233.941598][ T7682] ext4: Unknown parameter '' [ 233.964005][ T7718] netlink: 68 bytes leftover after parsing attributes in process `syz.4.586'. [ 233.977613][ T7682] ext4: Unknown parameter '' [ 233.982940][ T7718] tun0: tun_chr_ioctl cmd 1074025675 [ 233.983056][ T7718] tun0: persist enabled [ 233.984361][ T7718] tun0: tun_chr_ioctl cmd 1074025675 [ 233.984371][ T7718] tun0: persist enabled [ 233.984633][ T7718] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 234.037620][ T7682] ext4: Unknown parameter '' [ 234.185033][ T7727] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.281790][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 234.307232][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.522194][ T7751] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20000000 [ 234.523039][ T7751] Memory failure: 0x2190ff: Sending SIGBUS to syz.5.598:7751 due to hardware memory corruption [ 234.523219][ T7751] Memory failure: 0x2190ff: recovery action for already poisoned page: Failed [ 234.597619][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.600'. [ 234.627734][ T7757] netlink: 'syz.5.601': attribute type 1 has an invalid length. [ 234.635555][ T7757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.657756][ T7757] bond3: (slave veth7): Enslaving as an active interface with a down link [ 234.661511][ T7757] dummy0: left promiscuous mode [ 234.663984][ T7757] bond3: (slave dummy0): making interface the new active one [ 234.665970][ T7757] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 234.807870][ T7767] netlink: 64 bytes leftover after parsing attributes in process `syz.3.604'. [ 235.406584][ T5620] bridge0: port 3(syz_tun) entered disabled state [ 235.428219][ T5620] syz_tun (unregistering): left allmulticast mode [ 235.428256][ T5620] syz_tun (unregistering): left promiscuous mode [ 235.428280][ T5620] bridge0: port 3(syz_tun) entered disabled state [ 235.609334][ T7786] binder: tried to use weak ref as strong ref [ 235.609365][ T7786] binder: 7785:7786 Acquire 1 refcount change on invalid ref 0 ret -22 [ 235.622549][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.613'. [ 235.636626][ T7786] binder: 7785:7786 got transaction to invalid handle, 1 [ 235.636669][ T7786] binder: 7785:7786 cannot find target node [ 235.636686][ T7786] binder: 7785:7786 transaction call to 0:0 failed 17/29201/-22, code 0 size 120-3976 line 3252 [ 235.660632][ T7228] binder: undelivered TRANSACTION_ERROR: 29201 [ 235.676634][ T49] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.722754][ T51] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 235.730826][ T30] audit: type=1326 audit(235.710:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7791 comm="syz.4.614" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc3782e8 code=0x0 [ 235.748729][ T7795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.748945][ T7795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.810855][ T4721] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.811727][ T4721] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.812076][ T4721] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.812402][ T4721] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.812608][ T4721] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.834986][ T49] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.874754][ T7803] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.936237][ T49] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.299706][ T7808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.302982][ T7795] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 236.309414][ T49] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.332852][ T7819] netlink: 'syz.4.619': attribute type 10 has an invalid length. [ 236.377846][ T7824] pim6reg: left allmulticast mode [ 236.424456][ T7832] pim6reg: entered allmulticast mode [ 236.478430][ T7798] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.478806][ T7798] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.478930][ T7798] bridge_slave_0: entered allmulticast mode [ 236.479558][ T7798] bridge_slave_0: entered promiscuous mode [ 236.480747][ T7798] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.480778][ T7798] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.481034][ T7798] bridge_slave_1: entered allmulticast mode [ 236.481520][ T7798] bridge_slave_1: entered promiscuous mode [ 236.491510][ T7798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.492769][ T7798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.501307][ T7798] team0: Port device team_slave_0 added [ 236.502326][ T7798] team0: Port device team_slave_1 added [ 236.514322][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.514333][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.514347][ T7798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.515323][ T7798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.515330][ T7798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.515344][ T7798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.530603][ T7798] hsr_slave_0: entered promiscuous mode [ 236.532836][ T7798] hsr_slave_1: entered promiscuous mode [ 236.533186][ T7836] team0: entered allmulticast mode [ 236.533231][ T7836] team_slave_0: entered allmulticast mode [ 236.533242][ T7836] team_slave_1: entered allmulticast mode [ 236.557078][ T7823] team0: left allmulticast mode [ 236.557112][ T7823] team_slave_0: left allmulticast mode [ 236.557141][ T7823] team_slave_1: left allmulticast mode [ 236.557213][ T7823] pim6reg: left allmulticast mode [ 236.856328][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.915501][ T49] bridge_slave_0: left allmulticast mode [ 236.915558][ T49] bridge_slave_0: left promiscuous mode [ 236.915652][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.935770][ T7848] openvswitch: netlink: Key 32 has unexpected len 8 expected 2 [ 236.998733][ T7853] set_capacity_and_notify: 22 callbacks suppressed [ 236.998775][ T7853] loop5: detected capacity change from 0 to 512 [ 237.004787][ T7853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 237.024305][ T7858] overlayfs: failed to clone upperpath [ 237.052128][ T7853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.125653][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.155464][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.194056][ T49] bond0 (unregistering): Released all slaves [ 237.198958][ T49] bond1 (unregistering): Released all slaves [ 237.210850][ T49] bond2 (unregistering): Released all slaves [ 237.850969][ T4721] Bluetooth: hci4: command tx timeout [ 238.181033][ T7729] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 238.185836][ T7729] EXT4-fs (loop5): Remounting filesystem read-only [ 239.304307][ T7853] tipc: Cannot configure node identity twice [ 239.315395][ T49] tipc: Left network mode [ 239.319196][ T5175] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.329842][ T7881] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 239.500246][ T7899] loop6: detected capacity change from 0 to 1024 [ 239.500665][ T7899] ext4: Bad value for 'max_dir_size_kb' [ 239.540413][ T7888] __nla_validate_parse: 4 callbacks suppressed [ 239.540457][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.637'. [ 239.555308][ T7898] tipc: Started in network mode [ 239.555355][ T7898] tipc: Node identity 7f000001, cluster identity 4711 [ 239.556089][ T7898] tipc: Enabled bearer , priority 10 [ 239.586673][ T7906] tipc: Enabling of bearer rejected, already enabled [ 239.592950][ T7798] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 239.597537][ T7798] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.598000][ T7798] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 239.609025][ T7798] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.673193][ T7912] loop6: detected capacity change from 0 to 128 [ 239.674089][ T7912] EXT4-fs: Ignoring removed i_version option [ 239.684124][ T7912] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.689637][ T7915] overlay: filesystem on ./file0 not supported as upperdir [ 239.689753][ T7920] ovl_lookup_single: 128 callbacks suppressed [ 239.689772][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.689831][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.689892][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.689944][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.689996][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.690047][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.690097][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.690146][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.690195][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.690246][ T7920] overlayfs: failed lookup in lower (newroot/111, name='file0', err=-40): overlapping layers [ 239.726036][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.746769][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.748529][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.750200][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.788750][ T7798] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 239.793529][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.796186][ T7798] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 239.796592][ T7798] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 239.804660][ T7798] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 239.806552][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.814417][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.814714][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.816326][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.817433][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.819207][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.824212][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.825233][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.826930][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.828455][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.830054][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.836622][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.839205][ T7915] overlayfs: failed to resolve './file0': -40 [ 239.982284][ T4721] Bluetooth: hci4: command tx timeout [ 240.058228][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.061628][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.061766][ T4398] 8021q: adding VLAN 0 to HW filter on device eth12 [ 240.065998][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.069318][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.072148][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.073553][ T49] hsr_slave_0: left promiscuous mode [ 240.073648][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.075151][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.078427][ T49] hsr_slave_1: left promiscuous mode [ 240.078565][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.079730][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.081708][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.082608][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.084015][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.085250][ T7915] overlayfs: failed to resolve './file0': -40 [ 240.092690][ T49] veth1_macvtap: left promiscuous mode [ 240.092738][ T49] veth0_macvtap: left promiscuous mode [ 240.092787][ T49] veth1_vlan: left promiscuous mode [ 240.092823][ T49] veth0_vlan: left promiscuous mode [ 240.339851][ T7798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.354884][ T7798] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.369687][ T7798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 240.372199][ T7798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.381562][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.381601][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.389668][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.389713][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.390334][ T5588] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.458253][ T7959] overlayfs: failed to clone upperpath [ 241.399570][ T4398] 8021q: adding VLAN 0 to HW filter on device eth13 [ 241.472197][ T6330] tipc: Node number set to 2130706433 [ 241.543482][ T8005] binder: 8001:8005 ioctl c0306201 200004c0 returned -14 [ 241.546225][ T8005] binder: 8001:8005 ioctl c0306201 200001c0 returned -14 [ 241.601673][ T7798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.652502][ T8021] syzkaller0: entered promiscuous mode [ 241.652536][ T8021] syzkaller0: entered allmulticast mode [ 241.669711][ T4398] 8021q: adding VLAN 0 to HW filter on device eth14 [ 241.715651][ T8032] loop6: detected capacity change from 0 to 128 [ 241.722356][ T8032] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 241.746864][ T7798] veth0_vlan: entered promiscuous mode [ 241.750693][ T7798] veth1_vlan: entered promiscuous mode [ 241.758812][ T7798] veth0_macvtap: entered promiscuous mode [ 241.761803][ T7798] veth1_macvtap: entered promiscuous mode [ 241.767627][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.770714][ T7798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.815949][ T8036] nbd: must specify at least one socket [ 241.817793][ T8041] nbd: must specify at least one socket [ 241.819256][ T8036] loop5: detected capacity change from 0 to 128 [ 241.825974][ T8036] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.831997][ T1297] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.832053][ T1297] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.832080][ T1297] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.832119][ T1297] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.847268][ T5175] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.910922][ T8045] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 241.911513][ T8045] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 242.011301][ T4721] Bluetooth: hci4: command tx timeout [ 242.089849][ T1297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.091039][ T1297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.097283][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.097335][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.218090][ T8058] loop8: detected capacity change from 0 to 2048 [ 242.221107][ T8058] ext3: Unknown parameter 'euid<00000000000000000000' [ 242.631632][ T8073] loop8: detected capacity change from 0 to 512 [ 242.633301][ T8073] EXT4-fs: Ignoring removed bh option [ 242.635591][ T8077] openvswitch: netlink: ct_state flags b3500008 unsupported [ 242.639318][ T8073] EXT4-fs (loop8): Test dummy encryption mode enabled [ 242.640866][ T8073] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 242.658901][ T8073] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.666: corrupted in-inode xattr: overlapping e_value [ 242.663919][ T8073] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.664883][ T8073] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.666: couldn't read orphan inode 15 (err -117) [ 242.669373][ T8073] loop8: lost filesystem error report for type 5 error -117 [ 242.670915][ C1] EXT4-fs (loop8): error count since last fsck: 2 [ 242.670946][ C1] EXT4-fs (loop8): initial error at time 242: ext4_iget_extra_inode:5210: inode 15 [ 242.670977][ C1] EXT4-fs (loop8): last error at time 242: ext4_orphan_get:1408 [ 242.678234][ T8073] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.698818][ T4398] 8021q: adding VLAN 0 to HW filter on device eth15 [ 242.737946][ T7798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.868076][ T8093] loop4: detected capacity change from 0 to 256 [ 242.870161][ T8093] vfat: Unknown parameter 'utf9' [ 242.916393][ T8100] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 243.060617][ T8112] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 243.060617][ T8112] The task syz.6.669 (8112) triggered the difference, watch for misbehavior. [ 243.494992][ T8143] netlink: 'syz.3.682': attribute type 21 has an invalid length. [ 243.495025][ T8143] netlink: 'syz.3.682': attribute type 22 has an invalid length. [ 243.508053][ T8146] netlink: 104 bytes leftover after parsing attributes in process `syz.5.684'. [ 243.739362][ T8167] nbd: must specify a device to reconfigure [ 243.905427][ T8162] fuse: Bad value for 'max_read' [ 244.091831][ T4721] Bluetooth: hci4: command tx timeout [ 244.225390][ T8199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 244.226587][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.698'. [ 244.253440][ T1248] bond0: (slave bond_slave_0): interface is now down [ 244.255607][ T1248] bond0: (slave bond_slave_1): interface is now down [ 244.272248][ T1248] bond0: (slave bond_slave_0): interface is now down [ 244.272277][ T1248] bond0: (slave bond_slave_1): interface is now down [ 244.274068][ T1248] bond0: now running without any active interface! [ 244.318903][ T8205] loop8: detected capacity change from 0 to 512 [ 244.358863][ T8210] loop8: detected capacity change from 0 to 128 [ 244.361521][ T8210] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 244.455707][ T8216] loop8: detected capacity change from 0 to 512 [ 244.457717][ T8216] EXT4-fs (loop8): Test dummy encryption mode enabled [ 244.479835][ T8216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.499111][ T7798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.529283][ T8221] loop8: detected capacity change from 0 to 1024 [ 244.536215][ T8221] EXT4-fs: Ignoring removed orlov option [ 244.545451][ T8221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.563932][ T8221] EXT4-fs error (device loop8): ext4_lookup:1787: inode #16: comm syz.8.705: unexpected EA_INODE flag [ 244.598615][ T7798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.684842][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 244.684878][ T8226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 244.716371][ T8229] loop4: detected capacity change from 0 to 512 [ 244.718651][ T8229] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 244.727446][ T8229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.732599][ T8229] tipc: Started in network mode [ 244.732628][ T8229] tipc: Node identity 1, cluster identity 4711 [ 244.732676][ T8229] tipc: Node number set to 1 [ 244.750838][ T8233] fuse: fd is not a fuse device [ 244.776143][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.838083][ T8241] overlayfs: missing 'workdir' [ 244.896808][ T8245] netlink: 256 bytes leftover after parsing attributes in process `syz.8.714'. [ 244.999850][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.713'. [ 245.162816][ T8248] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 245.162884][ T8248] overlayfs: failed to set xattr on upper [ 245.162906][ T8248] overlayfs: ...falling back to redirect_dir=nofollow. [ 245.162919][ T8248] overlayfs: ...falling back to uuid=null. [ 245.179455][ T8248] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 245.186876][ T8248] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 245.188866][ T8248] overlayfs: failed to set xattr on upper [ 245.190306][ T8248] overlayfs: ...falling back to redirect_dir=nofollow. [ 245.193269][ T8248] overlayfs: ...falling back to uuid=null. [ 245.202075][ T8250] ovl_lookup_single: 53 callbacks suppressed [ 245.202110][ T8250] overlayfs: failed lookup in lower (/, name='bus', err=-40): overlapping layers [ 245.214177][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.8.715'. [ 245.259788][ T8242] loop4: detected capacity change from 0 to 512 [ 245.261430][ T8242] EXT4-fs: Ignoring removed orlov option [ 245.315227][ T8242] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #12: comm syz.4.711: invalid size [ 245.316454][ T8242] EXT4-fs (loop4): Remounting filesystem read-only [ 245.590387][ T14] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 245.590419][ T14] Quota error (device loop4): write_blk: dquota write failed [ 245.590451][ T14] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 245.711940][ T8266] loop8: detected capacity change from 0 to 2048 [ 245.993348][ T8272] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.042065][ T8272] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.719: bad orphan inode 131083 [ 246.042149][ T8272] loop4: lost filesystem error report for type 5 error -117 [ 246.134227][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.722'. [ 246.136355][ T8276] vlan2: entered promiscuous mode [ 246.143965][ T8278] tmpfs: Unknown parameter ']pol' [ 246.145938][ T4721] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 246.145974][ T4721] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 246.265415][ T8286] ext4: Unknown parameter 'nouser_xattr' [ 246.301846][ T8289] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 246.328573][ T8289] tipc: Started in network mode [ 246.329688][ T8289] tipc: Node identity 1, cluster identity 4711 [ 246.332093][ T8289] tipc: Node number set to 1 [ 246.810349][ T8309] vfat: Unknown parameter 'checD' [ 246.814779][ T8309] netlink: 68 bytes leftover after parsing attributes in process `syz.4.733'. [ 246.898714][ T8311] FAULT_INJECTION: forcing a failure. [ 246.898714][ T8311] name failslab, interval 1, probability 0, space 0, times 0 [ 246.902567][ T8311] CPU: 0 UID: 0 PID: 8311 Comm: syz.6.734 Tainted: G L syzkaller #0 PREEMPT [ 246.902596][ T8311] Tainted: [L]=SOFTLOCKUP [ 246.902600][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 246.902606][ T8311] Call trace: [ 246.902610][ T8311] show_stack+0x2c/0x3c (C) [ 246.902634][ T8311] __dump_stack+0x30/0x40 [ 246.902646][ T8311] dump_stack_lvl+0xd8/0x12c [ 246.902656][ T8311] dump_stack+0x1c/0x28 [ 246.902666][ T8311] should_fail_ex+0x41c/0x590 [ 246.902677][ T8311] should_failslab+0xc4/0x120 [ 246.902688][ T8311] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 246.902697][ T8311] kmemdup_nul+0x48/0xfc [ 246.902704][ T8311] vfs_parse_fs_qstr+0x100/0x1cc [ 246.902713][ T8311] vfs_parse_monolithic_sep+0x1e4/0x268 [ 246.902720][ T8311] ovl_parse_monolithic+0x30/0x40 [ 246.902729][ T8311] parse_monolithic_mount_data+0x78/0x8c [ 246.902737][ T8311] do_new_mount+0x270/0x538 [ 246.902747][ T8311] path_mount+0x5f0/0xa88 [ 246.902755][ T8311] do_mount+0xe8/0x148 [ 246.902764][ T8311] __arm64_sys_mount+0x33c/0x388 [ 246.902773][ T8311] invoke_syscall+0x98/0x244 [ 246.902783][ T8311] el0_svc_common+0xec/0x23c [ 246.902793][ T8311] do_el0_svc+0x4c/0x5c [ 246.902803][ T8311] el0_svc+0x64/0x260 [ 246.902812][ T8311] el0t_64_sync_handler+0x44/0x104 [ 246.902824][ T8311] el0t_64_sync+0x198/0x19c [ 246.999516][ T8315] syzkaller1: entered promiscuous mode [ 246.999553][ T8315] syzkaller1: entered allmulticast mode [ 247.092049][ T8325] fuse: Unknown parameter 'groupc³ÿÞÒGÉÜu¯ UÖÛ_id' [ 247.156202][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 247.156237][ T8332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.744'. [ 247.164378][ T8325] fuse: Bad value for 'fd' [ 247.180030][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 247.195157][ T8339] openvswitch: netlink: ct_state flags b3500008 unsupported [ 247.228116][ T8334] set_capacity_and_notify: 4 callbacks suppressed [ 247.228827][ T8334] loop6: detected capacity change from 0 to 1024 [ 247.229219][ T8334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.229234][ T8334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.233466][ T8334] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 247.251967][ T8334] fuse: Unknown parameter '‰d' [ 247.258048][ T8341] pim6reg: entered allmulticast mode [ 247.259206][ T8340] pim6reg: left allmulticast mode [ 247.424679][ T8364] bridge1: entered promiscuous mode [ 247.483694][ T8372] syzkaller0: entered promiscuous mode [ 247.483725][ T8372] syzkaller0: entered allmulticast mode [ 247.505142][ T8374] loop5: detected capacity change from 0 to 128 [ 247.510609][ T8374] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.830069][ T8377] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 247.830131][ T8377] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 248.043802][ T8401] netlink: 'syz.4.762': attribute type 5 has an invalid length. [ 248.043835][ T8401] netlink: 'syz.4.762': attribute type 9 has an invalid length. [ 248.070025][ T8404] loop6: detected capacity change from 0 to 512 [ 248.087942][ T8404] EXT4-fs mount: 8 callbacks suppressed [ 248.088194][ T8404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.147723][ T8401] loop4: detected capacity change from 0 to 128 [ 248.154129][ T8401] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.194499][ T5352] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.520224][ T8417] loop5: detected capacity change from 0 to 128 [ 248.525089][ T8417] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (39847!=39978) [ 248.525122][ T8417] EXT4-fs (loop5): group descriptors corrupted! [ 248.549823][ T8421] netlink: 'syz.3.768': attribute type 21 has an invalid length. [ 248.552418][ T8421] netlink: 'syz.3.768': attribute type 22 has an invalid length. [ 248.665387][ T8428] loop5: detected capacity change from 0 to 2048 [ 248.717759][ T8428] loop5: p2 < > p3 < > [ 248.821158][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.857556][ T6673] udevd[6673]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 249.148608][ T6809] udevd[6809]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 249.166219][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.183623][ T8447] loop8: detected capacity change from 0 to 2048 [ 249.217401][ T6673] udevd[6673]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 249.225846][ T6809] udevd[6809]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 249.326575][ T8465] loop4: detected capacity change from 0 to 512 [ 249.331063][ T8465] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.355587][ T8465] EXT4-fs (loop4): 1 truncate cleaned up [ 249.356175][ T8465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.427415][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.465368][ T8470] bridge_slave_1 (unregistering): left allmulticast mode [ 249.467025][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.620773][ T8487] loop8: detected capacity change from 0 to 1024 [ 249.629844][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.686207][ T8487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 249.692283][ T8487] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.787: bg 0: block 112: padding at end of block bitmap is not set [ 250.012177][ T7798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 250.101761][ T8505] netlink: 'syz.5.793': attribute type 31 has an invalid length. [ 250.387617][ T8522] loop4: detected capacity change from 0 to 512 [ 250.399348][ T8522] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.799: bad orphan inode 13 [ 250.402544][ T8522] loop4: lost filesystem error report for type 5 error -117 [ 250.403408][ T8522] ext4_test_bit(bit=12, block=4) = 1 [ 250.406072][ T8522] is_bad_inode(inode)=0 [ 250.407395][ T8522] NEXT_ORPHAN(inode)=0 [ 250.407440][ T8522] max_ino=32 [ 250.407459][ T8522] i_nlink=1 [ 250.408001][ T8522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.736939][ T5352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.748824][ T8530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.789183][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.792766][ T8534] netlink: 'syz.4.802': attribute type 10 has an invalid length. [ 250.792814][ T8534] syz_tun: entered promiscuous mode [ 250.798498][ T8534] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 251.372695][ T8553] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.379550][ T8551] sctp: [Deprecated]: syz.8.809 (pid 8551) Use of int in max_burst socket option. [ 251.379550][ T8551] Use struct sctp_assoc_value instead [ 251.389933][ T8554] __nla_validate_parse: 7 callbacks suppressed [ 251.389988][ T8554] netlink: 64 bytes leftover after parsing attributes in process `syz.3.810'. [ 251.722210][ T8557] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 251.722297][ T8557] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 251.958660][ T8569] EXT4-fs: Ignoring removed oldalloc option [ 251.965127][ T8569] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 251.986676][ T8569] EXT4-fs (loop8): 1 orphan inode deleted [ 251.986708][ T8569] EXT4-fs (loop8): 1 truncate cleaned up [ 251.987264][ T8569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.042458][ T8569] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.815: iget: bad extra_isize 46 (inode size 256) [ 252.050985][ T8569] EXT4-fs (loop8): Remounting filesystem read-only [ 252.066478][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.820'. [ 252.068017][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.8.815'. [ 252.129758][ T7798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.135542][ T8591] netlink: 128 bytes leftover after parsing attributes in process `syz.3.821'. [ 252.137453][ T8591] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 252.204795][ T8601] ext4: Unknown parameter 'euid>00000000000000060928' [ 252.295396][ T8609] FAULT_INJECTION: forcing a failure. [ 252.295396][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 252.298496][ T8609] CPU: 1 UID: 0 PID: 8609 Comm: syz.5.826 Tainted: G L syzkaller #0 PREEMPT [ 252.298520][ T8609] Tainted: [L]=SOFTLOCKUP [ 252.298524][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 252.298529][ T8609] Call trace: [ 252.298532][ T8609] show_stack+0x2c/0x3c (C) [ 252.298555][ T8609] __dump_stack+0x30/0x40 [ 252.298568][ T8609] dump_stack_lvl+0xd8/0x12c [ 252.298578][ T8609] dump_stack+0x1c/0x28 [ 252.298587][ T8609] should_fail_ex+0x41c/0x590 [ 252.298599][ T8609] should_failslab+0xc4/0x120 [ 252.298610][ T8609] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 252.298618][ T8609] kstrdup+0x50/0x104 [ 252.298626][ T8609] ovl_parse_param+0x470/0xab8 [ 252.298635][ T8609] vfs_parse_fs_param+0x1bc/0x2f8 [ 252.298643][ T8609] vfs_parse_fs_qstr+0x138/0x1cc [ 252.298651][ T8609] vfs_parse_monolithic_sep+0x1e4/0x268 [ 252.298659][ T8609] ovl_parse_monolithic+0x30/0x40 [ 252.298667][ T8609] parse_monolithic_mount_data+0x78/0x8c [ 252.298675][ T8609] do_new_mount+0x270/0x538 [ 252.298684][ T8609] path_mount+0x5f0/0xa88 [ 252.298693][ T8609] do_mount+0xe8/0x148 [ 252.298702][ T8609] __arm64_sys_mount+0x33c/0x388 [ 252.298711][ T8609] invoke_syscall+0x98/0x244 [ 252.298721][ T8609] el0_svc_common+0xec/0x23c [ 252.298731][ T8609] do_el0_svc+0x4c/0x5c [ 252.298740][ T8609] el0_svc+0x64/0x260 [ 252.298750][ T8609] el0t_64_sync_handler+0x44/0x104 [ 252.298758][ T8609] el0t_64_sync+0x198/0x19c [ 252.399387][ T8622] siw: device registration error -23 [ 252.407268][ T8621] set_capacity_and_notify: 6 callbacks suppressed [ 252.407331][ T8621] loop6: detected capacity change from 0 to 1024 [ 252.407706][ T8621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.407719][ T8621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.422063][ T8621] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 252.455011][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.829'. [ 252.455050][ T8623] netlink: 'syz.3.829': attribute type 2 has an invalid length. [ 252.455061][ T8623] netlink: 'syz.3.829': attribute type 2 has an invalid length. [ 252.455071][ T8623] netlink: 'syz.3.829': attribute type 1 has an invalid length. [ 252.455080][ T8623] netlink: 24 bytes leftover after parsing attributes in process `syz.3.829'. [ 252.476254][ T8623] geneve2: entered promiscuous mode [ 252.476289][ T8623] geneve2: entered allmulticast mode [ 252.511244][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.511591][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.520197][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.520470][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.526081][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.529147][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.609785][ T8633] openvswitch: netlink: ct_state flags b3000008 unsupported [ 252.636611][ T8635] netlink: 48 bytes leftover after parsing attributes in process `syz.3.834'. [ 252.644112][ T8639] loop4: detected capacity change from 0 to 512 [ 252.684303][ T8639] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 252.702144][ T8639] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 252.820319][ T8650] loop4: detected capacity change from 0 to 128 [ 252.836408][ T8650] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.176731][ T8661] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 253.176820][ T8661] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 253.849379][ T8678] loop8: detected capacity change from 0 to 2048 [ 253.861509][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'. [ 253.861548][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 253.943335][ T8678] loop8: p2 p3 < > p4 < p5 > [ 253.943366][ T8678] loop8: partition table partially beyond EOD, truncated [ 253.947972][ T8678] loop8: p3 start 4225 is beyond EOD, truncated [ 253.957971][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.842'. [ 253.959503][ T8678] overlayfs: missing 'lowerdir' [ 254.337406][ T8699] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 254.337472][ T8699] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 254.371859][ T6673] udevd[6673]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 254.377318][ T6809] udevd[6809]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 254.441800][ T8711] loop5: detected capacity change from 0 to 128 [ 254.456725][ T8711] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.545123][ T8713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.649495][ T8724] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 254.650705][ T8724] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 254.882675][ T8716] netlink: 'syz.6.853': attribute type 7 has an invalid length. [ 254.910968][ T8592] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.911017][ T8592] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.911049][ T8592] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.103173][ T8754] macvlan1: entered promiscuous mode [ 255.111561][ T8754] ipvlan0: entered promiscuous mode [ 255.116489][ T8754] ipvlan0: left promiscuous mode [ 255.123334][ T8754] macvlan1: left promiscuous mode [ 255.524917][ T8776] syzkaller0: entered promiscuous mode [ 255.524974][ T8776] syzkaller0: entered allmulticast mode [ 256.035412][ T8806] fuse: fd is not a fuse device [ 256.104439][ T8806] overlayfs: failed to clone upperpath [ 256.308557][ T8821] PKCS8: Unsupported PKCS#8 version [ 256.329816][ T8821] loop5: detected capacity change from 0 to 512 [ 256.452687][ T8827] FAULT_INJECTION: forcing a failure. [ 256.452687][ T8827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.452721][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.4.873 Tainted: G L syzkaller #0 PREEMPT [ 256.452738][ T8827] Tainted: [L]=SOFTLOCKUP [ 256.452742][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 256.452749][ T8827] Call trace: [ 256.452752][ T8827] show_stack+0x2c/0x3c (C) [ 256.452775][ T8827] __dump_stack+0x30/0x40 [ 256.452788][ T8827] dump_stack_lvl+0xd8/0x12c [ 256.452799][ T8827] dump_stack+0x1c/0x28 [ 256.452811][ T8827] should_fail_ex+0x41c/0x590 [ 256.452829][ T8827] should_fail+0x14/0x24 [ 256.452842][ T8827] should_fail_usercopy+0x20/0x30 [ 256.452856][ T8827] bpf_verifier_vlog+0x81c/0xbc0 [ 256.452870][ T8827] __btf_verifier_log+0xe8/0x13c [ 256.452878][ T8827] btf_verifier_log_vsi+0x1c4/0x36c [ 256.452887][ T8827] btf_datasec_check_meta+0x608/0x71c [ 256.452897][ T8827] btf_parse_type_sec+0x36c/0x17a8 [ 256.452906][ T8827] btf_new_fd+0x33c/0xa24 [ 256.452918][ T8827] bpf_btf_load+0x144/0x190 [ 256.452928][ T8827] __sys_bpf+0x7f0/0x82c [ 256.452937][ T8827] __arm64_sys_bpf+0xd0/0xec [ 256.452945][ T8827] invoke_syscall+0x98/0x244 [ 256.452957][ T8827] el0_svc_common+0xec/0x23c [ 256.452969][ T8827] do_el0_svc+0x4c/0x5c [ 256.452980][ T8827] el0_svc+0x64/0x260 [ 256.452990][ T8827] el0t_64_sync_handler+0x44/0x104 [ 256.453001][ T8827] el0t_64_sync+0x198/0x19c [ 256.496670][ T8827] loop4: detected capacity change from 0 to 2048 [ 256.589021][ T8827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.618191][ T8827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.693033][ T8827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.802648][ T8839] __nla_validate_parse: 3 callbacks suppressed [ 256.802687][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 256.835885][ T8844] openvswitch: netlink: ct_state flags b3000008 unsupported [ 256.883553][ T8849] loop6: detected capacity change from 0 to 512 [ 256.905041][ T8849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 256.929404][ T8849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.964712][ T8849] tipc: Started in network mode [ 256.964757][ T8849] tipc: Node identity 1, cluster identity 4711 [ 256.964778][ T8849] tipc: Node number set to 1 [ 257.000530][ T5588] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.043454][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.884'. [ 257.043505][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.884'. [ 257.156327][ T8862] loop8: detected capacity change from 0 to 2048 [ 257.173904][ T8867] FAULT_INJECTION: forcing a failure. [ 257.173904][ T8867] name failslab, interval 1, probability 0, space 0, times 0 [ 257.176634][ T8867] CPU: 0 UID: 0 PID: 8867 Comm: syz.6.887 Tainted: G L syzkaller #0 PREEMPT [ 257.176663][ T8867] Tainted: [L]=SOFTLOCKUP [ 257.176670][ T8867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 257.176677][ T8867] Call trace: [ 257.176681][ T8867] show_stack+0x2c/0x3c (C) [ 257.176702][ T8867] __dump_stack+0x30/0x40 [ 257.176715][ T8867] dump_stack_lvl+0xd8/0x12c [ 257.176727][ T8867] dump_stack+0x1c/0x28 [ 257.176738][ T8867] should_fail_ex+0x41c/0x590 [ 257.176751][ T8867] should_failslab+0xc4/0x120 [ 257.176764][ T8867] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 257.176777][ T8867] __d_alloc+0x50/0x690 [ 257.176786][ T8867] d_alloc_pseudo+0x2c/0xd8 [ 257.176795][ T8867] alloc_path_pseudo+0xe8/0x1d4 [ 257.176804][ T8867] alloc_file_pseudo+0xb0/0x198 [ 257.176812][ T8867] sock_alloc_file+0xb4/0x1ac [ 257.176826][ T8867] __sys_socket+0x90/0xec [ 257.176834][ T8867] __arm64_sys_socket+0x84/0x9c [ 257.176844][ T8867] invoke_syscall+0x98/0x244 [ 257.176856][ T8867] el0_svc_common+0xec/0x23c [ 257.176867][ T8867] do_el0_svc+0x4c/0x5c [ 257.176879][ T8867] el0_svc+0x64/0x260 [ 257.176889][ T8867] el0t_64_sync_handler+0x44/0x104 [ 257.176900][ T8867] el0t_64_sync+0x198/0x19c [ 257.196225][ T8862] loop8: p2 p3 < > p4 < p5 > [ 257.196261][ T8862] loop8: partition table partially beyond EOD, truncated [ 257.198784][ T8862] loop8: p3 start 4225 is beyond EOD, truncated [ 257.222649][ T8862] overlayfs: failed to resolve './bus': -2 [ 257.224815][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.8.885'. [ 257.224880][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.8.885'. [ 257.224906][ T8862] netlink: 'syz.8.885': attribute type 6 has an invalid length. [ 257.356074][ T6673] udevd[6673]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 257.359185][ T6809] udevd[6809]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 257.405752][ T8881] fuse: Unknown parameter '…*bw' [ 257.443948][ T8890] loop6: detected capacity change from 0 to 256 [ 257.461587][ T8892] sctp: [Deprecated]: syz.8.894 (pid 8892) Use of int in max_burst socket option. [ 257.461587][ T8892] Use struct sctp_assoc_value instead [ 257.468765][ T8893] sctp: [Deprecated]: syz.8.894 (pid 8893) Use of int in max_burst socket option. [ 257.468765][ T8893] Use struct sctp_assoc_value instead [ 257.599907][ T8902] netlink: 60 bytes leftover after parsing attributes in process `syz.6.898'. [ 257.605711][ T8902] netlink: 60 bytes leftover after parsing attributes in process `syz.6.898'. [ 257.613969][ T8902] netlink: 500 bytes leftover after parsing attributes in process `syz.6.898'. [ 258.011407][ T8906] syz.5.900 invoked oom-killer: gfp_mask=0x402dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN), order=2, oom_score_adj=1000 [ 258.014921][ T8906] CPU: 0 UID: 0 PID: 8906 Comm: syz.5.900 Tainted: G L syzkaller #0 PREEMPT [ 258.014948][ T8906] Tainted: [L]=SOFTLOCKUP [ 258.014952][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 258.014958][ T8906] Call trace: [ 258.014962][ T8906] show_stack+0x2c/0x3c (C) [ 258.014983][ T8906] __dump_stack+0x30/0x40 [ 258.014996][ T8906] dump_stack_lvl+0xd8/0x12c [ 258.015007][ T8906] dump_stack+0x1c/0x28 [ 258.015018][ T8906] dump_header+0xbc/0x3f0 [ 258.015029][ T8906] oom_kill_process+0x248/0x8f0 [ 258.015037][ T8906] out_of_memory+0xd24/0x1064 [ 258.015044][ T8906] mem_cgroup_out_of_memory+0xe8/0x170 [ 258.015053][ T8906] try_charge_memcg+0x9bc/0xd38 [ 258.015064][ T8906] obj_cgroup_charge_pages+0x30/0xb0 [ 258.015074][ T8906] __memcg_slab_post_alloc_hook+0x4fc/0x8c0 [ 258.015084][ T8906] __kvmalloc_node_noprof+0x4f8/0x7fc [ 258.015093][ T8906] io_region_allocate_pages+0x84/0x410 [ 258.015104][ T8906] io_create_region+0x31c/0x438 [ 258.015113][ T8906] io_allocate_scq_urings+0x310/0x65c [ 258.015122][ T8906] io_uring_create+0x3b4/0x830 [ 258.015131][ T8906] __arm64_sys_io_uring_setup+0x284/0x290 [ 258.015139][ T8906] invoke_syscall+0x98/0x244 [ 258.015149][ T8906] el0_svc_common+0xec/0x23c [ 258.015159][ T8906] do_el0_svc+0x4c/0x5c [ 258.015168][ T8906] el0_svc+0x64/0x260 [ 258.015178][ T8906] el0t_64_sync_handler+0x44/0x104 [ 258.015186][ T8906] el0t_64_sync+0x198/0x19c [ 258.032398][ T8906] memory: usage 307192kB, limit 307200kB, failcnt 403 [ 258.032417][ T8906] memory+swap: usage 307472kB, limit 9007199254740988kB, failcnt 0 [ 258.032426][ T8906] kmem: usage 307036kB, limit 9007199254740988kB, failcnt 0 [ 258.032459][ T8906] Memory cgroup stats for /syz5: [ 258.032531][ T8906] cache 745472 [ 258.032536][ T8906] rss 36864 [ 258.032539][ T8906] rss_huge 0 [ 258.032543][ T8906] shmem 4096 [ 258.032546][ T8906] mapped_file 4096 [ 258.032549][ T8906] dirty 0 [ 258.032553][ T8906] writeback 0 [ 258.032556][ T8906] workingset_refault_anon 62 [ 258.032559][ T8906] workingset_refault_file 0 [ 258.032563][ T8906] swap 286720 [ 258.032566][ T8906] swapcached 8974336 [ 258.032569][ T8906] pgpgin 102664 [ 258.032572][ T8906] pgpgout 105334 [ 258.032575][ T8906] pgfault 113348 [ 258.032595][ T8906] pgmajfault 140 [ 258.032599][ T8906] inactive_anon 40960 [ 258.032602][ T8906] active_anon 36864 [ 258.032606][ T8906] inactive_file 0 [ 258.032609][ T8906] active_file 0 [ 258.032612][ T8906] unevictable 0 [ 258.032616][ T8906] hierarchical_memory_limit 314572800 [ 258.032619][ T8906] hierarchical_memsw_limit 9223372036854771712 [ 258.032623][ T8906] total_cache 745472 [ 258.032626][ T8906] total_rss 36864 [ 258.032629][ T8906] total_rss_huge 0 [ 258.032633][ T8906] total_shmem 4096 [ 258.032636][ T8906] total_mapped_file 4096 [ 258.032639][ T8906] total_dirty 0 [ 258.032643][ T8906] total_writeback 0 [ 258.032646][ T8906] total_workingset_refault_anon 62 [ 258.032649][ T8906] total_workingset_refault_file 0 [ 258.032653][ T8906] total_swap 286720 [ 258.032656][ T8906] total_swapcached 8974336 [ 258.032659][ T8906] total_pgpgin 102664 [ 258.032663][ T8906] total_pgpgout 105334 [ 258.032666][ T8906] total_pgfault 113348 [ 258.032670][ T8906] total_pgmajfault 140 [ 258.032673][ T8906] total_inactive_anon 40960 [ 258.032676][ T8906] total_active_anon 36864 [ 258.032680][ T8906] total_inactive_file 0 [ 258.032683][ T8906] total_active_file 0 [ 258.032686][ T8906] total_unevictable 0 [ 258.032690][ T8906] anon_cost 16 [ 258.032693][ T8906] file_cost 0 [ 258.032696][ T8906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.900,pid=8904,uid=0 [ 258.033641][ T8906] Memory cgroup out of memory: Killed process 8904 (syz.5.900) total-vm:98928kB, anon-rss:1244kB, file-rss:21584kB, shmem-rss:4kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 258.310586][ T8936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 258.488921][ T8954] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 258.698233][ T8971] loop8: detected capacity change from 0 to 2048 [ 258.704116][ T8973] syzkaller0: entered promiscuous mode [ 258.704148][ T8973] syzkaller0: entered allmulticast mode [ 258.725489][ T8980] FAULT_INJECTION: forcing a failure. [ 258.725489][ T8980] name failslab, interval 1, probability 0, space 0, times 0 [ 258.725540][ T8980] CPU: 1 UID: 0 PID: 8980 Comm: syz.4.917 Tainted: G L syzkaller #0 PREEMPT [ 258.725556][ T8980] Tainted: [L]=SOFTLOCKUP [ 258.725560][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 258.725565][ T8980] Call trace: [ 258.725568][ T8980] show_stack+0x2c/0x3c (C) [ 258.725586][ T8980] __dump_stack+0x30/0x40 [ 258.725597][ T8980] dump_stack_lvl+0xd8/0x12c [ 258.725607][ T8980] dump_stack+0x1c/0x28 [ 258.725616][ T8980] should_fail_ex+0x41c/0x590 [ 258.725627][ T8980] should_failslab+0xc4/0x120 [ 258.725638][ T8980] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 258.725646][ T8980] kstrdup+0x50/0x104 [ 258.725654][ T8980] ovl_do_parse_layer+0x50/0xa98 [ 258.725663][ T8980] ovl_parse_param+0x898/0xab8 [ 258.725671][ T8980] vfs_parse_fs_param+0x1bc/0x2f8 [ 258.725680][ T8980] vfs_parse_fs_qstr+0x138/0x1cc [ 258.725687][ T8980] vfs_parse_monolithic_sep+0x1e4/0x268 [ 258.725695][ T8980] ovl_parse_monolithic+0x30/0x40 [ 258.725703][ T8980] parse_monolithic_mount_data+0x78/0x8c [ 258.725711][ T8980] do_new_mount+0x270/0x538 [ 258.725720][ T8980] path_mount+0x5f0/0xa88 [ 258.725729][ T8980] do_mount+0xe8/0x148 [ 258.725738][ T8980] __arm64_sys_mount+0x33c/0x388 [ 258.725747][ T8980] invoke_syscall+0x98/0x244 [ 258.725757][ T8980] el0_svc_common+0xec/0x23c [ 258.725767][ T8980] do_el0_svc+0x4c/0x5c [ 258.725776][ T8980] el0_svc+0x64/0x260 [ 258.725786][ T8980] el0t_64_sync_handler+0x44/0x104 [ 258.725794][ T8980] el0t_64_sync+0x198/0x19c [ 258.800107][ T8971] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.877530][ T7798] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.893759][ T4721] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 258.893804][ T4721] Bluetooth: hci1: Injecting HCI hardware error event [ 258.895002][ T4721] Bluetooth: hci1: hardware error 0x00 [ 258.908012][ T8994] loop5: detected capacity change from 0 to 2048 [ 258.956124][ T8994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.982550][ T8998] overlayfs: failed to resolve './file1/file0': -20 [ 259.065728][ T9007] loop8: detected capacity change from 0 to 512 [ 259.074646][ T9007] EXT4-fs: Ignoring removed nobh option [ 259.097728][ T9007] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 259.100905][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 259.100933][ C0] EXT4-fs (loop8): initial error at time 259: ext4_mb_generate_buddy:1317 [ 259.100963][ C0] EXT4-fs (loop8): last error at time 259: ext4_mb_generate_buddy:1317 [ 259.101035][ T9007] EXT4-fs (loop8): Remounting filesystem read-only [ 259.101428][ T9007] EXT4-fs (loop8): 1 truncate cleaned up [ 259.101977][ T9007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.184338][ T9007] EXT4-fs (loop8): shut down requested (1) [ 259.196589][ T9007] UBIFS error (pid: 9007): cannot open "c:::", error -22 [ 262.215493][ T8984] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 262.220283][ T8984] EXT4-fs (loop5): Remounting filesystem read-only [ 273.862368][ T4718] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.875425][ T4718] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.877510][ T4718] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.879913][ T4718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.881633][ T4718] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.038246][ T4718] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.040731][ T4718] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.044151][ T4718] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.046465][ T4718] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.048245][ T4718] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.105555][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.108188][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.110059][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.117996][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.119847][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.103740][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 275.106735][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 275.108634][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 275.111320][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 275.113028][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 275.156109][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 275.158696][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 275.160596][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 275.163208][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 275.164970][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 275.959605][ T51] Bluetooth: hci5: command tx timeout [ 276.107910][ T51] Bluetooth: hci7: command tx timeout [ 276.110097][ T4718] Bluetooth: hci6: command tx timeout [ 277.146832][ T51] Bluetooth: hci8: command tx timeout [ 277.196073][ T51] Bluetooth: hci9: command tx timeout [ 277.987661][ T51] Bluetooth: hci5: command tx timeout [ 278.185665][ T51] Bluetooth: hci7: command tx timeout [ 278.185705][ T51] Bluetooth: hci6: command tx timeout [ 279.177036][ T4718] Bluetooth: hci8: command tx timeout [ 279.275293][ T4718] Bluetooth: hci9: command tx timeout [ 280.067919][ T4718] Bluetooth: hci5: command tx timeout [ 280.216678][ T4718] Bluetooth: hci6: command tx timeout [ 280.216712][ T4718] Bluetooth: hci7: command tx timeout [ 281.257758][ T51] Bluetooth: hci8: command tx timeout [ 281.358854][ T51] Bluetooth: hci9: command tx timeout [ 282.150725][ T51] Bluetooth: hci5: command tx timeout [ 282.299575][ T51] Bluetooth: hci7: command tx timeout [ 282.299612][ T51] Bluetooth: hci6: command tx timeout [ 283.341815][ T4718] Bluetooth: hci8: command tx timeout [ 283.391435][ T4718] Bluetooth: hci9: command tx timeout [ 300.866908][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 42s! [ 300.866980][ C0] Showing busy workqueues and worker pools: [ 300.866989][ C0] workqueue events: flags=0x100 [ 300.867039][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 300.867056][ C0] in-flight: 7227:perf_sched_delayed for 26s ,6345:netdev_work_proc for 41s [ 300.867094][ C0] pending: ovs_dp_masks_rebalance [ 300.867112][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 300.867128][ C0] pending: ovs_dp_masks_rebalance, psi_avgs_work, 2*nsim_dev_hwstats_traffic_work [ 300.867161][ C0] workqueue events_unbound: flags=0x2 [ 300.867169][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 300.867184][ C0] in-flight: 8940:bpf_map_free_deferred for 25s ,3451:toggle_allocation_gate for 41s [ 300.867263][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 300.867273][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 300.867287][ C0] in-flight: 49:addrconf_verify_work for 11s [ 300.867322][ C0] workqueue bond0: flags=0x2000a [ 300.867331][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 300.867345][ C0] pending: bond_arp_monitor [ 300.867360][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 300.867369][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 300.867386][ C0] pending: wg_packet_encrypt_worker [ 300.867399][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 300.867409][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 300.867425][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 300.867442][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 300.867451][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 300.867467][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 300.867488][ C0] workqueue hci1: flags=0x20012 [ 300.867497][ C0] pwq 9: cpus=0-1 node=0 flags=0x4 nice=-20 active=1 refcnt=4 [ 300.867513][ C0] in-flight: 4721:hci_error_reset for 42s [ 300.867541][ C0] workqueue bond0: flags=0x2000a [ 300.867549][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=4 [ 300.867564][ C0] pending: bond_arp_monitor [ 300.867577][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 300.867586][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 300.867602][ C0] pending: wg_packet_encrypt_worker [ 300.867615][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 300.867624][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 300.867640][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 300.867657][ C0] workqueue wg-crypt-wg2: flags=0x128 [ 300.867666][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 300.867682][ C0] pending: wg_packet_encrypt_worker [ 300.867700][ C0] pool 2: cpus=0 node=0 flags=0x0 nice=0 hung=0s workers=19 idle: 7230 7229 7238 7228 1188 1154 4889 4804 4888 6344 9 6342 6343 4811 10 7231 7241 [ 300.867801][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=0s workers=24 idle: 12 4957 8592 59 923 8603 3551 8598 40 14 8602 8939 2769 8596 8593 8942 1297 1248 8944 8946 8945 [ 300.867914][ C0] pool 9: cpus=0-1 node=0 flags=0x4 nice=-20 hung=0s workers=9 idle: 4718 51 4712 4724 4717 4719 4720 4723 [ 300.867969][ C0] Showing backtraces of busy workers in stalled worker pools: [ 300.867980][ C0] pool 6: no worker in running state, cpu=1 is busy (nr_workers=18 nr_idle=18) [ 300.867988][ C0] The pool might have trouble waking an idle worker. [ 300.867991][ C0] Backtrace of last woken worker: [ 300.867994][ C0] task:kworker/1:14 state:R running task stack:0 pid:6334 tgid:6334 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 300.868014][ C0] Workqueue: 0x0 (events) [ 300.868026][ C0] Call trace: [ 300.868030][ C0] __switch_to+0x2b4/0x6e4 (T) [ 300.868042][ C0] __schedule+0x1370/0x2d80 [ 300.868050][ C0] schedule+0x13c/0x20c [ 300.868057][ C0] worker_thread+0x924/0xbd0 [ 300.868068][ C0] kthread+0x304/0x3d4 [ 300.868077][ C0] ret_from_fork+0x10/0x20 [ 300.868090][ C0] Sending NMI from CPU 0 to CPUs 1: [ 310.869514][ C0] After 10 seconds, these CPUS still haven't responded to the NMI: 1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)