last executing test programs: 4m14.157816202s ago: executing program 32 (id=54): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0xfffffc79}, 0x58) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r3, 0x0, 0xfe31) 3m47.403844283s ago: executing program 33 (id=339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m33.93018393s ago: executing program 34 (id=448): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x600, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240)) 3m18.230455946s ago: executing program 35 (id=611): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}, 0x1, 0x1000000000000000}, 0x0) 3m15.491468576s ago: executing program 36 (id=630): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) (async) listen(r3, 0x5) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008ff82"], 0x4a) (async) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r4 = gettid() (rerun: 32) r5 = syz_open_dev$mouse(&(0x7f00000001c0), 0x651b8c08, 0x402000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0xf) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async, rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000000)='10', 0x2, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES8=r0, @ANYRESOCT, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB="0150b06f0c576c962c29db6100b190113b6a22e97b4dc0971a49fa413916de83d726869cff90ea", @ANYRESHEX=r0, @ANYRESHEX, @ANYRES8=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xbd, 0x0, &(0x7f0000000440)="e02702e800002fd443e48134b3aa48adfc6b710d8576a305a9fd4211fbead9b07b686b3e41afceb7d1bb59c852fb87b6b4e1f6f213c77d75fe834225e11a3ab47f0577ba8cda80fc5684bff1e04f018fb6bb113344037ab16fb509bb5191a07605452c954d7224f90d2a271714228b159a607e9bd53471afd71f955f6fcf90aa973bd8dd9ef1748cc0ed9e5f3d486ad7327aa9685b19f126ffb8b0847c78e54fb24942a0d2e23c9329c53922d4594184bf71d901aa641856b4ef4e7ee9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.278588941s ago: executing program 37 (id=816): sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xf, 0x3, 0x2) recvmsg$kcm(r2, &(0x7f0000001780)={0x0, 0xb0, &(0x7f0000001640), 0xb0}, 0x0) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x20, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x44, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000040) r8 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0xa) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) 2m39.352946762s ago: executing program 38 (id=841): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x60, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x12, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 2m36.703422685s ago: executing program 7 (id=865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a4000000002"], 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0a00180003030303035e0000080027000200000008002700000000000800270002000000050019010e000000080022015c0000000800220167030000080026006c09000008002700010000000800a100030000000800a00005000000"], 0x78}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x20e, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) 2m33.30296289s ago: executing program 7 (id=869): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x215b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (fail_nth: 6) 2m33.000796372s ago: executing program 7 (id=873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="3c000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000e0ff00000000000100001c0c"], 0x4a) 2m32.675259651s ago: executing program 7 (id=878): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x8001, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x2, 0x2}], "5770b20d60347b182ae6e52444a1dfc88b7843bb20b0532412b51dfc9b5ab78d1178fc9307b0e63dca7e7231e31f61ab807e4a6a2fbbf9325b601883c2e34eb9516e"}, 0x5) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0xfd, 0x0, 0xffeffffe}, {0x16, 0x4}]}, 0x10) 2m32.155547517s ago: executing program 39 (id=880): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0, 0x50000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000440)=0x8101) 2m30.573135802s ago: executing program 7 (id=891): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2m29.983311083s ago: executing program 7 (id=893): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=@newtfilter={0xb4, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xffffffff, 0x4}}, @TCA_U32_SEL={0x74, 0x5, {0xb, 0x8, 0x6, 0x9, 0x1b44, 0x7, 0x7, 0x8001, [{0xb4e7, 0x80, 0x5, 0x5}, {0xffffff01, 0x9, 0xf, 0xb555}, {0x57faaf57, 0x3, 0x6, 0x1}, {0x6b, 0x7fff, 0x7ff, 0x80000001}, {0x4, 0x5, 0x3, 0x5}, {0x6, 0x7, 0xfa3, 0x4}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r0, &(0x7f0000000500)=ANY=[], 0xfdef) (fail_nth: 6) 2m29.791043152s ago: executing program 40 (id=893): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=@newtfilter={0xb4, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xffffffff, 0x4}}, @TCA_U32_SEL={0x74, 0x5, {0xb, 0x8, 0x6, 0x9, 0x1b44, 0x7, 0x7, 0x8001, [{0xb4e7, 0x80, 0x5, 0x5}, {0xffffff01, 0x9, 0xf, 0xb555}, {0x57faaf57, 0x3, 0x6, 0x1}, {0x6b, 0x7fff, 0x7ff, 0x80000001}, {0x4, 0x5, 0x3, 0x5}, {0x6, 0x7, 0xfa3, 0x4}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r0, &(0x7f0000000500)=ANY=[], 0xfdef) (fail_nth: 6) 2m1.66773189s ago: executing program 2 (id=1032): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2004c890) kexec_load(0x2, 0x0, &(0x7f00000002c0), 0x0) 2m1.351199814s ago: executing program 4 (id=1033): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket(0xa, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x2c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000180)={0x4, {"f63f329893322ba3773af9d48cee2b0e", "5fc6d977618ca0db48bc2cc9398cf825", "873b0b38442da34337a538a8614239cd"}, 0x6}) unshare(0x400) socket$nl_netfilter(0x10, 0x3, 0xc) write(r4, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)=@newtfilter={0xb4, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x88, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xffffffff, 0x4}}, @TCA_U32_SEL={0x74, 0x5, {0xb, 0x8, 0x6, 0x9, 0x1b44, 0x7, 0x7, 0x8001, [{0xb4e7, 0x80, 0x5, 0x5}, {0xffffff01, 0x9, 0xf, 0xb555}, {0x57faaf57, 0x3, 0x6, 0x1}, {0x6b, 0x7fff, 0x7ff, 0x80000001}, {0x4, 0x5, 0x3, 0x5}, {0x6, 0x7, 0xfa3, 0x4}]}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r0, &(0x7f0000000500)=ANY=[], 0xfdef) 2m0.74771539s ago: executing program 2 (id=1037): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010100800c0000000000000000000000140000002001000000000000000000000000000050bb2d6f67d29d6fa1adb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bda"], 0x114}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x4028}, 0x18) syz_open_procfs(0x0, &(0x7f0000000500)='net/vlan/config\x00') r0 = socket(0x2d, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x14, "000008001900000002000000000000000100"}, 0x80, 0x0, 0x0, 0x0, 0xfffffde6}, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=@newtaction={0x130c, 0x30, 0x871a15abc695fa1d, 0x0, 0x35dfdbfe, {}, [{0x12f8, 0x1, [@m_gact={0x128, 0x3, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x5e97, 0x0, 0x8001, 0x26ab}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8001, 0xfffffffffffffffb, 0x3, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x640, 0x4}}]}, {0xbd, 0x6, "61d69d974db7afd6a5c3986eb7666b371f646dd707ce6208cf6b62396a0b6d38d1e5308d8589c960f358358c81b0df0b683c5d3bedf30d49889256f75b86548f3a4185e06351ef69cb935ef25d2cf11db737eabfee6082beeded0263b90d41e647da0c26a539c5d17c6758372976acd5b0c9a5c8bec6a239fa03cd2a0a105b02066feb2ea72e5193b1e96ffc5546e1023413c308911425c0d70af08d4004ad2b6edb1484b3a896b5d8e6f0f67457df389f67254f0a131af3ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0xbc, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x8f, 0x6, "1e537ea9998c5ddd00932da92fbaf28ae313f8472532159cc1464e5219c90ddbc8d6ef2649fc1d53f1e6f55a264d334d3d55ba2d7104734056bfd42a1574af3ee3880252f0caf6f24d4b5ab3aa93f6a62ddde6cbb60e42ba8900f457a871bca4b55ecf179d4f0faceb7ba8e2c67ca7ba9d49cceb3178797fe0f5fdc0ccf3bf0265e41549910fc8871285fc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_bpf={0x1110, 0x2, 0x0, 0x0, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x2, 0x5, 0x93fd, 0x79c6}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x4, 0x0, 0x8, 0x1}, {0x8005, 0x4, 0x6, 0x3}, {0x5, 0xce, 0x67, 0x8}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0xe, 0x6, 0x1}}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0xf001, 0x2, 0x7, 0x200}, {0x4, 0x6, 0xa, 0x9}, {0x81, 0x4, 0x1}, {0x1, 0xd8, 0x9}, {0xef07, 0x8, 0x5, 0x3}, {0x2, 0x6, 0x55}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{0xa, 0x9, 0x1, 0x3ff}, {0xc, 0xff, 0x8, 0x9}, {0x2, 0xd, 0xd9, 0x8}, {0x13d, 0x40, 0x7, 0x10}, {0x800, 0x7f, 0x8, 0x2}, {0xc, 0x3, 0x8, 0xa6}]}]}, {0x1007, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x130c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b0000900ac0006031100000004000b000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccc7ac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8", 0xd8}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000814000780080011400000000005001500000000000500010006000000050005000a00000005000400000000000900020073797a320000000010000300686173683a6970"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f01010018000007000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000c0d6de91ff7f9a87fa210d00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r7, 0x4) r8 = getpid() sched_setaffinity(r8, 0x8, &(0x7f0000000280)=0x9) sched_setscheduler(r8, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m0.744277954s ago: executing program 4 (id=1038): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x8001, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x2, 0x2}], "5770b20d60347b182ae6e52444a1dfc88b7843bb20b0532412b51dfc9b5ab78d1178fc9307b0e63dca7e7231e31f61ab807e4a6a2fbbf9325b601883c2e34eb9516e"}, 0x5) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0xfd, 0x0, 0xffeffffe}, {0x16, 0x4}]}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 1m58.950497467s ago: executing program 4 (id=1040): unshare(0x62040200) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x1847993, &(0x7f0000000b40)=ANY=[], 0x0, 0x1232, &(0x7f0000003300)="$eJzs3M1rHGUcB/BfXmy2qXlRa7UF8UEvehmaHLzoJUgK0gWlbYRWEKZmo0vG3ZBZAhGxevIk+HeIIII3QbzpJRf/A8FbLt6sII5kN01f2JRZFLeEz+eyP3ie7+xv9tld2OWZ2X/tyw83N8psI+/F5MRETG5FpNspUkzGHZ/Gy6/+9PNzV6/fuLzSbK5eSenSyrWlV1JK88//8M7HX7/wY+/M29/Nfz8Te4vv7v++/Nveub3z+39f+6BdpnaZOt1eytPNbreX3yxaab1dbmYpvVW08rKV2p2ytd1L+em4M75RdLe2dlPeWZ+b3dpulWXKO1OHnaTe9m7K38/bnZRlWZqbDUY3fVStfXW7qqqIqnosTkVVVdXpmI0z8XjMxXwsxGI8EU/GU3E2no5z8Uw8G9/++s3uQQIAAAAAAAAAAAAAAAAAAAD474x6/f/5/qxxdw0AAAAAAAAAAAAAAAAAAAAny9XrNy6vNJurV1JqRBSf76ztrA0eB+MrG9GOIlpxMRbir+hf/T8wqC+90Vy9mPoW47Pi1mH+1s7a1P35pf7tBIbmlwb5dH9+JmbvzS/HQpx9MB+LB/nloflGvPTiPfksFuKX96IbRaxHP3v0/J8spfT6m80H8hf68wAAAOAkyNKRob/fs+y48UF+hP8HUjTu5g+yF6bHeupERLn70WZeFK3tGkXjMFNjclVV/SWueWRFneLUeNv4s6qqg2K6zhtgxGLqEXh5H1oc/0mZiYg6x/lj2NBERIzeT6PO5Il/uUzj/V7i/3F30cfdCQAAAAAAAAAAAKN4+DbA+WOHvhhsD6+183Hc5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8A87cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//7TjxMQ=") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) (fail_nth: 8) 1m58.656509109s ago: executing program 2 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @random="000863ee0a3d"}, 0x14) 1m58.281013101s ago: executing program 2 (id=1045): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x8001, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x2, 0x2}], "5770b20d60347b182ae6e52444a1dfc88b7843bb20b0532412b51dfc9b5ab78d1178fc9307b0e63dca7e7231e31f61ab807e4a6a2fbbf9325b601883c2e34eb9516e"}, 0x5) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0xfd, 0x0, 0xffeffffe}, {0x16, 0x4}]}, 0x10) 1m56.587377243s ago: executing program 4 (id=1046): socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x8001, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x2, 0x2}], "5770b20d60347b182ae6e52444a1dfc88b7843bb20b0532412b51dfc9b5ab78d1178fc9307b0e63dca7e7231e31f61ab807e4a6a2fbbf9325b601883c2e34eb9516e"}, 0x5) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0xfd, 0x0, 0xffeffffe}, {0x16, 0x4}]}, 0x10) 1m56.52470225s ago: executing program 2 (id=1048): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8008003, 0xbffc, 0xe652, 0x2, 0xd, 0x8, 0xff}, 0x9c) 1m54.756979012s ago: executing program 4 (id=1050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0xc4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0x401, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 1m54.475942417s ago: executing program 2 (id=1051): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read(r0, &(0x7f0000000080)=""/220, 0xdc) 1m54.144062211s ago: executing program 41 (id=1051): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) read(r0, &(0x7f0000000080)=""/220, 0xdc) 1m54.066491032s ago: executing program 4 (id=1054): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000000206050000000000000000000000000605000100070000000900020073797a300000000014000780080006000000000008001340000000000500050002000000050004000400000011000300686173683a69702c706f727400000000babc7fb03f00a21dd59e79dc3126b6ec75352d8202eea96779e26f"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x84) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000100)=0x2000) close_range(r0, r0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x3}]) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000005c0)={r2, 0x4, 0x7f, 0x101}) io_submit(r4, 0x4, &(0x7f0000000640)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xff, 0xffffffffffffffff, &(0x7f0000000140)="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", 0xfd, 0x101, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x4, r5, &(0x7f0000000280)="7f932cef937558ff0448ac9e210b67d542efe7630610e488b4", 0x19, 0x8, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xbf97b734211530cb, 0x10, r2, &(0x7f0000000380)="997495dad11a8ee8f675678263f31fd0251a7f1b2fc5b6adc5017f8e1ea1f6ca17ca020539be8480f2a3c5fad5e06ebcbb7fbca205e2ef8d261f2d47fb9f33767f2a90d27aa3e6636e98f780b2938bfe171e41d8e7e4346629302a7898312d4c3a6fbc332f64ac3e84b9a813a040e47d17fcc90d14694fc7b00204328f3d320eaf6728968c48ba2223eab5cf606cae08a838be99009ef3229ed68307d2867699d4308f25ba92997e29f62b1226c0b53613c08cb39bda9867602e700903adce866f0423bdccaa5cef0d2025c8c19ee6c199c750f22ab745a6e97f3522a534d4d779125690fff88e66eba835aec4862543b1", 0xf1, 0xba76, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x1ff, r0, &(0x7f00000004c0)="cb280a573ffc5970367c6d745ce4c605122e1c9e7a3ac48d0d8188eaff3e8c9c60fd3e4f0adebe47f287ce41fb11abadebe8ed96ea20fa1eae13bfe6a357e8acd589e76b8844afd5b3a2c29d1b7bb13a419b954064d6301d6e6423e09e09473e6ce8db6c250e4d15b525dfd260f0907787ee09033155d20783768f9971e9502d6d962f4b9942abbe715a4823dd433cca5fdeedfa8807c1366cebb6affae6d667ce0679abf663e1931e58491a8da9a11821fa9d0b260ff23b577d19f6c073bf2e2e9783b8a2f18fec137749152250b36bd89812f1ec0a", 0xd6, 0x1ff, 0x0, 0x1, r6}]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0x20000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/sockcreate\x00') writev(r7, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 1m53.365548866s ago: executing program 42 (id=1054): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000000206050000000000000000000000000605000100070000000900020073797a300000000014000780080006000000000008001340000000000500050002000000050004000400000011000300686173683a69702c706f727400000000babc7fb03f00a21dd59e79dc3126b6ec75352d8202eea96779e26f"], 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x84) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000100)=0x2000) close_range(r0, r0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x3}]) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000005c0)={r2, 0x4, 0x7f, 0x101}) io_submit(r4, 0x4, &(0x7f0000000640)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xff, 0xffffffffffffffff, &(0x7f0000000140)="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", 0xfd, 0x101, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x4, r5, &(0x7f0000000280)="7f932cef937558ff0448ac9e210b67d542efe7630610e488b4", 0x19, 0x8, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xbf97b734211530cb, 0x10, r2, &(0x7f0000000380)="997495dad11a8ee8f675678263f31fd0251a7f1b2fc5b6adc5017f8e1ea1f6ca17ca020539be8480f2a3c5fad5e06ebcbb7fbca205e2ef8d261f2d47fb9f33767f2a90d27aa3e6636e98f780b2938bfe171e41d8e7e4346629302a7898312d4c3a6fbc332f64ac3e84b9a813a040e47d17fcc90d14694fc7b00204328f3d320eaf6728968c48ba2223eab5cf606cae08a838be99009ef3229ed68307d2867699d4308f25ba92997e29f62b1226c0b53613c08cb39bda9867602e700903adce866f0423bdccaa5cef0d2025c8c19ee6c199c750f22ab745a6e97f3522a534d4d779125690fff88e66eba835aec4862543b1", 0xf1, 0xba76, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x1ff, r0, &(0x7f00000004c0)="cb280a573ffc5970367c6d745ce4c605122e1c9e7a3ac48d0d8188eaff3e8c9c60fd3e4f0adebe47f287ce41fb11abadebe8ed96ea20fa1eae13bfe6a357e8acd589e76b8844afd5b3a2c29d1b7bb13a419b954064d6301d6e6423e09e09473e6ce8db6c250e4d15b525dfd260f0907787ee09033155d20783768f9971e9502d6d962f4b9942abbe715a4823dd433cca5fdeedfa8807c1366cebb6affae6d667ce0679abf663e1931e58491a8da9a11821fa9d0b260ff23b577d19f6c073bf2e2e9783b8a2f18fec137749152250b36bd89812f1ec0a", 0xd6, 0x1ff, 0x0, 0x1, r6}]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000340)={0x20000001}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/sockcreate\x00') writev(r7, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) 1m34.954064506s ago: executing program 0 (id=1099): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, 0x0, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r2, 0x0, 0x20000000002) 1m33.76634384s ago: executing program 0 (id=1102): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_MM(0x25, 0x20000000, &(0x7f0000ff9000/0x2000)=nil) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000b00)="cc3aeeaccf96d11507c3f901cfa7dafb3ec49c9bd686e87bbde5871b2694cabde13b5b104bcf442d92733cef238f4f10b74f58efdd6bd87cd453e251fccc5af43ea942a6b53bafb444280ec21f12071de2e40d0551c57949858d20aa90d6ed05b9b1") sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061157c000000000095000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$netlink(0xffffffffffffffff, &(0x7f0000000b80)=@unspec, 0xc) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x2) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000140)={{0x5, 0x81, 0x6, 0x5}, 'syz0\x00', 0x1d}) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m32.768077395s ago: executing program 6 (id=1105): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 1m32.631380443s ago: executing program 0 (id=1106): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x40, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x200000c1}, 0x40) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x80900) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x148}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', r6, 0x0, 0x41) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000001fc0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x200400d1) ioctl$FBIOPUT_CON2FBMAP(r8, 0x4610, &(0x7f0000000000)={0x1e, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1d6) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='hpfs\x00', 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r9) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @multicast1}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r11, 0x40047452, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1m31.791364125s ago: executing program 0 (id=1107): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x8001, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x2, 0x2}], "5770b20d60347b182ae6e52444a1dfc88b7843bb20b0532412b51dfc9b5ab78d1178fc9307b0e63dca7e7231e31f61ab807e4a6a2fbbf9325b601883c2e34eb9516e"}, 0x5) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0xfd, 0x0, 0xffeffffe}, {0x16, 0x4}]}, 0x10) 1m31.601460704s ago: executing program 6 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) socket$kcm(0xa, 0x3, 0x87) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000e40000140000006000000000058700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x891e, &(0x7f0000000040)={'veth1_to_team\x00', @ifru_names='pim6reg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x52, 0x20020084, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd21, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=@delqdisc={0x2c, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}]}, 0x2c}}, 0x0) ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f0000002f80), 0x1003) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4ef, &(0x7f0000000a40)="$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") 1m29.979311002s ago: executing program 0 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'rose0\x00', {0x1}, 0x563f}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000780)={r1, 0xe, 0x80000000}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7fff}}}}}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x6, 0x300, 0xfc, 0x0, 0x0, 0x8}, 0x1c) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x24, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x210e0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x405, 0x0) 1m29.707199326s ago: executing program 0 (id=1111): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000000340)) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xffffffff, [0x7, 0x3]}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r7}, 0x10) r8 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r9, 0x0, 0x1, 0xce2f, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x35) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000300)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x1, 0x2, 0x2, 0x0, 0x5}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000024e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x48080) ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c8, &(0x7f0000000100)) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000002c0)={0x57, 0x8, 0xb, {0x6, 0x8000}, {0x0, 0x2}, @period={0x59, 0x3, 0xff, 0x4, 0x8000, {0x3, 0x7, 0x5, 0x9}, 0x2, &(0x7f0000000240)=[0x2, 0x8]}}) 1m29.123386581s ago: executing program 43 (id=1111): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000000340)) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xffffffff, [0x7, 0x3]}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r6}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r7}, 0x10) r8 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r9, 0x0, 0x1, 0xce2f, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x35) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000300)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0x1, 0x2, 0x2, 0x0, 0x5}, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf256401010100000000000000000000000020010000000000000000000000000001000000024e210002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff080000000000000001000000000000000900000000000000ffffff7f0000000001000000000000800400000000000000ffffffffffffff7f000000000000000007000000000000000300000000000000000000002cbd7000003500000200040050000000000000001c00040007004e244e200000ff02000000000000000000000000000160001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x16c}}, 0x48080) ioctl$FS_IOC_GETFSLABEL(r11, 0x400452c8, &(0x7f0000000100)) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f00000002c0)={0x57, 0x8, 0xb, {0x6, 0x8000}, {0x0, 0x2}, @period={0x59, 0x3, 0xff, 0x4, 0x8000, {0x3, 0x7, 0x5, 0x9}, 0x2, &(0x7f0000000240)=[0x2, 0x8]}}) 1m29.054154503s ago: executing program 6 (id=1115): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000640)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0xa00) 1m28.692652002s ago: executing program 6 (id=1118): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e2c, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f00000009c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x3, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x8001, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x2, 0x2}], "5770b20d60347b182ae6e52444a1dfc88b7843bb20b0532412b51dfc9b5ab78d1178fc9307b0e63dca7e7231e31f61ab807e4a6a2fbbf9325b601883c2e34eb9516e"}, 0x5) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0xfd, 0x0, 0xffeffffe}, {0x16, 0x4}]}, 0x10) 1m26.921494189s ago: executing program 6 (id=1120): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setresuid(0xee00, 0xee01, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x82171, 0xffffffffffffffff, 0xffffe000) socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000000)="4c00000011000f140011000200001a0002000000200000", 0x17) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x7ff) 1m26.423353159s ago: executing program 6 (id=1122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x80) 1m25.609518181s ago: executing program 44 (id=1122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x80) 5.616236247s ago: executing program 1 (id=1407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f0000000100)={&(0x7f0000000040), 0x0, 0x28, 0x3, 0x6}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffa}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8296}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.293193908s ago: executing program 1 (id=1410): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd21, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0x8100}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}}, 0x0) 4.975333226s ago: executing program 1 (id=1414): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00') getdents64(r1, &(0x7f0000002440)=""/181, 0xb5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a00000000000000000000003d0000000000000000000000c050a15088196d0600000000000000000000010000000000"]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}]}, 0x24}}, 0x20000050) 4.441953959s ago: executing program 1 (id=1418): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) 4.331537587s ago: executing program 5 (id=1420): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103142, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x100000000000000) 4.273222942s ago: executing program 8 (id=1421): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x1410, 0x1, 0x70bd2d, 0x25dfdc01}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$kcm(0x29, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendto$inet(r5, 0x0, 0x0, 0x810, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000000400000300000000000000", @ANYRES64=r2, @ANYRES64=r3/1000+10000, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="010000e00100004000030000b7456aadb5e3c48672899f00"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000044) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)) 4.040259044s ago: executing program 5 (id=1424): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000020c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1768, 0x1698, 0x230, 0x458, 0x458, 0xf0, 0x1698, 0x1698, 0x1698, 0x1698, 0x1698, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0xffffff00, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x87}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}, {[{0xe06}]}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x3, 0xc13, 0x78, 0xe24d, 0x1, 0x5, 0x7, 0x1000, 0x80, 0x20}, {0x7}}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0xffffff00, 0xff], 'syz_tun\x00', 'pimreg1\x00', {}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x40, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17c8) unshare(0x62040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x70) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x4001, 0x3, 0x218, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'veth0_to_batadv\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0x0, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2, 0x5], 0x4}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x10, 0x8, 0xd56, 0x10000, 0xd78, 0x0, 0x10000, 0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x1847993, &(0x7f0000000b40)=ANY=[], 0x0, 0x1232, &(0x7f0000003300)="$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") r7 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) ioctl$EVIOCGEFFECTS(r8, 0x80044584, &(0x7f00000000c0)=""/177) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r9, 0x7, &(0x7f0000000680)={0x1, 0x1, 0x200000000000007, 0x4}) fcntl$lock(r9, 0x6, &(0x7f0000000140)={0x2, 0x2, 0x7fff800000001, 0xf05}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f00000002c0)=0x10) 3.932004777s ago: executing program 3 (id=1425): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x0, 0x22, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$RTC_AIE_ON(r1, 0x7001) pread64(r1, &(0x7f0000000000)=""/4, 0x4, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.793570718s ago: executing program 8 (id=1427): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000640)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x20, 0x10, 0x10, 0x70bd27, 0x3, {0x0, 0x0, 0x0, r3, 0x51b0b}}, 0x20}, 0x1, 0x0, 0x0, 0x20048804}, 0x4000010) sendto$packet(r0, &(0x7f0000000340)="6fffb2b9a89e496b7b091549b9e0", 0xe, 0x54, &(0x7f0000000180)={0x11, 0x8100, r3, 0x1, 0xe9, 0x6, @local}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) 3.215531673s ago: executing program 3 (id=1428): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xfffffffeffffffff, {0x5, 0x2, 0x200000000000, 0xc, 0xffffffff, 0x9, {0xfffffffffffffffe, 0xd, 0x1, 0x6221, 0x800000000db4, 0x2, 0x6, 0x6, 0x3, 0x1000, 0xe44, r2, r3, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000008b00)={0x0, 0x0, &(0x7f00000082c0)={0x18, 0xfffffffffffffff5, 0x1000, {0x10001}}, 0x0, &(0x7f0000008340)={0x18, 0xfffffffffffffffe, 0x2}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008540)={0x20, 0x0, 0xb41, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000088c0)={0xa0, 0x0, 0xd, {{0x5, 0x0, 0xa, 0x26, 0x7, 0xfd, {0x0, 0x766, 0x564, 0x7, 0x0, 0x2, 0xb8, 0x7ff, 0x62ea, 0xa000, 0x8000, r2, r3, 0x9, 0xfffffff7}}, {0x0, 0x7}}}, &(0x7f0000008980)={0x20, 0x0, 0x9, {0x1, 0x4, 0x47b, 0x4}}, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 2.62745501s ago: executing program 5 (id=1431): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@end]}}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) 2.46085578s ago: executing program 8 (id=1432): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x0, 0x1, 0x3, 0x1, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x800) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 2.260624255s ago: executing program 5 (id=1434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x6, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], 0x0, 0x83, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0xa, &(0x7f0000000880)=@raw=[@generic={0x3b, 0x2, 0x8, 0x1, 0x7ff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000900)='syzkaller\x00', 0xc, 0xe0, &(0x7f0000000940)=""/224, 0x41000, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x9, 0x80000001, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000b00)=[{0x4, 0x5, 0x5, 0x5}, {0x5, 0x2, 0xa, 0xc}], 0x10, 0x60e}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{0x1}, &(0x7f0000000c00), &(0x7f0000000c40)='%-010d \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%-010d \x00'}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0xfffffffa, 0x0, 0xffffffffffffffff, 0x40e, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={0x1, 0xffffffffffffffff}, 0x4) r14 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000d80), 0xcd48d1d935b4117a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={r4, 0xffffffffffffffff}, 0x4) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@bloom_filter={0x1e, 0x3, 0x6, 0x800, 0x40, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x2}, 0x50) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xa, 0x18, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x45}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @alu={0x4, 0x1, 0x8, 0x5, 0x8, 0xc, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}, @generic={0x3, 0x2, 0x5, 0xfffc, 0xf}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @generic={0x3c, 0x0, 0xd, 0x9, 0x80}, @cb_func={0x18, 0x7}]}, &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2b, '\x00', r7, @fallback=0x2b, r8, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xf, 0x4}, 0x10, r9, r10, 0x3, &(0x7f0000000f00)=[r11, r12, r13, r14, r15, r16, 0x1, 0x1, r17], &(0x7f0000000f40)=[{0x3, 0x4, 0x2, 0xb}, {0x0, 0x3, 0x7}, {0x4, 0x1, 0x5, 0x4}], 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xa, 0x18, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x45}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @alu={0x4, 0x1, 0x8, 0x5, 0x8, 0xc, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}, @generic={0x3, 0x2, 0x5, 0xfffc, 0xf}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @generic={0x3c, 0x0, 0xd, 0x9, 0x80}, @cb_func={0x18, 0x7}]}, &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x2b, '\x00', r7, @fallback=0x2b, r8, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xf, 0x4}, 0x10, r9, r10, 0x3, &(0x7f0000000f00)=[r11, r12, r13, r14, r15, r16, 0x1, 0x1, r17], &(0x7f0000000f40)=[{0x3, 0x4, 0x2, 0xb}, {0x0, 0x3, 0x7}, {0x4, 0x1, 0x5, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r14, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000001100)=[0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9f, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) sendto$packet(r14, &(0x7f0000001040)="cee597238ca8f290ad89c29b4ba9fe20f1d5b7cbebfaf1bd1a4fa818f4b416db3d612da9fa497fbc1dab538a01e5222f6c3af2fea5e3b2277e5df61376b1657676cfce896cff8839ef5bca852258b9bb8fa27d9b150c5161ae5a6f4711cae751", 0x60, 0x20044800, &(0x7f0000001400)={0x11, 0x3, r18, 0x1, 0x2, 0x6, @broadcast}, 0x14) connect$inet(r14, &(0x7f0000001440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) connect$inet(r14, &(0x7f0000001440)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) write(r8, &(0x7f0000001480)="b61981342b2ef0fb991f", 0xa) syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r1) (async) r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001540)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x38, r19, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r20}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x38, r19, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r20}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_io_uring_setup(0x190d, &(0x7f0000001640)={0x0, 0x5805, 0x1, 0x2, 0x323, 0x0, r14}, &(0x7f00000016c0), &(0x7f0000001700)=0x0, &(0x7f0000001740)) syz_ublk_setup_io_uring(0x5a25, &(0x7f0000001780)={0x0, 0x9ab5, 0x4000, 0x0, 0x8e, 0x0, r0}, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)=0x0) r23 = io_uring_register$IORING_REGISTER_PERSONALITY(r14, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r21, r22, &(0x7f0000001a00)=@IORING_OP_STATX={0x15, 0x7c, 0x0, r14, &(0x7f00000018c0), &(0x7f00000019c0)='./file0\x00', 0x100, 0x800, 0x1, {0x0, r23}}) (async) syz_io_uring_submit(0x0, r21, r22, &(0x7f0000001a00)=@IORING_OP_STATX={0x15, 0x7c, 0x0, r14, &(0x7f00000018c0), &(0x7f00000019c0)='./file0\x00', 0x100, 0x800, 0x1, {0x0, r23}}) 2.102630022s ago: executing program 3 (id=1435): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0x0) 2.024667321s ago: executing program 8 (id=1436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10452, &(0x7f00000000c0)={[{@rodir}, {@numtail}, {@shortname_mixed}, {@utf8}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@numtail}, {@rodir}, {@shortname_lower}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_win95}, {@shortname_mixed}, {@shortname_lower}, {@utf8no}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8000, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040), 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200010, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@uni_xlate}, {@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@utf8}, {@shortname_mixed}, {@shortname_win95}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@dos1xfloppy}, {@utf8no}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@utf8no}]}, 0x7, 0x28e, &(0x7f0000000640)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, 0x0, 0xffffffffffffff01, r3) r4 = getpid() keyctl$instantiate(0xc, r3, &(0x7f0000000380)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '', 0x20, 0x7, 0x20, [0x33, 0x38, 0x5e8ea2e517b98d57, 0x63, 0x39, 0x34, 0x38, 0x63, 0x66]}, 0x35, r3) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000180)={0x77359400}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x6) setresuid(0x0, 0xee01, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000003c0)={0x0, 'pimreg0\x00', {0x2}, 0x9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 1.815883963s ago: executing program 1 (id=1437): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@remote, @in=@multicast2, 0xee24, 0x2693, 0x4e22, 0x3, 0x2}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3501, 0x4, 0x8, 0x0, 0x9075, 0xef, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000240)=0x4) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x8, 0xffffffff}) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d49380371400a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r4, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000100)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a00000200500050000b000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 1.773388579s ago: executing program 3 (id=1438): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xf9c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x85, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xe, "1a03e5090200030091000041392e00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f00000008c0)={""/32, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000680)=[{}, {}]}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000340)={0x583a, 0x9, 0x4, 0x70000, 0x8d8, {}, {0x1, 0x0, 0x1, 0xc0, 0x6, 0x9, "3a47bb97"}, 0x4, 0x4, {}, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={r5, 0x2}, 0x8) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000040)="bcc8b50d1e96b9a64436a97ed46fa252f11530e58b41841444e8e5d88f6f9d0445def3931be1d83585e51de3590721e1df0427b6bb9ae754132874ef6bbc90d272682208678db535a3beb65debc55e736f3463c3f21c709015346280346da7c12a2f32ee624a7f47784734c684fbf8612163478b5e5f5c5ef5abb49b3722a884c1b89cb07403e2b53969826f", 0x8c}, {&(0x7f0000000100)="6538e54d1870b739d5f542742c8939850de3246e469e50c8843cced8e36e9431a0afa44d996165153df1f4ceff43db9ec47bb7ab02d6355ad89376f472d46f3e195fa61bf2699a49b9e31e93ec6fad1aea956395aaf84e42e7c383496f3e398ee23ac7c46361c127faae1542834aa2db70797e4bb971382b25fb37d06220af241a36cd33852c831450a7375d7c413734260687837c89cae0fd6a9a9a", 0x9c}, {&(0x7f00000001c0)="54f35e6e8fbd6d7f46b9a09a5e4f61806469bffe168fbfeae7a581a47b704b5cf3b5ce6f45b894ebdd6473968ff7d18ef72bf7b6abccecada9683b240e9de3da4bb25fb0d0a7fd7b3b3ee8f3c0785bde7d3ad486c648f4eb123743d301e4cb05f6b1c264ea4137f952ed7c007107b296dc8fd8508f586c181814219595bff62d29e206732de3290698ae2fbce6798a1d12918d4520e205edc2e7", 0x9a}, {&(0x7f00000003c0)="6e90217892fc9373b50e399ef1418530b4533adca5ffc676fe32b1a2611cc5b9a04014891ef989a21372b79a44a7e4685d8599d1c464c5648681b982114416a39551e02b402022b8b32bc3fbe5d394b842e56ea5d1c67efc68679ab61a4e9ad2cba76388f8bbabb5ffed8394b4c3b139fffba3485f45a88c5c1f4a2b7ca667b49a77f9d1514c72bad336f67bfa4140fbc704eee8af7e837d644e4e92229b1d14636773e1e840279b360e70c2ee5121fd9e0d81de91905343ec89d5b1c02406d61a807cbf5d3ffc3d82e2", 0xca}], 0x4) 1.6913352s ago: executing program 9 (id=1439): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @int={0x7, 0x0, 0x0, 0x1, 0x5, 0x6c, 0x0, 0x1a, 0x2}]}}, 0x0, 0x42}, 0x28) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/118) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) 1.383301244s ago: executing program 9 (id=1440): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x13, r0, 0x3703e000) 1.192267443s ago: executing program 5 (id=1441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xfff, @broadcast, 'macvlan1\x00'}}, 0x1e) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x40080) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x65) recvfrom$packet(0xffffffffffffffff, &(0x7f00000016c0)=""/188, 0xbc, 0x40000000, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x684500, 0x0) syz_emit_vhci(&(0x7f0000001b80)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_conn_req={{0x17, 0xe, 0x14}, {0x8, 0x1, 0x81, 0x7, [0x2, 0xffff, 0x3, 0x64f, 0xff7, 0x4]}}}}, 0x21) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5ea}, 0x1, 0x0, 0x0, 0x4000850}, 0x8050) 1.031195194s ago: executing program 9 (id=1442): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100"], 0x1c}}, 0x840) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="710542"], 0xee) 831.500208ms ago: executing program 8 (id=1443): clock_adjtime(0x4100000000000000, &(0x7f0000000000)={0x3, 0x1, 0x394a, 0x5b, 0x80, 0x80, 0x1, 0x9, 0x7, 0x7c, 0x2, 0x3, 0x0, 0xa, 0x1, 0x1, 0x8, 0x2, 0x5, 0x1, 0x6, 0x10, 0xffff, 0x6, 0x400, 0x7}) 781.879299ms ago: executing program 3 (id=1444): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) (fail_nth: 22) 639.436607ms ago: executing program 1 (id=1445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000180)={[{@test_dummy_encryption_v1}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") file_setattr(0xffffffffffffff9c, &(0x7f0000001680)='./file1\x00', &(0x7f00000016c0)={0x430, 0x10, 0x401, 0x8, 0xfb1e}, 0x18, 0x1000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f00000001c0)}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88841, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 587.460987ms ago: executing program 9 (id=1446): sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="00042d"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB], 0xf) 493.026659ms ago: executing program 8 (id=1447): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) unshare(0x10000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x11, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4009c}, 0x40000) 367.615455ms ago: executing program 9 (id=1448): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, 0x0, 0x0) 166.938681ms ago: executing program 3 (id=1449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43ff}}, {0x4}}]}]}, 0x54}}, 0x40051) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f0000000540)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010128bd7000fcdbdf2501000000000000000741000000030018"], 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x9080) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000b00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x40}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84011}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000083000000000000000003616e567b3a82da680000000086090300020000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x14}, 0x94) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fbdbdf25010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e3000000000"], 0x6c}}, 0xc000) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x0) recvmmsg(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r9, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaa2baaaaaaaaaabb080045000028006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=r10, @ANYBLOB="2daa00"], 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x7ff, 0x7fffffff) syz_emit_ethernet(0x42d, &(0x7f0000000540)={@broadcast, @broadcast, @void, {@mpls_uc={0x8847, {[{0x835}, {0x1, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x9}, {0x8, 0x0, 0x1}, {0x4}, {0x340}], @ipv4=@esp={{0x16, 0x4, 0x1, 0x7, 0x403, 0x68, 0x0, 0x80, 0x32, 0x0, @remote, @empty, {[@ra={0x94, 0x4}, @generic={0x89, 0xa, "c7a66bcf3d206618"}, @cipso={0x86, 0x35, 0x3, [{0x5, 0xe, "c6e87ee7894292e8261b5ecd"}, {0x5, 0xa, "729dac12042e47cf"}, {0x5, 0x7, "4f9ccc7dff"}, {0x6, 0xc, "361dba4b22cfdecc982c"}, {0x6, 0x4, '^m'}]}]}}, {0x4d4, 0x5, @basic={0x0, 0x0, 0x7fff, [@ipv4=@tcp={{0x30, 0x4, 0x0, 0x1e, 0x1e5, 0x68, 0x0, 0xf9, 0x6, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x23, 0x6a, [@local, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @multicast2, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0x8d, 0x0, 0x1, [0x1, 0x3, 0x80000000, 0x1ff]}, @generic={0x88, 0xd, "ffcf43e4cc62dc5c5e9c1e"}, @end, @timestamp={0x44, 0x28, 0xbc, 0x0, 0x2, [0x5, 0x30000000, 0x5, 0x3, 0xad0, 0xb, 0x4, 0x7, 0x2]}, @timestamp_prespec={0x44, 0x3c, 0x8c, 0x3, 0x4, [{@private=0xa010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x1}, {@rand_addr=0x64010101}, {@private=0xa010100, 0x8001}, {@rand_addr=0x64010101, 0xa182}, {@local, 0x2}]}]}}, {{0x4e24, 0x4e24, r10, r11, 0x0, 0x0, 0x16, 0xc2, 0x2b6, 0x0, 0x3, {[@mptcp=@add_addr={0x1e, 0x11, 0x0, 0x11, 0x5, @empty, 0x6, "a8b3c347759588"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0x26, [0x4, 0x800, 0x7, 0x4, 0x1, 0x2, 0x400, 0x2, 0x400]}, @sack_perm={0x4, 0x2}, @mptcp=@generic={0x0, 0x5, "a611e4"}]}}, {"50164c6ac12d41d8e8172d10ef7b0f2eb13a53480ae0d44666dbb735a42da6c640a73058a89b00adb2a59120d29b7af331ebf5bc39c5893db78e3e8a5d3a8d72fe11cbba9ea3cf78b5cc0250bfc83c2065b7b19c74fa02bacd634c9d96698ecb1a31673fef076d7905e65d6c756badef50346e096779f028f6ea39a5af73323bf4f5f0ebf49260a0c36d575bf746d8665325fe87125b9f4c1bdd4894199a160a3c7681e1b2bbf0a88654416d855560f03676cf2a084faf9d4cee1c9b20a2c94997dcc9e9f1d3ff73fbd4f18d88"}}}, @ipv6=@udp={0x4, 0x6, "ea99df", 0x14c, 0x11, 0x0, @empty, @private0, {[@srh={0x2, 0xe, 0x4, 0x7, 0xd6, 0x40, 0x800, [@loopback, @dev={0xfe, 0x80, '\x00', 0x12}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}, @routing={0x2e, 0x8, 0x1, 0x7, 0x0, [@dev={0xfe, 0x80, '\x00', 0x21}, @initdev={0xfe, 0x88, '\x00', 0xfa, 0x0}, @dev={0xfe, 0x80, '\x00', 0xb}, @remote]}, @routing={0x33, 0x4, 0x0, 0x6, 0x0, [@mcast2, @empty]}], {0x4e22, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x1, "5b2a811acbe00a52dcf8d97d7a4fb5c6ca5b276c372da3534a64de72897027f9", "548aee59423b592c26f83c1682439550", {"0aba9c79ed00c6eaa75bb7f949525482", "d990f4f4ba2690ae1bc86ef38848ffa9"}}}}}, @runt="7c082214a6e7e7a95fe2a97d70d058675adc4dd8edc0677212c34a4f5da13574dd", @runt="06b5553ed9b37c01879e33041b53dc9724ef7b15bb1a2f6051cdfe846e8bc699e3be"]}, "85", 0x1}}}}}}, 0x0) 157.216369ms ago: executing program 5 (id=1450): r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e4386958298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x1, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 0s ago: executing program 9 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'rose0\x00', {0x1}, 0x563f}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000780)={r1, 0xe, 0x80000000}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x7fff}}}}}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x6, 0x300, 0xfc, 0x0, 0x0, 0x8}, 0x1c) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x24, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x210e0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x405, 0x0) kernel console output (not intermixed with test programs): 000-0000-0000-0000-000000000000. [ 160.170543][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.170747][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.201702][ T8986] capability: warning: `syz.0.979' uses deprecated v2 capabilities in a way that may be insecure [ 160.238803][ T8988] netlink: 12 bytes leftover after parsing attributes in process `syz.9.980'. [ 160.526035][ T8977] loop6: detected capacity change from 0 to 512 [ 160.558748][ T8977] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.572304][ T8977] EXT4-fs (loop6): orphan cleanup on readonly fs [ 160.574798][ T8977] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4223: comm syz.6.978: Allocating blocks 41-42 which overlap fs metadata [ 160.574851][ T8977] loop6: lost filesystem error report for type 5 error -117 [ 160.579317][ T8977] Quota error (device loop6): write_blk: dquota write failed [ 160.579408][ T8977] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 160.579452][ T8977] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.978: Failed to acquire dquot type 0 [ 160.584857][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 160.584877][ C0] EXT4-fs (loop6): initial error at time 160: ext4_mb_mark_diskspace_used:4223 [ 160.584894][ C0] EXT4-fs (loop6): last error at time 160: ext4_acquire_dquot:7069 [ 160.593569][ T8977] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 160.593832][ T8977] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.978: corrupted inode contents [ 160.601583][ T8977] EXT4-fs error (device loop6): ext4_dirty_inode:6731: inode #12: comm syz.6.978: mark_inode_dirty error [ 160.604548][ T8977] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.978: corrupted inode contents [ 160.607152][ T8977] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.978: mark_inode_dirty error [ 160.611662][ T8977] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.978: corrupted inode contents [ 160.618994][ T8977] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 160.625029][ T8977] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.978: corrupted inode contents [ 160.628601][ T8977] EXT4-fs error (device loop6): ext4_truncate:4721: inode #12: comm syz.6.978: mark_inode_dirty error [ 160.633395][ T8977] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 160.658783][ T8977] EXT4-fs (loop6): 1 truncate cleaned up [ 160.658953][ T8977] EXT4-fs (loop6): pa 00000000832a5651: logic 1, phys. 41, len 23 [ 160.659140][ T8977] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 160.659993][ T8977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 160.987883][ T8410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.201206][ T9015] loop6: detected capacity change from 0 to 2048 [ 161.244440][ T9015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.249580][ T9014] loop9: detected capacity change from 0 to 1024 [ 161.263151][ T9014] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.273494][ T9014] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 161.273851][ T9014] EXT4-fs (loop9): orphan cleanup on readonly fs [ 161.289788][ T9014] EXT4-fs error (device loop9): __ext4_get_inode_loc:4916: comm syz.9.988: Invalid inode table block 0 in block_group 0 [ 161.298856][ T9014] EXT4-fs (loop9): Remounting filesystem read-only [ 161.298923][ T9014] Quota error (device loop9): write_blk: dquota write failed [ 161.298998][ T9014] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 161.299131][ T9014] EXT4-fs (loop9): 1 truncate cleaned up [ 161.313350][ T9014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.324049][ T9015] overlayfs: missing 'workdir' [ 161.340361][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.990'. [ 161.420422][ T8410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.453875][ T9021] bond2: entered promiscuous mode [ 161.453978][ T9021] bond2: entered allmulticast mode [ 161.515246][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.753609][ T9042] FAULT_INJECTION: forcing a failure. [ 161.753609][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 161.760210][ T9042] CPU: 0 UID: 0 PID: 9042 Comm: syz.4.994 Not tainted syzkaller #0 PREEMPT [ 161.760243][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 161.760254][ T9042] Call trace: [ 161.760258][ T9042] show_stack+0x2c/0x3c (C) [ 161.760281][ T9042] __dump_stack+0x30/0x40 [ 161.760293][ T9042] dump_stack_lvl+0xd8/0x12c [ 161.760303][ T9042] dump_stack+0x1c/0x28 [ 161.760312][ T9042] should_fail_ex+0x41c/0x590 [ 161.760324][ T9042] should_failslab+0xc4/0x120 [ 161.760334][ T9042] kmem_cache_alloc_node_noprof+0x98/0x604 [ 161.760346][ T9042] __alloc_skb+0x1f0/0x610 [ 161.760355][ T9042] batadv_netlink_set_mesh+0x938/0xe0c [ 161.760367][ T9042] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 161.760378][ T9042] genl_rcv_msg+0x43c/0x620 [ 161.760387][ T9042] netlink_rcv_skb+0x238/0x414 [ 161.760395][ T9042] genl_rcv+0x38/0x50 [ 161.760403][ T9042] netlink_unicast+0x600/0x7f8 [ 161.760411][ T9042] netlink_sendmsg+0x648/0x948 [ 161.760420][ T9042] __sock_sendmsg+0xc8/0x17c [ 161.760427][ T9042] ____sys_sendmsg+0x3d0/0x6c8 [ 161.760435][ T9042] ___sys_sendmsg+0x198/0x224 [ 161.760444][ T9042] __sys_sendmsg+0x158/0x204 [ 161.760452][ T9042] __arm64_sys_sendmsg+0x88/0x9c [ 161.760460][ T9042] invoke_syscall+0x98/0x244 [ 161.760470][ T9042] el0_svc_common+0xec/0x23c [ 161.760479][ T9042] do_el0_svc+0x4c/0x5c [ 161.760489][ T9042] el0_svc+0x64/0x260 [ 161.760498][ T9042] el0t_64_sync_handler+0x44/0x104 [ 161.760506][ T9042] el0t_64_sync+0x198/0x19c [ 161.865187][ T9040] loop6: detected capacity change from 0 to 4096 [ 161.897338][ T9040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.897394][ T9040] EXT4-fs (loop6): Test dummy encryption mode enabled [ 161.940436][ T9040] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 161.940553][ T9040] System zones: 0-5 [ 161.950149][ T9040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.063036][ T9053] loop0: detected capacity change from 0 to 1024 [ 162.127651][ T9053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.281641][ T9060] FAULT_INJECTION: forcing a failure. [ 162.281641][ T9060] name failslab, interval 1, probability 0, space 0, times 0 [ 162.281690][ T9060] CPU: 0 UID: 0 PID: 9060 Comm: syz.0.998 Not tainted syzkaller #0 PREEMPT [ 162.281707][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 162.281714][ T9060] Call trace: [ 162.281718][ T9060] show_stack+0x2c/0x3c (C) [ 162.281736][ T9060] __dump_stack+0x30/0x40 [ 162.281748][ T9060] dump_stack_lvl+0xd8/0x12c [ 162.281758][ T9060] dump_stack+0x1c/0x28 [ 162.281768][ T9060] should_fail_ex+0x41c/0x590 [ 162.281779][ T9060] should_failslab+0xc4/0x120 [ 162.281790][ T9060] __kmalloc_cache_noprof+0x94/0x5fc [ 162.281798][ T9060] tcf_action_init_1+0x174/0x594 [ 162.281807][ T9060] tcf_action_init+0x2d0/0x70c [ 162.281815][ T9060] tc_ctl_action+0x354/0x778 [ 162.281823][ T9060] rtnetlink_rcv_msg+0x630/0x9bc [ 162.281834][ T9060] netlink_rcv_skb+0x238/0x414 [ 162.281843][ T9060] rtnetlink_rcv+0x28/0x38 [ 162.281853][ T9060] netlink_unicast+0x600/0x7f8 [ 162.281860][ T9060] netlink_sendmsg+0x648/0x948 [ 162.281868][ T9060] __sock_sendmsg+0xc8/0x17c [ 162.281876][ T9060] ____sys_sendmsg+0x3d0/0x6c8 [ 162.281884][ T9060] ___sys_sendmsg+0x198/0x224 [ 162.281892][ T9060] __sys_sendmsg+0x158/0x204 [ 162.281900][ T9060] __arm64_sys_sendmsg+0x88/0x9c [ 162.281909][ T9060] invoke_syscall+0x98/0x244 [ 162.281919][ T9060] el0_svc_common+0xec/0x23c [ 162.281929][ T9060] do_el0_svc+0x4c/0x5c [ 162.281938][ T9060] el0_svc+0x64/0x260 [ 162.281948][ T9060] el0t_64_sync_handler+0x44/0x104 [ 162.281961][ T9060] el0t_64_sync+0x198/0x19c [ 162.612574][ T8410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.801609][ T9068] __nla_validate_parse: 1 callbacks suppressed [ 162.801685][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1001'. [ 162.803701][ T4722] block nbd7: Receive control failed (result -107) [ 162.941239][ T8131] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.122527][ T9075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.188645][ T9075] overlayfs: missing 'workdir' [ 163.197471][ T9084] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1005'. [ 163.307897][ T8410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.500919][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1015'. [ 164.504221][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1015'. [ 164.509561][ T9123] netlink: 'syz.4.1015': attribute type 6 has an invalid length. [ 164.530464][ T9125] FAULT_INJECTION: forcing a failure. [ 164.530464][ T9125] name failslab, interval 1, probability 0, space 0, times 0 [ 164.538079][ T9125] CPU: 0 UID: 0 PID: 9125 Comm: syz.0.1016 Not tainted syzkaller #0 PREEMPT [ 164.538107][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 164.538114][ T9125] Call trace: [ 164.538118][ T9125] show_stack+0x2c/0x3c (C) [ 164.538142][ T9125] __dump_stack+0x30/0x40 [ 164.538154][ T9125] dump_stack_lvl+0xd8/0x12c [ 164.538164][ T9125] dump_stack+0x1c/0x28 [ 164.538174][ T9125] should_fail_ex+0x41c/0x590 [ 164.538185][ T9125] should_failslab+0xc4/0x120 [ 164.538196][ T9125] __kmalloc_noprof+0x108/0x6c8 [ 164.538204][ T9125] nft_trans_alloc+0x34/0x270 [ 164.538212][ T9125] nft_trans_rule_add+0x38/0x1ac [ 164.538220][ T9125] nf_tables_newrule+0x11c4/0x18d4 [ 164.538232][ T9125] nfnetlink_rcv+0xc8c/0x16ec [ 164.538243][ T9125] netlink_unicast+0x600/0x7f8 [ 164.538251][ T9125] netlink_sendmsg+0x648/0x948 [ 164.538259][ T9125] __sock_sendmsg+0xc8/0x17c [ 164.538267][ T9125] ____sys_sendmsg+0x3d0/0x6c8 [ 164.538276][ T9125] ___sys_sendmsg+0x198/0x224 [ 164.538284][ T9125] __sys_sendmsg+0x158/0x204 [ 164.538292][ T9125] __arm64_sys_sendmsg+0x88/0x9c [ 164.538300][ T9125] invoke_syscall+0x98/0x244 [ 164.538310][ T9125] el0_svc_common+0xec/0x23c [ 164.538320][ T9125] do_el0_svc+0x4c/0x5c [ 164.538329][ T9125] el0_svc+0x64/0x260 [ 164.538339][ T9125] el0t_64_sync_handler+0x44/0x104 [ 164.538348][ T9125] el0t_64_sync+0x198/0x19c [ 164.586143][ T9123] 9p: Bad value for 'wfdno' [ 164.822154][ T9101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1009'. [ 164.952342][ T9123] set_capacity_and_notify: 1 callbacks suppressed [ 164.952392][ T9123] loop4: detected capacity change from 0 to 8192 [ 165.871794][ T9123] Dev loop4: unable to read RDB block 8 [ 165.871893][ T9123] loop4: unable to read partition table [ 165.872014][ T9123] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 166.117437][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1020'. [ 166.580962][ T9158] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1022'. [ 168.365854][ T9201] FAULT_INJECTION: forcing a failure. [ 168.365854][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 168.371488][ T9201] CPU: 0 UID: 0 PID: 9201 Comm: syz.9.1034 Not tainted syzkaller #0 PREEMPT [ 168.371513][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 168.371519][ T9201] Call trace: [ 168.371522][ T9201] show_stack+0x2c/0x3c (C) [ 168.371543][ T9201] __dump_stack+0x30/0x40 [ 168.371555][ T9201] dump_stack_lvl+0xd8/0x12c [ 168.371565][ T9201] dump_stack+0x1c/0x28 [ 168.371575][ T9201] should_fail_ex+0x41c/0x590 [ 168.371586][ T9201] should_failslab+0xc4/0x120 [ 168.371597][ T9201] kmem_cache_alloc_node_noprof+0x98/0x604 [ 168.371608][ T9201] __alloc_skb+0x1f0/0x610 [ 168.371617][ T9201] ctrl_build_family_msg+0x40/0xc0 [ 168.371628][ T9201] ctrl_getfamily+0x204/0x318 [ 168.371638][ T9201] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 168.371648][ T9201] genl_rcv_msg+0x43c/0x620 [ 168.371657][ T9201] netlink_rcv_skb+0x238/0x414 [ 168.371665][ T9201] genl_rcv+0x38/0x50 [ 168.371673][ T9201] netlink_unicast+0x600/0x7f8 [ 168.371681][ T9201] netlink_sendmsg+0x648/0x948 [ 168.371689][ T9201] __sock_sendmsg+0xc8/0x17c [ 168.371697][ T9201] __sys_sendto+0x250/0x328 [ 168.371705][ T9201] __arm64_sys_sendto+0xec/0x10c [ 168.371713][ T9201] invoke_syscall+0x98/0x244 [ 168.371723][ T9201] el0_svc_common+0xec/0x23c [ 168.371732][ T9201] do_el0_svc+0x4c/0x5c [ 168.371742][ T9201] el0_svc+0x64/0x260 [ 168.371751][ T9201] el0t_64_sync_handler+0x44/0x104 [ 168.371760][ T9201] el0t_64_sync+0x198/0x19c [ 168.897023][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1036'. [ 168.897084][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1036'. [ 168.941506][ T9213] tipc: Enabling of bearer rejected, failed to enable media [ 170.917336][ T9232] netlink: 'syz.0.1039': attribute type 10 has an invalid length. [ 170.917393][ T9232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1039'. [ 171.004986][ T9232] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 171.005406][ T9232] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 171.263477][ T9233] loop4: detected capacity change from 0 to 8192 [ 171.404117][ T9256] loop0: detected capacity change from 0 to 8 [ 171.536455][ T9256] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 171.536499][ T9256] unable to read xattr id index table [ 171.549521][ T9256] SQUASHFS error: zlib decompression failed, data probably corrupt [ 171.554675][ T9256] SQUASHFS error: Failed to read block 0x9b: -5 [ 171.558770][ T9256] SQUASHFS error: Unable to read metadata cache entry [99] [ 172.502390][ T4722] block nbd8: Receive control failed (result -110) [ 172.506231][ T9256] SQUASHFS error: Unable to read inode 0x104 [ 175.211472][ T9273] tipc: Started in network mode [ 175.211514][ T9273] tipc: Node identity 4246, cluster identity 4711 [ 175.211547][ T9273] tipc: Node number set to 16966 [ 175.277696][ T9273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1049'. [ 175.512910][ T9283] FAULT_INJECTION: forcing a failure. [ 175.512910][ T9283] name failslab, interval 1, probability 0, space 0, times 0 [ 175.512968][ T9283] CPU: 0 UID: 0 PID: 9283 Comm: syz.9.1053 Not tainted syzkaller #0 PREEMPT [ 175.512983][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 175.512989][ T9283] Call trace: [ 175.512993][ T9283] show_stack+0x2c/0x3c (C) [ 175.513012][ T9283] __dump_stack+0x30/0x40 [ 175.513023][ T9283] dump_stack_lvl+0xd8/0x12c [ 175.513033][ T9283] dump_stack+0x1c/0x28 [ 175.513043][ T9283] should_fail_ex+0x41c/0x590 [ 175.513054][ T9283] should_failslab+0xc4/0x120 [ 175.513065][ T9283] __kmalloc_cache_noprof+0x94/0x5fc [ 175.513072][ T9283] sf_setstate+0x4e8/0xdc8 [ 175.513084][ T9283] ip6_mc_del_src+0x4cc/0x8e0 [ 175.513093][ T9283] ip6_mc_msfilter+0x9a4/0xcb0 [ 175.513103][ T9283] ipv6_set_mcast_msfilter+0x204/0x274 [ 175.513114][ T9283] do_ipv6_setsockopt+0xcd8/0x2918 [ 175.513125][ T9283] ipv6_setsockopt+0x68/0x16c [ 175.513135][ T9283] tcp_setsockopt+0xcc/0xe8 [ 175.513143][ T9283] sock_common_setsockopt+0xb0/0xcc [ 175.513152][ T9283] do_sock_setsockopt+0x1f0/0x330 [ 175.513161][ T9283] __sys_setsockopt+0x104/0x170 [ 175.513169][ T9283] __arm64_sys_setsockopt+0xc8/0xe4 [ 175.513177][ T9283] invoke_syscall+0x98/0x244 [ 175.513187][ T9283] el0_svc_common+0xec/0x23c [ 175.513197][ T9283] do_el0_svc+0x4c/0x5c [ 175.513206][ T9283] el0_svc+0x64/0x260 [ 175.513216][ T9283] el0t_64_sync_handler+0x44/0x104 [ 175.513225][ T9283] el0t_64_sync+0x198/0x19c [ 175.611714][ T9285] loop6: detected capacity change from 0 to 512 [ 175.668168][ T9285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.815556][ T8410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.991846][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.997714][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.000661][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.006985][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.024365][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.589566][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.610773][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.613738][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.627721][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.636588][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.980591][ T9323] loop6: detected capacity change from 0 to 512 [ 177.019048][ T9323] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.159192][ T9323] EXT4-fs (loop6): orphan cleanup on readonly fs [ 178.334899][ T4722] Bluetooth: hci2: command tx timeout [ 178.344995][ T9323] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4223: comm syz.6.1060: Allocating blocks 41-42 which overlap fs metadata [ 178.345037][ T9323] fserror_report: 4 callbacks suppressed [ 178.345065][ T9323] loop6: lost filesystem error report for type 5 error -117 [ 178.348624][ T9323] Quota error (device loop6): write_blk: dquota write failed [ 178.348730][ T9323] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 178.348786][ T9323] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1060: Failed to acquire dquot type 0 [ 178.348820][ T9323] loop6: lost filesystem error report for type 5 error -117 [ 178.349059][ T9323] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 178.349122][ T9323] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.1060: corrupted inode contents [ 178.349146][ T9323] fserror_report: 11 callbacks suppressed [ 178.349153][ T9323] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 178.349305][ T9323] EXT4-fs error (device loop6): ext4_dirty_inode:6731: inode #12: comm syz.6.1060: mark_inode_dirty error [ 178.349322][ T9323] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 178.349453][ T9323] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.1060: corrupted inode contents [ 178.349477][ T9323] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 178.349598][ T9323] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.1060: mark_inode_dirty error [ 178.349614][ T9323] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 178.349749][ T9323] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.1060: corrupted inode contents [ 178.349802][ C0] EXT4-fs (loop6): error count since last fsck: 7 [ 178.349812][ C0] EXT4-fs (loop6): initial error at time 178: ext4_mb_mark_diskspace_used:4223 [ 178.349834][ C0] EXT4-fs (loop6): last error at time 178: __ext4_ext_dirty:207: inode 12 [ 178.349906][ T9323] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 178.350061][ T9323] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 178.350074][ T9323] loop6: lost filesystem error report for type 5 error -117 [ 178.350227][ T9323] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.1060: corrupted inode contents [ 178.350243][ T9323] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 178.350359][ T9323] EXT4-fs error (device loop6): ext4_truncate:4721: inode #12: comm syz.6.1060: mark_inode_dirty error [ 178.350374][ T9323] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 178.350497][ T9323] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 178.350508][ T9323] loop6: lost filesystem error report for type 5 error -117 [ 178.350793][ T9323] EXT4-fs (loop6): 1 truncate cleaned up [ 178.362497][ T9323] EXT4-fs (loop6): pa 0000000031643361: logic 1, phys. 41, len 23 [ 178.362530][ T9323] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 178.363525][ T9323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.688588][ T4722] Bluetooth: hci4: command tx timeout [ 178.793807][ T8410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.256732][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1068'. [ 180.372920][ T4722] Bluetooth: hci2: command tx timeout [ 180.774830][ T4722] Bluetooth: hci4: command tx timeout [ 181.110553][ T9379] nbd: must specify at least one socket [ 181.139124][ T9376] syzkaller0: entered promiscuous mode [ 181.139168][ T9376] syzkaller0: entered allmulticast mode [ 181.322980][ T9376] tipc: Enabled bearer , priority 0 [ 181.333209][ T9388] tipc: Resetting bearer [ 181.406309][ T9375] tipc: Resetting bearer [ 181.452058][ T9375] tipc: Disabling bearer [ 181.493718][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.493844][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.494037][ T9300] bridge_slave_0: entered allmulticast mode [ 181.509876][ T9300] bridge_slave_0: entered promiscuous mode [ 181.531317][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.531394][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.531556][ T9300] bridge_slave_1: entered allmulticast mode [ 181.547831][ T9300] bridge_slave_1: entered promiscuous mode [ 181.734608][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.773671][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.045063][ T9300] team0: Port device team_slave_0 added [ 182.079983][ T9300] team0: Port device team_slave_1 added [ 182.165514][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.165617][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.165848][ T9320] bridge_slave_0: entered allmulticast mode [ 182.187316][ T9320] bridge_slave_0: entered promiscuous mode [ 182.267884][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.267987][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.268140][ T9320] bridge_slave_1: entered allmulticast mode [ 182.277838][ T9320] bridge_slave_1: entered promiscuous mode [ 182.317745][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.317788][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.317842][ T9300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.318943][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.318971][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.318999][ T9300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.465790][ T4722] Bluetooth: hci2: command tx timeout [ 182.508590][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.510335][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.610165][ T9400] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1072'. [ 182.784166][ T9300] hsr_slave_0: entered promiscuous mode [ 182.795207][ T9423] loop9: detected capacity change from 0 to 512 [ 182.800167][ T9300] hsr_slave_1: entered promiscuous mode [ 182.808147][ T9300] debugfs: 'hsr0' already exists in 'hsr' [ 182.809551][ T9300] Cannot create hsr debugfs directory [ 182.822218][ T9423] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.834366][ T9423] EXT4-fs (loop9): orphan cleanup on readonly fs [ 182.842445][ T9423] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.1073: Allocating blocks 41-42 which overlap fs metadata [ 182.842515][ T9423] loop9: lost filesystem error report for type 5 error -117 [ 182.846192][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 182.846224][ C0] EXT4-fs (loop9): initial error at time 182: ext4_mb_mark_diskspace_used:4223 [ 182.846264][ C0] EXT4-fs (loop9): last error at time 182: ext4_mb_mark_diskspace_used:4223 [ 182.863433][ T9423] Quota error (device loop9): write_blk: dquota write failed [ 182.863509][ T9423] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 182.863564][ T9423] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.1073: Failed to acquire dquot type 0 [ 182.863594][ T9423] loop9: lost filesystem error report for type 5 error -117 [ 182.867290][ T4722] Bluetooth: hci4: command tx timeout [ 182.882091][ T9423] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 182.882217][ T9423] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1073: corrupted inode contents [ 182.882244][ T9423] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 182.895703][ T9423] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #12: comm syz.9.1073: mark_inode_dirty error [ 182.895800][ T9423] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 182.901404][ T9423] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1073: corrupted inode contents [ 182.901470][ T9423] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 182.908141][ T9423] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.1073: mark_inode_dirty error [ 182.912910][ T9423] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1073: corrupted inode contents [ 182.917855][ T9423] EXT4-fs error (device loop9) in ext4_orphan_del:304: Corrupt filesystem [ 182.917918][ T9423] loop9: lost filesystem error report for type 5 error -117 [ 182.920122][ T9423] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1073: corrupted inode contents [ 182.925145][ T9423] EXT4-fs error (device loop9): ext4_truncate:4721: inode #12: comm syz.9.1073: mark_inode_dirty error [ 182.925390][ T9423] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem [ 182.925402][ T9423] loop9: lost filesystem error report for type 5 error -117 [ 182.935614][ T9423] EXT4-fs (loop9): 1 truncate cleaned up [ 182.935749][ T9423] EXT4-fs (loop9): pa 000000003f622728: logic 1, phys. 41, len 23 [ 182.935802][ T9423] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 182.936587][ T9423] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.985271][ T9429] loop0: detected capacity change from 0 to 512 [ 183.007300][ T9429] EXT4-fs: Mount option(s) incompatible with ext2 [ 183.069044][ T9320] team0: Port device team_slave_0 added [ 183.088804][ T9320] team0: Port device team_slave_1 added [ 183.224370][ T9421] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 183.364332][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.517120][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.517161][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.517203][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.518407][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.518421][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.518452][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.884302][ T9320] hsr_slave_0: entered promiscuous mode [ 183.900234][ T9320] hsr_slave_1: entered promiscuous mode [ 183.900620][ T9320] debugfs: 'hsr0' already exists in 'hsr' [ 183.900652][ T9320] Cannot create hsr debugfs directory [ 184.043301][ T9446] loop9: detected capacity change from 0 to 512 [ 184.105499][ T9446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.176221][ T9446] netlink: 'syz.9.1079': attribute type 15 has an invalid length. [ 184.225207][ T9446] netlink: 'syz.9.1079': attribute type 15 has an invalid length. [ 184.241780][ T9300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.301348][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.303198][ T4722] Bluetooth: hci2: command tx timeout [ 185.303252][ T4722] Bluetooth: hci4: command tx timeout [ 187.411272][ T9300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.423723][ T9455] nbd: must specify at least one socket [ 187.534384][ T9300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.562978][ T1590] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.563042][ T1590] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.797222][ T9300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.195511][ T9470] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 188.372875][ T9300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.443795][ T9300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 188.446797][ T9300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.493061][ T9300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 188.501988][ T9300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.542694][ T9300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 188.558697][ T9300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.588974][ T9300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 188.831894][ T4382] block nbd6: Possible stuck request 00000000c9c48f33: control (read@0,4096B). Runtime 30 seconds [ 189.187884][ T9495] loop6: detected capacity change from 0 to 256 [ 189.212698][ T9495] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.251883][ T9495] FAT-fs (loop6): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 189.251925][ T9495] FAT-fs (loop6): Filesystem has been set read-only [ 189.385271][ T9499] loop9: detected capacity change from 0 to 2048 [ 189.414209][ T9499] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.528097][ T9499] overlayfs: failed to set xattr on upper [ 189.571706][ T9499] overlayfs: ...falling back to redirect_dir=nofollow. [ 189.571818][ T9499] overlayfs: ...falling back to uuid=null. [ 189.638867][ T9508] FAULT_INJECTION: forcing a failure. [ 189.638867][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 189.641542][ T9508] CPU: 0 UID: 0 PID: 9508 Comm: syz.0.1089 Not tainted syzkaller #0 PREEMPT [ 189.641557][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 189.641564][ T9508] Call trace: [ 189.641567][ T9508] show_stack+0x2c/0x3c (C) [ 189.641588][ T9508] __dump_stack+0x30/0x40 [ 189.641599][ T9508] dump_stack_lvl+0xd8/0x12c [ 189.641609][ T9508] dump_stack+0x1c/0x28 [ 189.641618][ T9508] should_fail_ex+0x41c/0x590 [ 189.641629][ T9508] should_failslab+0xc4/0x120 [ 189.641640][ T9508] kmem_cache_alloc_node_noprof+0x98/0x604 [ 189.641652][ T9508] __alloc_skb+0x1f0/0x610 [ 189.641661][ T9508] netlink_alloc_large_skb+0xd4/0x114 [ 189.641670][ T9508] netlink_sendmsg+0x4c4/0x948 [ 189.641678][ T9508] __sock_sendmsg+0xc8/0x17c [ 189.641685][ T9508] ____sys_sendmsg+0x3d0/0x6c8 [ 189.641694][ T9508] ___sys_sendmsg+0x198/0x224 [ 189.641702][ T9508] __sys_sendmsg+0x158/0x204 [ 189.641710][ T9508] __arm64_sys_sendmsg+0x88/0x9c [ 189.641718][ T9508] invoke_syscall+0x98/0x244 [ 189.641728][ T9508] el0_svc_common+0xec/0x23c [ 189.641738][ T9508] do_el0_svc+0x4c/0x5c [ 189.641747][ T9508] el0_svc+0x64/0x260 [ 189.641757][ T9508] el0t_64_sync_handler+0x44/0x104 [ 189.641765][ T9508] el0t_64_sync+0x198/0x19c [ 189.774950][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.837590][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.004521][ T9300] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.043899][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.043966][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.101540][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.101606][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.273493][ T9300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.682801][ T9300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.736607][ T9519] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 191.236279][ T9320] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 191.312512][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.329498][ T9320] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 191.742299][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.744384][ T9320] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 191.780903][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.822133][ T9320] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 191.864271][ T9320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.918152][ T9544] loop9: detected capacity change from 0 to 1024 [ 191.989594][ T9544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.024085][ T9544] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 192.205281][ T9533] loop0: detected capacity change from 0 to 512 [ 192.247583][ T9533] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.259863][ T9533] EXT4-fs (loop0): orphan cleanup on readonly fs [ 192.263917][ T9533] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.1095: Allocating blocks 41-42 which overlap fs metadata [ 192.266855][ T9533] loop0: lost filesystem error report for type 5 error -117 [ 192.267617][ T9533] Quota error (device loop0): write_blk: dquota write failed [ 192.271843][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 192.271873][ C0] EXT4-fs (loop0): initial error at time 192: ext4_mb_mark_diskspace_used:4223 [ 192.271908][ C0] EXT4-fs (loop0): last error at time 192: ext4_mb_mark_diskspace_used:4223 [ 192.280783][ T9533] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 192.284480][ T9533] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1095: Failed to acquire dquot type 0 [ 192.288014][ T9533] loop0: lost filesystem error report for type 5 error -117 [ 192.288766][ T9533] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 192.295273][ T9533] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.1095: corrupted inode contents [ 192.301027][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.303850][ T9533] fserror_report: 4 callbacks suppressed [ 192.305567][ T9533] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 192.323773][ T9533] EXT4-fs error (device loop0): ext4_dirty_inode:6731: inode #12: comm syz.0.1095: mark_inode_dirty error [ 192.323843][ T9533] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 192.329158][ T9533] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.1095: corrupted inode contents [ 192.329230][ T9533] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 192.339821][ T9533] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.1095: mark_inode_dirty error [ 192.339879][ T9533] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 192.344816][ T9533] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.1095: corrupted inode contents [ 192.344858][ T9533] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 192.356414][ T9533] EXT4-fs error (device loop0) in ext4_orphan_del:304: Corrupt filesystem [ 192.356466][ T9533] loop0: lost filesystem error report for type 5 error -117 [ 192.356808][ T9533] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #12: comm syz.0.1095: corrupted inode contents [ 192.356859][ T9533] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 192.357032][ T9533] EXT4-fs error (device loop0): ext4_truncate:4721: inode #12: comm syz.0.1095: mark_inode_dirty error [ 192.357063][ T9533] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 192.357226][ T9533] EXT4-fs error (device loop0) in ext4_process_orphan:346: Corrupt filesystem [ 192.357254][ T9533] loop0: lost filesystem error report for type 5 error -117 [ 192.379077][ T9533] EXT4-fs (loop0): 1 truncate cleaned up [ 192.379210][ T9533] EXT4-fs (loop0): pa 00000000f4f77ecf: logic 1, phys. 41, len 23 [ 192.379263][ T9533] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 192.436026][ T9533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.445157][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.475587][ T3103] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.475652][ T3103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.627393][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.627463][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.704276][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.428071][ T9576] FAULT_INJECTION: forcing a failure. [ 194.428071][ T9576] name failslab, interval 1, probability 0, space 0, times 0 [ 194.428147][ T9576] CPU: 0 UID: 0 PID: 9576 Comm: syz.6.1097 Not tainted syzkaller #0 PREEMPT [ 194.428163][ T9576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 194.428171][ T9576] Call trace: [ 194.428175][ T9576] show_stack+0x2c/0x3c (C) [ 194.428195][ T9576] __dump_stack+0x30/0x40 [ 194.428209][ T9576] dump_stack_lvl+0xd8/0x12c [ 194.428221][ T9576] dump_stack+0x1c/0x28 [ 194.428232][ T9576] should_fail_ex+0x41c/0x590 [ 194.428245][ T9576] should_failslab+0xc4/0x120 [ 194.428258][ T9576] __kvmalloc_node_noprof+0x160/0x7fc [ 194.428267][ T9576] io_alloc_cache_init+0x48/0x154 [ 194.428279][ T9576] io_ring_ctx_alloc+0x3b0/0x958 [ 194.428289][ T9576] io_uring_create+0x6c/0x830 [ 194.428299][ T9576] __arm64_sys_io_uring_setup+0x284/0x290 [ 194.428308][ T9576] invoke_syscall+0x98/0x244 [ 194.428320][ T9576] el0_svc_common+0xec/0x23c [ 194.428332][ T9576] do_el0_svc+0x4c/0x5c [ 194.428343][ T9576] el0_svc+0x64/0x260 [ 194.428354][ T9576] el0t_64_sync_handler+0x44/0x104 [ 194.428364][ T9576] el0t_64_sync+0x198/0x19c [ 194.525595][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.545114][ T8131] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.787911][ T9300] veth0_vlan: entered promiscuous mode [ 194.868465][ T9300] veth1_vlan: entered promiscuous mode [ 194.879976][ T9588] loop9: detected capacity change from 0 to 512 [ 194.932424][ T9588] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.1100: bg 0: block 5: invalid block bitmap [ 194.932471][ T9588] loop9: lost filesystem error report for type 5 error -117 [ 194.936888][ T9588] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 194.940620][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 194.940649][ C0] EXT4-fs (loop9): initial error at time 194: ext4_validate_block_bitmap:436 [ 194.940673][ C0] EXT4-fs (loop9): last error at time 194: ext4_validate_block_bitmap:436 [ 194.950614][ T9588] loop9: lost filesystem error report for type 5 error -117 [ 194.963449][ T9588] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1100: invalid indirect mapped block 3 (level 2) [ 194.963539][ T9588] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 194.968922][ T9588] EXT4-fs (loop9): 1 orphan inode deleted [ 194.968984][ T9588] EXT4-fs (loop9): 1 truncate cleaned up [ 194.974758][ T9588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.033847][ T9300] veth0_macvtap: entered promiscuous mode [ 195.068024][ T9300] veth1_macvtap: entered promiscuous mode [ 195.108272][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.168333][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.363454][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.363522][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.363559][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.363591][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.521647][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.521684][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.642050][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.642105][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.910081][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.032327][ T9615] loop0: detected capacity change from 0 to 2048 [ 196.115482][ T9615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.121031][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.622539][ T9630] input: syz0 as /devices/virtual/input/input3 [ 196.936342][ T8131] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.324307][ T9320] veth0_vlan: entered promiscuous mode [ 197.400548][ T9320] veth1_vlan: entered promiscuous mode [ 197.571266][ T9320] veth0_macvtap: entered promiscuous mode [ 197.574617][ T9320] veth1_macvtap: entered promiscuous mode [ 197.643902][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.696386][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.779243][ T1065] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.779905][ T1065] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.779949][ T1065] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.779998][ T1065] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.717202][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.717240][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.816741][ T9628] syz.9.1104 (9628): drop_caches: 2 [ 199.867434][ T9663] loop6: detected capacity change from 0 to 512 [ 199.884823][ T5132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.884861][ T5132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.913664][ T9663] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.940105][ T9663] EXT4-fs (loop6): orphan cleanup on readonly fs [ 199.941445][ T9663] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4223: comm syz.6.1108: Allocating blocks 41-42 which overlap fs metadata [ 199.941489][ T9663] loop6: lost filesystem error report for type 5 error -117 [ 199.941901][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 199.941930][ C0] EXT4-fs (loop6): initial error at time 199: ext4_mb_mark_diskspace_used:4223 [ 199.941969][ C0] EXT4-fs (loop6): last error at time 199: ext4_mb_mark_diskspace_used:4223 [ 199.944736][ T9663] Quota error (device loop6): write_blk: dquota write failed [ 199.944807][ T9663] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 199.944847][ T9663] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.1108: Failed to acquire dquot type 0 [ 199.944882][ T9663] loop6: lost filesystem error report for type 5 error -117 [ 199.946669][ T9663] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 199.946788][ T9663] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.1108: corrupted inode contents [ 199.946819][ T9663] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 199.947024][ T9663] EXT4-fs error (device loop6): ext4_dirty_inode:6731: inode #12: comm syz.6.1108: mark_inode_dirty error [ 199.947083][ T9663] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 199.947350][ T9663] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.1108: corrupted inode contents [ 199.947386][ T9663] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 199.947585][ T9663] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #12: comm syz.6.1108: mark_inode_dirty error [ 199.947625][ T9663] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 199.947799][ T9663] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.1108: corrupted inode contents [ 199.947818][ T9663] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 199.947975][ T9663] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 199.948003][ T9663] loop6: lost filesystem error report for type 5 error -117 [ 199.948135][ T9663] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #12: comm syz.6.1108: corrupted inode contents [ 199.948165][ T9663] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 199.948296][ T9663] EXT4-fs error (device loop6): ext4_truncate:4721: inode #12: comm syz.6.1108: mark_inode_dirty error [ 199.948326][ T9663] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 199.948544][ T9663] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 199.948576][ T9663] loop6: lost filesystem error report for type 5 error -117 [ 200.019270][ T9663] EXT4-fs (loop6): 1 truncate cleaned up [ 200.023439][ T9663] EXT4-fs (loop6): pa 00000000d8610e45: logic 1, phys. 41, len 23 [ 200.023482][ T9663] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 200.024708][ T9663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.436792][ T8410] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.805907][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.810698][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.813140][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.820433][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.822308][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.859436][ T9692] loop8: detected capacity change from 0 to 512 [ 200.876579][ T9692] EXT4-fs: Ignoring removed oldalloc option [ 200.876642][ T9692] ext3: Unknown parameter 'noacl' [ 201.115985][ T9701] loop9: detected capacity change from 0 to 512 [ 202.422976][ T9706] loop1: detected capacity change from 0 to 2048 [ 202.432839][ T9701] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.484624][ T9706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.675305][ T9714] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 202.919028][ T9719] FAULT_INJECTION: forcing a failure. [ 202.919028][ T9719] name failslab, interval 1, probability 0, space 0, times 0 [ 202.919096][ T9719] CPU: 0 UID: 0 PID: 9719 Comm: syz.8.1121 Not tainted syzkaller #0 PREEMPT [ 202.919115][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 202.919121][ T9719] Call trace: [ 202.919124][ T9719] show_stack+0x2c/0x3c (C) [ 202.919144][ T9719] __dump_stack+0x30/0x40 [ 202.919157][ T9719] dump_stack_lvl+0xd8/0x12c [ 202.919169][ T9719] dump_stack+0x1c/0x28 [ 202.919181][ T9719] should_fail_ex+0x41c/0x590 [ 202.919193][ T9719] should_failslab+0xc4/0x120 [ 202.919207][ T9719] kmem_cache_alloc_noprof+0x94/0x5d4 [ 202.919220][ T9719] create_new_namespaces+0x48/0x50c [ 202.919231][ T9719] __arm64_sys_setns+0x274/0x18d8 [ 202.919242][ T9719] invoke_syscall+0x98/0x244 [ 202.919254][ T9719] el0_svc_common+0xec/0x23c [ 202.919266][ T9719] do_el0_svc+0x4c/0x5c [ 202.919277][ T9719] el0_svc+0x64/0x260 [ 202.919288][ T9719] el0t_64_sync_handler+0x44/0x104 [ 202.919298][ T9719] el0t_64_sync+0x198/0x19c [ 202.922745][ T4722] Bluetooth: hci3: command tx timeout [ 203.060823][ T9719] sctp: [Deprecated]: syz.8.1121 (pid 9719) Use of int in max_burst socket option. [ 203.060823][ T9719] Use struct sctp_assoc_value instead [ 203.269341][ T9300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.452143][ T9701] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.1119: iget: bad i_size value: 2533274857506816 [ 203.907284][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.077838][ T4722] Bluetooth: hci3: command tx timeout [ 205.393806][ T9746] input: syz0 as /devices/virtual/input/input4 [ 205.472075][ T9751] loop8: detected capacity change from 0 to 512 [ 205.485725][ T9751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.536951][ T9751] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.658299][ T9759] fuse: Bad value for 'fd' [ 205.746972][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.786786][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.795652][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.800722][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.802602][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.853552][ T9750] netlink: 'syz.8.1127': attribute type 13 has an invalid length. [ 205.853639][ T9750] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1127'. [ 205.988221][ T9766] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 206.994156][ T9766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'. [ 207.948684][ T51] Bluetooth: hci3: command tx timeout [ 207.948772][ T51] Bluetooth: hci1: command tx timeout [ 208.967894][ T9693] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.967961][ T9693] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.968083][ T9693] bridge_slave_0: entered allmulticast mode [ 208.984477][ T9693] bridge_slave_0: entered promiscuous mode [ 209.010067][ T9693] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.010128][ T9693] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.010263][ T9693] bridge_slave_1: entered allmulticast mode [ 209.017209][ T9693] bridge_slave_1: entered promiscuous mode [ 209.106520][ T9693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.109237][ T9693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.249562][ T9693] team0: Port device team_slave_0 added [ 209.263156][ T9693] team0: Port device team_slave_1 added [ 209.301990][ T9792] syz.9.1136 (9792): drop_caches: 2 [ 209.312922][ T9320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.452776][ T9693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.470434][ T9693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.470552][ T9693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.472233][ T9693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.472258][ T9693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.472278][ T9693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.796523][ T9693] hsr_slave_0: entered promiscuous mode [ 209.803504][ T9693] hsr_slave_1: entered promiscuous mode [ 209.806043][ T9693] debugfs: 'hsr0' already exists in 'hsr' [ 209.807792][ T9693] Cannot create hsr debugfs directory [ 210.027342][ T4722] Bluetooth: hci1: command tx timeout [ 210.027417][ T4722] Bluetooth: hci3: command tx timeout [ 211.438844][ T9693] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.644335][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.793214][ T9758] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.793300][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.793462][ T9758] bridge_slave_0: entered allmulticast mode [ 211.838588][ T9758] bridge_slave_0: entered promiscuous mode [ 211.840011][ T9758] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.840068][ T9758] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.840164][ T9758] bridge_slave_1: entered allmulticast mode [ 211.840887][ T9758] bridge_slave_1: entered promiscuous mode [ 211.866779][ T9885] loop9: detected capacity change from 0 to 512 [ 211.885299][ T9885] EXT4-fs: Ignoring removed bh option [ 211.915403][ T9885] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.1149: corrupted in-inode xattr: e_value size too large [ 211.915492][ T9885] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 211.918847][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 211.918882][ C0] EXT4-fs (loop9): initial error at time 211: ext4_iget_extra_inode:5210: inode 15 [ 211.918931][ C0] EXT4-fs (loop9): last error at time 211: ext4_iget_extra_inode:5210: inode 15 [ 211.928217][ T9885] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1149: couldn't read orphan inode 15 (err -117) [ 211.928280][ T9885] loop9: lost filesystem error report for type 5 error -117 [ 211.932730][ T9885] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.975222][ T9693] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.021491][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1149'. [ 212.021533][ T9885] netlink: 397 bytes leftover after parsing attributes in process `syz.9.1149'. [ 212.021578][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1149'. [ 212.112946][ T51] Bluetooth: hci1: command tx timeout [ 212.146903][ T9888] loop8: detected capacity change from 0 to 2048 [ 212.148908][ T9888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.151633][ T9758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.137628][ T9888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.106835][ T51] Bluetooth: hci1: command tx timeout [ 215.118334][ T9693] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.172857][ T9888] EXT4-fs (loop8): shut down requested (2) [ 215.631824][ T9758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.664720][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.754571][ T9758] team0: Port device team_slave_0 added [ 215.776011][ T9758] team0: Port device team_slave_1 added [ 215.842230][ T9693] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.996159][ T9902] loop9: detected capacity change from 0 to 4096 [ 216.079928][ T9902] EXT4-fs (loop9): Test dummy encryption mode enabled [ 216.084869][ T9902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.088615][ T9758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.088653][ T9758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.088698][ T9758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.089898][ T9758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.089923][ T9758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.089961][ T9758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.247971][ T9320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.269961][ T9758] hsr_slave_0: entered promiscuous mode [ 216.270993][ T9758] hsr_slave_1: entered promiscuous mode [ 216.271339][ T9758] debugfs: 'hsr0' already exists in 'hsr' [ 216.271357][ T9758] Cannot create hsr debugfs directory [ 216.384953][ T9902] EXT4-fs: Ignoring removed nobh option [ 216.385042][ T9902] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 216.853251][ T3060] IPVS: starting estimator thread 0... [ 216.943704][ T9919] IPVS: using max 45 ests per chain, 108000 per kthread [ 217.110243][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.624316][ T9693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.664248][ T9693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.673948][ T9693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.692550][ T9945] netlink: 'syz.9.1160': attribute type 11 has an invalid length. [ 217.713291][ T9693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.742861][ T9950] syz.8.1159 (9950): drop_caches: 2 [ 217.792332][ T9693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.811012][ T9693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.816268][ T9960] netlink: 'syz.9.1160': attribute type 11 has an invalid length. [ 217.868034][ T9951] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 217.892489][ T9693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.910747][ T9949] fuse: fd is not a fuse device [ 217.927042][ T9693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.962602][ T9960] debugfs: 'netdev:' already exists in 'phy23' [ 218.226875][ T9973] syz.8.1163 (9973): /proc/9971/oom_adj is deprecated, please use /proc/9971/oom_score_adj instead. [ 218.636646][ T9980] netlink: 276 bytes leftover after parsing attributes in process `syz.8.1163'. [ 218.730975][ T9983] misc userio: Invalid payload size [ 218.854236][ T9693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.021318][ T9693] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.089350][ T4382] block nbd6: Possible stuck request 00000000c9c48f33: control (read@0,4096B). Runtime 60 seconds [ 219.138337][ T9987] syz.9.1166 (9987): drop_caches: 2 [ 219.191963][ T3103] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.192026][ T3103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.197531][ T3103] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.197585][ T3103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.221907][ T9995] loop8: detected capacity change from 0 to 1024 [ 219.283682][ T9995] EXT4-fs: Ignoring removed oldalloc option [ 219.286104][ T9995] EXT4-fs: Ignoring removed orlov option [ 219.310043][ T9758] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.317409][ T9995] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.522985][ T9758] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.525213][ T9758] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.549909][ T9758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.809349][T10010] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.1168: bg 0: block 112: padding at end of block bitmap is not set [ 219.818187][ T9758] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.830521][T10010] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 219.830563][T10010] EXT4-fs (loop8): This should not happen!! Data will be lost [ 219.830563][T10010] [ 219.830594][T10010] EXT4-fs (loop8): Total free blocks count 0 [ 219.830617][T10010] EXT4-fs (loop8): Free/Dirty block details [ 219.830646][T10010] EXT4-fs (loop8): free_blocks=0 [ 219.830663][T10010] EXT4-fs (loop8): dirty_blocks=32 [ 219.830685][T10010] EXT4-fs (loop8): Block reservation details [ 219.830696][T10010] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 219.861761][ T9758] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.904597][ T9758] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.934660][ T9758] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.134681][ T9320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 220.160043][T10018] loop9: detected capacity change from 0 to 1024 [ 220.174110][ T9693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.218052][ T9693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.261135][T10018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 220.360303][T10018] EXT4-fs error (device loop9): ext4_map_blocks:832: inode #15: comm syz.9.1171: lblock 0 mapped to illegal pblock 0 (length 6) [ 220.367952][T10018] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 220.368016][T10018] EXT4-fs (loop9): This should not happen!! Data will be lost [ 220.368016][T10018] [ 220.444281][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1172'. [ 220.495734][ T9758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.556757][ T9758] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.564111][ T1160] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 220.571257][ T1160] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 220.571299][ T1160] EXT4-fs (loop9): This should not happen!! Data will be lost [ 220.571299][ T1160] [ 220.571330][ T1160] EXT4-fs (loop9): Total free blocks count 0 [ 220.571353][ T1160] EXT4-fs (loop9): Free/Dirty block details [ 220.571371][ T1160] EXT4-fs (loop9): free_blocks=0 [ 220.571394][ T1160] EXT4-fs (loop9): dirty_blocks=32 [ 220.571405][ T1160] EXT4-fs (loop9): Block reservation details [ 220.596943][ T3060] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.597011][ T3060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.696658][ T4722] Bluetooth: hci0: command 0x0406 tx timeout [ 220.706121][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.706191][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.788802][ T9758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.807432][ T9758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.538368][ T9693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.952607][ T9758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.130444][ T9758] veth0_vlan: entered promiscuous mode [ 222.180097][ T9758] veth1_vlan: entered promiscuous mode [ 222.351766][ T9758] veth0_macvtap: entered promiscuous mode [ 222.417193][ T9758] veth1_macvtap: entered promiscuous mode [ 222.505869][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.682032][ T9758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.713108][ T9693] veth0_vlan: entered promiscuous mode [ 222.716223][ T9693] veth1_vlan: entered promiscuous mode [ 222.820761][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.820844][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.820886][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.820920][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.997058][ T9693] veth0_macvtap: entered promiscuous mode [ 223.236558][ T9693] veth1_macvtap: entered promiscuous mode [ 223.271286][ T5134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.271346][ T5134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.416948][ T9693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.495796][ T9693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.500270][ T5134] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.500425][ T5134] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.500471][ T5134] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.500520][ T5134] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.519948][ T5134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.519990][ T5134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.325259][ T5134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.325287][ T5134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.394514][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.394557][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.843252][T10149] loop9: detected capacity change from 0 to 1024 [ 225.956477][T10149] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.470839][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1191'. [ 226.652000][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.699120][T10173] loop5: detected capacity change from 0 to 512 [ 228.705508][T10173] EXT4-fs: Ignoring removed bh option [ 228.907191][T10184] loop8: detected capacity change from 0 to 128 [ 230.368088][T10184] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 230.369300][T10184] EXT4-fs: failed to create workqueue [ 230.369338][T10184] EXT4-fs (loop8): mount failed [ 230.424800][T10173] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1196: corrupted in-inode xattr: e_value size too large [ 230.424874][T10173] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 230.430430][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 230.430462][ C0] EXT4-fs (loop5): initial error at time 230: ext4_iget_extra_inode:5210: inode 15 [ 230.430511][ C0] EXT4-fs (loop5): last error at time 230: ext4_iget_extra_inode:5210: inode 15 [ 230.445720][T10173] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1196: couldn't read orphan inode 15 (err -117) [ 230.445780][T10173] loop5: lost filesystem error report for type 5 error -117 [ 230.447308][T10173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.587096][ T9693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.929556][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1203'. [ 232.448268][T10213] netlink: 'syz.8.1205': attribute type 10 has an invalid length. [ 232.448318][T10213] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1205'. [ 232.757016][T10213] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 232.757725][T10213] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 232.890248][T10223] FAULT_INJECTION: forcing a failure. [ 232.890248][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 232.890318][T10223] CPU: 0 UID: 0 PID: 10223 Comm: syz.9.1207 Tainted: G L syzkaller #0 PREEMPT [ 232.890337][T10223] Tainted: [L]=SOFTLOCKUP [ 232.890341][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 232.890347][T10223] Call trace: [ 232.890350][T10223] show_stack+0x2c/0x3c (C) [ 232.890372][T10223] __dump_stack+0x30/0x40 [ 232.890384][T10223] dump_stack_lvl+0xd8/0x12c [ 232.890396][T10223] dump_stack+0x1c/0x28 [ 232.890407][T10223] should_fail_ex+0x41c/0x590 [ 232.890420][T10223] should_failslab+0xc4/0x120 [ 232.890433][T10223] __kmalloc_cache_noprof+0x94/0x5fc [ 232.890442][T10223] bpf_int_jit_compile+0x1bc/0x1184 [ 232.890454][T10223] __bpf_prog_select_runtime+0x3a0/0x728 [ 232.890466][T10223] bpf_prog_select_runtime+0x2c/0x3c [ 232.890477][T10223] bpf_prepare_filter+0xc74/0xdac [ 232.890488][T10223] __get_filter+0x1b4/0x224 [ 232.890497][T10223] sk_attach_filter+0x28/0x8c [ 232.890507][T10223] sk_setsockopt+0x1f08/0x2658 [ 232.890519][T10223] sock_setsockopt+0x68/0x80 [ 232.890531][T10223] do_sock_setsockopt+0x1a0/0x330 [ 232.890541][T10223] __sys_setsockopt+0x104/0x170 [ 232.890550][T10223] __arm64_sys_setsockopt+0xc8/0xe4 [ 232.890560][T10223] invoke_syscall+0x98/0x244 [ 232.890572][T10223] el0_svc_common+0xec/0x23c [ 232.890584][T10223] do_el0_svc+0x4c/0x5c [ 232.890595][T10223] el0_svc+0x64/0x260 [ 232.890606][T10223] el0t_64_sync_handler+0x44/0x104 [ 232.890616][T10223] el0t_64_sync+0x198/0x19c [ 233.156803][T10230] FAULT_INJECTION: forcing a failure. [ 233.156803][T10230] name failslab, interval 1, probability 0, space 0, times 0 [ 233.156866][T10230] CPU: 0 UID: 0 PID: 10230 Comm: syz.8.1208 Tainted: G L syzkaller #0 PREEMPT [ 233.156883][T10230] Tainted: [L]=SOFTLOCKUP [ 233.156886][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 233.156892][T10230] Call trace: [ 233.156896][T10230] show_stack+0x2c/0x3c (C) [ 233.156915][T10230] __dump_stack+0x30/0x40 [ 233.156926][T10230] dump_stack_lvl+0xd8/0x12c [ 233.156936][T10230] dump_stack+0x1c/0x28 [ 233.156946][T10230] should_fail_ex+0x41c/0x590 [ 233.156960][T10230] should_failslab+0xc4/0x120 [ 233.156975][T10230] __kmalloc_cache_noprof+0x94/0x5fc [ 233.156983][T10230] drm_atomic_helper_setup_commit+0x180/0xffc [ 233.156995][T10230] drm_atomic_helper_commit+0x6c/0x280 [ 233.157004][T10230] drm_atomic_commit+0x214/0x280 [ 233.157012][T10230] drm_client_modeset_commit_atomic+0x534/0x6b8 [ 233.157023][T10230] drm_client_modeset_commit_locked+0xd0/0x494 [ 233.157034][T10230] drm_fb_helper_pan_display+0x1b0/0x788 [ 233.157044][T10230] fb_pan_display+0x2e4/0x53c [ 233.157054][T10230] bit_update_start+0x4c/0x1c0 [ 233.157062][T10230] fbcon_modechanged+0x458/0x698 [ 233.157072][T10230] fbcon_update_vcs+0x3c/0x4c [ 233.157083][T10230] fb_set_var_from_user+0xa8/0xe0 [ 233.157092][T10230] do_fb_ioctl+0x554/0x7a4 [ 233.157101][T10230] fb_ioctl+0x48/0x68 [ 233.157111][T10230] __arm64_sys_ioctl+0x154/0x1cc [ 233.157122][T10230] invoke_syscall+0x98/0x244 [ 233.157132][T10230] el0_svc_common+0xec/0x23c [ 233.157141][T10230] do_el0_svc+0x4c/0x5c [ 233.157151][T10230] el0_svc+0x64/0x260 [ 233.157161][T10230] el0t_64_sync_handler+0x44/0x104 [ 233.157169][T10230] el0t_64_sync+0x198/0x19c [ 233.469571][T10239] loop9: detected capacity change from 0 to 128 [ 233.483299][T10239] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.489269][T10239] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 234.410747][T10262] bond0: option mode: unable to set because the bond device has slaves [ 234.612864][T10262] loop1: detected capacity change from 0 to 512 [ 234.701703][T10262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.904504][T10262] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #2: comm syz.1.1217: No space for directory leaf checksum. Please run e2fsck -D. [ 234.904571][T10262] EXT4-fs error (device loop1): ext4_readdir:226: inode #2: comm syz.1.1217: path /33/file0: directory fails checksum at offset 0 [ 235.269155][ T12] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 235.346746][T10289] netlink: 'syz.5.1219': attribute type 11 has an invalid length. [ 235.440347][ T9300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.876724][T10320] loop3: detected capacity change from 0 to 256 [ 237.633146][T10319] netlink: 'syz.3.1224': attribute type 29 has an invalid length. [ 238.038519][T10333] loop9: detected capacity change from 0 to 4096 [ 238.072118][T10328] netlink: 'syz.1.1226': attribute type 1 has an invalid length. [ 238.146985][T10333] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.195812][T10333] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.1229: corrupted inode contents [ 238.205613][T10333] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #15: comm syz.9.1229: mark_inode_dirty error [ 238.209155][T10333] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.1229: corrupted inode contents [ 238.214478][T10333] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.1229: mark_inode_dirty error [ 238.218817][T10333] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.1229: corrupted inode contents [ 238.221838][T10333] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #15: comm syz.9.1229: mark_inode_dirty error [ 238.224844][T10333] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.1229: corrupted inode contents [ 238.237115][T10340] loop8: detected capacity change from 0 to 1024 [ 238.263692][T10340] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.276588][T10333] EXT4-fs error (device loop9): ext4_truncate:4721: inode #15: comm syz.9.1229: mark_inode_dirty error [ 238.280409][T10333] EXT4-fs error (device loop9) in ext4_setattr:6247: Corrupt filesystem [ 238.383949][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.384256][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.534498][T10336] loop3: detected capacity change from 0 to 2048 [ 238.564151][T10333] netlink: 672 bytes leftover after parsing attributes in process `syz.9.1229'. [ 238.578458][T10347] loop5: detected capacity change from 0 to 128 [ 238.588414][T10347] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.616272][T10347] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 238.626688][T10333] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #15: comm syz.9.1229: corrupted inode contents [ 238.666146][T10336] overlayfs: missing 'workdir' [ 238.766495][T10353] loop1: detected capacity change from 0 to 128 [ 238.780055][T10353] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 238.790686][T10353] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 239.099771][ T9320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.534484][T10366] tipc: Started in network mode [ 240.534546][T10366] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 240.534639][T10366] tipc: Enabled bearer , priority 0 [ 240.613313][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.632023][ T3103] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 242.023039][ T6755] tipc: Node number set to 43690 [ 242.563568][T10378] Cannot find set identified by id 0 to match [ 243.210160][T10376] loop9: detected capacity change from 0 to 512 [ 243.328694][T10376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a866c028, mo2=0002] [ 243.328828][T10376] System zones: 1-12 [ 243.358272][T10376] EXT4-fs (loop9): 1 orphan inode deleted [ 243.358982][T10376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.567589][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.717908][T10403] loop9: detected capacity change from 0 to 256 [ 243.743976][T10403] FAT-fs (loop9): Directory bread(block 1285) failed [ 243.745825][T10403] FAT-fs (loop9): Directory bread(block 1286) failed [ 243.750850][T10403] FAT-fs (loop9): Directory bread(block 1287) failed [ 243.750998][T10403] FAT-fs (loop9): Directory bread(block 1288) failed [ 244.198396][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1244'. [ 244.282704][T10407] binder: 10406:10407 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 244.474533][T10394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1243'. [ 246.304359][T10428] loop3: detected capacity change from 0 to 512 [ 246.316566][T10428] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 246.343532][T10428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.347297][T10419] FAULT_INJECTION: forcing a failure. [ 246.347297][T10419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.347353][T10419] CPU: 0 UID: 0 PID: 10419 Comm: syz.9.1249 Tainted: G L syzkaller #0 PREEMPT [ 246.347369][T10419] Tainted: [L]=SOFTLOCKUP [ 246.347373][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 246.347379][T10419] Call trace: [ 246.347382][T10419] show_stack+0x2c/0x3c (C) [ 246.347401][T10419] __dump_stack+0x30/0x40 [ 246.347413][T10419] dump_stack_lvl+0xd8/0x12c [ 246.347425][T10419] dump_stack+0x1c/0x28 [ 246.347436][T10419] should_fail_ex+0x41c/0x590 [ 246.347449][T10419] should_fail_alloc_page+0xec/0x10c [ 246.347462][T10419] prepare_alloc_pages+0x194/0x484 [ 246.347470][T10419] __alloc_frozen_pages_noprof+0x180/0x648 [ 246.347479][T10419] alloc_pages_mpol+0x1fc/0x3d0 [ 246.347489][T10419] alloc_frozen_pages_noprof+0xc4/0x10c [ 246.347498][T10419] alloc_pages_noprof+0x30/0x148 [ 246.347507][T10419] kimage_alloc_pages+0xa8/0x3d0 [ 246.347517][T10419] kimage_alloc_control_pages+0x348/0x714 [ 246.347527][T10419] kexec_page_alloc+0x2c/0x118 [ 246.347537][T10419] trans_pgd_create_copy+0x2e8/0x1868 [ 246.347547][T10419] machine_kexec_post_load+0x5c4/0x8e0 [ 246.347557][T10419] do_kexec_load+0x4a0/0x678 [ 246.347566][T10419] __arm64_sys_kexec_load+0x1b4/0x1d4 [ 246.347576][T10419] invoke_syscall+0x98/0x244 [ 246.347588][T10419] el0_svc_common+0xec/0x23c [ 246.347599][T10419] do_el0_svc+0x4c/0x5c [ 246.347610][T10419] el0_svc+0x64/0x260 [ 246.347621][T10419] el0t_64_sync_handler+0x44/0x104 [ 246.347631][T10419] el0t_64_sync+0x198/0x19c [ 246.646534][T10433] loop1: detected capacity change from 0 to 1024 [ 246.661232][T10441] Quota error (device loop3): do_check_range: Getting block 4128768 out of range 0-5 [ 247.779304][T10433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 247.798498][T10433] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 248.146537][ T9758] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.208633][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1251'. [ 248.258429][T10463] netlink: 'syz.9.1253': attribute type 1 has an invalid length. [ 248.443286][T10433] bond1 (unregistering): Released all slaves [ 249.047613][T10463] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 249.280787][ T1590] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.280848][ T1590] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.287541][ T4382] block nbd6: Possible stuck request 00000000c9c48f33: control (read@0,4096B). Runtime 90 seconds [ 249.661504][T10473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1258'. [ 249.911504][T10503] loop5: detected capacity change from 0 to 512 [ 249.935930][T10503] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 249.962517][T10503] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.1261: bad orphan inode 15 [ 249.965510][T10503] loop5: lost filesystem error report for type 5 error -117 [ 249.974266][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 249.974297][ C0] EXT4-fs (loop5): initial error at time 249: ext4_orphan_get:1429 [ 249.974328][ C0] EXT4-fs (loop5): last error at time 249: ext4_orphan_get:1429 [ 249.983555][T10503] ext4_test_bit(bit=14, block=5) = 0 [ 250.031134][T10503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.431537][T10523] loop3: detected capacity change from 0 to 512 [ 250.447650][T10523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 250.482639][T10523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.506443][T10436] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 252.521429][T10436] EXT4-fs (loop3): Remounting filesystem read-only [ 252.521652][T10436] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 253.607998][ T9693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.682825][ T9758] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.070950][T10541] loop3: detected capacity change from 0 to 2048 [ 254.104305][T10541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.200533][T10541] overlayfs: failed to set xattr on upper [ 254.203953][T10541] overlayfs: ...falling back to redirect_dir=nofollow. [ 254.207766][T10541] overlayfs: ...falling back to uuid=null. [ 254.495007][T10558] loop1: detected capacity change from 0 to 128 [ 254.495764][T10558] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 254.523790][T10558] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 254.609361][T10561] loop9: detected capacity change from 0 to 512 [ 254.635466][T10561] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.654042][T10561] EXT4-fs (loop9): orphan cleanup on readonly fs [ 254.660614][T10561] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.1270: Allocating blocks 41-42 which overlap fs metadata [ 254.660659][T10561] loop9: lost filesystem error report for type 5 error -117 [ 254.666888][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 254.666918][ C0] EXT4-fs (loop9): initial error at time 254: ext4_mb_mark_diskspace_used:4223 [ 254.666949][ C0] EXT4-fs (loop9): last error at time 254: ext4_mb_mark_diskspace_used:4223 [ 254.683392][T10561] Quota error (device loop9): write_blk: dquota write failed [ 254.683487][T10561] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 254.683543][T10561] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.1270: Failed to acquire dquot type 0 [ 254.683577][T10561] loop9: lost filesystem error report for type 5 error -117 [ 254.692779][T10561] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 254.692926][T10561] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1270: corrupted inode contents [ 254.692976][T10561] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 254.709293][T10561] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #12: comm syz.9.1270: mark_inode_dirty error [ 254.709353][T10561] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 254.714151][T10561] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1270: corrupted inode contents [ 254.714209][T10561] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 254.718918][T10561] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.1270: mark_inode_dirty error [ 254.718981][T10561] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 254.723809][T10561] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1270: corrupted inode contents [ 254.723893][T10561] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 254.731590][T10561] EXT4-fs error (device loop9) in ext4_orphan_del:304: Corrupt filesystem [ 254.731655][T10561] loop9: lost filesystem error report for type 5 error -117 [ 254.737348][T10561] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1270: corrupted inode contents [ 254.737414][T10561] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 254.750684][T10561] EXT4-fs error (device loop9): ext4_truncate:4721: inode #12: comm syz.9.1270: mark_inode_dirty error [ 254.750748][T10561] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 254.755483][T10561] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem [ 254.755541][T10561] loop9: lost filesystem error report for type 5 error -117 [ 254.765919][T10561] EXT4-fs (loop9): 1 truncate cleaned up [ 254.766075][T10561] EXT4-fs (loop9): pa 00000000a8d1e8f1: logic 1, phys. 41, len 23 [ 254.766109][T10561] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 254.767035][T10561] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.950578][ T9758] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.032924][ T3060] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 255.746018][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.757401][T10584] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 255.820545][T10588] tmpfs: Bad value for 'mpol' [ 255.899923][T10584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.517970][T10616] vlan2: entered promiscuous mode [ 256.518071][T10616] bridge0: entered promiscuous mode [ 256.899070][T10626] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1286'. [ 258.207007][T10634] can0: slcan on ttyS3. [ 258.260979][T10635] capability: warning: `syz.9.1287' uses 32-bit capabilities (legacy support in use) [ 258.299167][T10634] can0 (unregistered): slcan off ttyS3. [ 258.333569][T10614] 9p: Bad value for 'wfdno' [ 258.682294][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 259.015144][T10659] FAULT_INJECTION: forcing a failure. [ 259.015144][T10659] name failslab, interval 1, probability 0, space 0, times 0 [ 259.015197][T10659] CPU: 0 UID: 0 PID: 10659 Comm: syz.5.1293 Tainted: G L syzkaller #0 PREEMPT [ 259.015216][T10659] Tainted: [L]=SOFTLOCKUP [ 259.015219][T10659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 259.015225][T10659] Call trace: [ 259.015228][T10659] show_stack+0x2c/0x3c (C) [ 259.015247][T10659] __dump_stack+0x30/0x40 [ 259.015258][T10659] dump_stack_lvl+0xd8/0x12c [ 259.015268][T10659] dump_stack+0x1c/0x28 [ 259.015278][T10659] should_fail_ex+0x41c/0x590 [ 259.015289][T10659] should_failslab+0xc4/0x120 [ 259.015300][T10659] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 259.015308][T10659] krealloc_node_align_noprof+0x1b4/0x3d0 [ 259.015316][T10659] kvrealloc_node_align_noprof+0x8c/0x100 [ 259.015325][T10659] bpf_iarray_realloc+0x40/0xa8 [ 259.015333][T10659] bpf_check+0xe38/0x243c [ 259.015344][T10659] bpf_prog_load+0xf4c/0x1554 [ 259.015352][T10659] __sys_bpf+0x7d4/0x82c [ 259.015360][T10659] __arm64_sys_bpf+0xd0/0xec [ 259.015368][T10659] invoke_syscall+0x98/0x244 [ 259.015378][T10659] el0_svc_common+0xec/0x23c [ 259.015388][T10659] do_el0_svc+0x4c/0x5c [ 259.015397][T10659] el0_svc+0x64/0x260 [ 259.015407][T10659] el0t_64_sync_handler+0x44/0x104 [ 259.015416][T10659] el0t_64_sync+0x198/0x19c [ 259.196169][T10655] loop9: detected capacity change from 0 to 512 [ 259.199966][T10655] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.214240][T10655] EXT4-fs (loop9): orphan cleanup on readonly fs [ 259.216531][T10655] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.1292: Allocating blocks 41-42 which overlap fs metadata [ 259.216577][T10655] loop9: lost filesystem error report for type 5 error -117 [ 259.219624][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 259.219636][ C0] EXT4-fs (loop9): initial error at time 258: ext4_mb_mark_diskspace_used:4223 [ 259.219657][ C0] EXT4-fs (loop9): last error at time 258: ext4_mb_mark_diskspace_used:4223 [ 259.230936][T10655] Quota error (device loop9): write_blk: dquota write failed [ 259.231036][T10655] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 259.231086][T10655] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.1292: Failed to acquire dquot type 0 [ 259.231122][T10655] loop9: lost filesystem error report for type 5 error -117 [ 259.237429][T10655] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 259.237554][T10655] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1292: corrupted inode contents [ 259.237586][T10655] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 259.237757][T10655] EXT4-fs error (device loop9): ext4_dirty_inode:6731: inode #12: comm syz.9.1292: mark_inode_dirty error [ 259.237787][T10655] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 259.237965][T10655] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1292: corrupted inode contents [ 259.237997][T10655] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 259.238882][T10655] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.1292: mark_inode_dirty error [ 259.239166][T10655] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1292: corrupted inode contents [ 259.239622][T10655] EXT4-fs error (device loop9) in ext4_orphan_del:304: Corrupt filesystem [ 259.239639][T10655] loop9: lost filesystem error report for type 5 error -117 [ 259.241421][T10655] EXT4-fs error (device loop9): ext4_do_update_inode:5801: inode #12: comm syz.9.1292: corrupted inode contents [ 259.244702][T10655] EXT4-fs error (device loop9): ext4_truncate:4721: inode #12: comm syz.9.1292: mark_inode_dirty error [ 259.256777][T10655] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem [ 259.256794][T10655] loop9: lost filesystem error report for type 5 error -117 [ 259.257932][T10655] EXT4-fs (loop9): 1 truncate cleaned up [ 259.258038][T10655] EXT4-fs (loop9): pa 000000003d5c229a: logic 1, phys. 41, len 23 [ 259.258063][T10655] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 259.258954][T10655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.319724][T10666] FAULT_INJECTION: forcing a failure. [ 259.319724][T10666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 259.319784][T10666] CPU: 0 UID: 0 PID: 10666 Comm: syz.1.1295 Tainted: G L syzkaller #0 PREEMPT [ 259.319806][T10666] Tainted: [L]=SOFTLOCKUP [ 259.319810][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 259.319816][T10666] Call trace: [ 259.319819][T10666] show_stack+0x2c/0x3c (C) [ 259.319839][T10666] __dump_stack+0x30/0x40 [ 259.319852][T10666] dump_stack_lvl+0xd8/0x12c [ 259.319864][T10666] dump_stack+0x1c/0x28 [ 259.319875][T10666] should_fail_ex+0x41c/0x590 [ 259.319889][T10666] should_fail_alloc_page+0xec/0x10c [ 259.319902][T10666] prepare_alloc_pages+0x194/0x484 [ 259.319911][T10666] __alloc_frozen_pages_noprof+0x180/0x648 [ 259.319920][T10666] alloc_pages_mpol+0x1fc/0x3d0 [ 259.319929][T10666] alloc_frozen_pages_noprof+0xc4/0x10c [ 259.319939][T10666] alloc_pages_noprof+0x30/0x148 [ 259.319948][T10666] kimage_alloc_pages+0xa8/0x3d0 [ 259.319962][T10666] kimage_alloc_control_pages+0x348/0x714 [ 259.319972][T10666] kexec_page_alloc+0x2c/0x118 [ 259.319983][T10666] trans_pgd_create_copy+0x2e8/0x1868 [ 259.319994][T10666] machine_kexec_post_load+0x5c4/0x8e0 [ 259.320004][T10666] do_kexec_load+0x4a0/0x678 [ 259.320014][T10666] __arm64_sys_kexec_load+0x1b4/0x1d4 [ 259.320023][T10666] invoke_syscall+0x98/0x244 [ 259.320036][T10666] el0_svc_common+0xec/0x23c [ 259.320048][T10666] do_el0_svc+0x4c/0x5c [ 259.320059][T10666] el0_svc+0x64/0x260 [ 259.320070][T10666] el0t_64_sync_handler+0x44/0x104 [ 259.320080][T10666] el0t_64_sync+0x198/0x19c [ 259.516225][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1297'. [ 259.550603][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1297'. [ 259.632369][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'. [ 259.632437][T10680] netlink: 'syz.1.1299': attribute type 11 has an invalid length. [ 259.706341][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'. [ 259.708374][ T5134] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.708564][ T5134] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.708603][ T5134] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.708631][ T5134] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.740172][T10680] netlink: 'syz.1.1299': attribute type 11 has an invalid length. [ 259.765090][ T7220] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.418340][T10702] trusted_key: encrypted_key: insufficient parameters specified [ 261.524614][T10704] syzkaller0: entered promiscuous mode [ 261.532733][T10704] syzkaller0: entered allmulticast mode [ 261.558151][T10709] trusted_key: encrypted_key: insufficient parameters specified [ 261.591666][T10704] bond0: option slaves: interface +d does not exist! [ 261.685901][T10704] bond0: (slave ip6_vti0): refused to change device type [ 261.953973][T10724] FAULT_INJECTION: forcing a failure. [ 261.953973][T10724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.954046][T10724] CPU: 0 UID: 0 PID: 10724 Comm: syz.9.1308 Tainted: G L syzkaller #0 PREEMPT [ 261.954065][T10724] Tainted: [L]=SOFTLOCKUP [ 261.954069][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 261.954075][T10724] Call trace: [ 261.954078][T10724] show_stack+0x2c/0x3c (C) [ 261.954096][T10724] __dump_stack+0x30/0x40 [ 261.954107][T10724] dump_stack_lvl+0xd8/0x12c [ 261.954117][T10724] dump_stack+0x1c/0x28 [ 261.954126][T10724] should_fail_ex+0x41c/0x590 [ 261.954137][T10724] should_fail+0x14/0x24 [ 261.954147][T10724] should_fail_usercopy+0x20/0x30 [ 261.954157][T10724] simple_read_from_buffer+0xc4/0x238 [ 261.954167][T10724] proc_fail_nth_read+0x1a8/0x248 [ 261.954176][T10724] vfs_read+0x230/0x8c8 [ 261.954186][T10724] ksys_read+0x12c/0x228 [ 261.954196][T10724] __arm64_sys_read+0x84/0x98 [ 261.954206][T10724] invoke_syscall+0x98/0x244 [ 261.954216][T10724] el0_svc_common+0xec/0x23c [ 261.954226][T10724] do_el0_svc+0x4c/0x5c [ 261.954235][T10724] el0_svc+0x64/0x260 [ 261.954245][T10724] el0t_64_sync_handler+0x44/0x104 [ 261.954253][T10724] el0t_64_sync+0x198/0x19c [ 262.260536][T10726] ip6tnl0: entered promiscuous mode [ 262.284213][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1309'. [ 262.297984][T10730] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1310'. [ 262.621314][T10741] loop3: detected capacity change from 0 to 2048 [ 262.690729][T10741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.783418][T10744] binder: 10742:10744 tried to acquire reference to desc 0, got 1 instead [ 262.790883][T10744] binder: 10742:10744 BC_FREE_BUFFER matched unreturned or currently freeing buffer at offset 0 [ 262.807978][T10741] overlayfs: failed to set xattr on upper [ 262.808021][T10741] overlayfs: ...falling back to redirect_dir=nofollow. [ 262.808056][T10741] overlayfs: ...falling back to uuid=null. [ 262.840040][ T1017] binder: undelivered TRANSACTION_COMPLETE [ 262.918868][ T1017] binder: undelivered transaction 10, process died. [ 262.954409][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1317'. [ 263.026591][T10752] 9p: Bad value for 'rfdno' [ 263.066721][ T9758] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.276655][T10771] FAULT_INJECTION: forcing a failure. [ 263.276655][T10771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.280355][T10771] CPU: 0 UID: 0 PID: 10771 Comm: syz.1.1321 Tainted: G L syzkaller #0 PREEMPT [ 263.280380][T10771] Tainted: [L]=SOFTLOCKUP [ 263.280387][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 263.280394][T10771] Call trace: [ 263.280398][T10771] show_stack+0x2c/0x3c (C) [ 263.280420][T10771] __dump_stack+0x30/0x40 [ 263.280432][T10771] dump_stack_lvl+0xd8/0x12c [ 263.280442][T10771] dump_stack+0x1c/0x28 [ 263.280452][T10771] should_fail_ex+0x41c/0x590 [ 263.280463][T10771] should_fail+0x14/0x24 [ 263.280472][T10771] should_fail_usercopy+0x20/0x30 [ 263.280483][T10771] _copy_from_iter+0x188/0x1064 [ 263.280494][T10771] copy_page_from_iter+0x220/0x2e8 [ 263.280504][T10771] tun_get_user+0x1784/0x36d0 [ 263.280514][T10771] tun_chr_write_iter+0xfc/0x168 [ 263.280522][T10771] vfs_write+0x51c/0xa0c [ 263.280533][T10771] ksys_write+0x12c/0x228 [ 263.280543][T10771] __arm64_sys_write+0x84/0x98 [ 263.280553][T10771] invoke_syscall+0x98/0x244 [ 263.280563][T10771] el0_svc_common+0xec/0x23c [ 263.280573][T10771] do_el0_svc+0x4c/0x5c [ 263.280583][T10771] el0_svc+0x64/0x260 [ 263.280592][T10771] el0t_64_sync_handler+0x44/0x104 [ 263.280601][T10771] el0t_64_sync+0x198/0x19c [ 263.846793][T10787] loop1: detected capacity change from 0 to 256 [ 263.853348][T10787] FAT-fs (loop1): Directory bread(block 1285) failed [ 263.861935][T10787] FAT-fs (loop1): Directory bread(block 1286) failed [ 263.863540][T10787] FAT-fs (loop1): Directory bread(block 1287) failed [ 263.866022][T10787] FAT-fs (loop1): Directory bread(block 1288) failed [ 263.912397][T10762] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.912496][T10762] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 263.935093][T10787] FAT-fs (loop1): Directory bread(block 1285) failed [ 263.935156][T10787] FAT-fs (loop1): Directory bread(block 1286) failed [ 263.935191][T10787] FAT-fs (loop1): Directory bread(block 1287) failed [ 263.935220][T10787] FAT-fs (loop1): Directory bread(block 1288) failed [ 264.318492][T10794] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 264.325625][T10762] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.325765][T10762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 264.469409][T10762] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 264.492720][T10792] netlink: 'syz.8.1328': attribute type 39 has an invalid length. [ 264.498993][T10762] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 264.503348][T10762] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 264.522721][T10762] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 264.546071][T10762] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.547706][T10762] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 264.699164][T10762] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 264.855563][T10762] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.855631][T10762] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 265.392674][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 265.655713][T10810] loop1: detected capacity change from 0 to 8192 [ 266.005725][T10762] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 266.114869][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 266.504381][T10843] loop5: detected capacity change from 0 to 128 [ 266.513095][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.527133][T10843] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.540145][T10843] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.593917][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 266.915682][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.150696][ T40] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.666762][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 267.878495][ T4395] 8021q: adding VLAN 0 to HW filter on device eth7 [ 268.192867][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.599837][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.749065][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.178637][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 270.031480][T10910] loop5: detected capacity change from 0 to 2048 [ 270.076465][T10910] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.083744][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1354'. [ 270.272929][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.275274][T10910] overlayfs: failed to set xattr on upper [ 270.275314][T10910] overlayfs: ...falling back to redirect_dir=nofollow. [ 270.275339][T10910] overlayfs: ...falling back to uuid=null. [ 270.401834][T10928] Soft offlining pfn 0x136eb1 at process virtual address 0x20000000 [ 270.408548][T10928] Soft offlining pfn 0x137b08 at process virtual address 0x20001000 [ 270.430116][T10929] netlink: 'syz.8.1356': attribute type 1 has an invalid length. [ 270.559594][T10928] Soft offlining pfn 0x1391a1 at process virtual address 0x20002000 [ 270.559773][T10928] Soft offlining pfn 0x13911d at process virtual address 0x20003000 [ 270.673004][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.693473][T10923] Injecting memory failure for pfn 0x15ee86 at process virtual address 0x20001000 [ 270.704062][ T9693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.715005][T10923] Memory failure: 0x15ee86: keeping poisoned page in swap cache [ 270.726451][T10923] Memory failure: 0x15ee86: Sending SIGBUS to syz.3.1355:10923 due to hardware memory corruption [ 270.734053][T10923] Memory failure: 0x15ee86: recovery action for dirty swapcache page: Delayed [ 270.734105][T10923] Injecting memory failure for pfn 0x15ee85 at process virtual address 0x20002000 [ 270.734373][T10923] Memory failure: 0x15ee85: Sending SIGBUS to syz.3.1355:10923 due to hardware memory corruption [ 270.734407][T10923] Memory failure: 0x15ee85: recovery action for dirty LRU page: Recovered [ 270.734431][T10923] Injecting memory failure for pfn 0x11ef90 at process virtual address 0x20003000 [ 270.734494][T10923] Memory failure: 0x11ef90: Sending SIGBUS to syz.3.1355:10923 due to hardware memory corruption [ 270.734526][T10923] Memory failure: 0x11ef90: recovery action for dirty LRU page: Recovered [ 270.752880][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.908354][T10940] loop5: detected capacity change from 0 to 256 [ 271.120023][T10944] loop1: detected capacity change from 0 to 256 [ 271.134034][T10944] vfat: Unknown parameter 'rodi' [ 271.233483][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 271.406800][T10944] loop1: detected capacity change from 0 to 128 [ 271.407688][T10944] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 271.632282][T10962] loop9: detected capacity change from 0 to 256 [ 271.633186][T10962] vfat: Bad value for 'shortname' [ 271.657085][T10944] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.959352][ T59] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.906672][T10979] loop3: detected capacity change from 0 to 512 [ 272.923285][T10979] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.943210][T10979] EXT4-fs (loop3): orphan cleanup on readonly fs [ 272.962312][T10979] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.1370: Allocating blocks 41-42 which overlap fs metadata [ 272.962379][T10979] loop3: lost filesystem error report for type 5 error -117 [ 272.962756][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 272.962774][ C0] EXT4-fs (loop3): initial error at time 272: ext4_mb_mark_diskspace_used:4223 [ 272.962817][ C0] EXT4-fs (loop3): last error at time 272: ext4_mb_mark_diskspace_used:4223 [ 272.979603][T10979] Quota error (device loop3): write_blk: dquota write failed [ 272.979667][T10979] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 272.979700][T10979] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1370: Failed to acquire dquot type 0 [ 272.979714][T10979] loop3: lost filesystem error report for type 5 error -117 [ 273.012153][T10979] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 273.012289][T10979] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1370: corrupted inode contents [ 273.012319][T10979] fserror_report: 4 callbacks suppressed [ 273.012341][T10979] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 273.026644][T10979] EXT4-fs error (device loop3): ext4_dirty_inode:6731: inode #12: comm syz.3.1370: mark_inode_dirty error [ 273.026703][T10979] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 273.026998][T10979] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1370: corrupted inode contents [ 273.027034][T10979] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 273.027218][T10979] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.1370: mark_inode_dirty error [ 273.027247][T10979] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 273.027417][T10979] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1370: corrupted inode contents [ 273.027447][T10979] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 273.044570][T10979] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 273.044620][T10979] loop3: lost filesystem error report for type 5 error -117 [ 273.052463][T10979] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.1370: corrupted inode contents [ 273.052556][T10979] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 273.059774][T10979] EXT4-fs error (device loop3): ext4_truncate:4721: inode #12: comm syz.3.1370: mark_inode_dirty error [ 273.059833][T10979] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 273.065726][T10979] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 273.065785][T10979] loop3: lost filesystem error report for type 5 error -117 [ 273.076076][T10979] EXT4-fs (loop3): 1 truncate cleaned up [ 273.076233][T10979] EXT4-fs (loop3): pa 00000000d18152e0: logic 1, phys. 41, len 23 [ 273.076270][T10979] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5460: group 0, free 22, pa_free 23 [ 273.098103][T10979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.386326][ T9758] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.915784][T11014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1374'. [ 274.918934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.919101][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.717293][T11025] netlink: 'syz.9.1378': attribute type 10 has an invalid length. [ 275.717357][T11025] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1378'. [ 275.717421][T11025] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 275.717859][T11025] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 275.782960][ T3060] IPVS: starting estimator thread 0... [ 275.963574][T11037] IPVS: using max 58 ests per chain, 139200 per kthread [ 276.889022][T11053] FAULT_INJECTION: forcing a failure. [ 276.889022][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 276.889087][T11053] CPU: 0 UID: 0 PID: 11053 Comm: syz.3.1382 Tainted: G L syzkaller #0 PREEMPT [ 276.889109][T11053] Tainted: [L]=SOFTLOCKUP [ 276.889113][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 276.889120][T11053] Call trace: [ 276.889123][T11053] show_stack+0x2c/0x3c (C) [ 276.889144][T11053] __dump_stack+0x30/0x40 [ 276.889157][T11053] dump_stack_lvl+0xd8/0x12c [ 276.889169][T11053] dump_stack+0x1c/0x28 [ 276.889180][T11053] should_fail_ex+0x41c/0x590 [ 276.889193][T11053] should_failslab+0xc4/0x120 [ 276.889206][T11053] kmem_cache_alloc_noprof+0x94/0x5d4 [ 276.889220][T11053] vm_area_dup+0x34/0x5c8 [ 276.889230][T11053] __split_vma+0x1a8/0x83c [ 276.889242][T11053] vma_modify+0x11ac/0x18f0 [ 276.889252][T11053] vma_modify_flags+0x228/0x33c [ 276.889263][T11053] madvise_vma_behavior+0x155c/0x3370 [ 276.889275][T11053] madvise_walk_vmas+0x4c8/0x9bc [ 276.889287][T11053] madvise_do_behavior+0x5f0/0x7c0 [ 276.889298][T11053] do_madvise+0x28c/0x2f0 [ 276.889309][T11053] __arm64_sys_madvise+0xac/0xc8 [ 276.889320][T11053] invoke_syscall+0x98/0x244 [ 276.889332][T11053] el0_svc_common+0xec/0x23c [ 276.889344][T11053] do_el0_svc+0x4c/0x5c [ 276.889355][T11053] el0_svc+0x64/0x260 [ 276.889366][T11053] el0t_64_sync_handler+0x44/0x104 [ 276.889376][T11053] el0t_64_sync+0x198/0x19c [ 278.365580][T11096] loop8: detected capacity change from 0 to 512 [ 278.391170][T11096] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.491979][T11096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.495187][ T4382] block nbd6: Possible stuck request 00000000c9c48f33: control (read@0,4096B). Runtime 120 seconds [ 282.174191][ T9320] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.427984][T11117] FAULT_INJECTION: forcing a failure. [ 282.427984][T11117] name failslab, interval 1, probability 0, space 0, times 0 [ 282.431798][T11117] CPU: 0 UID: 0 PID: 11117 Comm: syz.1.1397 Tainted: G L syzkaller #0 PREEMPT [ 282.431822][T11117] Tainted: [L]=SOFTLOCKUP [ 282.431827][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 282.431836][T11117] Call trace: [ 282.431840][T11117] show_stack+0x2c/0x3c (C) [ 282.431861][T11117] __dump_stack+0x30/0x40 [ 282.431875][T11117] dump_stack_lvl+0xd8/0x12c [ 282.431887][T11117] dump_stack+0x1c/0x28 [ 282.431898][T11117] should_fail_ex+0x41c/0x590 [ 282.431911][T11117] should_failslab+0xc4/0x120 [ 282.431924][T11117] kmem_cache_alloc_noprof+0x94/0x5d4 [ 282.431938][T11117] vm_area_dup+0x34/0x5c8 [ 282.431948][T11117] __split_vma+0x1a8/0x83c [ 282.431964][T11117] vma_modify+0x11ac/0x18f0 [ 282.431975][T11117] vma_modify_flags+0x228/0x33c [ 282.431986][T11117] madvise_vma_behavior+0x155c/0x3370 [ 282.431998][T11117] madvise_walk_vmas+0x4c8/0x9bc [ 282.432009][T11117] madvise_do_behavior+0x5f0/0x7c0 [ 282.432021][T11117] do_madvise+0x28c/0x2f0 [ 282.432032][T11117] __arm64_sys_madvise+0xac/0xc8 [ 282.432043][T11117] invoke_syscall+0x98/0x244 [ 282.432055][T11117] el0_svc_common+0xec/0x23c [ 282.432067][T11117] do_el0_svc+0x4c/0x5c [ 282.432078][T11117] el0_svc+0x64/0x260 [ 282.432089][T11117] el0t_64_sync_handler+0x44/0x104 [ 282.432100][T11117] el0t_64_sync+0x198/0x19c [ 282.916028][T11127] loop9: detected capacity change from 0 to 2048 [ 284.033735][T11170] binder: 11169:11170 ioctl c0306201 20000080 returned -14 [ 284.698198][T11202] loop1: detected capacity change from 0 to 512 [ 284.731532][T11202] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 284.753871][T11202] EXT4-fs (loop1): 1 truncate cleaned up [ 284.754745][T11202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.093903][ T9300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.121765][T11244] SET target dimension over the limit! [ 286.148505][T11244] loop5: detected capacity change from 0 to 8192 [ 287.857083][T11280] loop8: detected capacity change from 0 to 256 [ 288.123238][ T59] kworker/u8:4 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 288.127122][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT [ 288.127145][ T59] Tainted: [L]=SOFTLOCKUP [ 288.127149][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 288.127156][ T59] Workqueue: loop8 loop_workfn [ 288.127170][ T59] Call trace: [ 288.127173][ T59] show_stack+0x2c/0x3c (C) [ 288.127187][ T59] __dump_stack+0x30/0x40 [ 288.127197][ T59] dump_stack_lvl+0xd8/0x12c [ 288.127207][ T59] dump_stack+0x1c/0x28 [ 288.127216][ T59] dump_header+0xbc/0x3f0 [ 288.127227][ T59] oom_kill_process+0x248/0x8f0 [ 288.127235][ T59] out_of_memory+0xd24/0x1064 [ 288.127242][ T59] mem_cgroup_out_of_memory+0xe8/0x170 [ 288.127251][ T59] try_charge_memcg+0x9bc/0xd38 [ 288.127262][ T59] charge_memcg+0x19c/0x2a0 [ 288.127272][ T59] mem_cgroup_swapin_charge_folio+0x2b0/0x3f8 [ 288.127282][ T59] swap_cache_alloc_folio+0x3f4/0x9a4 [ 288.127294][ T59] swap_cache_read_folio+0x60/0x220 [ 288.127304][ T59] swap_cluster_readahead+0x308/0x508 [ 288.127315][ T59] shmem_swapin_folio+0x760/0x20d0 [ 288.127325][ T59] shmem_get_folio_gfp+0x2e0/0x1464 [ 288.127335][ T59] shmem_file_read_iter+0x184/0x9cc [ 288.127345][ T59] lo_rw_aio+0xb08/0xda0 [ 288.127352][ T59] loop_process_work+0x5ac/0xbf0 [ 288.127359][ T59] loop_workfn+0x48/0x58 [ 288.127366][ T59] process_scheduled_works+0x91c/0x1250 [ 288.127376][ T59] worker_thread+0x798/0xbd0 [ 288.127384][ T59] kthread+0x304/0x3d4 [ 288.127392][ T59] ret_from_fork+0x10/0x20 [ 288.141337][ T59] memory: usage 307200kB, limit 307200kB, failcnt 182 [ 288.141359][ T59] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0 [ 288.141367][ T59] kmem: usage 306960kB, limit 9007199254740988kB, failcnt 0 [ 288.141385][ T59] Memory cgroup stats for /syz8: [ 288.141496][ T59] cache 126976 [ 288.141502][ T59] rss 61440 [ 288.141517][ T59] rss_huge 0 [ 288.141521][ T59] shmem 118784 [ 288.141525][ T59] mapped_file 0 [ 288.141530][ T59] dirty 0 [ 288.141533][ T59] writeback 0 [ 288.141538][ T59] workingset_refault_anon 19 [ 288.141549][ T59] workingset_refault_file 0 [ 288.141553][ T59] swap 98304 [ 288.141556][ T59] swapcached 245760 [ 288.141559][ T59] pgpgin 63627 [ 288.141562][ T59] pgpgout 63567 [ 288.141566][ T59] pgfault 78822 [ 288.141569][ T59] pgmajfault 10 [ 288.141583][ T59] inactive_anon 237568 [ 288.141586][ T59] active_anon 0 [ 288.141590][ T59] inactive_file 0 [ 288.141593][ T59] active_file 8192 [ 288.141597][ T59] unevictable 0 [ 288.141600][ T59] hierarchical_memory_limit 314572800 [ 288.141612][ T59] hierarchical_memsw_limit 9223372036854771712 [ 288.141616][ T59] total_cache 126976 [ 288.141619][ T59] total_rss 61440 [ 288.141623][ T59] total_rss_huge 0 [ 288.141626][ T59] total_shmem 118784 [ 288.141629][ T59] total_mapped_file 0 [ 288.141632][ T59] total_dirty 0 [ 288.141644][ T59] total_writeback 0 [ 288.141647][ T59] total_workingset_refault_anon 19 [ 288.141651][ T59] total_workingset_refault_file 0 [ 288.141654][ T59] total_swap 98304 [ 288.141658][ T59] total_swapcached 245760 [ 288.141661][ T59] total_pgpgin 63627 [ 288.141664][ T59] total_pgpgout 63567 [ 288.141676][ T59] total_pgfault 78822 [ 288.141679][ T59] total_pgmajfault 10 [ 288.141682][ T59] total_inactive_anon 237568 [ 288.141686][ T59] total_active_anon 0 [ 288.141689][ T59] total_inactive_file 0 [ 288.141692][ T59] total_active_file 8192 [ 288.141696][ T59] total_unevictable 0 [ 288.141699][ T59] anon_cost 16 [ 288.141710][ T59] file_cost 0 [ 288.141714][ T59] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1436,pid=11278,uid=0 [ 288.142545][ T59] Memory cgroup out of memory: Killed process 11278 (syz.8.1436) total-vm:102192kB, anon-rss:1272kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 288.526651][T11305] Soft offlining pfn 0x2190ff at process virtual address 0x20ffb000 [ 288.559889][T11305] Memory failure: 0x2190ff: unhandlable page. [ 288.617696][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 289.152094][T11321] loop1: detected capacity change from 0 to 512 [ 289.158623][T11321] EXT4-fs (loop1): Test dummy encryption mode enabled [ 289.181351][T11321] EXT4-fs (loop1): 1 truncate cleaned up [ 289.246887][T11321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.379515][T11331] syz.8.1447 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 289.451869][T11321] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.1445: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 289.500235][T11335] loop5: detected capacity change from 0 to 128 [ 289.522022][T11335] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 289.537279][T11335] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.554336][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.8.1447 Tainted: G L syzkaller #0 PREEMPT [ 289.554375][T11331] Tainted: [L]=SOFTLOCKUP [ 289.554379][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 289.554386][T11331] Call trace: [ 289.554390][T11331] show_stack+0x2c/0x3c (C) [ 289.554413][T11331] __dump_stack+0x30/0x40 [ 289.554425][T11331] dump_stack_lvl+0xd8/0x12c [ 289.554436][T11331] dump_stack+0x1c/0x28 [ 289.554445][T11331] dump_header+0xbc/0x3f0 [ 289.554456][T11331] oom_kill_process+0x248/0x8f0 [ 289.554465][T11331] out_of_memory+0xd24/0x1064 [ 289.554472][T11331] mem_cgroup_out_of_memory+0xe8/0x170 [ 289.554481][T11331] try_charge_memcg+0x9bc/0xd38 [ 289.554491][T11331] charge_memcg+0x19c/0x2a0 [ 289.554501][T11331] __mem_cgroup_charge+0x38/0x98 [ 289.554511][T11331] folio_prealloc+0x78/0x1b0 [ 289.554521][T11331] do_pte_missing+0x1bd0/0x2a28 [ 289.554532][T11331] handle_mm_fault+0x1534/0x2bec [ 289.554542][T11331] do_page_fault+0x77c/0xb88 [ 289.554552][T11331] do_translation_fault+0xc4/0x114 [ 289.554561][T11331] do_mem_abort+0x70/0x194 [ 289.554570][T11331] el0_da+0x78/0x254 [ 289.554580][T11331] el0t_64_sync_handler+0xd8/0x104 [ 289.554588][T11331] el0t_64_sync+0x198/0x19c [ 289.554649][T11331] memory: usage 307196kB, limit 307200kB, failcnt 391 [ 289.554663][T11331] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0 [ 289.554688][T11331] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 289.554700][T11331] Memory cgroup stats for /syz8: [ 289.554884][T11331] cache 0 [ 289.554893][T11331] rss 12288 [ 289.554910][T11331] rss_huge 0 [ 289.554917][T11331] shmem 0 [ 289.554924][T11331] mapped_file 0 [ 289.554940][T11331] dirty 0 [ 289.554947][T11331] writeback 0 [ 289.554953][T11331] workingset_refault_anon 51 [ 289.554971][T11331] workingset_refault_file 0 [ 289.554978][T11331] swap 102400 [ 289.554985][T11331] swapcached 548864 [ 289.554992][T11331] pgpgin 63707 [ 289.555007][T11331] pgpgout 63702 [ 289.555014][T11331] pgfault 78988 [ 289.555021][T11331] pgmajfault 26 [ 289.555035][T11331] inactive_anon 0 [ 289.555042][T11331] active_anon 4096 [ 289.555049][T11331] inactive_file 0 [ 289.555056][T11331] active_file 0 [ 289.555070][T11331] unevictable 0 [ 289.555077][T11331] hierarchical_memory_limit 314572800 [ 289.555084][T11331] hierarchical_memsw_limit 9223372036854771712 [ 289.555092][T11331] total_cache 0 [ 289.555107][T11331] total_rss 12288 [ 289.555113][T11331] total_rss_huge 0 [ 289.555120][T11331] total_shmem 0 [ 289.555136][T11331] total_mapped_file 0 [ 289.555143][T11331] total_dirty 0 [ 289.555151][T11331] total_writeback 0 [ 289.555166][T11331] total_workingset_refault_anon 51 [ 289.555173][T11331] total_workingset_refault_file 0 [ 289.555180][T11331] total_swap 102400 [ 289.555187][T11331] total_swapcached 548864 [ 289.555201][T11331] total_pgpgin 63707 [ 289.555208][T11331] total_pgpgout 63702 [ 289.555215][T11331] total_pgfault 78988 [ 289.555222][T11331] total_pgmajfault 26 [ 289.555236][T11331] total_inactive_anon 0 [ 289.555243][T11331] total_active_anon 4096 [ 289.555250][T11331] total_inactive_file 0 [ 289.555265][T11331] total_active_file 0 [ 289.555273][T11331] total_unevictable 0 [ 289.555280][T11331] anon_cost 4 [ 289.555288][T11331] file_cost 0 [ 289.555304][T11331] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1447,pid=11324,uid=0 [ 289.556513][T11331] Memory cgroup out of memory: Killed process 11324 (syz.8.1447) total-vm:102384kB, anon-rss:1224kB, file-rss:21516kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 293.984641][ T32] oom_reaper: reaped process 11324 (syz.8.1447), now anon-rss:0kB, file-rss:20548kB, shmem-rss:0kB [ 294.192709][ C0] sched: DL replenish lagged too much [ 294.613080][ T33] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 310.759666][ T1590] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.760281][ T1590] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.872821][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 31s! [ 331.872920][ C0] Showing busy workqueues and worker pools: [ 331.872929][ C0] workqueue events: flags=0x100 [ 331.872984][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=40 refcnt=41 [ 331.873002][ C0] in-flight: 4861:drain_vmap_area_work for 42s drain_vmap_area_work ,9:switchdev_deferred_process_work for 31s ,1017:cleanup_vm_area_work for 44s ,4812:rht_deferred_worker for 31s [ 331.873079][ C0] pending: 2*psi_avgs_work, vmstat_shepherd, 4*psi_avgs_work, 12*ovs_dp_masks_rebalance, 10*nsim_dev_hwstats_traffic_work, switchdev_deferred_process_work, rht_deferred_worker, ovs_dp_masks_rebalance, ima_keys_handler, key_garbage_collector, delayed_vfree_work [ 331.873196][ C0] workqueue events_long: flags=0x100 [ 331.873210][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 331.873227][ C0] pending: 2*br_multicast_gc_work [ 331.873251][ C0] workqueue events_unbound: flags=0x2 [ 331.873260][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=49 refcnt=50 [ 331.873276][ C0] in-flight: 12:cfg80211_wiphy_work for 41s cfg80211_wiphy_work ,3103:nsim_dev_trap_report_work for 19s ,40:cfg80211_wiphy_work for 40s ,5134:cfg80211_wiphy_work for 36s ,14:cfg80211_wiphy_work for 1s ,3060:cfg80211_wiphy_work for 40s ,1065:cfg80211_wiphy_work for 40s ,1160:cfg80211_wiphy_work for 40s ,59:cfg80211_wiphy_work for 40s ,5132:cfg80211_wiphy_work for 40s [ 331.873432][ C0] pending: cfg80211_wiphy_work, 4*nsim_dev_trap_report_work, 8*cfg80211_wiphy_work, 2*nsim_dev_trap_report_work, flush_memcg_stats_dwork, macvlan_process_broadcast, cfg80211_wiphy_work, macvlan_process_broadcast, 2*cfg80211_wiphy_work, 3*macvlan_process_broadcast, 2*nsim_dev_trap_report_work, 2*cfg80211_wiphy_work, 3*macvlan_process_broadcast, cfg80211_wiphy_work, toggle_allocation_gate, nsim_dev_trap_report_work, crng_reseed, idle_cull_fn, 2*macvlan_process_broadcast [ 331.873643][ C0] workqueue events_power_efficient: flags=0x82 [ 331.873652][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=15 refcnt=16 [ 331.873671][ C0] pending: 2*nf_flow_offload_work_gc, neigh_managed_work, hash_ipportnet6_gc, neigh_managed_work, 2*neigh_periodic_work, reg_check_chans_work, gc_worker, wg_ratelimiter_gc_entries, do_cache_clean, 4*check_lifetime [ 331.873768][ C0] workqueue events_dfl_long: flags=0x2 [ 331.873776][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=14 refcnt=15 [ 331.873792][ C0] pending: 14*defense_work_handler [ 331.873816][ C0] workqueue rcu_gp: flags=0x108 [ 331.873830][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 331.873847][ C0] pending: process_srcu [ 331.873873][ C0] workqueue mm_percpu_wq: flags=0x108 [ 331.873882][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 331.873899][ C0] pending: vmstat_update [ 331.873929][ C0] workqueue writeback: flags=0x4a [ 331.873937][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=2 refcnt=5 MAYDAY [ 331.873953][ C0] in-flight: 33(RESCUER):wb_workfn for 33s [ 331.873973][ C0] pending: mayday_cursor_func, wb_update_bandwidth_workfn [ 331.874003][ C0] workqueue kblockd: flags=0x118 [ 331.874012][ C0] pwq 3: cpus=0 node=0 flags=0x2 nice=-20 active=2 refcnt=5 MAYDAY [ 331.874030][ C0] in-flight: 38(RESCUER):blk_mq_timeout_work for 6s ,4382:blk_mq_timeout_work for 21s [ 331.874057][ C0] pending: mayday_cursor_func [ 331.874122][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 331.874130][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=9 MAYDAY [ 331.874145][ C0] in-flight: 2819(RESCUER):addrconf_verify_work for 31s [ 331.874170][ C0] pending: mayday_cursor_func [ 331.874182][ C0] inactive: 3*addrconf_verify_work [ 331.874206][ C0] workqueue bat_events: flags=0x6000a [ 331.874220][ C0] pwq 8: cpus=0-1 flags=0x6 nice=0 active=1 refcnt=73 MAYDAY