last executing test programs: 28.340225671s ago: executing program 4 (id=461): ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x36a1, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x80400, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r5}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x15, 0x3, 0x0, 0x0, "ff42c0281cbda25ca6b1002f7342957901ea05ec8f4b16e463a11a5aeaa4981f51357c10cba8acb89931125590825e5cfdb5152a4ad25daf45ad5ef2e88fcb50"}, 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x801) mkdirat(r4, &(0x7f00000003c0)='./sys_dbg\x00', 0x1) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, 0x0, 0x18) epoll_create1(0x0) r7 = epoll_create1(0x80000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.min\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x1, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfe33) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000003140)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4625, @private=0xa010102}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x36, 0x0, 0x0, 0x0, 0xce, 0x0, 0x1, 0x1, 0x9}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x48, 0x0, r7, r0, &(0x7f0000000380)={0x30001000}, 0x3, 0x0, 0x0, {0x0, r10}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 28.317496176s ago: executing program 4 (id=463): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000002200000000040000ffffffff00000000", @ANYRES32, @ANYBLOB="cc0300"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="03000000000000000500"/28], 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x10c6b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000180)="b9f14e3514f8ae4661eb88840f41dd7e31c721944bc0b35bcf569395", 0xfffffe09, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'pimreg1\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x64, r7, 0x1, 0x0, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x7ffffffe}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl(r5, 0xc138fd0a, &(0x7f00000002c0)="0400000000000000060000007e01") syz_open_dev$dvb_frontend(0x0, 0x5, 0x10000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) setns(0xc9, 0x0) r9 = socket$netlink(0x10, 0x3, 0x12) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001100034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3982, 0x0) sendfile(r8, r10, 0x0, 0x40000000000b946) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000140)={0xf400, 0x1000000}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000008000000000080c9ff7f000000000200", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0400000004000000000000018000"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r11, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80), 0x8, 0x618, &(0x7f00000007c0)="$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") 25.554046926s ago: executing program 4 (id=518): mq_open(&(0x7f00000004c0)='bata`\xde_sla\x00\x00_1\x00x!\x98\x842\x01\xa3y=\x10\xec\xb9\xfa\xc8\x96\x8d\xd1\xde\x95\x8a\"B\xbdRE\x95jl\\\xcd\r\x13\x05\x9c\x1c\b\xf5\x9d\f\xf0\x99^x.\x0f\xc3l\x9a\x9e\xdd\xca\t\x91v\x9a\xc9\'O\xcf\xb2(\xe3\x89|\xf4;\r\xa999\fzM\xb0.wy\xd8\xe4\xa35q[(\xf2)\x02.\xc5\x960xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000000)=""/13, &(0x7f0000000080)=0xd) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 25.417284444s ago: executing program 4 (id=523): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") socket$kcm(0x29, 0x7, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000380)=@urb_type_iso={0x0, {}, 0x8, 0x62, &(0x7f0000000280)="af33b84f641291d5088f8a515a1ca0d76e63a302e75b6635204ecf237757541510dcdf3d01350447187198d0df8f72791c2bc5caad6feb5a12da316fba397c19e8bdeb3c21a034a48b69fe4c9324877c66b3a8512b483634675a38c8fe69fab06b67eade32fbc4cf1f8f3565e6ca56048ba00dfe9db3143ef8903107f46245d8a4d05d633ee57bd3ac3d56e21fa58b1745a6333b35132ac76557611dc3c97477cc54daa0357528617a", 0xa9, 0x9, 0xf2, 0x21, 0x5, 0xfffffffe, &(0x7f0000000340)="2be61ee6284448181c290f088bef68b6ec4712741216669787a2951fffd370755bca60deef03fbbcd55c1e5778b4c1567e1e7c846dd8d6f2746b171d86be", [{0x100, 0x10000, 0x9}, {0x81, 0x0, 0xcf4}, {0x299, 0x80, 0x80000000}, {0x8000, 0x525, 0x5}, {0x5, 0x6}, {0x3, 0x35a3, 0x9b}, {0x2, 0x5}, {0x5, 0x0, 0xffff}, {0xe, 0x6, 0xdb}, {0x1, 0x8, 0xfffffffd}, {0xffffff30, 0x9, 0x8}, {0xe66, 0xb, 0x2}, {0x400, 0x8, 0x5}, {0x3, 0x3, 0xfff}, {0x9, 0x5, 0x5}, {0x0, 0x3}, {0x6, 0x7, 0xb8}, {0x10001, 0xffff5991}, {0x1000, 0x2, 0x1}, {0x5, 0xffffffff, 0xfffffff7}, {0x0, 0xf4, 0x81}, {0x2, 0x3, 0x71d}, {0x45a3, 0x1, 0x2a}, {0xf, 0x1, 0x5}, {0x8f, 0xff, 0xd}, {0x4, 0xe655, 0x81}, {0x3, 0x8, 0x7fffffff}, {0x3, 0x8, 0x1}, {0xb, 0x1, 0x6}, {0x0, 0x7f, 0x32f}, {0x2, 0x1ff, 0x5}, {0x5, 0x0, 0x4ee9f019}, {0x4, 0xddd1, 0x5}]}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) 25.381299056s ago: executing program 4 (id=525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000020000180140002006c6f000000000000000000000000000008000300010000002400038008000200400000000c00050001000000000000000c0004"], 0x58}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r3, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) listen(r3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r4, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) connect$inet(r4, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) r5 = accept$inet(r3, 0x0, 0x0) write(r4, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r5, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) write(r4, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) write(r4, &(0x7f0000000140)="0020e78fa15ed45313af000000000000019b0400de2c9e71fbda359e06e171e4564a17f1abab6eeb5d98ea6447fe944dce82f14aaefad1c360f0c05d9610c6e518fe1a259fb0f2e40e359e206415dfc0231aa3a9dd7bc4d7ef7b1048dc5263b8ddc718d21165ed9ebb220864cbbc56ce007771921e590260fc13db6f60474bb9b005b9f6d534bde18b8c1173", 0xfe98) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000020000180140002006c6f000000000000000000000000000008000300010000002400038008000200400000000c00050001000000000000000c0004"], 0x58}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x6) (async) bind$inet(r3, &(0x7f0000000600)={0x2, 0x6bb, @loopback}, 0x10) (async) listen(r3, 0x1) (async) socket$inet_tcp(0x2, 0x1, 0x6) (async) bind$inet(r4, &(0x7f0000000700)={0x2, 0x3039, @loopback}, 0x10) (async) connect$inet(r4, &(0x7f0000000800)={0x2, 0x6bb, @loopback}, 0x10) (async) accept$inet(r3, 0x0, 0x0) (async) write(r4, &(0x7f0000000900)="009c00011a2b3c4d00010000010000000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) (async) write(r5, &(0x7f0000000a00)="009c00011a2b3c4d00020000010001000000000300000003000000016c6f63616c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c696e757800"/172, 0x9c) (async) write(r4, &(0x7f0000000b00)="00a800011a2b3c4d00070000000100010000012c05f5e1000000000300000003004000"/168, 0xa8) (async) write(r4, &(0x7f0000000140)="0020e78fa15ed45313af000000000000019b0400de2c9e71fbda359e06e171e4564a17f1abab6eeb5d98ea6447fe944dce82f14aaefad1c360f0c05d9610c6e518fe1a259fb0f2e40e359e206415dfc0231aa3a9dd7bc4d7ef7b1048dc5263b8ddc718d21165ed9ebb220864cbbc56ce007771921e590260fc13db6f60474bb9b005b9f6d534bde18b8c1173", 0xfe98) (async) 19.645652354s ago: executing program 4 (id=621): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x20000000, 0x200000}) 19.64524323s ago: executing program 32 (id=621): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000040)={0x20000000, 0x200000}) 2.838728155s ago: executing program 1 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='common_pid', 0xa) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r6, r5, 0x0, 0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, 0x0, 0x0) 2.834865984s ago: executing program 3 (id=898): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r1, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x500, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x5, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x300}) write$cgroup_int(r1, &(0x7f0000000040)=0x3, 0x12) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f0000000000000000000000010018000000000005000600000000000a00000000000000fc0200000700000000000000000000000000000000000000020001000000000000000280ff00000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0) 2.430305993s ago: executing program 3 (id=901): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000001, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x45b, &(0x7f0000000480)="$eJzs20tvG0UcAPD/rpOWvkgo5dEHECiIiEfSpAV64AICqRckJDiUY0jTqtRtUBMkWlU0RagcUT8BcETiE3CCCwJOIK5wR0gV6oXCAS1aeze4iR3sxKmT+veTnMysZ3fmv7vjnd2xA+hbI/mfJGJnRPwSEUP17K0FRur/bt64NP3XjUvTSWTZG38ktXJ/3rg0XRYt19tRZEbTiPSjJPY3qXfuwsUzU9XqzPkiPz5/9t3xuQsXnz19durUzKmZc5NHjx45PPHC85PPdSXOXXlb930we2DvsbeuvTZ9/Nrb33+Zt3dn8X5jHHXDbW97oMXykRi5dV82eKLtrW8OuxrSSasdwoZTKc7fwVr/H4pKw9k8FK9+2NPGAesqy7Js67KllTKxkC1XXwm4AyS6M/Sp8kKf3/+Wr9s4/Oi56y/Vb4DyuG8Wr/o7A5EWZQaX3N9200hEHF/4+9P8FU2fQwAAdNfX+fjnmWbjvzTubyh3dzE3NBwR90TE7oi4NyL2RMR9EbWyD0TEgx3WP7IkX9Z/ZXHJT9tWHVwb8vHfi8Xc1q3jv3L0F8OVIrerFv9gcvJ0deZQsU9GY3Brnp9YoY5vXvn5k1bvNY7/8ldefzkWLNrx+8CSB3Qnpuan1hJzo+tXIvYNNIs/WZy7yv/vjYh9q9h+vs9OP/XFgVbv/3/8K+jCPFP2ecST9eO/EEviLyUrz0+O3xXVmUPj5Vmx3A8/Xn29Vf1rir8L8uO/ven5vxj/cNI4XzvXeR1Xf/245T3Nas//LcmbtfSWYtn7U/Pz5ycitiQLy5dP/rdumS/L5/GPHmze/3dH/PNZsd7+iMhP4oci4uGIeKRo+6MR8VhEHFwh/u9efvyd1ce/vvL4T3R0/DtPVM58+1Wr+ts7/kdqqdFiSTuff+02cC37DgAAADaLtPYd+CQdW0yn6dhY/Tv8e2J7Wp2dm3/65Ox7507Uvys/HINp+aRrqOF56ETxbLjMTy7JH649N86yLNtWy49Nz1Z7HTv0ux0t+n/ut0qvWwesu47m0Vr9og3YlPxeE/rXQP1eHuhDrv/Qv/R/6F/N+v/liJs9aApwm7n+Q/9q6P9m96DPuP5D/9L/oS+t5Xf9KyV2H1uvLd9picrGaEbHiUg3RDNWl0g3RjPqia0R0W7hy3G7GtbrTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+DcAAP//1P7nZQ==") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="ecd80df2f079ef865e4cc6dd6a58228e23a2cbb4369337a23dc3", @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='mblk_io_submit', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='%+\'{#\\&\x00', &(0x7f0000000200)='errors=remount-ro', &(0x7f0000000240)='!\x00', &(0x7f0000000280)='init_itable']}, &(0x7f0000000a00)={[&(0x7f0000000300)='@#(&$*\x00', &(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='usrjquota=', &(0x7f0000000900)='\x00', &(0x7f0000000940)='}\x00', &(0x7f0000000980)='@([\x00', &(0x7f00000009c0)='-,\x00']}) 2.365449354s ago: executing program 0 (id=904): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000980)=@migrate={0xd8, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@loopback}}, @migrate={0x50, 0x11, [{@in=@broadcast, @in=@multicast1, @in=@multicast2, @in6=@remote}]}]}, 0xd8}}, 0x0) r1 = io_uring_setup(0x2ea5, &(0x7f0000000000)={0x0, 0xfffffffd, 0x1403, 0x40, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.319327176s ago: executing program 5 (id=906): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.314748454s ago: executing program 3 (id=907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x6000, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d69740000001400028008000140"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.230534981s ago: executing program 0 (id=909): r0 = fanotify_init(0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r4, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x5) write$P9_RLOPEN(r5, &(0x7f00000001c0)={0x18, 0xd, 0x2, {{0x8, 0x2, 0x1}}}, 0x18) 2.175006871s ago: executing program 2 (id=910): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000550f00000000000008001c00c900000014003100fc01020000bf06cffa887d0000000000000000000001ef948c95c530b78d405e13e70f8c004507df7200ccf002d2b87459afe968b1615070db6d58f2a45b89f70631a569c8aa967c896faea9929fecc4f188a871b2ca6ed36f479037b6cf0d0000f5a18a5202beb92193b4e8b4824bff2a07"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 1.295428232s ago: executing program 1 (id=911): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)={[{@fat=@umask={'umask', 0x3d, 0x4}}, {@shortname_winnt}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@shortname_lower}, {@utf8}, {@shortname_mixed}, {@fat=@nfs}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8no}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) pivot_root(&(0x7f0000000000)='./config\x00', &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00') mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@generic, &(0x7f0000000200)=0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) 1.160457809s ago: executing program 1 (id=912): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)={[{@oldalloc}, {@grpjquota}, {@jqfmt_vfsv0}, {@nobarrier}, {@nobarrier}, {@data_ordered}, {@data_journal}]}, 0x0, 0x487, &(0x7f0000000c00)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f00000000c0)='\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x111000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a1000000002ff000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000800000010001680"], 0x3c}}, 0x0) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0x7, 0x3ff, 0x4, 0x5, 0x68a5, 0x0, 0x9, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@noblock_validity}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@dax_never}, {@noblock_validity}]}, 0x1, 0x792, &(0x7f0000020c00)="$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") fchownat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0xffffffffffffffff, 0x100) unshare(0x62040200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000940), 0x301008, &(0x7f00000009c0)=ANY=[@ANYBLOB="666f73772d1a7365723d2c00000000000000000000000000000000000000002bd518be2b6cb7524a5db2120034b6ee2d18ae1b3fe20e76ed77b3a06fe6039ae33fe71303c781aa14bca887373b772224dd8dce95eb8909f6609a70955c87d141974c446c2b4a30f496e60bacfa67125c1191ad0c1308b97641f65c69ec35bea4162e21d00171cab8b8501d3871706293d262a5aebf5e885a9e11e9d916c70ae55e0161a8be3d2dc66c64ba496725cb3e4d1bc567c0ba3f58ba8adb7ff48a07a4116cd1322b5436832c290c2ac8abfadf795b81b97c8db31b92d4062d1ffd6bb84c"]) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x9, 0x7fff0000}]}) unshare(0x40000000) close_range(r7, 0xffffffffffffffff, 0x0) 1.157032293s ago: executing program 3 (id=913): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0xfe, 0x0, 0x0) setitimer(0x0, &(0x7f0000000780)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) setitimer(0x0, &(0x7f00000035c0)={{}, {0x77359400}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UBLK_U_CMD_GET_DEV_INFO(0xffffffffffffffff, 0x80207502, &(0x7f0000000700)={0x0, 0xffff, 0x40, &(0x7f00000001c0)=@ublk_ctrl_dev_info_existing}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) io_setup(0x6, 0x0) pipe2(&(0x7f0000000180), 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x20, '\x00', 0x0, @cgroup_skb}, 0x94) add_key(0x0, 0x0, &(0x7f0000000780), 0x0, 0xfffffffffffffffa) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) 1.152982155s ago: executing program 5 (id=914): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000380)=0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c696f636861727365743d6b6f69382d722c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c636f6465706167653d3737352c636865636b3d7374726963742c757466383d302c6e6f6e756d7461696c3d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c706f73697861636c2c6673636f6e746578743d756e636f6e66696e65645f752c736d61636b6673666c6f6f723d2f2c005180f4e7b2da8c3f2fe272df26ff9ca497387fc9af57e51670999e8bc199be03b478bd734a1ad4517930c37f173275bdc3477cead3e348e86c54d3ca19a73e96d5a4291dd83fea6bbb7174e668baf7433889e34758bb3912cc9bc2a7ba3aa69a690fb8eb216f6b745f04820178e7f761ffed80089b4de7af9454bd3090b041d1f2dcc5c701e57f46d7d89b1aa4c23f1d50d917e60289798c1f369da19dc49d2561339d7d350c1f5d5aacc33f3556cf815b7daf9d797e9fc3c697f6ce491f3a74e248fded5ff32bd81ee1cd00a1d65c4e0eafef812fb1fe9a44b8821caa94e146f937602e632be3541c334742"], 0xff, 0x2aa, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900"/12, @ANYBLOB='\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x24000080) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x0) sendmmsg$sock(r5, 0x0, 0x0, 0x4000080) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'bridge_slave_0\x00'}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000340)=0x7) connect$unix(r4, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d69740000001400028008000140"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.074478055s ago: executing program 0 (id=915): ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000000)={0x8, 0x2}) (async) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x0) fcntl$getflags(r0, 0x38227cb2dbe55ea1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_SDP={0x20, 0x13, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [{0x5, 0x1, '*'}, {0x4}, {0xb, 0x1, ',%@:!.+'}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @empty, @local}, &(0x7f0000000480)=0xc) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="61dc13e6d78e1de68c609a7bd572791016714e42d947413605afa3d54bd43ad2eaeff6e6ae67c5c1d44d5d558b07ab801fd7a69926f265d29bdfc76c43bdf09509d9eb1ae98ec07eb549eb2b6678e93e340340a4038c12043d1a0e9e7ef2c5a569d93fd0db149d97d1", 0x69}, {&(0x7f0000000300)="c0ddeab10c7a23b200b97ef0d52b0f6b7612fa93945749500ef455c360bec438fffec3b7693a73c1fe29d36474112ee50226bdd439d16c1d5ed18688224e91d825fdd5800559df268496fe8475afba4ac6bd58c68ac3d25f7bdc6f6548a4ff342e5d7594e8a0a1e492942160004518ba4589e6ca5e643412bcc1eec7de8f9f476a0095fe27a05e1bb37306d2c1e8ecdc73dc000a2e9edb20292d5301dfab6545f9d5719d315c8e01afedcab1ea14522233aaea6d92922439f5c9646a3c73feb127fb9b5783b8fba0e0d96bf9e1823bca9bbc545eac528d41773f64e5bfbea1c7f03e523c7a2a31eacf18aeb82b3085f2df6c", 0xf2}], 0x2, &(0x7f00000004c0)=[@ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xf0, 0x0, 0x7, [0x0]}, @lsrr={0x83, 0x1b, 0x94, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast]}, @end, @timestamp={0x44, 0x24, 0x42, 0x0, 0x9, [0x1, 0xd15, 0x0, 0xfff, 0x6, 0xc, 0x6, 0xf]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf3}}, @ip_ttl={{0x14}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x60, [@local, @dev={0xac, 0x14, 0x14, 0x17}, @local, @loopback, @loopback]}, @end, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010100, @private=0xa010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6db1}}], 0x138}, 0x400000c0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x204400, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f00000006c0)={0x3, &(0x7f0000000680)=[{0x3, 0x8, 0x81, 0x6}, {0x1, 0x5, 0x3, 0x30}, {0x29, 0x9, 0x2, 0x6}]}) (async) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000700)={0x4, @output={0x0, 0x0, {0x1, 0x5}, 0x4, 0x7}}) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '*'}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, '.:*&\'\\-*/#'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_generic(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xe4, 0x11, 0x4, 0x70bd2a, 0x25dfdbfb, {0x6}, [@nested={0xc, 0xaf, 0x0, 0x1, [@typed={0x8, 0x108, 0x0, 0x0, @fd=r4}]}, @generic="d1b4127eab6920d7260f0277ddc407f069ae62dd0fee1cb483dd86474540659d6440ec2fd4d10e9a12d19f99c853d8a35d204cf4036bbd0f423acb083e30a03a5395", @generic="dd777b57e0099dde35cb161e20a3321feff3f7e78bbfc3bddf82d22f4a286cabc50d7526a4bb1201b75a0f490f429f3cdb4ea3ef82c5503e91a6aea1a5f002a44573cdf0a7efb4f9f43ec8fdb3f8e78c5b83b5fb79b082c8772a88dd208f193cff0efba7f32a9c34a37f6cac4a31cf302a3cafe5bf6360a7e7533c2c12625a5f"]}, 0xe4}, 0x1, 0x0, 0x0, 0x2}, 0x200080c0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000ac0)={r0, 0x5, 0x8001, 0x7c}) setsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, &(0x7f0000000b00)=0x7, 0x4) (async) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000c80)={r4, &(0x7f0000000b80)=',%@:!.+', 0x440, &(0x7f0000000bc0)={@_ha_fsid={[0x0, 0xc5]}, {0xa84, 0x1, 0x568c, 0x7}}, 0x0, &(0x7f0000000c00), &(0x7f0000000c40)=0x84}) getsockopt$WPAN_SECURITY_LEVEL(r8, 0x0, 0x2, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x1) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000e40), 0x420000, 0x0) (async) connect$unix(r8, &(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e20}, 0x6e) nanosleep(&(0x7f0000000f00), 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000f40)={r7, r7}, 0xc) (async) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000000f80)=0x1) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x14, r9, 0x800, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001100)=r6, 0x4) 1.03683447s ago: executing program 2 (id=916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008050}, 0x40480d4) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r3, 0x400, 0x9, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) prlimit64(0x0, 0xd, &(0x7f0000000680)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x1, 0x0, 0xffffffffffffffcd) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) fallocate(r4, 0x0, 0x9, 0x10001) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0xae8, 0x863, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000380)=0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x4800, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 1.022972417s ago: executing program 0 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d69740000001400028008000140"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 12) 394.399837ms ago: executing program 0 (id=918): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='gid_map\x00') r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) connect$nfc_raw(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x5}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) r4 = syz_clone(0x82104000, &(0x7f0000000140)="e1762b273ba6ec35a1467a86f1ad2a24e21289b905ec8d88e5e0a8fe13292c8392ab1895243162a856802bc60524795a9409bcf46ea568684bf1dd73999093e029b40c746aefe2e2684f923162a16653a75f4994fe25ac095bf231066dddfc80636581700d483a218413b40fc510f2b47f959a42b6", 0x75, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="d71a1ffa31b5fbf0bd88822d4cffe23ffcd368d6bfd1bed565edae3e38bee08466c608910a858eb842866a07aa0c5fcae879320b6d652a50e6ac0ac616855e89c3abf7f8640f6fd9df") sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r7, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4851) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000680)={0x2}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r9, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000840)="bf60a96110e20dfac12c99ba4e0760a0fbe1c4ff7f8ad30a0993343be2dcfc01ba1c078e89ed900a79c07c0af1fd7443eda30c3132ba7528622c143b8030be668e3d5644a4cbe8f4ee36a0b170d811290aaaaa001625196138f8730b25b54844a5302cd37432019bb5f2b3795af31327e5d38954d89771eaa09be230424008b06fc9f946dfd7ca435f02ba7d7d3caee9ed7d55b43ef506cc4081eaccc73a2a1cdd95ab290b4a7e7040bb6d35e99623b823701fc1fe5a5d2a2f1b4fea25a1f5dcc6954cd696c8547dadb9f6f0b4b68ed1decd5b969d3a2150c2248e785886348bac4a42dca7f1ae0f0028bb39c72dce44") r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001d00)={{r10, &(0x7f0000000940)='l2tp\x00', 0x480, &(0x7f0000000980)={@_ha_fsid={[0xffffffff, 0xff]}, {0x1, 0x9, 0x4, 0xb}}, 0xa5, &(0x7f00000009c0), &(0x7f0000000a00)=0xe}, 0x4, &(0x7f0000001c80)=[{0x2, 0x7f, &(0x7f0000000a40)='nfc\x00', &(0x7f0000000a80)="15b9025777fd", 0x6, 0x38}, {0x2, 0xaa1d, &(0x7f0000000ac0)='pci\x00', &(0x7f0000000b00)="b43c1e466b49cfbc1045cf2c3999bbde7fdce2a47b13ffa6bcd50f0df271f0381f544113c2e5805780c5a9b5efb06dc3287aa6738d05b5523028ed978cca9e0ef950f47c4b7213b0d416daf8152d2efce0c38a9a81055b1d6262ba7092316b10831eba9e03a07a7f025cb69d55b0ea512733f9ab44000d241f9bbb068541761ff9ee4f95fad4067897cd32032cc5172d782ec3042b59e7eaedc2ea051ef78c31d04b7ae81fe38e1afd", 0xa9, 0x10}, {0x3, 0x8000, &(0x7f0000000bc0)='gid_map\x00', &(0x7f0000000c00), 0x0, 0x10}, {0x3, 0x2, &(0x7f0000000c40)='\x00', &(0x7f0000000c80)="6b6f650b094983e2d6940f2f134a0f8dbd3b523c2345c131c090e1658d367d234a36d688b6d873690d42cb2041a9f86592a68efb73eed970a9e84e7f241335a2ea802de857f936e343bcf4a5f644dd73870bcc711d54b3229dc3ad5255ddc8b599fab274d9d09ac239c19bbfec911428e7e69470309d0656c3e5eed11b37db4d2c912e10c4c4e59382e23bd6c956db03f027e59d8dd74d28dc941cce9d2bdebf0db069987f6fc1c6cfac4f819024da604ff749c19097cd1a8d4db6c242cd42b3caf72c4e5c04e1f921aecbb35014c64fe75f4274f775b1683a69d9c2fa8ae9479fc8e12ae2c4fedb2d3bd636e195fc9c0a0b4ae9cebb44f8471fc94e192d986b38789afbd42a9def37f74dad4f4fc8e8850821694734aca66610950814b4018d380fa21b7f3dbd640ca00ae32afe5aefd67cd13e4d9a85b51a7b8a20c1c1c5f80af8c5559612d403b9bdc193782fe4eab9ed29d670580acb74e8fc34aaefcddce4e7311078320db57a15c0d957b8abf499243b46f99ed2ab5b9f8d1c55240f7e36b29a1cbb63f0aa0078210d188781ab0a3dd7fd3cfe5da17102bf1d7a446adbaaadfdf5ab7f483e61fce95de15f105f168e75124d6f202e89f726f6f51d2990b27f1f37581d626c29869eaa3e8e3f56649f0d0746713210f50271554ed21a226d4ac2fde489a61d79be879461fe2a63c7a12498c83874e92c556ed0e226950ac029a606f053fcbb17410e19e314029ee3cf46ccfe00f0b41cb02610b27ba8afd373cb0b6e652b38d8375c10f1339790a836232101c9ba257695059983ab632012824f8aa5c0cc444aec74151adbf8eb2c4ee3290df012638e13b5a8d23267505a1ef8331ff43be0608318107fba7c8b18362455563964ce455b7a4e10d4dbf62b70adf21f6c07e0ee27c0cec54e89a125c4ae0d0b94d499924ff846204d296b2b37252ef773e2a05d66a7b66258b8f1e6761f1a495ea1e6010e4e3f3ba914a959c8024ee3e73159ef25b712880945117646f050d45f7425511758b9e21adb6ce793b0d2cb2b04b4f230d83aac29d50a4a52e74fd432b183b2958c24bf40bd38133039a4088afe44957cd7fef4bc86e5010aeb379dbd6e8909cd0350e625c8cd96101da3d1e0f91163e764772479ca900f15e7c28120ce66a1b1f9579ada7b3658896005e6ffa4e8604ccce72f7f476d2c5c6b1e45eab81464133a8e42b2463064c649b754aae04a5bdbc005f89a1bec587b873f67cb9ba2f1f58c2cc48047b59aba51a392139e706e4f3ea54d6bc4b272fcaefb8ca421215b794781908b47949aea1a441fdf988d5754e270760437e258550e9687023e5689599b52a52f359cd81887974d57131bfcc2e8a5f7e79eaece950ffbedb6938df97d410d3797887cc31063abb4c409749d7224704063c5e5a9be91edd029cc75b7b24e537f160480b7474893ce1d70127f9bf36d84cf9fd4c68843861328b8883cbc73cc1c1e4c39652042435400299810a77841df267b2c6ca318641403f0ee13d43db24a3e9b37dad112cb4c283d472529465b55c53d42d77d22293e5be9d13dcf1dae0dc5890897d2625c7242a5d055722d1da245512a00ab9347b7445ffcfa82eb7280a149ee5f2487f6a5930373d94e057d605b11f0ebbddc536d4c38140673e9c150b08cd634c28753bb59e96c0ed08e615c897673e27d142735324326a00cfcb5a2dd55910151882d8ac3e39edaa16a1a0c22ba4dd3fc6dddd1b12559777711f97ad3ddc91e7b882f68f49782b5b94c075cc139ae40721e6e40885e9cc495b945bd6acef11dcfed8860b2ca2adc5e68b0ab3807ebf6d66292f170047221cdda2f179978f99dc8d7276e4582a8aef3cffbd66230c280557117a2c8267ab069615a5bba9263bf1c76e38f18b8e31fec0fe9dc2049e58ac221e7fefdabefddb14e059b13fd517310222ab33c9f7e4d14ce116b94aa8b1382090019e1ccae9e58c313436a12e73a1e4e6428b056c2e45ff910ec4a31580447e6081673f9a525d3a69f58db926a7a4cc3c25211359960d35b1941981db833a0e0cc3d746e4d80485fd114a3bada392c3468d1157c9f016111f54fbecaad0c8990f0f82665d59466ce2e9b54d7550725a0fff06f2294a9b51c5e653e864fc6cd7714d48916f3fcfd3bdc92a355d3985ab73e4ed815b5f0a7062f4af44d26462b65758a9f09538477b00ee0e0d5e0037e6eafe9058c00350a73d216b648468fadc4c4dd02d37c26ef0106925fdef3d3e30125dcac3dc4edd5d9a2bd20a03c22500a470d5c8e6f956d3f8f00e1a0002dd255f0056e102b8bd01fd2d53ae8c4dab69735526cc5db3ac0e1ea30b7cd0fac55c65e004279dc561699a239be977e8b52826267189f6a972112434f87820b2a1712323154ba1ece6b2efc64961e69e79c75011d3be373697d8268decba1b48b96fc520fe344c3c0ad66011665cdba86cd74ebad30127721edd4919699ac2ad2937f3683fc993e239ae42e8aac44c313e3780d4c2984290893776d0ff114bb114d20336dbdf624c38b5e976609173850ad82ed7192ffb6c1ed5ca90d9f854e78cf59f0396e3de3f5ee92bd319b2da8dd715b40610f5f03774604eda6f38067c217dc2cb97484893572f75dc7cc0d1f66f25241ad3a48015aa61a960c8b11be0b0fd96afad7866acefe1eeac707cc97d78f64466009e132f965ff376c4d34858db1de057bd51473cf0abbb84c607a4d651d6d692727bd2a45b770f55dcc21579b0136127a1ffbbe56a60bee63996d0ccd4cfe1130dd4398d01d71c90f62e7917a09c7293ebdba3088378fedfd8857b53794961633db92e21c84c0a96b284c07d8d4319c9b03f3f7d71bfec0dcc7f2b171b89c96a97da1bf11c9393d0a1c16bf0fd6a6cb1f81c3e4fc63acb9062caa475cf11a5ea7db0b766d225c733b20e4516484165302ee310018d3e2ac67d74d92d709bf51179e43d24ac31c2d1208f035cd7d714cb084a308b894a5692b2c4346343a2cb0b6cf688186714f8a011d9fa67a1d30a11ac3ef39a960d6658b59b258ea71856409032a0be27e0dffcb9ce7d015463f4e4cec09163d6c3816eeb594c4325175bc074f513a63d1114e172b544e316643491564ebab001f592e15fe0844a7a549436e098f912c96350bcf04999adf223c037f4108ce69f0ef4604f827c148113f1a950499f5f16a21c0a5ca98030bfdf39759adb8e9f8b626fa6703a7d85a5b3799b53b6d8a19e95f4e485fd21cc884ebcdea649b702a40c69ed32885fe5b85d8c40603f52c627fcb8b85a8e135dd58442942ec9fcc24d32473d808da6a1ed970c384156553eeec65784514021f25573f434eb0dd676c2ff1a7da57cc0319468bbd7634adab9c3002b45b40e85494556d9a6eadf42b0ce509b5931955f053fc0aa1331979b1260509e30410a72a274362bed247e620f9743c3e9af945c5427086a05dabef805d4159de096e1c57db0f7e2f318cd887ad5b2fd81b254aba4083a7f0835e6645511ab565ba26bc13548110431af5735d904b81fd139c9b712a44699d0d6174023469285c94387db4732717bbefaa7868ffad226e202018fd2178661abe16d7fda069ab84c6895a43da906db2b9b1fac43124d7c3e7b56c9f68c6951caa2efc6c8d9b09d501bbba000822ae1781c1337d63f26cc813dc5d19ca746f7704d5cebb50e57c909c2510b33f50750cc7770c3d6fecad424037c573d7c2ede8c0f070ef31a66cfbc3f016dbdac011ab3f3919aa0e49ea08e105874446afb415757923614e685844d5776aba74694f0d906519928409b270bb51a27f33e795795d161a31e316a14e478b2e1342b3bd372401b3a81402ab850b4cb5519107bf35fe990e5ef8fce530f6bacbc4d87124c1b472970fa5287f40bf6c7fa685d9e51a46450056dc9d4a4c99fb6db1b76992b58a1677b16e6d7f161129fcb006e9e31e0a40e5dc3a10fc3a99756e496364c17c7ea9c1d71df998c082cfce02e923d4dcbb4842275a6730a7c881504cc2a5ca155eb3fd655d7de10ece287c0311483d431b1ab625e785b21293ace06816bd0cc824bcbec77277dfe49343fd6a0e76e92a4735022526cf3af5a112548df7c38fd84c5c609a2ff745402449ef7160b28418ae34657c29dad46fb0c33a659d8ad8f6011545483472dc304cafe28994e52dd422f6b8087ee982f785bd70c8d6722ae32a3a7d8660d4bd7ca5138f4759ce70336cd2ac50d916b707c5f3a149a6ffa12de2f3c41a4301b179494caa1fc0e31358db2e23be15af0b84516797a6eae897b8622d65faca18dbe545dec0af223e0af0607997d5f2c84c88842e80d8bf841814abe2c7923769e9175fe430afcd0b5444dae5ef13f2d25f52e73fe32283f966efd22fa5d372db64434363f27a902b42d876d2b532ce85da76474bddf02a28032ced9383b6d209f4d332acaa01e07dd7cbdffcba5e311dfba66ded87d7fb7c28a2db41f9334afd9221aa0eb2bd548ce03a0649c9ee3639cd46fbdf49f7940eca06d9e2b2c96e96a3e84c0edc04da0c01ddcbd0d1962db10278565d6321d90af1f44c2f3328f52b2bc22f4a30488ac45bebd39a2aae2ccdd0806cbcee69076a7ab06c857cbb99c31f980c4d38e7f85a1417a7065513839b4586f1b4071f8810f0a3bdf5c0a8c8c71fc6d5f4e6ca8e7f61f5ce7c5f49106c67227073f20362df752ff11422acd79e4d57d53a7f12e07eba17adb941bf8e1d9adfd12ba80821f2cd09b772f5943b72131fbe66e568fb6914ad34d3858271bd28fe3fb115aae422e0cceeed83249f4e9beb9f44fbe3d90d470e6dd270bdc6ce448e48a0f60d65a2f95675a1d3d758c9dd7e753cf070fbcf58e4eb1e69549a7ba55aa2fb5a75621fa23eee04af266c18479b6f78e35a3fd152e5219007994f21a837942c77f3c1e6d4269a8a97430d0c9596bc54c87298c234382a4f5559f72f21cdd483d7280c1a9da74734355aa6710df5c95c2d4f1c8c8329e5d202a5966d33d05b47b3d571d151162ded4e89865fcc9236d33d9b04b6e5139976fd3e914abfa58446bcbd3db9628c2f4c02bf1dcde80d36ffbb4bd1d312e2019e64fcc38fa5124b7684261281ac9c0a72d484c04096e42c7c4a69eb354aa837db310b4347f66586560dd050932176db9acd509b4da26dddff6037e8ef12414686c376ecebd7201a201cbb68f122f3f03464a727b0e5a3727850c319bae7d33b64b4c6aab71bc5bd585e746a61be2b1491f2db30ffbee9be9576eaa0a5f71810a3367eab468e8ee64c680d8343fe3f79a546daa344f4dae33e2d587099b2b42255e8c86009b30384432bc3efc165107a24829f568a51cbdc87402cb5ec54a4f110236b9373b809d41253c25ee6925d0c979c713c39557fdf384b8de173af1de6fe837b3a88d822ef9af516a5f5aa3143cc9ef26abd0deeefb58e478298a436265afb2f8dee4e55c92569c3b64c837f687d59fdbfe327b160835e7d81269954a35f85572006c78798339cd37adcd8089df783f9d2630ecc596d219b4fb288f0f23ae3debd037013e1cf02c2175e1e045569329b143943ac5a9932fc3a2209d0ad31f4f3c5c190b7cf1b8171b6e6c39e4631f8f038bed6da2ca3c15add7e0ff3fe9913639958fdfe9ad43f5a0d8172e50694c7d6cc46322dd2e22f421bcb516b12e9630da8e7d23c7bd94c93fa69f02755f62d41913e87293f74b3279348a5502fe3781d1afce5f4c636fca34b572b42a8a0368f83db0e2781b86d9394b0ccb4ed1330eb92e470eaac562b0d", 0x1000, 0x20}]}) r12 = add_key(&(0x7f0000001e00)='rxrpc_s\x00', &(0x7f0000001e40)={'syz', 0x3}, &(0x7f0000001e80)="526a23f06bf3b383f91358d04ed23dc641f1e90bb6ec98fe5bd6cea1895ff0727e9b35154492089212152b5e55b23eb83cf5fa01aba610a6129d1ad4952a401fa2ba65f62aba4c8f23dec0447ee6bf134281b6b5335ca5bc3419846da7008ffa7a773c3c382f235d", 0x68, 0xfffffffffffffff9) add_key(&(0x7f0000001d80)='.request_key_auth\x00', &(0x7f0000001dc0)={'syz', 0x3}, 0x0, 0x0, r12) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f40), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001f80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000001fc0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002000)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f00000020c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x40, r13, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f0000002100)={0x7, 0x5, 0x206, 0x6, 0x6, 0x7, 0x7334cee9, 0x3, 0x0}, &(0x7f0000002140)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000002180)=@assoc_value={r17, 0x8001}, 0x8) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r18, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x34, r7, 0x0, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x44}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40580d4}, 0x2000c811) 393.70008ms ago: executing program 1 (id=919): r0 = io_uring_setup(0x13fc, &(0x7f0000000180)={0x0, 0x2c3f, 0x1, 0x21, 0x66}) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) (async) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x78, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2002, 0x1, {0x3}}) (async) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0200000001"], 0x48) (async) r8 = fsmount(r1, 0x1, 0x0) fchdir(r8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r7}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 337.466382ms ago: executing program 1 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000005c0)="05031c00d3fc140000004788ed1c", 0xe, 0x24000091, &(0x7f0000000140)={0x11, 0x7, r5, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 325.330741ms ago: executing program 2 (id=921): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x2010000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047452, 0xf0ff1f00000000) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) (async) setpgid(0x0, r1) tkill(r1, 0x7) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f0000000040)) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (rerun: 64) r4 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="74726184733d66642c7266646e6f3d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) bind$rxrpc(r3, &(0x7f0000000180)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) (async) wait4(r1, 0x0, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0xffffffff, 0x3}, 0x14}}, 0x0) (async) personality(0x619641b6fb4b8591) (async) uname(&(0x7f0000000240)=""/201) capget(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000140)={0x0, 0x0, 0x9b, 0x2, 0x9, 0x7}) 242.596624ms ago: executing program 3 (id=922): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0xc}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000003e0007010000000005000000047c0000040049800c000180060006003b00000118000280140006800e"], 0x3c}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000000)={0x0, r9, 0x6, 0x8001, 0x1, 0x8000000000000001}) socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x19ff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) r10 = syz_io_uring_setup(0x53aa, &(0x7f0000000380)={0x0, 0xeba4, 0x43c20, 0x1, 0x9c}, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r10, 0xe, &(0x7f0000000780)={0xd7, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=""/99, 0x63}, {&(0x7f0000000600)=""/235, 0xeb}], &(0x7f0000000740)=[0x0, 0x9, 0x8000000000000001, 0x5, 0x1], 0x2}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 241.799747ms ago: executing program 5 (id=923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000180)="00f4639d219e88ac7c568f66194f99d5577d51115597955e4b1ac12ea6986572a814ab3fb59208bcd80e6eeca20143cd8f4d348aae06f39b9c3cd683d57f10799409060d89c403bd0062a44b60e3cfeeadfde07728dc35f3", 0x58, 0x4, &(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40}, 0x3}}, 0x80) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x220, 0x4000}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}}, 0x0) setns(0xc9, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f0000000040)) 208.883997ms ago: executing program 2 (id=924): r0 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x21, 0xfffff800, @mcast1}}}, &(0x7f0000000280)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r4, 0x8}, &(0x7f0000000000)=0x8) 192.749062ms ago: executing program 5 (id=925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xefff, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000ffff08000540000000020900020073797a310000000008000a40000000000800034000000004680000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000003c000380380000800c00018006000100d1030000280007800e000100636f6e6e6c696d69740000001400028008000140"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 128.233476ms ago: executing program 0 (id=926): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x25, 0x1b, 0x29}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xf0f, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xffff, 0x1fa8, 0x8}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x3, r4, 0x1, 0x3, 0xb, 0x9, 0xfff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8001, 0x7, 0x2582}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={&(0x7f0000000040), 0xc, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x1ff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000) close_range(r5, 0xffffffffffffffff, 0x0) 127.187905ms ago: executing program 2 (id=927): recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2100, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000240)="3f000000010006", 0x7) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 38.57097ms ago: executing program 2 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) r1 = syz_open_dev$media(&(0x7f00000002c0), 0xbc4, 0x141000) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000040), 0x3, 0x573, &(0x7f0000000ac0)="$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") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r3) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$inet(0x2, 0x802, 0x1) connect$inet(r5, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) (async) write(r5, &(0x7f0000000000)="08001800000020a3", 0x8) (async) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000080)=0x55d, 0x4) (async) recvmmsg(r5, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0}, 0x4000002}], 0x1, 0x20, 0x0) (async) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000180)) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001180)=[{}, {}, {}, {}]}) 38.273046ms ago: executing program 5 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x109000, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r2, 0x333, 0x0, 0xfffffffe, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x8880) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x700, 0x1, 0x0, 0xe, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x64, 0x0, 0x1, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, {[@timestamp={0x44, 0x8, 0x2b, 0x0, 0x0, [0x0]}]}}}}}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0xb, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x4, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x87d0, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x1, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x1, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x8001, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x5, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x9) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r9, &(0x7f0000000140)="0c80e5cbaa42b2033d5c9f9ced13d73d40173f9ff75efa5fbdc93950c4e59b6a6a23b0ffba122763e7aa383093925d816de9c33cb505c7df637ef69011a72a6fc25f32b512fe3680886f11393bb7da5acc11a9df17ea2e3439c8af042c9e901fd0906ecf97faeb307e6df16c6623b4f2bbcab98ad826354d1eae95e24e03f285c870", 0x82) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="f8000000550001002cbd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="840103000000000000000000000000000000000108"], 0xf8}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) 36.467036ms ago: executing program 1 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e0a0f3d6be91257b"], 0x24}}, 0x0) r3 = socket(0x2, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f00000001c0)={0x18, r5, 0x1, 0x0, &(0x7f0000000100)=[{0x0, 0x9}]}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000800)={'wlan1\x00', 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/ieee80211/phy1/netdev:wlan1/active_links\x00', 0x2, 0x0) write(r6, &(0x7f0000000500)='3\x00', 0x2) sendto$inet_nvme_pdu(r3, &(0x7f0000000140)=@data_c2h={{0x7, 0x5, 0x18, 0x8, 0x155a}, 0x4, 0x200, 0xf72b, 0x7, "e7959f66"}, 0x80, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) write(r7, &(0x7f0000000500)='3\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) (async) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e0a0f3d6be91257b"], 0x24}}, 0x0) (async) socket(0x2, 0x2, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f00000001c0)={0x18, r5, 0x1, 0x0, &(0x7f0000000100)=[{0x0, 0x9}]}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000800)={'wlan1\x00', 0x1}) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/ieee80211/phy1/netdev:wlan1/active_links\x00', 0x2, 0x0) (async) write(r6, &(0x7f0000000500)='3\x00', 0x2) (async) sendto$inet_nvme_pdu(r3, &(0x7f0000000140)=@data_c2h={{0x7, 0x5, 0x18, 0x8, 0x155a}, 0x4, 0x200, 0xf72b, 0x7, "e7959f66"}, 0x80, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x2, 0x0) (async) write(r7, &(0x7f0000000500)='3\x00', 0x2) (async) 25.06808ms ago: executing program 3 (id=931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000040)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r9, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r9, 0x4004743a, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f00000004c0)=0x52a6c3c) write$ppp(r8, &(0x7f0000000380)="b8f7", 0x2) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 5 (id=932): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40854}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000003440)={0x18, 0x0, r4, {0xffffffffffffffff}}, 0x18) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10000, 0x100}, 0x18) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="6d616e676165000000000000000000000000000000000000000000000000000060000000ebc50a10f80a692a881a5e37a9f367a8a5e482f4d14ff9bbddfe50641891b0db1f356d7bd352f38e72173619d2ec331071cba5a9ccb912f9ff38dc64019940e4e160c5b38fc7be34a84575e83c3aaff0439ac5883a8921b0087d007f97e0bdd9feee37fc11d1e5ba2d877b8e2cbdb8f371a9a4a785f9b60d9151a38bcbd3994ba671dd76d0e5a9d49c7f00993692a52967a62886ce0e43f84f252783a419fc662b9958807f1af83e0926140097252d3a3e8b77008214bef2e268050a69cb56b4bf1300"/246], &(0x7f0000000200)=0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf20000000000000070000000f0000002d030100000000007b00ffb1000000006926000000000000bf67200000000000150002000fff5d004507000010000000d60600000ee60000bf0500000000000073700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd030100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa733ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4378ba04a708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340c6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff67478128096b93447312cc93c738b6a83a2e83225af295e0776d0335ff913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3cc95416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd33d8a4b0f864db09907c7b8e97abb824c1f3167cff61e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff556d8556d4c14b570770000000000002873d12acc37e8a732c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41b90d2b120800c12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c1daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015ed22c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe2200000000000000000000000000bd956ca60ffc879599b3f4afd3c7cf088e922c27b263097d9707a1816718270841ef403db193cb96e7081d823097a81e68433a6b3196a69d665c7e7540f2284d20c338356e0233e7f7cd0adc8dc0565238d7d5585149b44299d2ec73117f19432bd89eadb2b49b1a683bca227ab3ea71bb14fe8bfd4e86fc894dda4b722d095dd7b5d52758ad1da5fdb600"/1367], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) kernel console output (not intermixed with test programs): [ 34.212989][ T4897] udevd[4897]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 34.306144][ T4962] netlink: 'syz.1.23': attribute type 11 has an invalid length. [ 34.309309][ T4962] loop1: detected capacity change from 0 to 128 [ 34.320207][ T4962] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.385491][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.798179][ T4985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 34.799986][ T4986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.27'. [ 34.831613][ T4909] IPVS: starting estimator thread 0... [ 34.833860][ T4996] netlink: 132 bytes leftover after parsing attributes in process `syz.0.29'. [ 34.924967][ T4997] IPVS: using max 61 ests per chain, 146400 per kthread [ 35.005796][ T5022] loop1: detected capacity change from 0 to 256 [ 35.036592][ T5028] Bluetooth: MGMT ver 1.23 [ 35.074056][ T5032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.074375][ T5032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.155226][ T3509] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xe7 [ 35.787910][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 35.844927][ T4720] Bluetooth: hci0: command tx timeout [ 35.911730][ T5034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 35.924827][ T4712] Bluetooth: hci3: command tx timeout [ 35.924962][ T4712] Bluetooth: hci1: command tx timeout [ 35.924988][ T4712] Bluetooth: hci2: command tx timeout [ 35.928145][ T4720] Bluetooth: hci4: command tx timeout [ 36.027707][ T5072] netlink: 'syz.4.54': attribute type 46 has an invalid length. [ 36.256107][ T5075] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.313941][ T5086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.316381][ T5086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.390771][ T5091] loop4: detected capacity change from 0 to 8 [ 36.393667][ T5091] squashfs image failed sanity check [ 36.422362][ T5094] loop4: detected capacity change from 0 to 1024 [ 36.422675][ T5094] ======================================================= [ 36.422675][ T5094] WARNING: The mand mount option has been deprecated and [ 36.422675][ T5094] and is ignored by this kernel. Remove the mand [ 36.422675][ T5094] option from the mount to silence this warning. [ 36.422675][ T5094] ======================================================= [ 36.437088][ T5094] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 36.437143][ T5094] System zones: 0-1, 3-12 [ 36.438067][ T5094] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.440750][ T5094] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 36.463217][ T4710] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /15/file0: bad entry in directory: directory entry overrun - offset=60, inode=21519, rec_len=1024, size=1024 fake=0 [ 36.477269][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 36.562958][ T5106] loop4: detected capacity change from 0 to 1024 [ 36.565060][ T5106] EXT4-fs: Ignoring removed orlov option [ 36.565194][ T5106] EXT4-fs: Ignoring removed nobh option [ 36.566496][ T5106] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 36.570654][ T5106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.65'. [ 36.698819][ T5116] loop4: detected capacity change from 0 to 1024 [ 36.699845][ T5116] EXT4-fs: inline encryption not supported [ 36.701924][ T5116] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 36.717535][ T5116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.768709][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.821404][ T5128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.72'. [ 36.821449][ T5128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.72'. [ 36.917292][ T5139] loop4: detected capacity change from 0 to 8192 [ 36.992676][ T5139] loop4: p2 p3 p4 [ 36.999727][ T5139] loop4: p2 size 64053 extends beyond EOD, truncated [ 37.002150][ T5139] loop4: p3 start 65280 is beyond EOD, truncated [ 37.002495][ T5139] loop4: p4 size 50331904 extends beyond EOD, truncated [ 37.017308][ T5139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.76'. [ 37.090251][ T4312] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 37.093269][ T4312] wiimote 0005:057E:0306.0002: New device registered [ 37.160402][ T4312] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 37.167770][ T4897] udevd[4897]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 37.173035][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 37.178816][ T4312] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input3 [ 37.182618][ T4312] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input4 [ 37.190343][ T4312] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input2 [ 37.197009][ T5156] loop2: detected capacity change from 0 to 512 [ 37.197339][ T5156] EXT4-fs: Ignoring removed bh option [ 37.216803][ T5150] wiimote 0005:057E:0306.0002: Unhandled report 1 size 148 [ 37.236341][ T5156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.260512][ T5163] loop3: detected capacity change from 0 to 1024 [ 37.262314][ T5163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.269235][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.288088][ T5163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.350084][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.479824][ T5176] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.529827][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.556634][ T5184] overlayfs: missing 'lowerdir' [ 37.584012][ T5186] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.634501][ T4718] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.709697][ T5198] Zero length message leads to an empty skb [ 37.737782][ T5200] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 37.741468][ T5200] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 37.771356][ T5204] Can't find a SQUASHFS superblock on loop1 [ 37.901968][ T5222] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 37.925025][ T4720] Bluetooth: hci0: command tx timeout [ 37.942323][ T3581] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:aafed11f-14b6-47bd-8d13-901a5d9e6fc7. [ 37.947289][ T5149] wiimote 0005:057E:0306.0002: Device removed [ 37.947977][ T5222] nvme nvme1: creating 2 I/O queues. [ 37.950586][ T5222] nvme nvme1: new ctrl: "testsubsys" [ 37.993626][ T5227] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.004826][ T4720] Bluetooth: hci4: command tx timeout [ 38.004869][ T4720] Bluetooth: hci2: command tx timeout [ 38.004901][ T4720] Bluetooth: hci1: command tx timeout [ 38.004921][ T4720] Bluetooth: hci3: command tx timeout [ 38.020434][ T5227] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 38.020550][ T5227] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 38.020570][ T5227] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.102: Failed to acquire dquot type 1 [ 38.020641][ T5227] loop1: lost filesystem error report for type 5 error -117 [ 38.023328][ T5227] EXT4-fs (loop1): 1 truncate cleaned up [ 38.023927][ T5227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 38.154902][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 38.184665][ T5234] syz.0.104 uses obsolete (PF_INET,SOCK_PACKET) [ 38.252985][ T5239] EXT4-fs: Ignoring removed bh option [ 38.253116][ T5239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.254971][ T5238] gtp0: entered promiscuous mode [ 38.254984][ T5238] gtp0: entered allmulticast mode [ 38.255877][ T5238] team0: Device gtp0 is of different type [ 38.266675][ T5239] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.103: inode has both inline data and extents flags [ 38.266761][ T5239] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 38.266935][ T5239] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.103: couldn't read orphan inode 15 (err -117) [ 38.266952][ T5239] loop1: lost filesystem error report for type 5 error -117 [ 38.267494][ T5239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.284496][ T5239] EXT4-fs error (device loop1): __ext4_add_entry:2412: inode #2: comm syz.1.103: Directory hole found for htree leaf block 0 [ 38.291217][ T5239] EXT4-fs error (device loop1): __ext4_add_entry:2412: inode #2: comm syz.1.103: Directory hole found for htree leaf block 0 [ 38.294490][ T5239] EXT4-fs error (device loop1): __ext4_add_entry:2412: inode #2: comm syz.1.103: Directory hole found for htree leaf block 0 [ 38.815329][ T5269] netlink: 'syz.0.110': attribute type 9 has an invalid length. [ 38.815605][ T5269] netlink: 'syz.0.110': attribute type 6 has an invalid length. [ 38.815666][ T5269] netlink: 'syz.0.110': attribute type 7 has an invalid length. [ 38.815699][ T5269] netlink: 'syz.0.110': attribute type 8 has an invalid length. [ 39.010687][ T5272] gadgetfs: bound to dummy_udc driver [ 39.042503][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.092826][ T5279] EXT4-fs (loop3): bad s_want_extra_isize: 2080 [ 39.165327][ T5297] __nla_validate_parse: 5 callbacks suppressed [ 39.166758][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 39.279502][ T5314] set_capacity_and_notify: 8 callbacks suppressed [ 39.280277][ T5314] loop3: detected capacity change from 0 to 512 [ 39.340827][ T5321] fuse: Unknown parameter '000000000000000000000030xffffffffffffffff' [ 39.341871][ T5322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.128'. [ 39.341957][ T5321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.128'. [ 39.395778][ T5322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.128'. [ 39.395978][ T5323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.128'. [ 39.614409][ T5333] loop1: detected capacity change from 0 to 512 [ 39.623536][ T5333] EXT4-fs: Ignoring removed orlov option [ 39.623607][ T5333] journal_path: Non-blockdev passed as './file0' [ 39.623621][ T5333] EXT4-fs: error: could not find journal device path [ 39.787207][ T5348] syzkaller0: entered promiscuous mode [ 39.788440][ T5348] syzkaller0: entered allmulticast mode [ 39.880182][ T5357] loop3: detected capacity change from 0 to 512 [ 39.885325][ T5357] EXT4-fs: Ignoring removed bh option [ 39.892094][ T5357] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 39.918091][ T5357] EXT4-fs (loop3): 1 truncate cleaned up [ 39.925943][ T5365] gtp0: entered promiscuous mode [ 39.926955][ T5365] gtp0: entered allmulticast mode [ 39.930133][ T5365] team0: Device gtp0 is of different type [ 39.930619][ T5357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.956935][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.958905][ T5368] syzkaller0: entered promiscuous mode [ 39.961629][ T5368] syzkaller0: entered allmulticast mode [ 39.990732][ T5372] loop3: detected capacity change from 0 to 512 [ 40.001792][ T5372] EXT4-fs warning (device loop3): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop3. [ 40.061497][ T30] audit: type=1326 audit(40.050:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.3.144" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90579228 code=0x7ffc0000 [ 40.061540][ T30] audit: type=1326 audit(40.050:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.3.144" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90579228 code=0x7ffc0000 [ 40.061585][ T30] audit: type=1326 audit(40.050:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.3.144" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90579228 code=0x7ffc0000 [ 40.061604][ T30] audit: type=1326 audit(40.050:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.3.144" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90579228 code=0x7ffc0000 [ 40.064899][ T30] audit: type=1326 audit(40.050:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.3.144" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90579228 code=0x7ffc0000 [ 40.064920][ T30] audit: type=1326 audit(40.050:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.3.144" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff90579228 code=0x7ffc0000 [ 40.064936][ T30] audit: type=1326 audit(40.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.3.144" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90579228 code=0x7ffc0000 [ 40.064951][ T30] audit: type=1326 audit(40.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5379 comm="syz.3.144" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90579228 code=0x7ffc0000 [ 40.065226][ T5380] loop9: detected capacity change from 0 to 524288000 [ 40.131436][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 40.233689][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.147'. [ 40.233727][ T5391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.147'. [ 40.244366][ T5392] loop1: detected capacity change from 0 to 512 [ 40.346526][ T5397] loop2: detected capacity change from 0 to 512 [ 40.366990][ T5397] loop2: detected capacity change from 0 to 512 [ 40.425354][ T5406] xt_limit: Overflow, try lower: 2147483649/3300 [ 40.429374][ T5404] loop2: detected capacity change from 0 to 1024 [ 40.433963][ T5404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.446088][ T5404] EXT4-fs (loop2): stripe (57043) is not aligned with cluster size (4096), stripe is disabled [ 40.455332][ T5404] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 40.455475][ T5404] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.456674][ T5404] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.151: Invalid inode table block 0 in block_group 0 [ 40.456700][ T5404] loop2: lost filesystem error report for type 5 error -117 [ 40.464552][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 40.464584][ C0] EXT4-fs (loop2): initial error at time 40: __ext4_get_inode_loc:4886 [ 40.464616][ C0] EXT4-fs (loop2): last error at time 40: __ext4_get_inode_loc:4886 [ 40.464788][ T5404] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 40.464806][ T5404] loop2: lost filesystem error report for type 5 error -117 [ 40.465647][ T5404] EXT4-fs error (device loop2): ext4_quota_write:7430: inode #3: comm syz.2.151: mark_inode_dirty error [ 40.465666][ T5404] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 40.465821][ T5404] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.151: Failed to acquire dquot type 0 [ 40.465833][ T5404] loop2: lost filesystem error report for type 5 error -117 [ 40.465918][ T5404] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.151: Invalid inode table block 0 in block_group 0 [ 40.465929][ T5404] loop2: lost filesystem error report for type 5 error -117 [ 40.467097][ T5404] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 40.467118][ T5404] loop2: lost filesystem error report for type 5 error -117 [ 40.467223][ T5404] EXT4-fs error (device loop2): ext4_ext_truncate:4557: inode #15: comm syz.2.151: mark_inode_dirty error [ 40.467236][ T5404] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.467352][ T5404] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.151: Invalid inode table block 0 in block_group 0 [ 40.467366][ T5404] loop2: lost filesystem error report for type 5 error -117 [ 40.467684][ T5404] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 40.467696][ T5404] loop2: lost filesystem error report for type 5 error -117 [ 40.467775][ T5404] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 40.467784][ T5404] loop2: lost filesystem error report for type 5 error -117 [ 40.467853][ T5404] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.151: Invalid inode table block 0 in block_group 0 [ 40.467925][ T5404] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 40.467993][ T5404] EXT4-fs error (device loop2): ext4_truncate:4691: inode #15: comm syz.2.151: mark_inode_dirty error [ 40.468004][ T5404] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.468072][ T5404] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 40.468168][ T5404] EXT4-fs (loop2): 1 truncate cleaned up [ 40.555234][ T5410] autofs: Unknown parameter '0x0000000000000000' [ 40.698695][ T5404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.728062][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.774270][ T5414] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 40.796275][ T5413] gadgetfs: bound to dummy_udc driver [ 40.804021][ T5414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.950155][ T5413] loop2: detected capacity change from 0 to 512 [ 40.953898][ T5413] EXT4-fs: Ignoring removed oldalloc option [ 40.958531][ T5413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.970734][ T5413] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 40.970765][ T5413] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 40.970862][ T5413] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.970925][ T5413] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 40.970938][ T5413] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 40.971409][ T5413] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.152: bg 0: block 40: padding at end of block bitmap is not set [ 40.973966][ T5413] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 40.974452][ T5413] EXT4-fs (loop2): 1 truncate cleaned up [ 40.975789][ T5413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.026701][ T5423] syzkaller0: entered promiscuous mode [ 41.026740][ T5423] syzkaller0: entered allmulticast mode [ 41.037126][ T5412] gadgetfs: suspended from state 2 [ 41.050587][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.054883][ T4805] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 41.113670][ T5436] binder: tried to use weak ref as strong ref [ 41.115042][ T5436] binder: 5435:5436 Acquire 1 refcount change on invalid ref 0 ret -22 [ 41.117694][ T5436] binder: 5435:5436 got transaction to invalid handle, 1 [ 41.117776][ T5436] binder: 5435:5436 cannot find target node [ 41.117795][ T5436] binder: 5435:5436 transaction async to 0:0 failed 3/29201/-22, code 0 size 88-24 line 3252 [ 41.119736][ T5436] process 'syz.1.160' launched '/dev/fd/12' with NULL argv: empty string added [ 41.185424][ T4825] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.262258][ T5449] Illegal XDP return value 4294967274 on prog (id 17) dev syz_tun, expect packet loss! [ 41.263999][ T5454] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 41.264216][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 41.268868][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 41.269325][ T5451] EXT4-fs warning (device loop2): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop2. [ 41.303001][ T5449] binder: tried to use weak ref as strong ref [ 41.303034][ T5449] binder: 5448:5449 Acquire 1 refcount change on invalid ref 0 ret -22 [ 41.303387][ T5449] binder: 5448:5449 got transaction to invalid handle, 1 [ 41.303399][ T5449] binder: 5448:5449 cannot find target node [ 41.303415][ T5449] binder: 5448:5449 transaction call to 0:0 failed 6/29201/-22, code 0 size 72-24 line 3252 [ 41.303713][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.358941][ T5464] capability: warning: `syz.2.168' uses 32-bit capabilities (legacy support in use) [ 41.395024][ T5470] syzkaller0: entered promiscuous mode [ 41.395058][ T5470] syzkaller0: entered allmulticast mode [ 41.427137][ T5472] binder: 5471:5472 ioctl 3b81 20000680 returned -22 [ 41.427363][ T5472] binder: 5471:5472 tried to acquire reference to desc 0, got 1 instead [ 41.427524][ T5472] binder_alloc: 5471: binder_alloc_buf, no vma [ 41.427532][ T5472] binder: cannot allocate buffer: vma cleared, target dead or dying [ 41.427553][ T5472] binder: 5471:5472 transaction call to 5471:0 failed 11/29189/-3, code 0 size 0-0 line 3408 [ 41.427749][ T5472] binder: undelivered TRANSACTION_ERROR: 29189 [ 41.427834][ T5472] binder: 5471:5472 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 41.427844][ T5472] binder: 5472 RLIMIT_NICE not set [ 41.662381][ T5491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.697695][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.089209][ T5502] syzkaller0: entered promiscuous mode [ 42.089241][ T5502] syzkaller0: entered allmulticast mode [ 42.291277][ T5506] Invalid ELF header type: 3 != 1 [ 42.326984][ T5508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.356420][ T5508] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.367229][ T5508] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.411760][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.461932][ T5515] xfrm1: entered allmulticast mode [ 43.385052][ T5543] binder: BINDER_SET_CONTEXT_MGR already set [ 43.387078][ T5543] binder: 5542:5543 ioctl 4018620d 20004a80 returned -16 [ 43.841761][ T5567] syzkaller0: entered promiscuous mode [ 43.842941][ T5567] syzkaller0: entered allmulticast mode [ 43.858739][ T5569] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.207: bg 0: block 5: invalid block bitmap [ 43.858778][ T5569] fserror_report: 5 callbacks suppressed [ 43.858796][ T5569] loop2: lost filesystem error report for type 5 error -117 [ 43.863389][ T5569] EXT4-fs (loop2): Remounting filesystem read-only [ 43.863471][ T5569] EXT4-fs (loop2): 2 truncates cleaned up [ 43.870841][ T5569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.900830][ T5569] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 43.923180][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.999376][ T5581] overlay: Unknown parameter 'context' [ 44.201435][ T5601] EXT4-fs: Ignoring removed bh option [ 44.202661][ T5601] EXT4-fs: inline encryption not supported [ 44.205112][ T5601] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.226811][ T5601] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.235066][ T5601] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.217: bg 0: block 248: padding at end of block bitmap is not set [ 44.235109][ T5601] loop3: lost filesystem error report for type 5 error -117 [ 44.239321][ T5601] __quota_error: 98 callbacks suppressed [ 44.242911][ T5601] Quota error (device loop3): write_blk: dquota write failed [ 44.242971][ T5601] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 44.243014][ T5601] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.217: Failed to acquire dquot type 1 [ 44.243032][ T5601] loop3: lost filesystem error report for type 5 error -28 [ 44.244812][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 44.244828][ C0] EXT4-fs (loop3): last error at time 44: ext4_acquire_dquot:7041 [ 44.259340][ T5605] syzkaller0: entered promiscuous mode [ 44.260254][ T5601] EXT4-fs (loop3): 1 truncate cleaned up [ 44.260762][ T5601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 44.260859][ T5605] syzkaller0: entered allmulticast mode [ 44.318883][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 44.321172][ T3509] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 44.321263][ T3509] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u8:8: Failed to release dquot type 1 [ 44.321285][ T3509] loop3: lost filesystem error report for type 5 error -117 [ 44.393396][ T5617] __nla_validate_parse: 5 callbacks suppressed [ 44.393446][ T5617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.222'. [ 44.419562][ T5622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 44.426844][ T5624] set_capacity_and_notify: 6 callbacks suppressed [ 44.426878][ T5624] loop3: detected capacity change from 0 to 512 [ 44.427288][ T5624] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.429875][ T5624] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.429893][ T5624] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.440690][ T5624] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 44.440849][ T5624] EXT4-fs (loop3): orphan cleanup on readonly fs [ 44.449671][ T5624] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.224: corrupted xattr entries [ 44.449710][ T5624] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.454068][ T5624] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.454325][ T5624] EXT4-fs (loop3): 1 orphan inode deleted [ 44.455569][ T5624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.467043][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.663798][ T5641] netlink: 'syz.1.230': attribute type 3 has an invalid length. [ 44.699655][ T5645] syzkaller0: entered promiscuous mode [ 44.699694][ T5645] syzkaller0: entered allmulticast mode [ 44.711056][ T5647] fuse: Bad value for 'rootmode' [ 44.779891][ T5653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.780112][ T5653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.783328][ T5653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.783496][ T5653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.811172][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 44.842740][ T5660] loop3: detected capacity change from 0 to 1024 [ 44.885528][ T5669] fuse: Unexpected value for 'default_permissions' [ 45.298950][ C1] Unknown status report in ack skb [ 45.331693][ T5717] loop3: detected capacity change from 0 to 512 [ 45.334442][ T5717] ext4: Unknown parameter 'noacl' [ 45.599323][ T5725] loop4: detected capacity change from 0 to 128 [ 45.601162][ T5725] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.632752][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.687909][ T5731] loop3: detected capacity change from 0 to 512 [ 45.709613][ T5731] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 45.709659][ T5731] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 45.709684][ T5731] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.265: Corrupt directory, running e2fsck is recommended [ 45.732712][ T5731] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 45.764675][ T5731] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.265: corrupted in-inode xattr: invalid ea_ino [ 45.764726][ T5731] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.768453][ T5731] EXT4-fs (loop3): Remounting filesystem read-only [ 45.769099][ T5731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.782085][ T5744] loop1: detected capacity change from 0 to 4096 [ 45.788485][ T5742] loop2: detected capacity change from 0 to 4096 [ 45.794624][ T5742] EXT4-fs (loop2): Test dummy encryption mode enabled [ 45.796908][ T5744] EXT4-fs: inline encryption not supported [ 45.803761][ T5742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.804000][ T5744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.804013][ T5744] EXT4-fs (loop1): Test dummy encryption mode enabled [ 45.810531][ T5744] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 45.810673][ T5744] System zones: 0-5 [ 45.815415][ T5744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.818560][ T5741] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 45.951606][ T4716] Bluetooth: hci0: connection err: -111 [ 45.952771][ T5755] netlink: 'syz.4.271': attribute type 27 has an invalid length. [ 45.977938][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.010492][ T5755] bond0: (slave bond_slave_1): Releasing backup interface [ 46.131487][ T5769] netlink: 172 bytes leftover after parsing attributes in process `syz.4.275'. [ 46.189659][ T5766] syzkaller0: entered promiscuous mode [ 46.189703][ T5766] syzkaller0: entered allmulticast mode [ 46.205496][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.318653][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.328666][ T5780] loop3: detected capacity change from 0 to 256 [ 46.333636][ T5780] FAT-fs (loop3): Directory bread(block 1285) failed [ 46.333685][ T5780] FAT-fs (loop3): Directory bread(block 1286) failed [ 46.333705][ T5780] FAT-fs (loop3): Directory bread(block 1287) failed [ 46.333764][ T5780] FAT-fs (loop3): Directory bread(block 1288) failed [ 46.342554][ T5780] FAT-fs (loop3): Directory bread(block 1285) failed [ 46.342599][ T5780] FAT-fs (loop3): Directory bread(block 1286) failed [ 46.351797][ T5780] FAT-fs (loop3): Directory bread(block 1287) failed [ 46.351858][ T5780] FAT-fs (loop3): Directory bread(block 1288) failed [ 46.352090][ T5780] FAT-fs (loop3): Directory bread(block 1285) failed [ 46.352106][ T5780] FAT-fs (loop3): Directory bread(block 1286) failed [ 46.637522][ T5816] syzkaller0: entered promiscuous mode [ 46.638703][ T5816] syzkaller0: entered allmulticast mode [ 46.648083][ T5818] loop2: detected capacity change from 0 to 256 [ 46.651032][ T5818] vfat: Unknown parameter 'chexk' [ 46.812797][ T5845] loop1: detected capacity change from 0 to 1024 [ 46.820167][ T5845] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 46.823901][ T5845] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 46.827236][ T5845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.898052][ T5845] trusted_key: encrypted_key: insufficient parameters specified [ 46.922773][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.015984][ T5860] syzkaller0: entered promiscuous mode [ 47.017104][ T5860] syzkaller0: entered allmulticast mode [ 47.062282][ T5869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'. [ 47.062323][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 47.078411][ T5869] erspan0: entered promiscuous mode [ 47.079003][ T5869] macvlan2: entered allmulticast mode [ 47.079016][ T5869] erspan0: entered allmulticast mode [ 47.084217][ T5874] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.086671][ T5874] EXT4-fs error (device loop4): __ext4_fill_super:5600: comm syz.4.314: inode #2: comm syz.4.314: iget: illegal inode # [ 47.088770][ T5874] loop4: lost filesystem error report for type 5 error -117 [ 47.088987][ T5874] EXT4-fs (loop4): get root inode failed [ 47.088996][ T5874] EXT4-fs (loop4): mount failed [ 47.097805][ T5874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.314'. [ 47.132847][ T5869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.312'. [ 47.165944][ T5880] netlink: 64 bytes leftover after parsing attributes in process `syz.1.316'. [ 47.197794][ T5887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.200069][ T5887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.314670][ T866] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 47.362312][ T5903] syzkaller0: entered promiscuous mode [ 47.363400][ T5903] syzkaller0: entered allmulticast mode [ 47.381503][ T5905] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.383956][ T5905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 47.384019][ T5905] System zones: 1-12 [ 47.392155][ T5905] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.393259][ T5905] EXT4-fs (loop3): 1 truncate cleaned up [ 47.393728][ T5905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.413358][ T5909] EXT4-fs: Ignoring removed nobh option [ 47.437295][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.442465][ T5909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.464982][ T866] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 47.471159][ T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.471205][ T866] usb 1-1: Product: syz [ 47.471220][ T866] usb 1-1: Manufacturer: syz [ 47.471234][ T866] usb 1-1: SerialNumber: syz [ 47.517756][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.586926][ T5932] evm: overlay not supported [ 47.591387][ T5932] Invalid ELF header magic: != ELF [ 47.628689][ T5938] syzkaller0: entered promiscuous mode [ 47.628723][ T5938] syzkaller0: entered allmulticast mode [ 47.641948][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 47.645298][ T5943] bond2 (unregistering): Released all slaves [ 47.707522][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 47.715423][ T5943] bond2 (unregistering): Released all slaves [ 47.730092][ T866] rtl8150 1-1:1.0: couldn't reset the device [ 47.730428][ T866] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 47.740769][ T866] usb 1-1: USB disconnect, device number 4 [ 47.788834][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 47.806086][ T5943] bond2 (unregistering): Released all slaves [ 47.846158][ T5955] nfs: Unknown parameter 'mounrt' [ 47.864354][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 47.867048][ T5943] bond2 (unregistering): Released all slaves [ 47.898319][ T5958] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.340'. [ 48.136046][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 48.138469][ T5943] bond2 (unregistering): Released all slaves [ 48.193120][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 48.195625][ T5943] bond2 (unregistering): Released all slaves [ 48.245552][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 48.248959][ T5943] bond2 (unregistering): Released all slaves [ 48.293069][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 48.295473][ T5943] bond2 (unregistering): Released all slaves [ 48.349885][ T5971] x_tables: duplicate underflow at hook 3 [ 48.355468][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 48.357914][ T5943] bond2 (unregistering): Released all slaves [ 48.406327][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 48.409064][ T5943] bond2 (unregistering): Released all slaves [ 48.453084][ T5943] bond2: Unable to set down delay as MII monitoring is disabled [ 48.455709][ T5943] bond2 (unregistering): Released all slaves [ 48.534979][ T4720] Bluetooth: hci3: ACL packet for unknown connection handle 1224 [ 48.559953][ T5981] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 48.562621][ T5981] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 48.564428][ T5981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.585298][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.604863][ T4805] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 48.625295][ T5988] syzkaller0: entered promiscuous mode [ 48.626329][ T5988] syzkaller0: entered allmulticast mode [ 48.628910][ T5988] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 48.719495][ T5996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.722843][ T5996] syz.2.352(5996): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 48.795006][ T4805] usb 1-1: Using ep0 maxpacket: 32 [ 48.803753][ T4805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 48.806342][ T4805] usb 1-1: New USB device found, idVendor=13e5, idProduct=aa01, bcdDevice=45.d4 [ 48.808684][ T4805] usb 1-1: too many configurations: 207, using maximum allowed: 8 [ 48.811421][ T4805] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 48.812957][ T4805] usb 1-1: can't read configurations, error -71 [ 49.092398][ T6006] FAULT_INJECTION: forcing a failure. [ 49.092398][ T6006] name failslab, interval 1, probability 0, space 0, times 1 [ 49.092430][ T6006] CPU: 1 UID: 0 PID: 6006 Comm: syz.4.356 Tainted: G L syzkaller #0 PREEMPT [ 49.092445][ T6006] Tainted: [L]=SOFTLOCKUP [ 49.092449][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.092454][ T6006] Call trace: [ 49.092457][ T6006] show_stack+0x2c/0x3c (C) [ 49.092476][ T6006] __dump_stack+0x30/0x40 [ 49.092487][ T6006] dump_stack_lvl+0xd8/0x12c [ 49.092497][ T6006] dump_stack+0x1c/0x28 [ 49.092507][ T6006] should_fail_ex+0x41c/0x590 [ 49.092515][ T6006] should_failslab+0xc4/0x120 [ 49.092523][ T6006] __kmalloc_noprof+0x108/0x6b8 [ 49.092532][ T6006] tomoyo_realpath_from_path+0xbc/0x4dc [ 49.092541][ T6006] tomoyo_path_number_perm+0x1f0/0x500 [ 49.092549][ T6006] tomoyo_file_ioctl+0x2c/0x3c [ 49.092558][ T6006] security_file_ioctl+0xdc/0x2b0 [ 49.092566][ T6006] __arm64_sys_ioctl+0xb0/0x1cc [ 49.092577][ T6006] invoke_syscall+0x98/0x244 [ 49.092587][ T6006] el0_svc_common+0xec/0x23c [ 49.092597][ T6006] do_el0_svc+0x4c/0x5c [ 49.092606][ T6006] el0_svc+0x64/0x260 [ 49.092615][ T6006] el0t_64_sync_handler+0x44/0x104 [ 49.092624][ T6006] el0t_64_sync+0x198/0x19c [ 49.092633][ T6006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 49.150618][ T6011] Soft offlining pfn 0x122d70 at process virtual address 0x20000000 [ 49.190803][ T6017] vfat: Deprecated parameter 'posix' [ 49.193123][ T6017] FAT-fs: "posix" option is obsolete, not supported now [ 49.201475][ T4720] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 49.210167][ T6019] capability: warning: `syz.4.362' uses deprecated v2 capabilities in a way that may be insecure [ 49.248125][ T6021] can0: slcan on ptm0. [ 49.296064][ T6020] can0 (unregistered): slcan off ptm0. [ 49.604747][ T4716] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 49.648204][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.740741][ T6052] set_capacity_and_notify: 7 callbacks suppressed [ 49.743121][ T6052] loop4: detected capacity change from 0 to 1024 [ 49.746756][ T6052] EXT4-fs: Ignoring removed bh option [ 49.750576][ T6044] nfs4: Unknown parameter ' /24 host LOCAL [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] /24 link UNICAST [ 49.750576][ T6044] [ 49.750862][ T6052] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 49.798205][ T6052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.806074][ T6062] loop2: detected capacity change from 0 to 512 [ 49.820944][ T6062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.847315][ T6067] netlink: 'syz.0.376': attribute type 5 has an invalid length. [ 49.911583][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.950860][ T6077] input: syz0 as /devices/virtual/input/input7 [ 50.005331][ T6084] ip_tables: iptables: counters copy to user failed while replacing table [ 50.111801][ T6094] FAULT_INJECTION: forcing a failure. [ 50.111801][ T6094] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.111862][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: syz.0.382 Tainted: G L syzkaller #0 PREEMPT [ 50.111881][ T6094] Tainted: [L]=SOFTLOCKUP [ 50.111885][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 50.111889][ T6094] Call trace: [ 50.111892][ T6094] show_stack+0x2c/0x3c (C) [ 50.111910][ T6094] __dump_stack+0x30/0x40 [ 50.111922][ T6094] dump_stack_lvl+0xd8/0x12c [ 50.111932][ T6094] dump_stack+0x1c/0x28 [ 50.111941][ T6094] should_fail_ex+0x41c/0x590 [ 50.111949][ T6094] should_fail+0x14/0x24 [ 50.111955][ T6094] should_fail_usercopy+0x20/0x30 [ 50.111963][ T6094] simple_read_from_buffer+0xc4/0x238 [ 50.111974][ T6094] proc_fail_nth_read+0x1a8/0x248 [ 50.111982][ T6094] vfs_read+0x230/0x8c8 [ 50.111990][ T6094] ksys_read+0x12c/0x228 [ 50.111996][ T6094] __arm64_sys_read+0x84/0x98 [ 50.112003][ T6094] invoke_syscall+0x98/0x244 [ 50.112013][ T6094] el0_svc_common+0xec/0x23c [ 50.112023][ T6094] do_el0_svc+0x4c/0x5c [ 50.112032][ T6094] el0_svc+0x64/0x260 [ 50.112041][ T6094] el0t_64_sync_handler+0x44/0x104 [ 50.112050][ T6094] el0t_64_sync+0x198/0x19c [ 50.246544][ T6102] syzkaller0: entered promiscuous mode [ 50.246580][ T6102] syzkaller0: entered allmulticast mode [ 50.339240][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.430490][ T6125] loop2: detected capacity change from 0 to 4096 [ 50.438749][ T6125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.454213][ T6125] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.388: corrupted inode contents [ 50.462468][ T6125] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #15: comm syz.2.388: mark_inode_dirty error [ 50.462778][ T6125] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.388: corrupted inode contents [ 50.463563][ T6125] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.388: mark_inode_dirty error [ 50.463774][ T6125] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.388: corrupted inode contents [ 50.464132][ T6125] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.388: mark_inode_dirty error [ 50.464312][ T6125] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.388: corrupted inode contents [ 50.482167][ T6125] EXT4-fs error (device loop2): ext4_truncate:4691: inode #15: comm syz.2.388: mark_inode_dirty error [ 50.486600][ T6125] EXT4-fs error (device loop2) in ext4_setattr:6172: Corrupt filesystem [ 50.497479][ T6125] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.388: corrupted inode contents [ 50.544937][ T6151] __nla_validate_parse: 2 callbacks suppressed [ 50.544980][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.392'. [ 50.545001][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.4.392'. [ 50.580486][ T4721] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.583300][ T4721] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.599647][ T4721] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 50.610002][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.672917][ T6180] loop2: detected capacity change from 0 to 2048 [ 50.683227][ T6182] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 50.683251][ T6182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 50.690099][ T6182] vhci_hcd vhci_hcd.0: Device attached [ 50.697222][ T6183] vhci_hcd: connection closed [ 50.700046][ T3436] vhci_hcd vhci_hcd.3: stop threads [ 50.700355][ T3436] vhci_hcd vhci_hcd.3: release socket [ 50.700379][ T3436] vhci_hcd vhci_hcd.3: disconnect device [ 50.733384][ T6180] binder: 6178:6180 tried to acquire reference to desc 0, got 1 instead [ 50.733507][ T6180] binder: tried to use weak ref as strong ref [ 50.733670][ T6180] binder: 6178:6180 Release 1 refcount change on invalid ref 0 ret -22 [ 50.733799][ T6180] binder: 6178:6180 got transaction with invalid offset (0, min 0 max 12) or object. [ 50.733884][ T6180] binder: 6178:6180 transaction call to 6178:0 failed 18/29201/-22, code 0 size 12-24 line 3524 [ 50.734048][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 50.738424][ T866] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.756806][ T6189] syzkaller0: entered promiscuous mode [ 50.756841][ T6189] syzkaller0: entered allmulticast mode [ 50.850551][ T6196] loop4: detected capacity change from 0 to 14 [ 50.860539][ T6196] Dev loop4: unable to read RDB block 14 [ 50.861772][ T6196] loop4: unable to read partition table [ 50.861866][ T6196] loop4: partition table beyond EOD, truncated [ 50.861897][ T6196] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 51.037178][ T6234] netlink: 80 bytes leftover after parsing attributes in process `syz.0.408'. [ 51.133572][ T6246] trusted_key: syz.0.411 sent an empty control message without MSG_MORE. [ 51.368977][ T6257] syzkaller0: entered promiscuous mode [ 51.369018][ T6257] syzkaller0: entered allmulticast mode [ 51.403019][ T6285] fuse: Bad value for 'group_id' [ 51.403054][ T6285] fuse: Bad value for 'group_id' [ 51.529225][ T6289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 51.731717][ T6303] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 51.767637][ T6310] netlink: 68 bytes leftover after parsing attributes in process `syz.0.423'. [ 51.855034][ T6322] loop2: detected capacity change from 0 to 128 [ 51.875249][ T6326] netlink: 52 bytes leftover after parsing attributes in process `syz.0.429'. [ 51.877127][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 51.878854][ T6326] netlink: 52 bytes leftover after parsing attributes in process `syz.0.429'. [ 51.880639][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 51.882518][ T6326] netlink: 52 bytes leftover after parsing attributes in process `syz.0.429'. [ 51.923945][ T6330] tmpfs: Unknown parameter 'x×ATc88û‰üm˜2¶SD„‰7nÖtD/' [ 51.924077][ T6330] tmpfs: Unknown parameter 'x×ATc88û‰üm˜2¶SD„‰7nÖtD/' [ 51.997633][ T6335] syzkaller0: entered promiscuous mode [ 51.997671][ T6335] syzkaller0: entered allmulticast mode [ 52.099395][ T6346] loop4: detected capacity change from 0 to 512 [ 52.100001][ T6346] ext4: Unknown parameter 'fowner<00000000000000000000' [ 52.107220][ T30] audit: type=1326 audit(308.080:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6345 comm="syz.4.437" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4779228 code=0x0 [ 52.164646][ T4477] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 52.164687][ T4477] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 52.164950][ T4716] Bluetooth: hci0: command 0x0c1a tx timeout [ 52.175519][ T6349] loop3: detected capacity change from 0 to 256 [ 52.177146][ T6349] vfat: Unknown parameter '' [ 52.189951][ T6349] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 52.211169][ T6349] team0 (unregistering): Port device team_slave_0 removed [ 52.214374][ T6349] team0 (unregistering): Port device team_slave_1 removed [ 52.600390][ T6377] syzkaller0: entered promiscuous mode [ 52.600422][ T6377] syzkaller0: entered allmulticast mode [ 52.698590][ T6379] loop1: detected capacity change from 0 to 256 [ 52.810571][ T6391] 9p: Bad value for 'rfdno' [ 52.857552][ T6393] loop1: detected capacity change from 0 to 256 [ 52.939781][ T4720] Bluetooth: hci4: hardware error 0x00 [ 52.989812][ T6417] syzkaller0: entered promiscuous mode [ 52.989852][ T6417] syzkaller0: entered allmulticast mode [ 53.006042][ T6421] EXT4-fs: Ignoring removed bh option [ 53.009814][ T6421] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 53.015216][ T6421] EXT4-fs (loop4): 1 truncate cleaned up [ 53.017093][ T6421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.072601][ T6428] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 53.084418][ T6428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e018, mo2=0000] [ 53.097150][ T6428] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.465: lblock 2 mapped to illegal pblock 2 (length 1) [ 53.100331][ T6428] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.100655][ T6428] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 53.100696][ T6428] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 48: comm syz.2.465: lblock 0 mapped to illegal pblock 48 (length 1) [ 53.100726][ T6428] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.104545][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 53.104565][ C1] EXT4-fs (loop2): initial error at time 309: ext4_map_blocks:791: inode 3: block 2 [ 53.104584][ C1] EXT4-fs (loop2): last error at time 309: ext4_map_blocks:791: inode 3: block 48 [ 53.123487][ T6428] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 53.123527][ T6428] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.465: Failed to acquire dquot type 0 [ 53.123571][ T6428] loop2: lost filesystem error report for type 5 error -117 [ 53.128470][ T6428] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 53.128487][ T6428] loop2: lost filesystem error report for type 5 error -117 [ 53.134047][ T6428] EXT4-fs error (device loop2): ext4_evict_inode:267: inode #11: comm syz.2.465: mark_inode_dirty error [ 53.134088][ T6428] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 53.139229][ T6428] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 53.139313][ T6428] EXT4-fs (loop2): 1 orphan inode deleted [ 53.139798][ T6428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.151066][ T6435] tipc: Started in network mode [ 53.151103][ T6435] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 53.151500][ T6435] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 53.151869][ T6435] tipc: Enabled bearer , priority 10 [ 53.155575][ T3581] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.165702][ T3581] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 53.166362][ T6428] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm syz.2.465: lblock 1 mapped to illegal pblock 1 (length 1) [ 53.167551][ T6428] Quota error (device loop2): find_next_id: Can't read quota tree block 1 [ 53.167971][ T3581] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 53.195821][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.198611][ T4721] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 53.198660][ T4721] loop2: lost filesystem error report for type 5 error -117 [ 53.201726][ T4721] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 53.201766][ T4721] loop2: lost filesystem error report for type 5 error -117 [ 53.203221][ T4721] EXT4-fs error (device loop2): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 53.203243][ T4721] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 53.491574][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.570072][ T6473] tun0: tun_chr_ioctl cmd 1074025677 [ 53.571777][ T6473] tun0: linktype set to 1 [ 53.952717][ T6482] syz.1.482: attempt to access beyond end of device [ 53.952717][ T6482] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 54.015205][ T6423] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 54.266573][ T4805] tipc: Node number set to 1 [ 54.324742][ T4716] Bluetooth: hci1: command 0x0c1a tx timeout [ 54.329338][ T4477] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 54.329368][ T4477] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 54.373250][ T6497] syzkaller0: entered promiscuous mode [ 54.373354][ T6497] syzkaller0: entered allmulticast mode [ 54.392744][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.473028][ T6503] fuse: Unknown parameter 'def3Vü_pe“missions' [ 55.044679][ T4720] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 55.116718][ T6533] syzkaller0: entered promiscuous mode [ 55.116762][ T6533] syzkaller0: entered allmulticast mode [ 55.138563][ T6535] overlay: ./file1 is not a directory [ 55.239996][ T6537] set_capacity_and_notify: 5 callbacks suppressed [ 55.240040][ T6537] loop2: detected capacity change from 0 to 512 [ 55.246913][ T6537] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.251735][ T6537] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.502: bad orphan inode 131083 [ 55.251788][ T6537] loop2: lost filesystem error report for type 5 error -117 [ 55.252378][ T6537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.366291][ T6545] bridge_slave_0: left allmulticast mode [ 55.366334][ T6545] bridge_slave_0: left promiscuous mode [ 55.366421][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.370882][ T6545] bridge_slave_1: left allmulticast mode [ 55.370922][ T6545] bridge_slave_1: left promiscuous mode [ 55.370988][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.377781][ T6545] bond0: (slave bond_slave_0): Releasing backup interface [ 55.394383][ T6545] bond0: (slave bond_slave_1): Releasing backup interface [ 55.417772][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.424004][ T6545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.438363][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.440756][ T6545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.443480][ T6545] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 55.486110][ T6556] overlayfs: failed to get uuid (97/file0, err=-13); falling back to uuid=null. [ 55.488918][ T30] audit: type=1400 audit(311.470:106): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lPL" requested=r pid=6551 comm="syz.1.508" name="file0" dev="tmpfs" ino=550 [ 55.488952][ T30] audit: type=1400 audit(311.470:107): lsm=SMACK fn=smack_inode_getxattr action=denied subject="_" object="lPL" requested=r pid=6551 comm="syz.1.508" name="file0" dev="tmpfs" ino=550 [ 55.625915][ T6572] loop2: detected capacity change from 0 to 128 [ 55.697051][ T6576] syzkaller0: entered promiscuous mode [ 55.698201][ T6576] syzkaller0: entered allmulticast mode [ 55.789701][ T6586] loop2: detected capacity change from 0 to 512 [ 55.791818][ T6586] ext4: Unknown parameter 'fowner' [ 55.898341][ T6594] loop4: detected capacity change from 0 to 512 [ 55.943053][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 55.946601][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 55.946886][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 55.950944][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 55.953939][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 55.957860][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 55.959902][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 55.960137][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 55.960457][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 55.960683][ T4710] EXT4-fs error (device loop4): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 56.047713][ T6604] loop2: detected capacity change from 0 to 4096 [ 56.055549][ T6604] EXT4-fs (loop2): Test dummy encryption mode enabled [ 56.232795][ T6614] loop2: detected capacity change from 0 to 512 [ 56.240504][ T6614] /dev/loop2: Can't open blockdev [ 56.324176][ T6621] loop2: detected capacity change from 0 to 128 [ 56.329186][ T6621] FAT-fs (loop2): bogus number of reserved sectors [ 56.331888][ T6621] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 56.331918][ T6621] FAT-fs (loop2): Can't find a valid FAT filesystem [ 56.341193][ T6625] __nla_validate_parse: 4 callbacks suppressed [ 56.341229][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 56.355368][ T6628] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 56.443023][ T6638] xt_ecn: cannot match TCP bits for non-tcp packets [ 56.484760][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 56.486314][ T4477] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 56.486350][ T4477] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 56.540611][ T6656] syzkaller0: entered promiscuous mode [ 56.540651][ T6656] syzkaller0: entered allmulticast mode [ 56.680807][ T30] audit: type=1326 audit(312.660:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.1.550" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bf79228 code=0x0 [ 56.744183][ T6682] fuse: Unknown parameter '0x000000000000000a' [ 56.881061][ T6696] syzkaller0: entered promiscuous mode [ 56.881094][ T6696] syzkaller0: entered allmulticast mode [ 56.910461][ T6691] loop1: detected capacity change from 0 to 512 [ 56.912847][ T6691] EXT4-fs (loop1): Test dummy encryption mode enabled [ 56.916462][ T6691] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.558: inode has both inline data and extents flags [ 56.916494][ T6691] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.917284][ T6691] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.558: couldn't read orphan inode 15 (err -117) [ 56.917305][ T6691] loop1: lost filesystem error report for type 5 error -117 [ 56.990886][ T6700] loop5: detected capacity change from 0 to 7 [ 56.996877][ T6700] Dev loop5: unable to read RDB block 7 [ 56.996912][ T6700] loop5: AHDI p1 p2 p3 [ 56.996933][ T6700] loop5: partition table partially beyond EOD, truncated [ 56.997048][ T6700] loop5: p1 start 1818582900 is beyond EOD, truncated [ 56.997067][ T6700] loop5: p3 start 335544320 is beyond EOD, truncated [ 57.029133][ T6700] loop3: detected capacity change from 0 to 8192 [ 57.032109][ T6700] vfat: Unknown parameter 'ÿdev/loop#' [ 57.524114][ T6711] overlay: Unknown parameter 'rootcontext' [ 57.527188][ T6712] overlay: filesystem on ./bus not supported as upperdir [ 57.549225][ T6719] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 57.775110][ T6729] openvswitch: netlink: Key 32 has unexpected len 0 expected 2 [ 57.875977][ T6735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.571'. [ 57.906639][ T4720] block nbd0: Receive control failed (result -32) [ 57.920468][ T6739] xt_cluster: you have exceeded the maximum number of cluster nodes (128 > 32) [ 57.923608][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 57.923641][ T6739] netlink: 'syz.0.573': attribute type 10 has an invalid length. [ 57.923657][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 57.929291][ T6739] geneve2: entered promiscuous mode [ 57.929318][ T6739] geneve2: entered allmulticast mode [ 58.018902][ T6748] veth0_to_bond: entered promiscuous mode [ 58.021061][ T6748] macsec1: entered promiscuous mode [ 58.022170][ T6748] macsec1: entered allmulticast mode [ 58.023079][ T6748] veth0_to_bond: entered allmulticast mode [ 58.039801][ T6750] netlink: 84 bytes leftover after parsing attributes in process `syz.0.577'. [ 58.046396][ T6752] futex_wake_op: syz.3.578 tries to shift op by -1; fix this program [ 58.081099][ T6758] Injecting memory failure for pfn 0x219270 at process virtual address 0x20001000 [ 58.086119][ T6758] Memory failure: 0x219270: unhandlable page. [ 58.086151][ T6758] Memory failure: 0x219270: recovery action for get hwpoison page: Ignored [ 58.163967][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 58.297417][ T6784] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 58.300413][ T6784] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.587: bg 0: block 4: invalid block bitmap [ 58.300458][ T6784] loop3: lost filesystem error report for type 5 error -117 [ 58.304347][ T6784] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 58.304386][ T6784] loop3: lost filesystem error report for type 5 error -117 [ 58.304910][ T6784] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.587: invalid indirect mapped block 1 (level 1) [ 58.304930][ T6784] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 58.305244][ T6784] EXT4-fs (loop3): 1 truncate cleaned up [ 58.324421][ T6784] syzkaller1: entered allmulticast mode [ 58.337137][ T6784] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 58.381127][ T6791] netlink: 'syz.0.589': attribute type 3 has an invalid length. [ 58.395272][ T3346] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.395379][ T3346] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.402659][ T6793] netlink: 84 bytes leftover after parsing attributes in process `syz.0.590'. [ 58.415107][ T3346] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.415612][ T3346] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.463247][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.463376][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.463468][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.463543][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.463621][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.463706][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.463789][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.463855][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.463929][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464020][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464095][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464183][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464261][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464325][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464397][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464460][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464597][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464684][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464765][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464834][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464913][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.464983][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.472403][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.472482][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.472555][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.472633][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.472968][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.473036][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.473102][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.473186][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.473260][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.473327][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.473394][ T6798] tipc: Enabling of bearer rejected, failed to enable media [ 58.644727][ T4477] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 58.644760][ T4477] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 58.647845][ T4720] Bluetooth: hci3: command 0x0c1a tx timeout [ 58.654097][ T6830] EXT4-fs: Ignoring removed bh option [ 58.656751][ T6830] EXT4-fs: Ignoring removed bh option [ 58.659283][ T6830] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 58.843766][ T6836] 9p: Bad value for 'msize' [ 59.602883][ T6842] netlink: 84 bytes leftover after parsing attributes in process `syz.2.603'. [ 59.888540][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 60.091122][ T6862] vfat: Unknown parameter 'uni_xäâù?' [ 60.119444][ T6857] tipc: Enabled bearer , priority 0 [ 60.121015][ T30] audit: type=1326 audit(316.100:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6858 comm="syz.3.608" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff90579228 code=0x0 [ 60.127011][ T6853] tipc: Resetting bearer [ 60.222134][ T6877] netlink: 72 bytes leftover after parsing attributes in process `syz.3.608'. [ 60.371996][ T6889] tipc: Started in network mode [ 60.372031][ T6889] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 60.372057][ T6889] tipc: Enabling of bearer rejected, failed to enable media [ 60.394468][ T6891] set_capacity_and_notify: 4 callbacks suppressed [ 60.394501][ T6891] loop2: detected capacity change from 0 to 512 [ 60.573500][ T3581] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.587737][ T6898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.587766][ T6898] IPv6: NLM_F_CREATE should be set when creating new route [ 60.609920][ T4716] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.611805][ T4716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.613787][ T4716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.622053][ T4716] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.623740][ T4716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.677692][ T3581] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.679976][ T4720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.681577][ T4720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.683107][ T4720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.686067][ T4720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.687864][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.832658][ T3581] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.835672][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.835843][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.919706][ T3581] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.938504][ T6905] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.939826][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.939940][ T6905] bridge_slave_0: entered allmulticast mode [ 60.940390][ T6905] bridge_slave_0: entered promiscuous mode [ 60.946646][ T6905] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.948129][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.949482][ T6905] bridge_slave_1: entered allmulticast mode [ 60.951053][ T6905] bridge_slave_1: entered promiscuous mode [ 60.959377][ T6905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.962002][ T6905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.971984][ T6905] team0: Port device team_slave_0 added [ 60.972786][ T6905] team0: Port device team_slave_1 added [ 60.982757][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.982782][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.982808][ T6905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.983365][ T6905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.983373][ T6905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.983388][ T6905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.995815][ T6905] hsr_slave_0: entered promiscuous mode [ 60.996230][ T6905] hsr_slave_1: entered promiscuous mode [ 60.996767][ T6905] debugfs: 'hsr0' already exists in 'hsr' [ 60.996777][ T6905] Cannot create hsr debugfs directory [ 61.051090][ T3581] bridge_slave_1: left allmulticast mode [ 61.051137][ T3581] bridge_slave_1: left promiscuous mode [ 61.054732][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.058328][ T3581] bridge_slave_0: left allmulticast mode [ 61.059417][ T3581] bridge_slave_0: left promiscuous mode [ 61.060916][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.142396][ T3581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 61.156218][ T3581] bond0 (unregistering): Released all slaves [ 61.188660][ T6905] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.191464][ T6905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.191986][ T6905] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.194624][ T6905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.196281][ T6905] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.198819][ T6905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.200519][ T6905] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.202759][ T6905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.234379][ T6905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.239788][ T6905] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.244775][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.244826][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.249053][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.249097][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.328540][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 61.393673][ T3581] hsr_slave_0: left promiscuous mode [ 61.396941][ T3581] hsr_slave_1: left promiscuous mode [ 61.397261][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.397282][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.398271][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.398282][ T3581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.406905][ T3581] veth1_macvtap: left promiscuous mode [ 61.406959][ T3581] veth0_macvtap: left promiscuous mode [ 61.407050][ T3581] veth1_vlan: left promiscuous mode [ 61.407092][ T3581] veth0_vlan: left promiscuous mode [ 61.515203][ T3581] team0 (unregistering): Port device team_slave_1 removed [ 61.519625][ T3581] team0 (unregistering): Port device team_slave_0 removed [ 61.560850][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 61.593407][ T6905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.685204][ T7005] loop3: detected capacity change from 0 to 128 [ 61.690127][ T7005] FAT-fs (loop3): bogus number of reserved sectors [ 61.691380][ T7005] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 61.693049][ T7005] FAT-fs (loop3): Can't find a valid FAT filesystem [ 61.718938][ T6905] veth0_vlan: entered promiscuous mode [ 61.725945][ T6905] veth1_vlan: entered promiscuous mode [ 61.741253][ T6905] veth0_macvtap: entered promiscuous mode [ 61.763131][ T6905] veth1_macvtap: entered promiscuous mode [ 61.800628][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.811890][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.817399][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 61.848607][ T3509] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.848708][ T3509] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.848772][ T3509] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.848821][ T3509] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.863466][ T7023] __nla_validate_parse: 6 callbacks suppressed [ 61.863599][ T7023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 61.863616][ T7023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.636'. [ 61.872290][ T7025] loop3: detected capacity change from 0 to 512 [ 61.872700][ T7025] EXT4-fs: Ignoring removed orlov option [ 61.872729][ T7025] EXT4-fs: inline encryption not supported [ 61.881672][ T7025] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 61.891892][ T7025] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.637: corrupted in-inode xattr: e_value size too large [ 61.891930][ T7025] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.894163][ T7025] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.637: couldn't read orphan inode 15 (err -117) [ 61.894187][ T7025] loop3: lost filesystem error report for type 5 error -117 [ 61.894562][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 61.894583][ C0] EXT4-fs (loop3): initial error at time 317: ext4_iget_extra_inode:5180: inode 15 [ 61.894601][ C0] EXT4-fs (loop3): last error at time 317: ext4_orphan_get:1404 [ 61.926561][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.926590][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.991684][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.991720][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.015692][ T7035] loop1: detected capacity change from 0 to 512 [ 62.037335][ T7035] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.638: corrupted in-inode xattr: invalid ea_ino [ 62.037388][ T7035] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.040079][ T7035] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.638: couldn't read orphan inode 15 (err -117) [ 62.040113][ T7035] loop1: lost filesystem error report for type 5 error -117 [ 62.063128][ T7035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 62.137291][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.137495][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.766498][ T4720] Bluetooth: hci0: command tx timeout [ 63.095742][ T7073] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.098586][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 63.193556][ T7079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'. [ 63.362823][ T7106] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0 [ 63.392155][ T7111] loop5: detected capacity change from 0 to 256 [ 63.392503][ T7111] vfat: Unknown parameter 'nnonumtail' [ 63.398949][ T7110] loop5: detected capacity change from 0 to 256 [ 63.399196][ T7110] vfat: Unknown parameter 'nnonumtail' [ 63.459807][ T7118] loop1: detected capacity change from 0 to 256 [ 63.460262][ T7118] vfat: Unknown parameter 'shortnam' [ 63.540537][ T7135] netlink: 16 bytes leftover after parsing attributes in process `syz.5.660'. [ 63.597863][ T7143] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 63.597887][ T7143] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.597961][ T7143] vhci_hcd vhci_hcd.0: Device attached [ 63.606067][ T7146] vhci_hcd: connection closed [ 63.606206][ T39] vhci_hcd vhci_hcd.1: stop threads [ 63.606237][ T39] vhci_hcd vhci_hcd.1: release socket [ 63.606255][ T39] vhci_hcd vhci_hcd.1: disconnect device [ 63.631609][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.665'. [ 63.637435][ T4825] hid-generic 000E:0008:0000.0003: unexpected long global item [ 63.639101][ T4825] hid-generic 000E:0008:0000.0003: probe with driver hid-generic failed with error -22 [ 63.642311][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.665'. [ 63.699172][ T7164] loop5: detected capacity change from 0 to 512 [ 63.703569][ T7164] ext4: Unknown parameter 'fsname' [ 63.727244][ T7166] mmap: syz.2.667 (7166) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.792314][ T7174] fuse: fd is not a fuse device [ 63.826825][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.675'. [ 64.308732][ T7194] loop5: detected capacity change from 0 to 7 [ 64.310432][ T7194] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 64.310461][ T7194] loop5: partition table partially beyond EOD, truncated [ 64.310643][ T7194] loop5: p1 size 487441168 extends beyond EOD, truncated [ 64.400239][ T3509] tipc: Subscription rejected, illegal request [ 64.427396][ T7200] syzkaller0: entered promiscuous mode [ 64.427436][ T7200] syzkaller0: entered allmulticast mode [ 64.448413][ T7209] netlink: 44 bytes leftover after parsing attributes in process `syz.0.685'. [ 64.487215][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.488590][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.493724][ T9] cfg80211: failed to load regulatory.db [ 64.740282][ T7237] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 64.741688][ T7237] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 64.742018][ T7237] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 64.804651][ T4720] Bluetooth: hci0: command tx timeout [ 65.464410][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.697'. [ 65.531346][ T7260] netlink: 120 bytes leftover after parsing attributes in process `syz.3.700'. [ 65.533620][ T7259] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 65.537115][ T7259] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 65.537156][ T7259] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 65.537171][ T7259] netlink: 'syz.3.700': attribute type 2 has an invalid length. [ 65.537186][ T7259] netlink: 'syz.3.700': attribute type 1 has an invalid length. [ 65.537201][ T7259] netlink: 'syz.3.700': attribute type 2 has an invalid length. [ 65.572431][ T7263] syzkaller1: entered promiscuous mode [ 65.572465][ T7263] syzkaller1: entered allmulticast mode [ 66.057712][ T7280] loop3: detected capacity change from 0 to 512 [ 66.059066][ T7280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.075571][ T7280] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.706: orphan file block 0: bad magic [ 66.075604][ T7280] loop3: lost filesystem error report for type 5 error -117 [ 66.076223][ T7280] EXT4-fs (loop3): mount failed [ 66.314739][ T7280] 9pnet_fd: p9_fd_create_unix (7280): problem connecting socket: ./file1: -111 [ 66.411151][ T7284] loop3: detected capacity change from 0 to 8192 [ 66.765877][ T7307] kexec: Could not allocate control_code_buffer [ 66.894635][ T4720] Bluetooth: hci0: command tx timeout [ 68.270938][ T7312] bridge1: entered promiscuous mode [ 68.270976][ T7312] bridge1: entered allmulticast mode [ 68.272190][ T7312] team0: Port device bridge1 added [ 68.272734][ T7313] bridge0: port 3(team0) entered blocking state [ 68.272814][ T7313] bridge0: port 3(team0) entered disabled state [ 68.273593][ T7313] team0: entered allmulticast mode [ 68.273615][ T7313] team_slave_0: entered allmulticast mode [ 68.273648][ T7313] team_slave_1: entered allmulticast mode [ 68.275221][ T7313] team0: entered promiscuous mode [ 68.275232][ T7313] team_slave_0: entered promiscuous mode [ 68.275293][ T7313] team_slave_1: entered promiscuous mode [ 68.275649][ T7313] bridge0: port 3(team0) entered blocking state [ 68.275694][ T7313] bridge0: port 3(team0) entered forwarding state [ 68.401112][ T7324] nfs: Unknown parameter ' ' [ 68.411996][ T7324] __nla_validate_parse: 4 callbacks suppressed [ 68.412032][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.722'. [ 68.412051][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.722'. [ 68.412381][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.722'. [ 68.412393][ T7324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.722'. [ 68.461485][ T7339] loop1: detected capacity change from 0 to 128 [ 68.473369][ T7339] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.501484][ T7315] bridge0: port 3(team0) entered disabled state [ 68.501583][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.501759][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.561730][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 68.621925][ T7315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.626253][ T7315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.653908][ T7359] loop3: detected capacity change from 0 to 128 [ 68.654260][ T7359] vfat: Unknown parameter '0xffffffffffffffff' [ 68.662361][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'. [ 68.672533][ T7361] loop1: detected capacity change from 0 to 2048 [ 68.674109][ T7361] ext4: Unknown parameter 'pcr' [ 68.681594][ T7363] netlink: 14 bytes leftover after parsing attributes in process `syz.1.728'. [ 68.740034][ T7367] Cannot find del_set index 2 as target [ 68.772923][ T7315] tipc: Resetting bearer [ 68.789459][ T7329] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.840636][ T7351] warning: `syz.0.718' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.857628][ T7363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.887446][ T7363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.967770][ T7363] bond0 (unregistering): Released all slaves [ 68.976138][ T4720] Bluetooth: hci0: command tx timeout [ 69.251389][ T7355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.251436][ T7355] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.261863][ T7382] binder: 7381:7382 got reply transaction with no transaction stack [ 69.261902][ T7382] binder: 7381:7382 transaction reply to 0:0 failed 19/29201/-71, code 0 size 0-0 line 3155 [ 69.261943][ T7382] binder: 7381:7382 ioctl c0306201 20000380 returned -14 [ 69.279465][ T3346] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.279513][ T3346] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.279535][ T3346] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.281348][ T7382] loop5: detected capacity change from 0 to 512 [ 69.287532][ T7382] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 69.301923][ T7382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 69.301989][ T7382] System zones: 1-12 [ 69.302089][ T7382] EXT4-fs (loop5): orphan cleanup on readonly fs [ 69.306306][ T7382] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.731: bg 0: block 361: padding at end of block bitmap is not set [ 69.306328][ T7382] loop5: lost filesystem error report for type 5 error -117 [ 69.310465][ T7382] EXT4-fs (loop5): Remounting filesystem read-only [ 69.310640][ T7382] EXT4-fs (loop5): 1 truncate cleaned up [ 69.311149][ T7382] EXT4-fs mount: 20 callbacks suppressed [ 69.311164][ T7382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 69.322238][ T7382] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 69.322914][ T7382] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 69.357991][ T7355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.361237][ T7355] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.369458][ T6905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 69.470599][ T7355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.472848][ T7355] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.486738][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 69.586147][ T7355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.586189][ T7355] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.654837][ T7406] loop5: detected capacity change from 0 to 1024 [ 69.742278][ T3509] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.742322][ T3509] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.794520][ T1055] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.794623][ T1055] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.798257][ T3509] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.798293][ T3509] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.798311][ T3509] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.798323][ T3509] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.801355][ T4402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.828436][ T7412] loop5: detected capacity change from 0 to 2048 [ 69.838487][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 69.848074][ T7412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.870982][ T7422] loop3: detected capacity change from 0 to 512 [ 69.884493][ T7412] overlayfs: failed to set xattr on upper [ 69.889809][ T7412] overlayfs: ...falling back to redirect_dir=nofollow. [ 69.891328][ T7412] overlayfs: ...falling back to uuid=null. [ 69.897894][ T7412] overlayfs: Failed to create volatile/dirty file. [ 69.904374][ T7422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.963113][ T6905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.994329][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.073205][ T7435] loop3: detected capacity change from 0 to 1024 [ 70.080949][ T7435] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 70.080999][ T7435] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 70.081045][ T7435] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 70.081224][ T7435] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: inode #32: comm syz.3.742: iget: special inode unallocated [ 70.081236][ T7435] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 70.082113][ T7435] EXT4-fs (loop3): no journal found [ 70.082120][ T7435] EXT4-fs (loop3): can't get journal size [ 70.087629][ T7435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.089486][ T7435] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.114461][ T7439] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 70.152446][ T7439] EXT4-fs error (device loop3): __ext4_iget:5533: inode #15: block 1803188595: comm syz.3.742: invalid block [ 70.170786][ T7439] overlayfs: failed to look up (file1) for ino (-117) [ 70.175692][ T7435] EXT4-fs error (device loop3): __ext4_iget:5533: inode #15: block 1803188595: comm syz.3.742: invalid block [ 70.175985][ T7435] overlayfs: failed to look up (file1) for ino (-117) [ 70.212839][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.509027][ T7463] netlink: 288 bytes leftover after parsing attributes in process `syz.3.745'. [ 71.245564][ T7485] loop3: detected capacity change from 0 to 512 [ 71.363276][ T7474] syzkaller0: entered promiscuous mode [ 71.363309][ T7474] syzkaller0: entered allmulticast mode [ 71.411183][ T7500] loop3: detected capacity change from 0 to 128 [ 71.415827][ T7500] FAT-fs (loop3): Directory bread(block 1048) failed [ 71.417217][ T7500] FAT-fs (loop3): Directory bread(block 1049) failed [ 71.418589][ T7500] FAT-fs (loop3): Directory bread(block 1050) failed [ 71.419745][ T7500] FAT-fs (loop3): Directory bread(block 1051) failed [ 71.420927][ T7500] FAT-fs (loop3): Directory bread(block 1052) failed [ 71.422139][ T7500] FAT-fs (loop3): Directory bread(block 1053) failed [ 71.423520][ T7500] FAT-fs (loop3): Directory bread(block 1054) failed [ 71.425877][ T7500] FAT-fs (loop3): Directory bread(block 1055) failed [ 71.429649][ T7500] syz.3.755: attempt to access beyond end of device [ 71.429649][ T7500] loop3: rw=8390659, sector=1096, nr_sectors = 8 limit=128 [ 71.436900][ T7496] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 71.593696][ T7520] loop5: detected capacity change from 0 to 512 [ 71.608015][ T7520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.669363][ T6905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.692620][ T7531] FAULT_INJECTION: forcing a failure. [ 71.692620][ T7531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.695514][ T7531] CPU: 1 UID: 0 PID: 7531 Comm: syz.1.763 Tainted: G L syzkaller #0 PREEMPT [ 71.695539][ T7531] Tainted: [L]=SOFTLOCKUP [ 71.695546][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 71.695556][ T7531] Call trace: [ 71.695561][ T7531] show_stack+0x2c/0x3c (C) [ 71.695583][ T7531] __dump_stack+0x30/0x40 [ 71.695594][ T7531] dump_stack_lvl+0xd8/0x12c [ 71.695605][ T7531] dump_stack+0x1c/0x28 [ 71.695614][ T7531] should_fail_ex+0x41c/0x590 [ 71.695623][ T7531] should_fail+0x14/0x24 [ 71.695629][ T7531] should_fail_usercopy+0x20/0x30 [ 71.695636][ T7531] _inline_copy_from_user+0x3c/0x174 [ 71.695648][ T7531] copy_msghdr_from_user+0xb8/0x194 [ 71.695658][ T7531] ___sys_sendmsg+0x14c/0x224 [ 71.695672][ T7531] __sys_sendmsg+0x158/0x204 [ 71.695681][ T7531] __arm64_sys_sendmsg+0x88/0x9c [ 71.695690][ T7531] invoke_syscall+0x98/0x244 [ 71.695700][ T7531] el0_svc_common+0xec/0x23c [ 71.695710][ T7531] do_el0_svc+0x4c/0x5c [ 71.695720][ T7531] el0_svc+0x64/0x260 [ 71.695729][ T7531] el0t_64_sync_handler+0x44/0x104 [ 71.695737][ T7531] el0t_64_sync+0x198/0x19c [ 71.793733][ T7548] binder: 7547:7548 tried to acquire reference to desc 0, got 1 instead [ 71.802885][ T7548] binder: 7547:7548 BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 71.806443][ T7548] binder: 7547:7548 ioctl c0306201 200001c0 returned -22 [ 71.823269][ T7552] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 71.826997][ T7553] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 71.844405][ T7554] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 71.846569][ T7554] bridge0: port 3(syz_tun) entered blocking state [ 71.846636][ T7554] bridge0: port 3(syz_tun) entered disabled state [ 71.846714][ T7554] syz_tun: entered allmulticast mode [ 71.847230][ T7554] syz_tun: entered promiscuous mode [ 71.847399][ T7554] bridge0: port 3(syz_tun) entered blocking state [ 71.847452][ T7554] bridge0: port 3(syz_tun) entered forwarding state [ 71.941221][ T7546] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 71.941447][ T7546] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 71.949220][ T7546] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 72.117956][ T7583] loop5: detected capacity change from 0 to 128 [ 72.122319][ T7583] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.131110][ T7583] syz.5.779 (pid 7583) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 72.152362][ T6905] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.156532][ T7586] Bluetooth: MGMT ver 1.23 [ 72.157162][ T7586] Bluetooth: hci0: unsupported parameter 5135 [ 72.157173][ T7586] Bluetooth: hci0: unsupported parameter 8192 [ 72.157180][ T7586] Bluetooth: hci0: unsupported parameter 5135 [ 72.157186][ T7586] Bluetooth: hci0: unsupported parameter 8192 [ 72.160753][ T7586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.212019][ T7586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.263014][ T7586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.154891][ T7610] loop5: detected capacity change from 0 to 256 [ 73.470947][ T7649] fuse: Unknown parameter 'contúYhLroot' [ 73.473509][ T7649] overlayfs: overlapping lowerdir path [ 73.603028][ T7674] __nla_validate_parse: 12 callbacks suppressed [ 73.604292][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 73.641162][ T7679] FAULT_INJECTION: forcing a failure. [ 73.641162][ T7679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.643925][ T7679] CPU: 0 UID: 0 PID: 7679 Comm: syz.1.804 Tainted: G L syzkaller #0 PREEMPT [ 73.643951][ T7679] Tainted: [L]=SOFTLOCKUP [ 73.643955][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.643960][ T7679] Call trace: [ 73.643964][ T7679] show_stack+0x2c/0x3c (C) [ 73.643990][ T7679] __dump_stack+0x30/0x40 [ 73.644006][ T7679] dump_stack_lvl+0xd8/0x12c [ 73.644017][ T7679] dump_stack+0x1c/0x28 [ 73.644027][ T7679] should_fail_ex+0x41c/0x590 [ 73.644035][ T7679] should_fail+0x14/0x24 [ 73.644041][ T7679] should_fail_usercopy+0x20/0x30 [ 73.644049][ T7679] _copy_from_iter+0x188/0x1064 [ 73.644057][ T7679] netlink_sendmsg+0x570/0x948 [ 73.644068][ T7679] __sock_sendmsg+0xc8/0x17c [ 73.644077][ T7679] ____sys_sendmsg+0x3d0/0x6c8 [ 73.644087][ T7679] ___sys_sendmsg+0x198/0x224 [ 73.644096][ T7679] __sys_sendmsg+0x158/0x204 [ 73.644105][ T7679] __arm64_sys_sendmsg+0x88/0x9c [ 73.644115][ T7679] invoke_syscall+0x98/0x244 [ 73.644125][ T7679] el0_svc_common+0xec/0x23c [ 73.644135][ T7679] do_el0_svc+0x4c/0x5c [ 73.644144][ T7679] el0_svc+0x64/0x260 [ 73.644154][ T7679] el0t_64_sync_handler+0x44/0x104 [ 73.644162][ T7679] el0t_64_sync+0x198/0x19c [ 73.735808][ T7688] loop5: detected capacity change from 0 to 256 [ 73.783066][ T7688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.807'. [ 73.806545][ T7699] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.808'. [ 73.843291][ T7699] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.808'. [ 73.845348][ T4720] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.943485][ T7710] loop5: detected capacity change from 0 to 256 [ 73.950339][ T7710] vfat: Unknown parameter 'dont_appraise' [ 74.019545][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 74.047015][ T7733] FAULT_INJECTION: forcing a failure. [ 74.047015][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 74.047058][ T7733] CPU: 1 UID: 0 PID: 7733 Comm: syz.1.818 Tainted: G L syzkaller #0 PREEMPT [ 74.047072][ T7733] Tainted: [L]=SOFTLOCKUP [ 74.047076][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 74.047082][ T7733] Call trace: [ 74.047086][ T7733] show_stack+0x2c/0x3c (C) [ 74.047109][ T7733] __dump_stack+0x30/0x40 [ 74.047121][ T7733] dump_stack_lvl+0xd8/0x12c [ 74.047132][ T7733] dump_stack+0x1c/0x28 [ 74.047141][ T7733] should_fail_ex+0x41c/0x590 [ 74.047149][ T7733] should_failslab+0xc4/0x120 [ 74.047158][ T7733] kmem_cache_alloc_noprof+0x94/0x5d8 [ 74.047166][ T7733] skb_clone+0x1ac/0x320 [ 74.047177][ T7733] __netlink_deliver_tap+0x364/0x6f4 [ 74.047188][ T7733] netlink_deliver_tap+0x1d8/0x1dc [ 74.047197][ T7733] netlink_unicast+0x5dc/0x7f8 [ 74.047206][ T7733] netlink_sendmsg+0x648/0x948 [ 74.047215][ T7733] __sock_sendmsg+0xc8/0x17c [ 74.047224][ T7733] ____sys_sendmsg+0x3d0/0x6c8 [ 74.047233][ T7733] ___sys_sendmsg+0x198/0x224 [ 74.047242][ T7733] __sys_sendmsg+0x158/0x204 [ 74.047251][ T7733] __arm64_sys_sendmsg+0x88/0x9c [ 74.047261][ T7733] invoke_syscall+0x98/0x244 [ 74.047271][ T7733] el0_svc_common+0xec/0x23c [ 74.047281][ T7733] do_el0_svc+0x4c/0x5c [ 74.047290][ T7733] el0_svc+0x64/0x260 [ 74.047300][ T7733] el0t_64_sync_handler+0x44/0x104 [ 74.047308][ T7733] el0t_64_sync+0x198/0x19c [ 74.047376][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 74.173549][ T7750] loop1: detected capacity change from 0 to 1024 [ 74.215323][ T7758] loop5: detected capacity change from 0 to 128 [ 74.222966][ T7758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c01c, mo2=0002] [ 74.223012][ T7758] System zones: 1-3, 19-19, 35-36 [ 74.223646][ T7758] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.231228][ T7761] openvswitch: netlink: Message has 2 unknown bytes. [ 74.238311][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 74.241380][ T7761] loop1: detected capacity change from 0 to 512 [ 74.245286][ T7761] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.252887][ T7761] EXT4-fs (loop1): 1 truncate cleaned up [ 74.254654][ T7761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.259873][ T7761] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.825: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 74.272947][ T6905] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.284087][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.366540][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 74.415083][ T7774] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.831'. [ 74.423047][ T7774] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.831'. [ 74.449558][ T7779] FAULT_INJECTION: forcing a failure. [ 74.449558][ T7779] name failslab, interval 1, probability 0, space 0, times 0 [ 74.449593][ T7779] CPU: 0 UID: 0 PID: 7779 Comm: syz.1.832 Tainted: G L syzkaller #0 PREEMPT [ 74.449609][ T7779] Tainted: [L]=SOFTLOCKUP [ 74.449614][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 74.449620][ T7779] Call trace: [ 74.449623][ T7779] show_stack+0x2c/0x3c (C) [ 74.449641][ T7779] __dump_stack+0x30/0x40 [ 74.449658][ T7779] dump_stack_lvl+0xd8/0x12c [ 74.449669][ T7779] dump_stack+0x1c/0x28 [ 74.449679][ T7779] should_fail_ex+0x41c/0x590 [ 74.449688][ T7779] should_failslab+0xc4/0x120 [ 74.449698][ T7779] kmem_cache_alloc_noprof+0x94/0x5d8 [ 74.449707][ T7779] skb_clone+0x1ac/0x320 [ 74.449718][ T7779] nfnetlink_rcv+0x3c0/0x16ec [ 74.449726][ T7779] netlink_unicast+0x600/0x7f8 [ 74.449735][ T7779] netlink_sendmsg+0x648/0x948 [ 74.449744][ T7779] __sock_sendmsg+0xc8/0x17c [ 74.449753][ T7779] ____sys_sendmsg+0x3d0/0x6c8 [ 74.449762][ T7779] ___sys_sendmsg+0x198/0x224 [ 74.449771][ T7779] __sys_sendmsg+0x158/0x204 [ 74.449780][ T7779] __arm64_sys_sendmsg+0x88/0x9c [ 74.449789][ T7779] invoke_syscall+0x98/0x244 [ 74.449799][ T7779] el0_svc_common+0xec/0x23c [ 74.449808][ T7779] do_el0_svc+0x4c/0x5c [ 74.449818][ T7779] el0_svc+0x64/0x260 [ 74.449827][ T7779] el0t_64_sync_handler+0x44/0x104 [ 74.449835][ T7779] el0t_64_sync+0x198/0x19c [ 74.568658][ T7790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.573760][ T7794] fuse: Unknown parameter 'groq·àÓ£00000000000000000000' [ 74.575171][ T7790] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.838: bad orphan inode 131083 [ 74.575191][ T7790] loop3: lost filesystem error report for type 5 error -117 [ 74.575800][ T7790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.610418][ T7804] binder: 7803:7804 tried to acquire reference to desc 0, got 1 instead [ 74.612488][ T7804] binder_alloc: 7803: pid 7803 spamming oneway? 1 buffers allocated for a total size of 4096 [ 74.614707][ T7804] binder: 7803:7804 got transaction with invalid data ptr [ 74.614752][ T7804] binder: 7803:7804 transaction call to 7803:0 failed 30/29201/-14, code 0 size 0-24 line 3511 [ 74.684943][ T4909] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.692004][ T7346] binder: undelivered transaction 29, process died. [ 74.692142][ T7346] binder: undelivered transaction 28, process died. [ 75.072582][ T7832] FAULT_INJECTION: forcing a failure. [ 75.072582][ T7832] name failslab, interval 1, probability 0, space 0, times 0 [ 75.072627][ T7832] CPU: 0 UID: 0 PID: 7832 Comm: syz.2.846 Tainted: G L syzkaller #0 PREEMPT [ 75.072641][ T7832] Tainted: [L]=SOFTLOCKUP [ 75.072646][ T7832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 75.072658][ T7832] Call trace: [ 75.072662][ T7832] show_stack+0x2c/0x3c (C) [ 75.072688][ T7832] __dump_stack+0x30/0x40 [ 75.072701][ T7832] dump_stack_lvl+0xd8/0x12c [ 75.072711][ T7832] dump_stack+0x1c/0x28 [ 75.072721][ T7832] should_fail_ex+0x41c/0x590 [ 75.072729][ T7832] should_failslab+0xc4/0x120 [ 75.072738][ T7832] __kmalloc_noprof+0x108/0x6b8 [ 75.072747][ T7832] nla_strdup+0xa0/0x148 [ 75.072754][ T7832] nf_tables_newset+0xecc/0x1ae0 [ 75.072763][ T7832] nfnetlink_rcv+0xc8c/0x16ec [ 75.072771][ T7832] netlink_unicast+0x600/0x7f8 [ 75.072779][ T7832] netlink_sendmsg+0x648/0x948 [ 75.072789][ T7832] __sock_sendmsg+0xc8/0x17c [ 75.072798][ T7832] ____sys_sendmsg+0x3d0/0x6c8 [ 75.072807][ T7832] ___sys_sendmsg+0x198/0x224 [ 75.072816][ T7832] __sys_sendmsg+0x158/0x204 [ 75.072825][ T7832] __arm64_sys_sendmsg+0x88/0x9c [ 75.072835][ T7832] invoke_syscall+0x98/0x244 [ 75.072845][ T7832] el0_svc_common+0xec/0x23c [ 75.072854][ T7832] do_el0_svc+0x4c/0x5c [ 75.072864][ T7832] el0_svc+0x64/0x260 [ 75.072873][ T7832] el0t_64_sync_handler+0x44/0x104 [ 75.072882][ T7832] el0t_64_sync+0x198/0x19c [ 75.178582][ T7844] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 75.259782][ T30] audit: type=1326 audit(331.240:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.264302][ T30] audit: type=1326 audit(331.240:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.272092][ T30] audit: type=1326 audit(331.260:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.272120][ T30] audit: type=1326 audit(331.260:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.281729][ T30] audit: type=1326 audit(331.270:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.281774][ T30] audit: type=1326 audit(331.270:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.282355][ T30] audit: type=1326 audit(331.270:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.284060][ T7854] xt_hashlimit: max too large, truncated to 1048576 [ 75.284788][ T30] audit: type=1326 audit(331.270:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.284813][ T30] audit: type=1326 audit(331.270:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.284832][ T30] audit: type=1326 audit(331.270:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7853 comm="syz.2.849" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffffad979228 code=0x7ffc0000 [ 75.288176][ T7857] fuse: Bad value for 'fd' [ 75.289878][ T7854] fuse: Bad value for 'fd' [ 75.378220][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.515473][ T7878] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.627655][ T7904] FAULT_INJECTION: forcing a failure. [ 75.627655][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 75.631204][ T7904] CPU: 1 UID: 0 PID: 7904 Comm: syz.0.859 Tainted: G L syzkaller #0 PREEMPT [ 75.631227][ T7904] Tainted: [L]=SOFTLOCKUP [ 75.631231][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 75.631237][ T7904] Call trace: [ 75.631241][ T7904] show_stack+0x2c/0x3c (C) [ 75.631266][ T7904] __dump_stack+0x30/0x40 [ 75.631282][ T7904] dump_stack_lvl+0xd8/0x12c [ 75.631293][ T7904] dump_stack+0x1c/0x28 [ 75.631303][ T7904] should_fail_ex+0x41c/0x590 [ 75.631311][ T7904] should_failslab+0xc4/0x120 [ 75.631319][ T7904] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 75.631329][ T7904] kvasprintf+0x110/0x1e4 [ 75.631339][ T7904] kasprintf+0xe8/0x13c [ 75.631349][ T7904] nf_tables_set_alloc_name+0xf8/0x624 [ 75.631359][ T7904] nf_tables_newset+0xee8/0x1ae0 [ 75.631367][ T7904] nfnetlink_rcv+0xc8c/0x16ec [ 75.631375][ T7904] netlink_unicast+0x600/0x7f8 [ 75.631384][ T7904] netlink_sendmsg+0x648/0x948 [ 75.631393][ T7904] __sock_sendmsg+0xc8/0x17c [ 75.631402][ T7904] ____sys_sendmsg+0x3d0/0x6c8 [ 75.631411][ T7904] ___sys_sendmsg+0x198/0x224 [ 75.631421][ T7904] __sys_sendmsg+0x158/0x204 [ 75.631430][ T7904] __arm64_sys_sendmsg+0x88/0x9c [ 75.631439][ T7904] invoke_syscall+0x98/0x244 [ 75.631449][ T7904] el0_svc_common+0xec/0x23c [ 75.631459][ T7904] do_el0_svc+0x4c/0x5c [ 75.631468][ T7904] el0_svc+0x64/0x260 [ 75.631477][ T7904] el0t_64_sync_handler+0x44/0x104 [ 75.631486][ T7904] el0t_64_sync+0x198/0x19c [ 75.729600][ T7917] Injecting memory failure for pfn 0x11f3be at process virtual address 0x20036000 [ 75.757383][ T7917] Memory failure: 0x11f3be: recovery action for clean LRU page: Recovered [ 75.761115][ T7917] Injecting memory failure for pfn 0x11f7b1 at process virtual address 0x20037000 [ 75.763116][ T7917] Memory failure: 0x11f7b1: recovery action for clean LRU page: Recovered [ 75.764867][ T7917] Injecting memory failure for pfn 0x1351d2 at process virtual address 0x20038000 [ 75.766820][ T7917] Memory failure: 0x1351d2: recovery action for clean LRU page: Recovered [ 75.768458][ T7917] Injecting memory failure for pfn 0x122607 at process virtual address 0x20039000 [ 75.771171][ T7917] Memory failure: 0x122607: recovery action for clean LRU page: Recovered [ 75.826317][ T7930] overlayfs: failed to resolve './file0': -2 [ 75.826659][ T7932] overlayfs: failed to resolve './file0': -2 [ 75.924792][ T4720] Bluetooth: hci0: command 0x0c1a tx timeout [ 76.648670][ T7965] FAULT_INJECTION: forcing a failure. [ 76.648670][ T7965] name failslab, interval 1, probability 0, space 0, times 0 [ 76.648709][ T7965] CPU: 1 UID: 0 PID: 7965 Comm: syz.0.873 Tainted: G L syzkaller #0 PREEMPT [ 76.648727][ T7965] Tainted: [L]=SOFTLOCKUP [ 76.648731][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 76.648736][ T7965] Call trace: [ 76.648739][ T7965] show_stack+0x2c/0x3c (C) [ 76.648760][ T7965] __dump_stack+0x30/0x40 [ 76.648771][ T7965] dump_stack_lvl+0xd8/0x12c [ 76.648781][ T7965] dump_stack+0x1c/0x28 [ 76.648791][ T7965] should_fail_ex+0x41c/0x590 [ 76.648799][ T7965] should_failslab+0xc4/0x120 [ 76.648808][ T7965] __kmalloc_noprof+0x108/0x6b8 [ 76.648820][ T7965] nft_trans_alloc+0x34/0x270 [ 76.648830][ T7965] __nft_trans_set_add+0x40/0x3fc [ 76.648838][ T7965] nf_tables_newset+0x1590/0x1ae0 [ 76.648847][ T7965] nfnetlink_rcv+0xc8c/0x16ec [ 76.648855][ T7965] netlink_unicast+0x600/0x7f8 [ 76.648864][ T7965] netlink_sendmsg+0x648/0x948 [ 76.648874][ T7965] __sock_sendmsg+0xc8/0x17c [ 76.648884][ T7965] ____sys_sendmsg+0x3d0/0x6c8 [ 76.648893][ T7965] ___sys_sendmsg+0x198/0x224 [ 76.648903][ T7965] __sys_sendmsg+0x158/0x204 [ 76.648912][ T7965] __arm64_sys_sendmsg+0x88/0x9c [ 76.648921][ T7965] invoke_syscall+0x98/0x244 [ 76.648932][ T7965] el0_svc_common+0xec/0x23c [ 76.648941][ T7965] do_el0_svc+0x4c/0x5c [ 76.648951][ T7965] el0_svc+0x64/0x260 [ 76.648960][ T7965] el0t_64_sync_handler+0x44/0x104 [ 76.648969][ T7965] el0t_64_sync+0x198/0x19c [ 77.584956][ T8007] netlink: 'syz.5.883': attribute type 1 has an invalid length. [ 77.603118][ T8007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.622616][ T8007] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 77.683295][ T8021] FAULT_INJECTION: forcing a failure. [ 77.683295][ T8021] name failslab, interval 1, probability 0, space 0, times 0 [ 77.686332][ T8021] CPU: 1 UID: 0 PID: 8021 Comm: syz.5.889 Tainted: G L syzkaller #0 PREEMPT [ 77.686353][ T8021] Tainted: [L]=SOFTLOCKUP [ 77.686359][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.686369][ T8021] Call trace: [ 77.686374][ T8021] show_stack+0x2c/0x3c (C) [ 77.686398][ T8021] __dump_stack+0x30/0x40 [ 77.686410][ T8021] dump_stack_lvl+0xd8/0x12c [ 77.686421][ T8021] dump_stack+0x1c/0x28 [ 77.686430][ T8021] should_fail_ex+0x41c/0x590 [ 77.686439][ T8021] should_failslab+0xc4/0x120 [ 77.686448][ T8021] __kmalloc_noprof+0x108/0x6b8 [ 77.686456][ T8021] nft_trans_alloc+0x34/0x270 [ 77.686466][ T8021] __nft_trans_set_add+0x40/0x3fc [ 77.686474][ T8021] nf_tables_newset+0x1590/0x1ae0 [ 77.686482][ T8021] nfnetlink_rcv+0xc8c/0x16ec [ 77.686489][ T8021] netlink_unicast+0x600/0x7f8 [ 77.686498][ T8021] netlink_sendmsg+0x648/0x948 [ 77.686508][ T8021] __sock_sendmsg+0xc8/0x17c [ 77.686517][ T8021] ____sys_sendmsg+0x3d0/0x6c8 [ 77.686527][ T8021] ___sys_sendmsg+0x198/0x224 [ 77.686536][ T8021] __sys_sendmsg+0x158/0x204 [ 77.686545][ T8021] __arm64_sys_sendmsg+0x88/0x9c [ 77.686554][ T8021] invoke_syscall+0x98/0x244 [ 77.686565][ T8021] el0_svc_common+0xec/0x23c [ 77.686574][ T8021] do_el0_svc+0x4c/0x5c [ 77.686584][ T8021] el0_svc+0x64/0x260 [ 77.686593][ T8021] el0t_64_sync_handler+0x44/0x104 [ 77.686602][ T8021] el0t_64_sync+0x198/0x19c [ 78.014646][ T4720] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.056505][ T8032] netlink: 'syz.2.891': attribute type 4 has an invalid length. [ 78.100672][ T8043] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 78.111698][ T8043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.122202][ T8044] bond0: (slave syz_tun): Enslaving as a backup interface with an up link [ 78.409219][ T8056] set_capacity_and_notify: 4 callbacks suppressed [ 78.410772][ T8056] loop3: detected capacity change from 0 to 1024 [ 78.422690][ T8056] EXT4-fs: Mount option(s) incompatible with ext2 [ 78.840398][ T8063] __nla_validate_parse: 14 callbacks suppressed [ 78.840447][ T8063] netlink: 324 bytes leftover after parsing attributes in process `syz.5.897'. [ 78.875449][ T8072] loop3: detected capacity change from 0 to 512 [ 78.875825][ T8072] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.882427][ T8072] EXT4-fs (loop3): orphan cleanup on readonly fs [ 78.882458][ T8072] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 78.887989][ T8072] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.901: invalid indirect mapped block 1819239214 (level 1) [ 78.892198][ T8072] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 78.894546][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 78.894578][ C1] EXT4-fs (loop3): initial error at time 334: ext4_free_branches:1023: inode 13 [ 78.894620][ C1] EXT4-fs (loop3): last error at time 334: ext4_free_branches:1023: inode 13 [ 78.905257][ T8072] EXT4-fs (loop3): Remounting filesystem read-only [ 78.905522][ T8072] EXT4-fs (loop3): 1 truncate cleaned up [ 78.930754][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.5.903'. [ 78.930795][ T8075] FAULT_INJECTION: forcing a failure. [ 78.930795][ T8075] name failslab, interval 1, probability 0, space 0, times 0 [ 78.930826][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.5.903 Tainted: G L syzkaller #0 PREEMPT [ 78.930839][ T8075] Tainted: [L]=SOFTLOCKUP [ 78.930843][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 78.930847][ T8075] Call trace: [ 78.930850][ T8075] show_stack+0x2c/0x3c (C) [ 78.930870][ T8075] __dump_stack+0x30/0x40 [ 78.930882][ T8075] dump_stack_lvl+0xd8/0x12c [ 78.930891][ T8075] dump_stack+0x1c/0x28 [ 78.930901][ T8075] should_fail_ex+0x41c/0x590 [ 78.930909][ T8075] should_failslab+0xc4/0x120 [ 78.930917][ T8075] __kmalloc_cache_noprof+0x94/0x5ec [ 78.930926][ T8075] nft_connlimit_do_init+0x11c/0x2a0 [ 78.930936][ T8075] nft_connlimit_init+0x34/0x48 [ 78.930943][ T8075] nft_set_elem_expr_alloc+0x1ac/0x450 [ 78.930953][ T8075] nf_tables_newsetelem+0xb38/0x3010 [ 78.930961][ T8075] nfnetlink_rcv+0xc8c/0x16ec [ 78.930969][ T8075] netlink_unicast+0x600/0x7f8 [ 78.930978][ T8075] netlink_sendmsg+0x648/0x948 [ 78.930987][ T8075] __sock_sendmsg+0xc8/0x17c [ 78.930997][ T8075] ____sys_sendmsg+0x3d0/0x6c8 [ 78.931006][ T8075] ___sys_sendmsg+0x198/0x224 [ 78.931015][ T8075] __sys_sendmsg+0x158/0x204 [ 78.931024][ T8075] __arm64_sys_sendmsg+0x88/0x9c [ 78.931033][ T8075] invoke_syscall+0x98/0x244 [ 78.931043][ T8075] el0_svc_common+0xec/0x23c [ 78.931053][ T8075] do_el0_svc+0x4c/0x5c [ 78.931062][ T8075] el0_svc+0x64/0x260 [ 78.931072][ T8075] el0t_64_sync_handler+0x44/0x104 [ 78.931080][ T8075] el0t_64_sync+0x198/0x19c [ 78.943587][ T8072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.995658][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.905'. [ 79.009822][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.075732][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 80.009711][ T8095] netlink: 'syz.2.910': attribute type 49 has an invalid length. [ 80.047934][ T8097] loop1: detected capacity change from 0 to 256 [ 80.170086][ T8099] loop3: detected capacity change from 0 to 1024 [ 80.175069][ T8095] ip6gretap0: entered promiscuous mode [ 80.175101][ T8095] ip6gretap0: entered allmulticast mode [ 80.182739][ T8101] loop1: detected capacity change from 0 to 512 [ 80.188916][ T8101] EXT4-fs: Ignoring removed oldalloc option [ 80.192489][ T8101] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.192526][ T8101] EXT4-fs (loop1): group descriptors corrupted! [ 80.192807][ T8099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.221481][ T8101] loop1: detected capacity change from 0 to 2048 [ 80.246212][ T8106] loop5: detected capacity change from 0 to 256 [ 80.269528][ T8106] vfat: Deprecated parameter 'posix' [ 80.269564][ T8106] FAT-fs: "posix" option is obsolete, not supported now [ 80.287816][ T8101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.314833][ T8116] netlink: 'syz.2.916': attribute type 5 has an invalid length. [ 80.437391][ T8121] overlayfs: missing 'workdir' [ 80.544040][ T8125] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 80.544080][ T8125] FAT-fs (loop5): Filesystem has been set read-only [ 80.923154][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.028112][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.144054][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.925'. [ 81.164984][ T8168] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 81.181147][ T8168] openvswitch: netlink: Actions may not be safe on all matching packets [ 81.287845][ T8186] netlink: 'syz.2.928': attribute type 13 has an invalid length. [ 81.315413][ T8201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'. [ 81.319974][ T8200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.931'. [ 81.328940][ T3346] ------------[ cut here ]------------ [ 81.328965][ T3346] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 81.329182][ T3346] WARNING: net/mac80211/driver-ops.h:1723 at ieee80211_set_active_links+0x5ec/0xb88, CPU#0: kworker/u8:6/3346 [ 81.333098][ T3346] Modules linked in: [ 81.333777][ T3346] CPU: 0 UID: 0 PID: 3346 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT [ 81.335655][ T3346] Tainted: [L]=SOFTLOCKUP [ 81.336443][ T3346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.338197][ T3346] Workqueue: events_unbound cfg80211_wiphy_work [ 81.339326][ T3346] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 81.340688][ T3346] pc : ieee80211_set_active_links+0x5ec/0xb88 [ 81.341788][ T3346] lr : ieee80211_set_active_links+0x5ec/0xb88 [ 81.342883][ T3346] sp : ffff80009a457950 [ 81.343628][ T3346] x29: ffff80009a457960 x28: 1fffe0001a0237e0 x27: ffff800088b3a000 [ 81.345084][ T3346] x26: dfff800000000000 x25: ffff80008a19d000 x24: ffff0000c9b5d918 [ 81.346481][ T3346] x23: 0000000000000000 x22: ffff0000c9ca0f60 x21: 0000000000000000 [ 81.347815][ T3346] x20: ffff0000c9b5ec70 x19: 0000000000000003 x18: 0000000000000000 [ 81.349211][ T3346] x17: ffff80011d2d8000 x16: ffff80008eb60000 x15: 0000000000000000 [ 81.350627][ T3346] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 81.352069][ T3346] x11: 0000000000000000 x10: 0000000000000002 x9 : 9472fc89c0e56700 [ 81.353459][ T3346] x8 : 9472fc89c0e56700 x7 : ffff80008048c5b8 x6 : 0000000000000000 [ 81.354834][ T3346] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 81.356207][ T3346] x2 : 0000000100000000 x1 : ffff0000d011ba80 x0 : 0000000000000000 [ 81.357625][ T3346] Call trace: [ 81.358191][ T3346] ieee80211_set_active_links+0x5ec/0xb88 (P) [ 81.359233][ T3346] ieee80211_if_parse_active_links+0xe0/0x150 [ 81.360297][ T3346] ieee80211_if_write_sdata_handler+0x6c/0x84 [ 81.361419][ T3346] wiphy_locked_debugfs_write_work+0xe8/0x12c [ 81.362662][ T3346] cfg80211_wiphy_work+0x278/0x588 [ 81.363718][ T3346] process_scheduled_works+0x788/0x10b8 [ 81.364886][ T3346] worker_thread+0x798/0xbd0 [ 81.365624][ T3346] kthread+0x304/0x3d4 [ 81.366323][ T3346] ret_from_fork+0x10/0x20 [ 81.367070][ T3346] irq event stamp: 870822 [ 81.367819][ T3346] hardirqs last enabled at (870821): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 81.369712][ T3346] hardirqs last disabled at (870822): [] el1_brk64+0x20/0x54 [ 81.371267][ T3346] softirqs last enabled at (870796): [] ieee80211_ibss_work+0x2d0/0xd98 [ 81.372987][ T3346] softirqs last disabled at (870794): [] ieee80211_ibss_work+0xc8/0xd98 [ 81.374673][ T3346] ---[ end trace 0000000000000000 ]---