last executing test programs:

1m15.877864057s ago: executing program 1 (id=207):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x2000, 0x8ef98fc165024b44)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x14)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
read(r2, 0x0, 0x0)

1m15.775204297s ago: executing program 1 (id=208):
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x4e}, {0x9, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000000000000000000000000000000000000000000000000000ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

1m15.668513993s ago: executing program 1 (id=209):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200c1, 0x0, 0x0, 0x0, 0x7}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000090a010400000000000000000a0000050900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3000118008000100636d70002400028008000140000000151000038006000200cda5e7ddf5000000080002"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m15.595578834s ago: executing program 1 (id=210):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc714, 0x9, 0xc34, 0x1, 0x1, 0x7, 0xffffff94, 0x5, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x18090)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$kcm(0x11, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x8001}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8) (async)
close(r8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r9, 0x100003e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='@', 0x1}], 0x1}, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000001c0), 0x3, 0x58c, &(0x7f0000000480)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x18000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) (async)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x18000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfffffffc, 0x2}, {0x6, 0xfffffff7}]}, 0x14, 0x1) (async)
setxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0xfffffffc, 0x2}, {0x6, 0xfffffff7}]}, 0x14, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x5)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r10, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async)
process_vm_writev(r10, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)

1m15.408465201s ago: executing program 1 (id=213):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0)

1m14.413222184s ago: executing program 1 (id=233):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x9, 0x20a, &(0x7f0000000900)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg$unix(r1, 0x0, 0x0, 0x40000102, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (fail_nth: 27)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
close_range(r5, 0xffffffffffffffff, 0x0)
ftruncate(r3, 0x6000000)
inotify_init1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0)

1m14.151368664s ago: executing program 32 (id=233):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x9, 0x20a, &(0x7f0000000900)="$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")
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg$unix(r1, 0x0, 0x0, 0x40000102, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (fail_nth: 27)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
close_range(r5, 0xffffffffffffffff, 0x0)
ftruncate(r3, 0x6000000)
inotify_init1(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0)

4.446900345s ago: executing program 5 (id=897):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000500001c11223344000800000005000500000005c0060008"], 0x4a)

4.412477209s ago: executing program 0 (id=898):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000600001c11223344000800000005000500000005c0060008"], 0x4a)

4.152921351s ago: executing program 5 (id=903):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x0, 0x94, 0x5, 0xd, [0x8224, 0x0]}}}}, 0x19)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x47}, "c5b76fb4f364a9d6ad641ee5b7a37ba22b4735a68306ed44e7024c055d28ca9c7ec0f266a7606a4d9351605a983b4e35bce1e43806dec6b1bc6f72dd63e6092c7b3d45c47945bc"}, 0x4b)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xa, 0xc9}}}, 0x6)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xac}, @l2cap_cid_signaling={{0xa8}, [@l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x16ed, 0x5, 0x7f}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x6}}, @l2cap_conn_rsp={{0x3, 0xf, 0x8}, {0x401, 0x5, 0xffff, 0x200}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x9, 0xb, 0x8, 0xd2}}, @l2cap_conf_req={{0x4, 0x40, 0x33}, {0xb1bb, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x0, 0x7, 0x4, 0x3, 0xcd}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x0, 0x7f, 0x3, 0x2, 0x6e0}}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x4}}, @l2cap_disconn_rsp={{0x7, 0x10, 0x4}, {0x4, 0x5}}, @l2cap_conf_rsp={{0x5, 0x3, 0x2a}, {0x3ff, 0x6, 0x49, [@l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x65e8}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xff}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x2, 0x2, 0x6, 0x101, 0x6}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x8, 0x2}, {0x3}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x7f, 0x4}}]}}, 0xb1)
write(0xffffffffffffffff, &(0x7f00000001c0)="5e2fe3943f70a8f6d8856bafee56bcdeddfcc80112ebf6afd4607c71d360d2a677b637d7c67b01df0b7a475092d99159d4719c60dc0d5c95e148dc5d5f802622c6ef4246fa7e01e2971e8e62", 0x4c)
r0 = fanotify_init(0x0, 0x1000)
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
r2 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc75c0139601ba495}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=@dellinkprop={0xb8, 0x6d, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x1000c, 0x18000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xf}, @IFLA_AF_SPEC={0x80, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_MPLS={0x4}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xff}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0x0, 0xf98a}]}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x80000001}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44054}, 0x10000040)
setxattr$security_capability(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780)=@v2={0x2000000, [{0x8000, 0x404}, {0x3, 0x9b0}]}, 0x14, 0x3)

4.103677725s ago: executing program 5 (id=905):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000580)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@fallback=r2, r0, 0x12, 0x32, 0x0, @void, @void, @void, @value=r4}, 0x20)

4.008347395s ago: executing program 0 (id=908):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x208401, &(0x7f0000000440), 0x3, 0x572, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21)
r5 = fsmount(r1, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="1200000002"], 0x10)

4.007811137s ago: executing program 5 (id=909):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0xfffffffffffffee4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x22)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ed900000000000000001200", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
recvfrom(r0, 0x0, 0x0, 0x40002017, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x7c}}, 0x4040850)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000280)={[], [{@flag='lazytime'}, {@seclabel}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x1, 0x3, 0x2, 0x3c}, 0x20)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dvb_demux(&(0x7f0000000080), 0xc, 0x101040)
r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200000000000000fd"}, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5})

3.118677365s ago: executing program 4 (id=911):
r0 = dup(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c)
r1 = dup(0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='wg0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)

3.084767809s ago: executing program 5 (id=912):
syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xfffffffe, 0xb5d, 0x7f, 0x20000006, 0x4d, 0x40000006, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x204, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x242, 0x400003, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x7, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x8, 0x4, 0x0, 0xfffffffc], [0xc0, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x8, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e0, 0x2, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x9, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0x0, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0x200000bf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x20, 0x2, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x37f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0xfc, 0x40000047, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

2.996256917s ago: executing program 4 (id=914):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4049080)
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0x4005)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

2.89656687s ago: executing program 2 (id=917):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0)

2.895226991s ago: executing program 2 (id=918):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000a00001c11223344000800000005000500000005c0060008"], 0x4a)

2.841707366s ago: executing program 4 (id=919):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000580)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@fallback=r2, r0, 0x12, 0x32, 0x0, @void, @void, @void, @value=r4}, 0x20)

2.762891116s ago: executing program 3 (id=921):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0)
lseek(r0, 0x800, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
prctl$PR_MCE_KILL(0x4c, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x8480, &(0x7f0000000640)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRESOCT, @ANYBLOB="107c70f21f6681b90bea5aaeaf8681826c7a5244f5a3345e013ed2d6a303668e16dca703afafc079c730a07e76e70c41", @ANYRES8, @ANYRESDEC], 0x3, 0x238, &(0x7f0000000280)="$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")
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
truncate(&(0x7f0000000240)='./file1\x00', 0x3c4c)
setns(0xffffffffffffffff, 0x8000000)
fcntl$dupfd(0xffffffffffffffff, 0x406, r2)
setns(r4, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
get_robust_list(0x0, 0xffffffffffffffff, &(0x7f0000000040))
r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/tcp6\x00')
read$FUSE(r5, &(0x7f00000046c0)={0x2020}, 0x2020)
read$FUSE(r5, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000180)=0x5807de84)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
readv(r7, &(0x7f0000000140)=[{&(0x7f0000003680)=""/4090, 0xffa}, {&(0x7f0000000200)=""/19, 0x13}, {0x0}], 0xb)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

2.762427156s ago: executing program 4 (id=922):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000611810000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_read_part_table(0x628, &(0x7f0000000640)="$eJzs3D+IXNUXB/Dvmz9vZvaXn7uCvcEmMU0CiyKEBGRZVhDcgGhSSNRG0kwlaLVm1BWx2MRCDaSJRUCyLgTBSoIQCGHXJhArsTUWQWtxRZ/MvJkxG/yDZi2Ez6e495x3z33nMtwpZ8J/WiOX3kpzGFWd4diZrpT11BqN1XAo6mAw3pjkmfXji8++cezxem1k+8d3k7SrZp1+cqOee0/U02hsJ/NXWv219U4eSfLp3p++/9+oUZlBY7uqnT+ZbtIo//T447aD8TGnqtPj4NH/7yi8y/Zjc6/89WfEH9v/8oGrxeDmJD080z9xqszDjY3W9jD/pb5Prbu37c3Tu9P/8pHrs91JMpciD1zqZS7nLhwszybF7UOjheadW2Yml+H378Tf0//5ePnxxWsLq7d685uTg6wstn/7AmV4mXccYM8u9AUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4N/RyIGrDxY37/+slw+3jm4dnumfOLWxb+H0xo1j7SQfFXvquoOdei7GUyt5PbnvnvtfPnJ99s3VqsrsMFv5Zum7LLeWnjp34Wh5tpd9tw+N614YjWtfvfRqnVdb3ZT33D3p95JcvLaweqs3v/nk8vJ77byflXy++lorSfnOi+nVhcWwXaPMlx88XyWd7Ep3AAAAAAAAAAAAAAAAAAAAqC120prEz5VJmvl6GFednJkWlclDo2Bamvkrrf7a+tLbZ/aPH4z/H2DQSAZJvv3i/MmkMSnf7Gb8gukrRsEPVVXtPNBgEhTNnQuj39tPnhXDwu4dDfhnfg0AAP//wwxymA==")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x77359400}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x8001af85, 0xfffffffffffff63a)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000540)={[{@name={'name', 0x3d, 'GPL\x00'}}]})

2.762137539s ago: executing program 2 (id=923):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
lseek(r0, 0x2000, 0x0)

2.677928617s ago: executing program 3 (id=924):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r0, 0x4b65, 0x6e8)

2.652195641s ago: executing program 3 (id=925):
r0 = dup(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c)
r1 = dup(0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='wg0\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)

2.651244305s ago: executing program 2 (id=926):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071105c00000000001f0100000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xb4d2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f00000013c0)=ANY=[@ANYBLOB="b40800000000000073113900000000008510000002000000b7000000000000009500c200000000009500001200000000ee8f2f24f2763a5acd060c9ca089da07adb3dd187a340487de5e3d5c61854ac19e081841ec40f6cfa091122baf30a75b2c219e2e5fadc9fd11ac3a03f92c92423901b367190afc7ea66c4c1b5050f9b44a424f5cbad8668aa2fa14045f934d2386a96bb559e29cb747e774c3270cefa0399dbb78d48643a385a245d6746942b3261554cfc85405b999915ac8a2b7"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xf34, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xf20, 0x1, [@m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf34}}, 0x0)
fchownat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_OPENQRY(r5, 0x5600, 0xfffffffffffffffe)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000001800010000000000f8dbdf25020000000001c80900270000060015000200000014001680100008800c00018005"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x200, 0x0, 0xfffd}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x4000000)
syz_read_part_table(0x5ca, &(0x7f0000000bc0)="$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")
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0)

2.341183992s ago: executing program 0 (id=927):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000380), 0x1, 0x571, &(0x7f0000001180)="$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") (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000348c522725223da400b600000000000000000200"], 0x48)
r0 = socket$inet(0x2, 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) (async)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)
mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{'fsc,ntext'}]})
listen(0xffffffffffffffff, 0x81) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) (async)
r2 = socket$nl_crypto(0x10, 0x3, 0x15) (async)
r3 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0</\x00\x8e._\x14zC\x9a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-\xe2\xc7\xd3\xe6M^\x98\x85x\x14\t\xe9Q1\x1dK\x9a\x045\xd3\x17\xb22\x00D(\xd2\xdd\xa0\xff\x1f\x00\x00\n\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xe36g\xfd\xd2\xd4\xe3\x1f\xa6\xc6\xe2\xa6!\x9aE<2`]<\xf2R?8\xb8\xa3\xbf\xc3\x18s\xf7!~0\xc7y\xe2\xb2VP\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yxm\x96\xbfS\x97\x9c/\x1f5i\xc6\x861\x8a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd26<Z|U6\r\xd7\x18\xad\x1d`\x06\xcfN\a\xf9\xd7 \x1a\xd8\xef\xb6\x9e8Z\t:#r\xa2\xb1h\xc0\xc0a\xa9\xc46A\x01\xac\xe6\xbf !5I\xc9<\x19{)\xa4\xad\v\x923\b\x9d\xbd>,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) (async)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000040)) (async)
write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) (async)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r3, 0x200000000000000) (async)
fallocate(r3, 0x3, 0x5, 0xffffffff) (async)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x80000}, 0xc) (async)
r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x8, 0x1)
ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r6, 0x6f50, 0x7fffffff) (async)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

2.290280365s ago: executing program 3 (id=928):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@user_xattr}, {@nodioread_nolock}, {@usrquota}]}, 0x1, 0x4d4, &(0x7f0000000f00)="$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")
r0 = socket$netlink(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e90ffffff00000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x1402, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c000300"], 0x120}}, 0x0)

2.24510078s ago: executing program 0 (id=929):
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x221, 0x0, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x80, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d6, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x4e}, {0x9, 0x0, 0x0, 0x0, 0xffffffff7fffffff, 0xffffffffffffffed, 0x800}, {0x2, 0xfffffffffffffffd, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc02000080ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

2.216278846s ago: executing program 0 (id=930):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4049080)
r1 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0x4005)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c)

2.168303421s ago: executing program 5 (id=931):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x208401, &(0x7f0000000440), 0x3, 0x572, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21)
r5 = fsmount(r1, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="1200000002"], 0x10)

2.167184722s ago: executing program 3 (id=932):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
setreuid(0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8993, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x208401, &(0x7f0000000440), 0x3, 0x572, &(0x7f00000006c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21)
r5 = fsmount(r1, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="1200000002"], 0x10)

1.593719291s ago: executing program 4 (id=933):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002cf0ff00030a010100000000000000000a000007090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

949.003632ms ago: executing program 2 (id=934):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], 0x3, 0x23d, &(0x7f0000000300)="$eJzs2k9rHGUcB/DfxNbUlHQj/qMF8UEP6mVocvbQIC2IAUUboQrSqZnVZcfdsLMEVsTuSfHmS/AsHr0J0qOXXHwDevCWS449iCObTbEb1kORNm3z+VzmB898eZ5n5pmH5zB7b3z3ebdd5+1iGAtZFguXYhy3s1iJhbhjHK+/eu3XF9+/9uHb6xsbl99L6cr61dW1lNK5l3756MsfX741PPvBT+d+XozdlY/39tf+3H1+9/ze31c/69SpU6def5iKdKPfHxY3qjJtdepuntK7VVnUZer06nIw096u+tvbo1T0tpaXtgdlXaeiN0rdcpSG/TQcjFLxadHppTzP0/JS8H9s/nC7aWK/OX09mqZ56vs4eyuW/4hWZE+n7JlL2XPXsxfG2fn9pmkd91C5L7z/k+2uTf1MRPXNzubO5vQ6bV9vRyeqKONitOKvmCyTQ9P6ylsbly+mAyvxdXXzMH9zZ/OJ2fxqtGJlfn51mk+z+cVYijgdcZhfi1Y8Oz+/Njd/Jl575a7+82jFb59EP6rYikn23/xXqym9+c7GkfyFg/sAAB43eUrf/j4t557f8jzdcaR9GrqH8+GR89WpuHDqGCfOgXr0RbeoqnLw2BaTWT4EwziBRRb3rYvFuKdUFjGerIOH4rE8+Wh8ese6LfGAzO6TAAAAAAAAAAAAPCoe1B+4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/+WfAAAA//9l+Muc")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f00000001c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x80)
syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x0)

139.185395ms ago: executing program 3 (id=935):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1be2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x5e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_MCE_KILL(0x21, 0x1, 0x2)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x209}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x8}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000)
flock(0xffffffffffffffff, 0x5)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = fsopen(&(0x7f0000000340)='proc\x00', 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000300)=0x3ff, 0x4)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x1, 0x0)
fchdir(0xffffffffffffffff)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/fscaps', 0x88102, 0xb)
write$cgroup_int(r4, &(0x7f00000001c0)=0x720, 0x12)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBLED(r5, 0x4b65, 0x6e8)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
r7 = getpid()
r8 = syz_pidfd_open(r7, 0x0)
process_madvise(r8, &(0x7f0000000100), 0x0, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40810}, 0x4084)

101.019426ms ago: executing program 4 (id=936):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000280)={0xc0000000, 0x274, "1d982fdac6a8f359377ab260d57c166ff26d8d8acb8ee03a3568b1671ab32eeb", 0x9, 0x3, 0x7fffffff, 0x3, 0x3, 0x6, 0xe9f, 0x100, [0xd, 0x1, 0x7fff, 0x6]})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111840000000000851000000200000085000000050000009500000000000000952ebbe2c600a505"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200700, &(0x7f00000000c0), 0x0, 0x478, &(0x7f00000014c0)="$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")

30.498673ms ago: executing program 0 (id=937):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000200000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84}, 0x94)

0s ago: executing program 2 (id=938):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x2, 0xc}, {0x0, 0x94, 0x5, 0xd, [0x8224, 0x0]}}}}, 0x19)
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x47}, "c5b76fb4f364a9d6ad641ee5b7a37ba22b4735a68306ed44e7024c055d28ca9c7ec0f266a7606a4d9351605a983b4e35bce1e43806dec6b1bc6f72dd63e6092c7b3d45c47945bc"}, 0x4b)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xa, 0xc9}}}, 0x6)
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xac}, @l2cap_cid_signaling={{0xa8}, [@l2cap_create_chan_req={{0xc, 0x2, 0x5}, {0x16ed, 0x5, 0x7f}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x6}}, @l2cap_conn_rsp={{0x3, 0xf, 0x8}, {0x401, 0x5, 0xffff, 0x200}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x9, 0xb, 0x8, 0xd2}}, @l2cap_conf_req={{0x4, 0x40, 0x33}, {0xb1bb, 0x4, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x0, 0x7, 0x4, 0x3, 0xcd}}, @l2cap_conf_efs={0x6, 0x10, {0x5, 0x0, 0x7f, 0x3, 0x2, 0x6e0}}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x5}]}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x4}}, @l2cap_disconn_rsp={{0x7, 0x10, 0x4}, {0x4, 0x5}}, @l2cap_conf_rsp={{0x5, 0x3, 0x2a}, {0x3ff, 0x6, 0x49, [@l2cap_conf_flushto={0x2, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x65e8}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0xff}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x8}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x2, 0x2, 0x6, 0x101, 0x6}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x8, 0x2}, {0x3}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x7f, 0x4}}]}}, 0xb1)
write(0xffffffffffffffff, &(0x7f00000001c0)="5e2fe3943f70a8f6d8856bafee56bcdeddfcc80112ebf6afd4607c71d360d2a677b637d7c67b01df0b7a475092d99159d4719c60dc0d5c95e148dc5d5f802622c6ef4246fa7e01e2971e8e62", 0x4c)
r0 = fanotify_init(0x0, 0x1000)
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xc75c0139601ba495}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=@dellinkprop={0xb8, 0x6d, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1000c, 0x18000}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0xf}, @IFLA_AF_SPEC={0x80, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_MPLS={0x4}, @AF_INET6={0x50, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x41}}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xff}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xf, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0x0, 0xf98a}]}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x80000001}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44054}, 0x10000040)
setxattr$security_capability(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780)=@v2={0x2000000, [{0x8000, 0x404}, {0x3, 0x9b0}]}, 0x14, 0x3)

kernel console output (not intermixed with test programs):

t up to get a fully working HSR network
[   31.137971][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.148436][ T4715] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   31.153589][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.156401][ T4715] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   31.159737][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.165548][ T4715] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   31.168331][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.170690][ T4715] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   31.172157][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.175264][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.194792][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.208271][ T4714] 8021q: adding VLAN 0 to HW filter on device team0
[   31.217513][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.217563][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.220349][ T4711] 8021q: adding VLAN 0 to HW filter on device team0
[   31.232299][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.232347][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.236797][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   31.239735][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   31.241407][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.241447][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.242194][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.242217][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.242654][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   31.249692][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   31.261751][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   31.264459][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   31.265111][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   31.267896][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   31.282339][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.290941][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.294409][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.304122][ T4715] 8021q: adding VLAN 0 to HW filter on device team0
[   31.320005][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.320066][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.320607][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.320626][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.358256][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.368223][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0
[   31.372624][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   31.404026][ T4720] 8021q: adding VLAN 0 to HW filter on device team0
[   31.410653][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.410702][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.411267][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.411286][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.437759][ T4721] veth0_vlan: entered promiscuous mode
[   31.440440][ T4721] veth1_vlan: entered promiscuous mode
[   31.491624][ T4721] veth0_macvtap: entered promiscuous mode
[   31.493919][ T4721] veth1_macvtap: entered promiscuous mode
[   31.518198][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.519826][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.570849][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.583388][ T3800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.583736][ T3800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.583860][ T3800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.610519][   T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.610565][   T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.624784][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.624818][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.632616][ T4714] veth0_vlan: entered promiscuous mode
[   31.634606][ T4714] veth1_vlan: entered promiscuous mode
[   31.653615][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.659993][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.679235][ T1907] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.692655][ T4721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   31.695274][ T4714] veth0_macvtap: entered promiscuous mode
[   31.705526][ T4714] veth1_macvtap: entered promiscuous mode
[   31.717316][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.722198][ T4711] veth0_vlan: entered promiscuous mode
[   31.725029][ T4715] veth0_vlan: entered promiscuous mode
[   31.728805][ T4715] veth1_vlan: entered promiscuous mode
[   31.756359][ T4720] veth0_vlan: entered promiscuous mode
[   31.758379][ T4720] veth1_vlan: entered promiscuous mode
[   31.763504][ T4711] veth1_vlan: entered promiscuous mode
[   31.775152][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.787922][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.800890][ T4715] veth0_macvtap: entered promiscuous mode
[   31.804383][ T4715] veth1_macvtap: entered promiscuous mode
[   31.814733][ T3800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.814845][ T3800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.814909][ T3800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.815378][ T3800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.823011][ T4711] veth0_macvtap: entered promiscuous mode
[   31.824207][ T4711] veth1_macvtap: entered promiscuous mode
[   31.828057][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.829657][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.834792][   T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.838777][ T4720] veth0_macvtap: entered promiscuous mode
[   31.846454][ T4720] veth1_macvtap: entered promiscuous mode
[   32.083132][   T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.083600][   T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.083789][   T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.098183][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.108338][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.114145][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.114178][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.128578][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0
[   32.151334][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1
[   32.154896][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.154930][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.158184][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.160550][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.169558][ T4717] Bluetooth: hci3: command tx timeout
[   32.169579][   T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.169624][   T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.169659][   T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.169681][   T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.169764][ T4717] Bluetooth: hci1: command tx timeout
[   32.169827][ T4717] Bluetooth: hci2: command tx timeout
[   32.169888][ T4717] Bluetooth: hci0: command tx timeout
[   32.170051][ T4718] Bluetooth: hci4: command tx timeout
[   32.191376][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.191484][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.201989][ T3800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.202026][ T3800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.252623][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.252657][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.272811][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.272850][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.294531][ T3800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   32.294570][ T3800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   32.302732][ T4896] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.340906][   T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   32.341049][   T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   32.341155][   T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   32.341255][   T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   32.433346][ T4900] loop1: detected capacity change from 0 to 256
[   32.487110][ T4835] kernel write not supported for file bpf-prog (pid: 4835 comm: kworker/1:8)
[   32.850396][ T4909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.850659][ T4909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.876560][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'.
[   32.883253][ T4896] loop3: detected capacity change from 0 to 512
[   32.907158][ T4896] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 3: comm syz.3.4: lblock 0 mapped to illegal pblock 3 (length 1)
[   32.910546][ T4896] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[   32.913978][ T4896] EXT4-fs (loop3): Remounting filesystem read-only
[   32.914018][ T4896] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.4: error -EUCLEAN reading directory block
[   32.914117][ T4896] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[   32.924337][ T4896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.967346][ T4917] loop4: detected capacity change from 0 to 256
[   32.967735][ T4917] vfat: Unknown parameter 'shortnvme'
[   33.610413][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.611284][ T4927] loop0: detected capacity change from 0 to 512
[   33.624483][ T4927] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.12: iget: bad extended attribute block 134217728
[   33.624521][ T4927] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   33.626101][ T4927] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.12: couldn't read orphan inode 15 (err -117)
[   33.626167][ T4927] loop0: lost filesystem error report for type 5 error -117
[   33.627945][ T4927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   33.664889][ T4927] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.12: bg 0: block 465: padding at end of block bitmap is not set
[   33.675514][ T4927] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   33.675560][ T4927] EXT4-fs (loop0): This should not happen!! Data will be lost
[   33.675560][ T4927] 
[   33.675582][ T4927] EXT4-fs (loop0): Total free blocks count 0
[   33.675596][ T4927] EXT4-fs (loop0): Free/Dirty block details
[   33.675615][ T4927] EXT4-fs (loop0): free_blocks=0
[   33.675631][ T4927] EXT4-fs (loop0): dirty_blocks=1
[   33.675642][ T4927] EXT4-fs (loop0): Block reservation details
[   33.675653][ T4927] EXT4-fs (loop0): i_reserved_data_blocks=1
[   33.677694][ T4931] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET)
[   33.691849][ T4927] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   33.722223][ T4927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'.
[   33.780817][ T4711] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[   33.781626][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.813286][ T4937] loop1: detected capacity change from 0 to 1024
[   33.831141][ T4937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   34.113543][ T4948] Zero length message leads to an empty skb
[   34.131727][ T4951] FAULT_INJECTION: forcing a failure.
[   34.131727][ T4951] name failslab, interval 1, probability 0, space 0, times 1
[   34.131832][ T4951] CPU: 1 UID: 0 PID: 4951 Comm: syz.1.16 Not tainted syzkaller #0 PREEMPT 
[   34.131846][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   34.131851][ T4951] Call trace:
[   34.131854][ T4951]  show_stack+0x2c/0x3c (C)
[   34.131875][ T4951]  __dump_stack+0x30/0x40
[   34.131886][ T4951]  dump_stack_lvl+0xd8/0x12c
[   34.131895][ T4951]  dump_stack+0x1c/0x28
[   34.131905][ T4951]  should_fail_ex+0x41c/0x590
[   34.131916][ T4951]  should_failslab+0xc4/0x120
[   34.131924][ T4951]  __kmalloc_cache_noprof+0x94/0x5ec
[   34.131933][ T4951]  smk_fetch+0xa4/0x154
[   34.131942][ T4951]  smack_d_instantiate+0x6d4/0x7a0
[   34.131950][ T4951]  security_d_instantiate+0xf8/0x1dc
[   34.131958][ T4951]  d_splice_alias_ops+0x74/0x358
[   34.131967][ T4951]  d_splice_alias+0x2c/0x3c
[   34.131975][ T4951]  ext4_lookup+0x27c/0x5f0
[   34.131983][ T4951]  __lookup_slow+0x1e4/0x2b4
[   34.131991][ T4951]  lookup_slow+0x60/0x84
[   34.131998][ T4951]  lookup_one_unlocked+0x88/0xa4
[   34.132006][ T4951]  ovl_lookup_single+0x25c/0xb74
[   34.132014][ T4951]  ovl_lookup_layer+0x2e8/0x3ac
[   34.132021][ T4951]  ovl_lookup+0x830/0x162c
[   34.132028][ T4951]  path_openat+0xda4/0x2a60
[   34.132036][ T4951]  do_file_open+0x1c8/0x2e8
[   34.132044][ T4951]  do_sys_openat2+0x114/0x1e8
[   34.132053][ T4951]  do_sys_open+0xb0/0xe0
[   34.132062][ T4951]  __arm64_sys_openat+0xa8/0xc4
[   34.132072][ T4951]  invoke_syscall+0x98/0x244
[   34.132082][ T4951]  el0_svc_common+0xec/0x23c
[   34.132091][ T4951]  do_el0_svc+0x4c/0x5c
[   34.132100][ T4951]  el0_svc+0x64/0x260
[   34.132112][ T4951]  el0t_64_sync_handler+0x48/0x148
[   34.132122][ T4951]  el0t_64_sync+0x198/0x19c
[   34.142503][ T4951] evm: overlay not supported
[   34.249599][ T4832] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   34.261026][ T4726] Bluetooth: hci0: command tx timeout
[   34.261049][ T4726] Bluetooth: hci2: command tx timeout
[   34.261064][ T4726] Bluetooth: hci1: command tx timeout
[   34.261078][ T4726] Bluetooth: hci3: command tx timeout
[   34.261172][ T4718] Bluetooth: hci4: command tx timeout
[   34.264267][ T4947] xt_hashlimit: size too large, truncated to 1048576
[   34.278264][ T4835] IPVS: starting estimator thread 0...
[   34.284304][ T4832] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   34.334875][ T4955] fido_id[4955]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   34.342156][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   34.382000][ T4953] IPVS: using max 60 ests per chain, 144000 per kthread
[   34.414105][ T4965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22'.
[   34.455432][ T4969] FAULT_INJECTION: forcing a failure.
[   34.455432][ T4969] name failslab, interval 1, probability 0, space 0, times 0
[   34.455468][ T4969] CPU: 0 UID: 0 PID: 4969 Comm: syz.3.24 Not tainted syzkaller #0 PREEMPT 
[   34.455480][ T4969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   34.455488][ T4969] Call trace:
[   34.455491][ T4969]  show_stack+0x2c/0x3c (C)
[   34.455509][ T4969]  __dump_stack+0x30/0x40
[   34.455520][ T4969]  dump_stack_lvl+0xd8/0x12c
[   34.455530][ T4969]  dump_stack+0x1c/0x28
[   34.455540][ T4969]  should_fail_ex+0x41c/0x590
[   34.455551][ T4969]  should_failslab+0xc4/0x120
[   34.455559][ T4969]  kmem_cache_alloc_noprof+0x94/0x5d8
[   34.455568][ T4969]  do_getname+0x48/0x234
[   34.455575][ T4969]  user_path_at+0x38/0x78
[   34.455583][ T4969]  do_mount+0xb0/0x148
[   34.455592][ T4969]  __arm64_sys_mount+0x33c/0x388
[   34.455601][ T4969]  invoke_syscall+0x98/0x244
[   34.455611][ T4969]  el0_svc_common+0xec/0x23c
[   34.455621][ T4969]  do_el0_svc+0x4c/0x5c
[   34.455630][ T4969]  el0_svc+0x64/0x260
[   34.455641][ T4969]  el0t_64_sync_handler+0x48/0x148
[   34.455651][ T4969]  el0t_64_sync+0x198/0x19c
[   34.495526][ T4971] fuse: Bad value for 'fd'
[   34.505928][ T4977] loop3: detected capacity change from 0 to 4096
[   34.510142][ T4977] EXT4-fs (loop3): Test dummy encryption mode enabled
[   34.522486][ T4977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.537104][ T4977] =======================================================
[   34.537104][ T4977] WARNING: The mand mount option has been deprecated and
[   34.537104][ T4977]          and is ignored by this kernel. Remove the mand
[   34.537104][ T4977]          option from the mount to silence this warning.
[   34.537104][ T4977] =======================================================
[   34.539860][ T4980] loop1: detected capacity change from 0 to 512
[   34.548670][ T4980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   34.553533][ T4980] EXT4-fs warning (device loop1): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop1.
[   34.562087][ T4977] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   34.684714][ T4995] cgroup: name respecified
[   34.722008][ T4999] xt_hashlimit: size too large, truncated to 1048576
[   34.772912][ T5004] netlink: 'syz.2.31': attribute type 27 has an invalid length.
[   34.774421][ T5004] netlink: 'syz.2.31': attribute type 4 has an invalid length.
[   34.775904][ T5004] netlink: 140 bytes leftover after parsing attributes in process `syz.2.31'.
[   34.828058][ T5011] FAULT_INJECTION: forcing a failure.
[   34.828058][ T5011] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   34.831336][ T5011] CPU: 1 UID: 0 PID: 5011 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT 
[   34.831361][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   34.831367][ T5011] Call trace:
[   34.831371][ T5011]  show_stack+0x2c/0x3c (C)
[   34.831397][ T5011]  __dump_stack+0x30/0x40
[   34.831414][ T5011]  dump_stack_lvl+0xd8/0x12c
[   34.831425][ T5011]  dump_stack+0x1c/0x28
[   34.831434][ T5011]  should_fail_ex+0x41c/0x590
[   34.831446][ T5011]  should_fail+0x14/0x24
[   34.831456][ T5011]  should_fail_usercopy+0x20/0x30
[   34.831463][ T5011]  strncpy_from_user+0x48/0x388
[   34.831471][ T5011]  do_getname+0x84/0x234
[   34.831480][ T5011]  user_path_at+0x38/0x78
[   34.831488][ T5011]  do_mount+0xb0/0x148
[   34.831497][ T5011]  __arm64_sys_mount+0x33c/0x388
[   34.831506][ T5011]  invoke_syscall+0x98/0x244
[   34.831516][ T5011]  el0_svc_common+0xec/0x23c
[   34.831525][ T5011]  do_el0_svc+0x4c/0x5c
[   34.831534][ T5011]  el0_svc+0x64/0x260
[   34.831545][ T5011]  el0t_64_sync_handler+0x48/0x148
[   34.831555][ T5011]  el0t_64_sync+0x198/0x19c
[   34.913680][ T5017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.41'.
[   35.017911][ T1093] IPVS: starting estimator thread 0...
[   35.025332][ T5022] loop0: detected capacity change from 0 to 2048
[   35.026906][ T5022] EXT4-fs: Ignoring removed i_version option
[   35.044341][ T5022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.109363][ T5023] IPVS: using max 45 ests per chain, 108000 per kthread
[   35.321137][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.420205][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.420278][ T5031] 8021q: adding VLAN 0 to HW filter on device bond1
[   35.420849][ T5031] bridge0: port 3(bond1) entered blocking state
[   35.420927][ T5031] bridge0: port 3(bond1) entered disabled state
[   35.420988][ T5031] bond1: entered allmulticast mode
[   35.421796][ T5031] bond1: entered promiscuous mode
[   35.422051][ T5031] bridge0: port 3(bond1) entered blocking state
[   35.422102][ T5031] bridge0: port 3(bond1) entered forwarding state
[   35.437986][ T5031] 8021q: adding VLAN 0 to HW filter on device bond2
[   35.439589][ T5031] bridge0: port 4(bond2) entered blocking state
[   35.439616][ T5031] bridge0: port 4(bond2) entered disabled state
[   35.439673][ T5031] bond2: entered allmulticast mode
[   35.441047][ T5031] bond2: entered promiscuous mode
[   35.441382][ T5031] bridge0: port 4(bond2) entered blocking state
[   35.441415][ T5031] bridge0: port 4(bond2) entered forwarding state
[   35.446313][ T5031] 8021q: adding VLAN 0 to HW filter on device bond3
[   35.446668][ T5031] bridge0: port 5(bond3) entered blocking state
[   35.446723][ T5031] bridge0: port 5(bond3) entered disabled state
[   35.446776][ T5031] bond3: entered allmulticast mode
[   35.447488][ T5031] bond3: entered promiscuous mode
[   35.448458][ T5031] bridge0: port 5(bond3) entered blocking state
[   35.448486][ T5031] bridge0: port 5(bond3) entered forwarding state
[   35.457389][ T5031] 8021q: adding VLAN 0 to HW filter on device bond4
[   35.458686][ T5031] bridge0: port 6(bond4) entered blocking state
[   35.459585][ T5031] bridge0: port 6(bond4) entered disabled state
[   35.459675][ T5031] bond4: entered allmulticast mode
[   35.460658][ T5031] bond4: entered promiscuous mode
[   35.460838][ T5031] bridge0: port 6(bond4) entered blocking state
[   35.460862][ T5031] bridge0: port 6(bond4) entered forwarding state
[   35.466422][ T5031] 8021q: adding VLAN 0 to HW filter on device bond5
[   35.466792][ T5031] bridge0: port 7(bond5) entered blocking state
[   35.466828][ T5031] bridge0: port 7(bond5) entered disabled state
[   35.466887][ T5031] bond5: entered allmulticast mode
[   35.468273][ T5031] bond5: entered promiscuous mode
[   35.468545][ T5031] bridge0: port 7(bond5) entered blocking state
[   35.468582][ T5031] bridge0: port 7(bond5) entered forwarding state
[   35.718374][ T5031] 8021q: adding VLAN 0 to HW filter on device bond6
[   35.718776][ T5031] bridge0: port 8(bond6) entered blocking state
[   35.718814][ T5031] bridge0: port 8(bond6) entered disabled state
[   35.718954][ T5031] bond6: entered allmulticast mode
[   35.731724][ T5031] bond6: entered promiscuous mode
[   35.733753][ T5031] bridge0: port 8(bond6) entered blocking state
[   35.733802][ T5031] bridge0: port 8(bond6) entered forwarding state
[   35.760752][ T5031] 8021q: adding VLAN 0 to HW filter on device bond7
[   35.762673][ T5031] bridge0: port 9(bond7) entered blocking state
[   35.764042][ T5031] bridge0: port 9(bond7) entered disabled state
[   35.765412][ T5031] bond7: entered allmulticast mode
[   35.767128][ T5031] bond7: entered promiscuous mode
[   35.768471][ T5031] bridge0: port 9(bond7) entered blocking state
[   35.768510][ T5031] bridge0: port 9(bond7) entered forwarding state
[   35.770250][ T5046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'.
[   35.781894][ T5031] 8021q: adding VLAN 0 to HW filter on device bond8
[   35.783712][ T5031] bridge0: port 10(bond8) entered blocking state
[   35.785454][ T5031] bridge0: port 10(bond8) entered disabled state
[   35.786922][ T5031] bond8: entered allmulticast mode
[   35.790409][ T5031] bond8: entered promiscuous mode
[   35.791745][ T5031] bridge0: port 10(bond8) entered blocking state
[   35.791788][ T5031] bridge0: port 10(bond8) entered forwarding state
[   35.799616][ T5031] 8021q: adding VLAN 0 to HW filter on device bond9
[   35.801638][ T5031] bridge0: port 11(bond9) entered blocking state
[   35.803073][ T5031] bridge0: port 11(bond9) entered disabled state
[   35.805145][ T5031] bond9: entered allmulticast mode
[   35.808111][ T5031] bond9: entered promiscuous mode
[   35.808372][ T5031] bridge0: port 11(bond9) entered blocking state
[   35.808395][ T5031] bridge0: port 11(bond9) entered forwarding state
[   35.812149][ T1100] bridge0: port 3(bond1) entered disabled state
[   35.814529][ T1100] bridge0: port 4(bond2) entered disabled state
[   35.816657][ T1100] bridge0: port 5(bond3) entered disabled state
[   35.818453][ T5042] xt_hashlimit: size too large, truncated to 1048576
[   35.830962][ T1100] bridge0: port 6(bond4) entered disabled state
[   35.840296][ T1100] bridge0: port 7(bond5) entered disabled state
[   35.842954][ T5053] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   35.849975][ T1100] bridge0: port 8(bond6) entered disabled state
[   35.860684][ T1100] bridge0: port 9(bond7) entered disabled state
[   35.866300][ T5055] xt_hashlimit: size too large, truncated to 1048576
[   35.874839][ T1100] bridge0: port 10(bond8) entered disabled state
[   35.881492][ T1100] bridge0: port 11(bond9) entered disabled state
[   35.903081][ T5031] 8021q: adding VLAN 0 to HW filter on device bond10
[   35.904812][ T5031] bridge0: port 12(bond10) entered blocking state
[   35.906652][ T5031] bridge0: port 12(bond10) entered disabled state
[   35.908058][ T5031] bond10: entered allmulticast mode
[   35.909706][ T5059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'.
[   35.910091][ T5031] bond10: entered promiscuous mode
[   35.910306][ T5031] bridge0: port 12(bond10) entered blocking state
[   35.910329][ T5031] bridge0: port 12(bond10) entered forwarding state
[   35.916569][ T5031] 8021q: adding VLAN 0 to HW filter on device bond11
[   35.917056][ T5031] bridge0: port 13(bond11) entered blocking state
[   35.917079][ T5031] bridge0: port 13(bond11) entered disabled state
[   35.917130][ T5031] bond11: entered allmulticast mode
[   35.917819][ T5031] bond11: entered promiscuous mode
[   35.918055][ T5031] bridge0: port 13(bond11) entered blocking state
[   35.918075][ T5031] bridge0: port 13(bond11) entered forwarding state
[   35.954831][ T5031] 8021q: adding VLAN 0 to HW filter on device bond12
[   35.955302][ T5031] bridge0: port 14(bond12) entered blocking state
[   35.955334][ T5031] bridge0: port 14(bond12) entered disabled state
[   35.955394][ T5031] bond12: entered allmulticast mode
[   35.963554][ T5031] bond12: entered promiscuous mode
[   35.964757][ T5031] bridge0: port 14(bond12) entered blocking state
[   35.964800][ T5031] bridge0: port 14(bond12) entered forwarding state
[   35.969289][ T5065] ieee802154 phy0 wpan0: encryption failed: -22
[   35.985981][ T5031] 8021q: adding VLAN 0 to HW filter on device bond13
[   35.986394][ T5031] bridge0: port 15(bond13) entered blocking state
[   35.987733][ T5031] bridge0: port 15(bond13) entered disabled state
[   35.987815][ T5031] bond13: entered allmulticast mode
[   35.988482][ T5031] bond13: entered promiscuous mode
[   35.988683][ T5031] bridge0: port 15(bond13) entered blocking state
[   35.988710][ T5031] bridge0: port 15(bond13) entered forwarding state
[   35.997473][ T5070] FAULT_INJECTION: forcing a failure.
[   35.997473][ T5070] name failslab, interval 1, probability 0, space 0, times 0
[   35.997513][ T5070] CPU: 1 UID: 0 PID: 5070 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT 
[   35.997525][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   35.997531][ T5070] Call trace:
[   35.997535][ T5070]  show_stack+0x2c/0x3c (C)
[   35.997557][ T5070]  __dump_stack+0x30/0x40
[   35.997569][ T5070]  dump_stack_lvl+0xd8/0x12c
[   35.997579][ T5070]  dump_stack+0x1c/0x28
[   35.997588][ T5070]  should_fail_ex+0x41c/0x590
[   35.997599][ T5070]  should_failslab+0xc4/0x120
[   35.997607][ T5070]  __kmalloc_noprof+0x108/0x6b8
[   35.997616][ T5070]  tomoyo_encode2+0x10c/0x330
[   35.997625][ T5070]  tomoyo_encode+0x34/0x50
[   35.997633][ T5070]  tomoyo_mount_permission+0x384/0x7e4
[   35.997640][ T5070]  tomoyo_sb_mount+0x48/0x60
[   35.997649][ T5070]  security_sb_mount+0xfc/0x308
[   35.997659][ T5070]  path_mount+0xb8/0xa88
[   35.997669][ T5070]  do_mount+0xe8/0x148
[   35.997677][ T5070]  __arm64_sys_mount+0x33c/0x388
[   35.997686][ T5070]  invoke_syscall+0x98/0x244
[   35.997696][ T5070]  el0_svc_common+0xec/0x23c
[   35.997705][ T5070]  do_el0_svc+0x4c/0x5c
[   35.997715][ T5070]  el0_svc+0x64/0x260
[   35.997726][ T5070]  el0t_64_sync_handler+0x48/0x148
[   35.997736][ T5070]  el0t_64_sync+0x198/0x19c
[   36.060480][ T5031] 8021q: adding VLAN 0 to HW filter on device bond14
[   36.063158][ T5031] bridge0: port 16(bond14) entered blocking state
[   36.069021][ T5031] bridge0: port 16(bond14) entered disabled state
[   36.069220][ T5031] bond14: entered allmulticast mode
[   36.070055][ T5031] bond14: entered promiscuous mode
[   36.070261][ T5031] bridge0: port 16(bond14) entered blocking state
[   36.070282][ T5031] bridge0: port 16(bond14) entered forwarding state
[   36.093252][ T5031] 8021q: adding VLAN 0 to HW filter on device bond15
[   36.093655][ T5031] bridge0: port 17(bond15) entered blocking state
[   36.093777][ T5031] bridge0: port 17(bond15) entered disabled state
[   36.093834][ T5031] bond15: entered allmulticast mode
[   36.094511][ T5031] bond15: entered promiscuous mode
[   36.094716][ T5031] bridge0: port 17(bond15) entered blocking state
[   36.094752][ T5031] bridge0: port 17(bond15) entered forwarding state
[   36.108810][ T5083] loop1: detected capacity change from 0 to 256
[   36.109316][ T5083] vfat: Bad value for 'shortname'
[   36.120734][ T5031] 8021q: adding VLAN 0 to HW filter on device bond16
[   36.121183][ T5031] bridge0: port 18(bond16) entered blocking state
[   36.121217][ T5031] bridge0: port 18(bond16) entered disabled state
[   36.121279][ T5031] bond16: entered allmulticast mode
[   36.126321][ T5031] bond16: entered promiscuous mode
[   36.127575][ T5031] bridge0: port 18(bond16) entered blocking state
[   36.127620][ T5031] bridge0: port 18(bond16) entered forwarding state
[   36.134765][ T5083] Bluetooth: MGMT ver 1.23
[   36.141838][ T5031] 8021q: adding VLAN 0 to HW filter on device bond17
[   36.142233][ T5031] bridge0: port 19(bond17) entered blocking state
[   36.142309][ T5031] bridge0: port 19(bond17) entered disabled state
[   36.142373][ T5031] bond17: entered allmulticast mode
[   36.143756][ T5031] bond17: entered promiscuous mode
[   36.143958][ T5031] bridge0: port 19(bond17) entered blocking state
[   36.143981][ T5031] bridge0: port 19(bond17) entered forwarding state
[   36.158564][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'.
[   36.173128][ T5031] 8021q: adding VLAN 0 to HW filter on device bond18
[   36.173600][ T5031] bridge0: port 20(bond18) entered blocking state
[   36.173673][ T5031] bridge0: port 20(bond18) entered disabled state
[   36.173732][ T5031] bond18: entered allmulticast mode
[   36.180553][ T5031] bond18: entered promiscuous mode
[   36.180793][ T5031] bridge0: port 20(bond18) entered blocking state
[   36.180816][ T5031] bridge0: port 20(bond18) entered forwarding state
[   36.212272][ T5031] 8021q: adding VLAN 0 to HW filter on device bond19
[   36.212715][ T5031] bridge0: port 21(bond19) entered blocking state
[   36.212758][ T5031] bridge0: port 21(bond19) entered disabled state
[   36.212828][ T5031] bond19: entered allmulticast mode
[   36.221746][ T5031] bond19: entered promiscuous mode
[   36.228234][ T5031] bridge0: port 21(bond19) entered blocking state
[   36.228283][ T5031] bridge0: port 21(bond19) entered forwarding state
[   36.233649][ T5031] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[   36.302804][ T5100] loop3: detected capacity change from 0 to 8192
[   36.306438][ T5100] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   36.339761][ T4718] Bluetooth: hci4: command tx timeout
[   36.340290][ T4718] Bluetooth: hci3: command tx timeout
[   36.340367][ T4718] Bluetooth: hci1: command tx timeout
[   36.340383][ T4718] Bluetooth: hci2: command tx timeout
[   36.340398][ T4718] Bluetooth: hci0: command tx timeout
[   36.420720][ T5109] process 'syz.0.66' launched '/dev/fd/4' with NULL argv: empty string added
[   36.423507][ T5109] nvme_fabrics: unknown parameter or missing value 'bransport=tcp' in ctrl creation request
[   36.903134][   T15] bridge0: port 12(bond10) entered disabled state
[   36.930089][   T15] bridge0: port 13(bond11) entered disabled state
[   36.955559][   T15] bridge0: port 14(bond12) entered disabled state
[   36.979677][   T15] bridge0: port 15(bond13) entered disabled state
[   36.984652][   T15] bridge0: port 16(bond14) entered disabled state
[   36.988627][   T15] bridge0: port 17(bond15) entered disabled state
[   36.994745][ T5118] ext4: Unknown parameter 'seclabel'
[   37.052577][   T15] bridge0: port 18(bond16) entered disabled state
[   37.057466][   T15] bridge0: port 19(bond17) entered disabled state
[   37.059452][   T15] bridge0: port 20(bond18) entered disabled state
[   37.061587][   T15] bridge0: port 21(bond19) entered disabled state
[   37.353208][ T5129] squashfs: Unknown parameter ''
[   37.374074][ T5132] FAULT_INJECTION: forcing a failure.
[   37.374074][ T5132] name failslab, interval 1, probability 0, space 0, times 0
[   37.374117][ T5132] CPU: 0 UID: 0 PID: 5132 Comm: syz.4.70 Not tainted syzkaller #0 PREEMPT 
[   37.374132][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   37.374139][ T5132] Call trace:
[   37.374144][ T5132]  show_stack+0x2c/0x3c (C)
[   37.374164][ T5132]  __dump_stack+0x30/0x40
[   37.374190][ T5132]  dump_stack_lvl+0xd8/0x12c
[   37.374200][ T5132]  dump_stack+0x1c/0x28
[   37.374210][ T5132]  should_fail_ex+0x41c/0x590
[   37.374225][ T5132]  should_failslab+0xc4/0x120
[   37.374233][ T5132]  __kmalloc_noprof+0x108/0x6b8
[   37.374243][ T5132]  tomoyo_realpath_from_path+0xbc/0x4dc
[   37.374253][ T5132]  tomoyo_mount_permission+0x3b4/0x7e4
[   37.374260][ T5132]  tomoyo_sb_mount+0x48/0x60
[   37.374269][ T5132]  security_sb_mount+0xfc/0x308
[   37.374280][ T5132]  path_mount+0xb8/0xa88
[   37.374289][ T5132]  do_mount+0xe8/0x148
[   37.374298][ T5132]  __arm64_sys_mount+0x33c/0x388
[   37.374306][ T5132]  invoke_syscall+0x98/0x244
[   37.374316][ T5132]  el0_svc_common+0xec/0x23c
[   37.374326][ T5132]  do_el0_svc+0x4c/0x5c
[   37.374335][ T5132]  el0_svc+0x64/0x260
[   37.374346][ T5132]  el0t_64_sync_handler+0x48/0x148
[   37.374356][ T5132]  el0t_64_sync+0x198/0x19c
[   37.374383][ T5132] ERROR: Out of memory at tomoyo_realpath_from_path.
[   37.534928][ T5147] vlan2: entered promiscuous mode
[   37.536038][ T5147] hsr0: entered promiscuous mode
[   37.537148][ T5147] vlan2: entered allmulticast mode
[   37.538120][ T5147] hsr0: entered allmulticast mode
[   37.539150][ T5147] hsr_slave_0: entered allmulticast mode
[   37.540306][ T5147] hsr_slave_1: entered allmulticast mode
[   37.540703][ T5149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'.
[   37.545792][ T5147] netlink: 48 bytes leftover after parsing attributes in process `syz.4.75'.
[   37.548074][ T5147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'.
[   37.553051][ T5147] hsr_slave_0: left promiscuous mode
[   37.557600][ T5147] hsr_slave_1: left promiscuous mode
[   37.587380][ T5153] cgroup: name respecified
[   37.709994][ T5157] set_capacity_and_notify: 3 callbacks suppressed
[   37.710051][ T5157] loop2: detected capacity change from 0 to 1024
[   37.735914][ T5157] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   38.413915][ T4717] Bluetooth: hci0: command tx timeout
[   38.414081][ T4717] Bluetooth: hci2: command tx timeout
[   38.414271][ T4717] Bluetooth: hci1: command tx timeout
[   38.414430][ T4717] Bluetooth: hci3: command tx timeout
[   38.414586][ T4717] Bluetooth: hci4: command tx timeout
[   38.508398][ T5163] loop3: detected capacity change from 0 to 512
[   38.519489][ T5163] ext4: Unknown parameter 'seclabel'
[   38.620912][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   39.547889][ T5169] FAULT_INJECTION: forcing a failure.
[   39.547889][ T5169] name failslab, interval 1, probability 0, space 0, times 0
[   39.547928][ T5169] CPU: 1 UID: 0 PID: 5169 Comm: syz.4.84 Not tainted syzkaller #0 PREEMPT 
[   39.547941][ T5169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   39.547948][ T5169] Call trace:
[   39.547952][ T5169]  show_stack+0x2c/0x3c (C)
[   39.547971][ T5169]  __dump_stack+0x30/0x40
[   39.547982][ T5169]  dump_stack_lvl+0xd8/0x12c
[   39.547992][ T5169]  dump_stack+0x1c/0x28
[   39.548001][ T5169]  should_fail_ex+0x41c/0x590
[   39.548012][ T5169]  should_failslab+0xc4/0x120
[   39.548021][ T5169]  __kmalloc_noprof+0x108/0x6b8
[   39.548029][ T5169]  tomoyo_encode2+0x10c/0x330
[   39.548038][ T5169]  tomoyo_encode+0x34/0x50
[   39.548045][ T5169]  tomoyo_realpath_from_path+0x488/0x4dc
[   39.548053][ T5169]  tomoyo_mount_permission+0x3b4/0x7e4
[   39.548061][ T5169]  tomoyo_sb_mount+0x48/0x60
[   39.548069][ T5169]  security_sb_mount+0xfc/0x308
[   39.548079][ T5169]  path_mount+0xb8/0xa88
[   39.548089][ T5169]  do_mount+0xe8/0x148
[   39.548097][ T5169]  __arm64_sys_mount+0x33c/0x388
[   39.548106][ T5169]  invoke_syscall+0x98/0x244
[   39.548116][ T5169]  el0_svc_common+0xec/0x23c
[   39.548125][ T5169]  do_el0_svc+0x4c/0x5c
[   39.548134][ T5169]  el0_svc+0x64/0x260
[   39.548145][ T5169]  el0t_64_sync_handler+0x48/0x148
[   39.548155][ T5169]  el0t_64_sync+0x198/0x19c
[   39.548180][ T5169] ERROR: Out of memory at tomoyo_realpath_from_path.
[   39.780271][ T5177] loop4: detected capacity change from 0 to 256
[   39.798749][ T5180] netlink: 72 bytes leftover after parsing attributes in process `syz.3.85'.
[   39.905894][ T5185] Injecting memory failure for pfn 0x137c17 at process virtual address 0x20001000
[   39.912226][ T5185] Memory failure: 0x137c17: recovery action for clean LRU page: Recovered
[   39.912275][ T5185] Injecting memory failure for pfn 0x137c16 at process virtual address 0x20002000
[   39.912417][ T5185] Memory failure: 0x137c16: recovery action for clean LRU page: Recovered
[   39.912429][ T5185] Injecting memory failure for pfn 0x13815d at process virtual address 0x20003000
[   39.912467][ T5185] Memory failure: 0x13815d: recovery action for clean LRU page: Recovered
[   39.972322][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'.
[   40.341259][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'.
[   40.341286][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'.
[   40.341586][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'.
[   40.341596][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.95'.
[   40.352963][ T5204] cgroup: name respecified
[   40.468686][ T5210] xt_hashlimit: size too large, truncated to 1048576
[   40.652624][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   40.937582][ T5222] loop1: detected capacity change from 0 to 256
[   41.799242][ T5236] bridge_slave_0: left allmulticast mode
[   41.837953][ T5236] bridge_slave_0: left promiscuous mode
[   41.838100][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.855051][ T5238] loop2: detected capacity change from 0 to 512
[   41.861705][ T5238] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   41.899629][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.906918][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.907152][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.907238][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.907412][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.907486][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.907649][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.907721][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.907869][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.907959][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.908108][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.908179][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.908340][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.908465][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.934334][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[   41.934501][ T5238] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[   41.957486][ T5236] bridge_slave_1: left allmulticast mode
[   41.957523][ T5236] bridge_slave_1: left promiscuous mode
[   41.957608][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.040305][ T5238] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548)
[   42.042619][ T5238] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[   42.072869][ T5248] FAT-fs (loop2): error, clusters badly computed (1 != 2)
[   42.298491][ T5236] bond0: (slave bond_slave_0): Releasing backup interface
[   42.321732][ T5236] bond0: (slave bond_slave_1): Releasing backup interface
[   42.356570][ T5236] team0: Port device team_slave_0 removed
[   42.360039][ T5236] team0: Port device team_slave_1 removed
[   42.360395][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   42.360407][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_0
[   42.362160][ T5236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   42.362170][ T5236] batman_adv: batadv0: Removing interface: batadv_slave_1
[   42.363667][ T5236] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   42.373620][ T5244] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   42.377056][ T5244] bond1: (slave lo): Enslaving as an active interface with an up link
[   42.378678][ T5244] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   42.386544][ T5238] team0: Mode changed to "loadbalance"
[   42.388061][ T5248] netlink: 'syz.2.106': attribute type 1 has an invalid length.
[   42.411634][ T5260] xt_hashlimit: size too large, truncated to 1048576
[   42.603352][ T5273] loop3: detected capacity change from 0 to 256
[   42.757259][ T5280] cgroup: name respecified
[   42.759281][ T5280] __nla_validate_parse: 2 callbacks suppressed
[   42.759305][ T5280] netlink: 112 bytes leftover after parsing attributes in process `syz.3.121'.
[   42.826958][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'.
[   42.838351][ T4718] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   42.838376][ T4718] CPU: 0 UID: 0 PID: 4718 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT 
[   42.838388][ T4718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   42.838395][ T4718] Workqueue: hci2 hci_rx_work
[   42.838410][ T4718] Call trace:
[   42.838413][ T4718]  show_stack+0x2c/0x3c (C)
[   42.838429][ T4718]  __dump_stack+0x30/0x40
[   42.838442][ T4718]  dump_stack_lvl+0xd8/0x12c
[   42.838453][ T4718]  dump_stack+0x1c/0x28
[   42.838465][ T4718]  sysfs_warn_dup+0x9c/0xb8
[   42.838478][ T4718]  sysfs_create_dir_ns+0x190/0x1f4
[   42.838490][ T4718]  kobject_add_internal+0x290/0x6f0
[   42.838501][ T4718]  kobject_add_varg+0x9c/0xe8
[   42.838509][ T4718]  kobject_add+0x110/0x1c8
[   42.838517][ T4718]  device_add+0x394/0x9e0
[   42.838527][ T4718]  hci_conn_add_sysfs+0xbc/0x1e8
[   42.838539][ T4718]  le_conn_complete_evt+0xc68/0x10f8
[   42.838550][ T4718]  hci_le_conn_complete_evt+0x114/0x3d8
[   42.838560][ T4718]  hci_le_meta_evt+0x2b0/0x46c
[   42.838572][ T4718]  hci_event_packet+0x4c0/0x9c8
[   42.838583][ T4718]  hci_rx_work+0x2f4/0xd78
[   42.838591][ T4718]  process_scheduled_works+0x788/0x10b8
[   42.838602][ T4718]  worker_thread+0x798/0xbd0
[   42.838613][ T4718]  kthread+0x304/0x3d4
[   42.838622][ T4718]  ret_from_fork+0x10/0x20
[   42.838638][ T4718] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   42.838653][ T4718] Bluetooth: hci2: failed to register connection device
[   42.942564][ T5290] xt_TPROXY: Can be used only with -p tcp or -p udp
[   42.946987][ T5290] pim6reg: entered allmulticast mode
[   42.975477][ T5294] xt_hashlimit: size too large, truncated to 1048576
[   43.817124][ T5301] loop0: detected capacity change from 0 to 512
[   43.817468][ T5301] ext4: Unknown parameter 'seclabel'
[   43.912773][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'.
[   43.998806][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'.
[   43.998867][ T5308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'.
[   44.131500][ T5313] xt_hashlimit: size too large, truncated to 1048576
[   44.241673][ T5324] loop1: detected capacity change from 0 to 4096
[   44.252022][ T5329] loop3: detected capacity change from 0 to 256
[   44.253700][ T5329] vfat: Unknown parameter 'iochaoset'
[   44.468056][ T5324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.477764][ T5329] cgroup: name respecified
[   44.479542][ T5329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.139'.
[   44.479847][ T5324] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.138: corrupted inode contents
[   44.480868][ T5324] EXT4-fs error (device loop1): ext4_dirty_inode:6639: inode #15: comm syz.1.138: mark_inode_dirty error
[   44.481066][ T5324] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.138: corrupted inode contents
[   44.481214][ T5324] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.138: mark_inode_dirty error
[   44.481351][ T5324] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.138: corrupted inode contents
[   44.481484][ T5324] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.138: mark_inode_dirty error
[   44.481779][ T5324] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.138: corrupted inode contents
[   44.483459][ T5324] EXT4-fs error (device loop1): ext4_truncate:4691: inode #15: comm syz.1.138: mark_inode_dirty error
[   44.483663][ T5324] EXT4-fs error (device loop1) in ext4_setattr:6172: Corrupt filesystem
[   44.486433][ T5324] EXT4-fs error (device loop1): ext4_do_update_inode:5742: inode #15: comm syz.1.138: corrupted inode contents
[   44.519632][ T4715] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   44.520304][ T4715] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   44.520882][ T4715] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[   44.527351][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.557671][ T5335] netlink: 'syz.3.142': attribute type 83 has an invalid length.
[   44.611501][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.911228][ T5345] loop3: detected capacity change from 0 to 1024
[   44.935066][ T5345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   45.115008][ T5353] FAULT_INJECTION: forcing a failure.
[   45.115008][ T5353] name failslab, interval 1, probability 0, space 0, times 0
[   45.115169][ T5353] CPU: 0 UID: 0 PID: 5353 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT 
[   45.115192][ T5353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   45.115199][ T5353] Call trace:
[   45.115203][ T5353]  show_stack+0x2c/0x3c (C)
[   45.115224][ T5353]  __dump_stack+0x30/0x40
[   45.115235][ T5353]  dump_stack_lvl+0xd8/0x12c
[   45.115245][ T5353]  dump_stack+0x1c/0x28
[   45.115254][ T5353]  should_fail_ex+0x41c/0x590
[   45.115266][ T5353]  should_failslab+0xc4/0x120
[   45.115274][ T5353]  __kmalloc_cache_noprof+0x94/0x5ec
[   45.115283][ T5353]  smk_fetch+0xa4/0x154
[   45.115292][ T5353]  smack_d_instantiate+0x680/0x7a0
[   45.115299][ T5353]  security_d_instantiate+0xf8/0x1dc
[   45.115307][ T5353]  d_splice_alias_ops+0x74/0x358
[   45.115316][ T5353]  d_splice_alias+0x2c/0x3c
[   45.115324][ T5353]  ovl_lookup+0x560/0x162c
[   45.115331][ T5353]  path_openat+0xda4/0x2a60
[   45.115340][ T5353]  do_file_open+0x1c8/0x2e8
[   45.115348][ T5353]  do_sys_openat2+0x114/0x1e8
[   45.115358][ T5353]  do_sys_open+0xb0/0xe0
[   45.115367][ T5353]  __arm64_sys_openat+0xa8/0xc4
[   45.115376][ T5353]  invoke_syscall+0x98/0x244
[   45.115386][ T5353]  el0_svc_common+0xec/0x23c
[   45.115396][ T5353]  do_el0_svc+0x4c/0x5c
[   45.115405][ T5353]  el0_svc+0x64/0x260
[   45.115416][ T5353]  el0t_64_sync_handler+0x48/0x148
[   45.115426][ T5353]  el0t_64_sync+0x198/0x19c
[   45.197339][ T4819] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   45.200594][ T4819] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   45.246073][ T5356] FAULT_INJECTION: forcing a failure.
[   45.246073][ T5356] name failslab, interval 1, probability 0, space 0, times 0
[   45.246110][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.2.148 Not tainted syzkaller #0 PREEMPT 
[   45.246123][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   45.246130][ T5356] Call trace:
[   45.246134][ T5356]  show_stack+0x2c/0x3c (C)
[   45.246156][ T5356]  __dump_stack+0x30/0x40
[   45.246170][ T5356]  dump_stack_lvl+0xd8/0x12c
[   45.246186][ T5356]  dump_stack+0x1c/0x28
[   45.246197][ T5356]  should_fail_ex+0x41c/0x590
[   45.246216][ T5356]  should_failslab+0xc4/0x120
[   45.246224][ T5356]  __kmalloc_cache_noprof+0x94/0x5ec
[   45.246234][ T5356]  cgroup_init_fs_context+0x64/0x808
[   45.246243][ T5356]  alloc_fs_context+0x7d8/0xba4
[   45.246252][ T5356]  fs_context_for_mount+0x34/0x44
[   45.246259][ T5356]  do_new_mount+0x158/0x538
[   45.246268][ T5356]  path_mount+0x5f0/0xa88
[   45.246277][ T5356]  do_mount+0xe8/0x148
[   45.246285][ T5356]  __arm64_sys_mount+0x33c/0x388
[   45.246294][ T5356]  invoke_syscall+0x98/0x244
[   45.246304][ T5356]  el0_svc_common+0xec/0x23c
[   45.246313][ T5356]  do_el0_svc+0x4c/0x5c
[   45.246323][ T5356]  el0_svc+0x64/0x260
[   45.246333][ T5356]  el0t_64_sync_handler+0x48/0x148
[   45.246344][ T5356]  el0t_64_sync+0x198/0x19c
[   45.327617][ T5362] xt_hashlimit: size too large, truncated to 1048576
[   45.340526][ T5358] fido_id[5358]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   45.379904][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.495215][ T5371] loop1: detected capacity change from 0 to 256
[   45.500027][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'.
[   45.524792][ T5379] bridge0: port 3(syz_tun) entered blocking state
[   45.525173][ T5379] bridge0: port 3(syz_tun) entered disabled state
[   45.525871][ T5379] syz_tun: entered allmulticast mode
[   45.527008][ T5379] syz_tun: entered promiscuous mode
[   45.527264][ T5379] bridge0: port 3(syz_tun) entered blocking state
[   45.527308][ T5379] bridge0: port 3(syz_tun) entered forwarding state
[   45.849775][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'.
[   45.849816][ T5387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'.
[   45.896260][ T5387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.161'.
[   45.985959][ T5398] loop3: detected capacity change from 0 to 1024
[   46.012660][ T5398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.177756][ T5402] FAULT_INJECTION: forcing a failure.
[   46.177756][ T5402] name failslab, interval 1, probability 0, space 0, times 0
[   46.177819][ T5402] CPU: 0 UID: 0 PID: 5402 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT 
[   46.177835][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   46.177843][ T5402] Call trace:
[   46.177846][ T5402]  show_stack+0x2c/0x3c (C)
[   46.177866][ T5402]  __dump_stack+0x30/0x40
[   46.177877][ T5402]  dump_stack_lvl+0xd8/0x12c
[   46.177886][ T5402]  dump_stack+0x1c/0x28
[   46.177896][ T5402]  should_fail_ex+0x41c/0x590
[   46.177907][ T5402]  should_failslab+0xc4/0x120
[   46.177915][ T5402]  __kmalloc_cache_noprof+0x94/0x5ec
[   46.177924][ T5402]  smk_fetch+0xa4/0x154
[   46.177933][ T5402]  smack_d_instantiate+0x680/0x7a0
[   46.177940][ T5402]  security_d_instantiate+0xf8/0x1dc
[   46.177948][ T5402]  d_splice_alias_ops+0x74/0x358
[   46.177957][ T5402]  d_splice_alias+0x2c/0x3c
[   46.177965][ T5402]  ovl_lookup+0x560/0x162c
[   46.177973][ T5402]  path_openat+0xda4/0x2a60
[   46.177981][ T5402]  do_file_open+0x1c8/0x2e8
[   46.177989][ T5402]  do_sys_openat2+0x114/0x1e8
[   46.177999][ T5402]  do_sys_open+0xb0/0xe0
[   46.178008][ T5402]  __arm64_sys_openat+0xa8/0xc4
[   46.178018][ T5402]  invoke_syscall+0x98/0x244
[   46.178028][ T5402]  el0_svc_common+0xec/0x23c
[   46.178037][ T5402]  do_el0_svc+0x4c/0x5c
[   46.178047][ T5402]  el0_svc+0x64/0x260
[   46.178058][ T5402]  el0t_64_sync_handler+0x48/0x148
[   46.178068][ T5402]  el0t_64_sync+0x198/0x19c
[   46.294149][ T4819] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[   46.296582][ T4819] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   46.345681][ T5404] fido_id[5404]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   46.355288][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.369357][ T1293] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   46.371830][ T1293] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   46.373814][ T1293] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   46.373859][ T1293] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   46.415933][ T5410] FAULT_INJECTION: forcing a failure.
[   46.415933][ T5410] name failslab, interval 1, probability 0, space 0, times 0
[   46.415969][ T5410] CPU: 1 UID: 0 PID: 5410 Comm: syz.3.165 Not tainted syzkaller #0 PREEMPT 
[   46.415981][ T5410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   46.415987][ T5410] Call trace:
[   46.415991][ T5410]  show_stack+0x2c/0x3c (C)
[   46.416013][ T5410]  __dump_stack+0x30/0x40
[   46.416024][ T5410]  dump_stack_lvl+0xd8/0x12c
[   46.416034][ T5410]  dump_stack+0x1c/0x28
[   46.416044][ T5410]  should_fail_ex+0x41c/0x590
[   46.416055][ T5410]  should_failslab+0xc4/0x120
[   46.416063][ T5410]  __kmalloc_flags_noprof+0x140/0x724
[   46.416072][ T5410]  alloc_slab_obj_exts+0x68/0x1b4
[   46.416080][ T5410]  __memcg_slab_post_alloc_hook+0x40c/0x8cc
[   46.416091][ T5410]  __kmalloc_cache_noprof+0x33c/0x5ec
[   46.416099][ T5410]  alloc_fs_context+0x7c/0xba4
[   46.416107][ T5410]  fs_context_for_mount+0x34/0x44
[   46.416115][ T5410]  do_new_mount+0x158/0x538
[   46.416124][ T5410]  path_mount+0x5f0/0xa88
[   46.416133][ T5410]  do_mount+0xe8/0x148
[   46.416141][ T5410]  __arm64_sys_mount+0x33c/0x388
[   46.416150][ T5410]  invoke_syscall+0x98/0x244
[   46.416160][ T5410]  el0_svc_common+0xec/0x23c
[   46.416169][ T5410]  do_el0_svc+0x4c/0x5c
[   46.416178][ T5410]  el0_svc+0x64/0x260
[   46.416197][ T5410]  el0t_64_sync_handler+0x48/0x148
[   46.416208][ T5410]  el0t_64_sync+0x198/0x19c
[   46.416234][ T5410] cgroup: name respecified
[   46.963956][ T5452] loop4: detected capacity change from 0 to 1024
[   46.993513][ T5452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.157578][ T5465] FAULT_INJECTION: forcing a failure.
[   47.157578][ T5465] name failslab, interval 1, probability 0, space 0, times 0
[   47.158095][ T5465] CPU: 0 UID: 0 PID: 5465 Comm: syz.4.177 Not tainted syzkaller #0 PREEMPT 
[   47.158110][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   47.158115][ T5465] Call trace:
[   47.158119][ T5465]  show_stack+0x2c/0x3c (C)
[   47.158139][ T5465]  __dump_stack+0x30/0x40
[   47.158149][ T5465]  dump_stack_lvl+0xd8/0x12c
[   47.158159][ T5465]  dump_stack+0x1c/0x28
[   47.158168][ T5465]  should_fail_ex+0x41c/0x590
[   47.158185][ T5465]  should_failslab+0xc4/0x120
[   47.158194][ T5465]  __kmalloc_noprof+0x108/0x6b8
[   47.158203][ T5465]  tomoyo_realpath_from_path+0xbc/0x4dc
[   47.158212][ T5465]  tomoyo_check_open_permission+0x1c4/0x394
[   47.158220][ T5465]  tomoyo_file_open+0x78/0xcc
[   47.158228][ T5465]  security_file_open+0xbc/0x258
[   47.158236][ T5465]  do_dentry_open+0x2a8/0xfc0
[   47.158246][ T5465]  vfs_open+0x44/0x2dc
[   47.158255][ T5465]  path_openat+0x21fc/0x2a60
[   47.158264][ T5465]  do_file_open+0x1c8/0x2e8
[   47.158272][ T5465]  do_sys_openat2+0x114/0x1e8
[   47.158281][ T5465]  do_sys_open+0xb0/0xe0
[   47.158291][ T5465]  __arm64_sys_openat+0xa8/0xc4
[   47.158300][ T5465]  invoke_syscall+0x98/0x244
[   47.158310][ T5465]  el0_svc_common+0xec/0x23c
[   47.158320][ T5465]  do_el0_svc+0x4c/0x5c
[   47.158329][ T5465]  el0_svc+0x64/0x260
[   47.158340][ T5465]  el0t_64_sync_handler+0x48/0x148
[   47.158350][ T5465]  el0t_64_sync+0x198/0x19c
[   47.158383][ T5465] ERROR: Out of memory at tomoyo_realpath_from_path.
[   47.217312][ T4819] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   47.220264][ T4819] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   47.384032][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.389483][ T5476] FAULT_INJECTION: forcing a failure.
[   47.389483][ T5476] name failslab, interval 1, probability 0, space 0, times 0
[   47.389514][ T5476] CPU: 1 UID: 0 PID: 5476 Comm: syz.1.183 Not tainted syzkaller #0 PREEMPT 
[   47.389527][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   47.389533][ T5476] Call trace:
[   47.389537][ T5476]  show_stack+0x2c/0x3c (C)
[   47.389559][ T5476]  __dump_stack+0x30/0x40
[   47.389571][ T5476]  dump_stack_lvl+0xd8/0x12c
[   47.389581][ T5476]  dump_stack+0x1c/0x28
[   47.389590][ T5476]  should_fail_ex+0x41c/0x590
[   47.389602][ T5476]  should_failslab+0xc4/0x120
[   47.389610][ T5476]  __kmalloc_node_track_caller_noprof+0x108/0x6d4
[   47.389620][ T5476]  kmemdup_nul+0x48/0xfc
[   47.389628][ T5476]  vfs_parse_fs_qstr+0x100/0x1cc
[   47.389637][ T5476]  vfs_parse_monolithic_sep+0x1e4/0x268
[   47.389644][ T5476]  generic_parse_monolithic+0x30/0x40
[   47.389652][ T5476]  parse_monolithic_mount_data+0x78/0x8c
[   47.389659][ T5476]  do_new_mount+0x270/0x538
[   47.389668][ T5476]  path_mount+0x5f0/0xa88
[   47.389677][ T5476]  do_mount+0xe8/0x148
[   47.389685][ T5476]  __arm64_sys_mount+0x33c/0x388
[   47.389694][ T5476]  invoke_syscall+0x98/0x244
[   47.389704][ T5476]  el0_svc_common+0xec/0x23c
[   47.389713][ T5476]  do_el0_svc+0x4c/0x5c
[   47.389722][ T5476]  el0_svc+0x64/0x260
[   47.389733][ T5476]  el0t_64_sync_handler+0x48/0x148
[   47.389743][ T5476]  el0t_64_sync+0x198/0x19c
[   47.401596][ T5472] loop2: detected capacity change from 0 to 4096
[   47.436415][ T5473] fido_id[5473]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   47.542249][ T5489] loop4: detected capacity change from 0 to 8192
[   47.596163][ T5504] loop0: detected capacity change from 0 to 512
[   47.597858][ T5504] ext4: Unknown parameter 'permit_directio'
[   48.970788][ T5548] set_capacity_and_notify: 1 callbacks suppressed
[   48.971802][ T5548] loop1: detected capacity change from 0 to 1024
[   48.985594][ T5548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.214023][ T5563] FAULT_INJECTION: forcing a failure.
[   49.214023][ T5563] name failslab, interval 1, probability 0, space 0, times 0
[   49.214084][ T5563] CPU: 1 UID: 0 PID: 5563 Comm: syz.1.199 Not tainted syzkaller #0 PREEMPT 
[   49.214099][ T5563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   49.214106][ T5563] Call trace:
[   49.214110][ T5563]  show_stack+0x2c/0x3c (C)
[   49.214130][ T5563]  __dump_stack+0x30/0x40
[   49.214141][ T5563]  dump_stack_lvl+0xd8/0x12c
[   49.214151][ T5563]  dump_stack+0x1c/0x28
[   49.214160][ T5563]  should_fail_ex+0x41c/0x590
[   49.214171][ T5563]  should_failslab+0xc4/0x120
[   49.214180][ T5563]  __kmalloc_noprof+0x108/0x6b8
[   49.214193][ T5563]  tomoyo_encode2+0x10c/0x330
[   49.214202][ T5563]  tomoyo_encode+0x34/0x50
[   49.214210][ T5563]  tomoyo_realpath_from_path+0x488/0x4dc
[   49.214218][ T5563]  tomoyo_check_open_permission+0x1c4/0x394
[   49.214226][ T5563]  tomoyo_file_open+0x78/0xcc
[   49.214234][ T5563]  security_file_open+0xbc/0x258
[   49.214242][ T5563]  do_dentry_open+0x2a8/0xfc0
[   49.214252][ T5563]  vfs_open+0x44/0x2dc
[   49.214261][ T5563]  path_openat+0x21fc/0x2a60
[   49.214270][ T5563]  do_file_open+0x1c8/0x2e8
[   49.214278][ T5563]  do_sys_openat2+0x114/0x1e8
[   49.214287][ T5563]  do_sys_open+0xb0/0xe0
[   49.214297][ T5563]  __arm64_sys_openat+0xa8/0xc4
[   49.214306][ T5563]  invoke_syscall+0x98/0x244
[   49.214316][ T5563]  el0_svc_common+0xec/0x23c
[   49.214325][ T5563]  do_el0_svc+0x4c/0x5c
[   49.214335][ T5563]  el0_svc+0x64/0x260
[   49.214345][ T5563]  el0t_64_sync_handler+0x48/0x148
[   49.214355][ T5563]  el0t_64_sync+0x198/0x19c
[   49.214499][ T5563] ERROR: Out of memory at tomoyo_realpath_from_path.
[   49.268725][ T4835] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[   49.358390][ T4835] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   49.426661][ T5567] fido_id[5567]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   49.427316][ T4715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.552974][ T5571] loop1: detected capacity change from 0 to 256
[   49.729597][ T5579] __nla_validate_parse: 5 callbacks suppressed
[   49.729646][ T5579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.208'.
[   49.904839][ T5583] syzkaller0: entered promiscuous mode
[   49.906183][ T5583] syzkaller0: entered allmulticast mode
[   49.914597][ T5583] loop1: detected capacity change from 0 to 1024
[   49.928191][ T5583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.937948][ T5584] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   49.943057][ T5584] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   50.011013][ T4715] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers
[   50.014402][ T4715] overlayfs: failed lookup in lower (/, name='file0', err=-40): overlapping layers
[   50.051743][ T5595] loop0: detected capacity change from 0 to 512
[   50.063550][ T5595] EXT4-fs error (device loop0): ext4_quota_enable:7232: inode #4: comm syz.0.214: iget: checksum invalid
[   50.063587][ T5595] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74
[   50.064228][ T5595] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.214: Bad quota inode: 4, type: 1
[   50.064248][ T5595] loop0: lost filesystem error report for type 5 error -117
[   50.065027][ T5595] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix.
[   50.066811][ T5595] EXT4-fs (loop0): mount failed
[   50.102052][ T5599] loop3: detected capacity change from 0 to 1024
[   50.115050][ T5599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.284912][ T5611] FAULT_INJECTION: forcing a failure.
[   50.284912][ T5611] name failslab, interval 1, probability 0, space 0, times 0
[   50.284975][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: syz.3.215 Not tainted syzkaller #0 PREEMPT 
[   50.284991][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   50.284998][ T5611] Call trace:
[   50.285001][ T5611]  show_stack+0x2c/0x3c (C)
[   50.285021][ T5611]  __dump_stack+0x30/0x40
[   50.285032][ T5611]  dump_stack_lvl+0xd8/0x12c
[   50.285041][ T5611]  dump_stack+0x1c/0x28
[   50.285051][ T5611]  should_fail_ex+0x41c/0x590
[   50.285062][ T5611]  should_failslab+0xc4/0x120
[   50.285070][ T5611]  __kmalloc_noprof+0x108/0x6b8
[   50.285079][ T5611]  tomoyo_encode2+0x10c/0x330
[   50.285088][ T5611]  tomoyo_encode+0x34/0x50
[   50.285095][ T5611]  tomoyo_realpath_from_path+0x488/0x4dc
[   50.285104][ T5611]  tomoyo_check_open_permission+0x1c4/0x394
[   50.285111][ T5611]  tomoyo_file_open+0x78/0xcc
[   50.285119][ T5611]  security_file_open+0xbc/0x258
[   50.285127][ T5611]  do_dentry_open+0x2a8/0xfc0
[   50.285137][ T5611]  vfs_open+0x44/0x2dc
[   50.285146][ T5611]  path_openat+0x21fc/0x2a60
[   50.285154][ T5611]  do_file_open+0x1c8/0x2e8
[   50.285162][ T5611]  do_sys_openat2+0x114/0x1e8
[   50.285171][ T5611]  do_sys_open+0xb0/0xe0
[   50.285181][ T5611]  __arm64_sys_openat+0xa8/0xc4
[   50.285194][ T5611]  invoke_syscall+0x98/0x244
[   50.285205][ T5611]  el0_svc_common+0xec/0x23c
[   50.285214][ T5611]  do_el0_svc+0x4c/0x5c
[   50.285224][ T5611]  el0_svc+0x64/0x260
[   50.285235][ T5611]  el0t_64_sync_handler+0x48/0x148
[   50.285244][ T5611]  el0t_64_sync+0x198/0x19c
[   50.285289][ T5611] ERROR: Out of memory at tomoyo_realpath_from_path.
[   50.347912][   T26] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[   50.389256][   T26] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   50.454840][ T5613] fido_id[5613]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   50.489475][ T4718] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[   50.491287][ T4718] Bluetooth: hci3: Injecting HCI hardware error event
[   50.494404][ T4717] Bluetooth: hci3: hardware error 0x00
[   50.509698][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.550490][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'.
[   51.043651][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.337352][   T15] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.371030][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   51.373452][ T4726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   51.374326][ T4726] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   51.374709][ T4726] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   51.374945][ T4726] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   51.425505][   T15] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.494842][ T5667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'.
[   51.515282][   T15] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.572163][ T5674] binder: 5673:5674 tried to acquire reference to desc 0, got 1 instead
[   51.593650][   T15] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.675695][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.675782][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.675869][ T5653] bridge_slave_0: entered allmulticast mode
[   51.676597][ T5653] bridge_slave_0: entered promiscuous mode
[   51.677656][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.677707][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.677761][ T5653] bridge_slave_1: entered allmulticast mode
[   51.678273][ T5653] bridge_slave_1: entered promiscuous mode
[   51.690614][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   51.691707][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   51.699742][ T5653] team0: Port device team_slave_0 added
[   51.700542][ T5653] team0: Port device team_slave_1 added
[   51.716175][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.716210][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   51.716222][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.716768][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.716775][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   51.716789][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.749881][ T5653] hsr_slave_0: entered promiscuous mode
[   51.751504][ T5653] hsr_slave_1: entered promiscuous mode
[   51.881740][   T15] bridge_slave_1: left allmulticast mode
[   51.881777][   T15] bridge_slave_1: left promiscuous mode
[   51.882203][   T15] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.886480][   T15] bridge_slave_0: left allmulticast mode
[   51.886517][   T15] bridge_slave_0: left promiscuous mode
[   51.886614][   T15] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.893931][   T15] pim6reg: left allmulticast mode
[   52.279711][   T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.333555][   T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.501527][   T15] bond0 (unregistering): Released all slaves
[   52.611897][ T5653] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   52.616714][ T4863] binder: release 5673:5674 transaction 5 out, still active
[   52.617452][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   52.667161][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'.
[   52.667294][ T4863] binder: send failed reply for transaction 12 to 5673:5682
[   52.667373][ T4863] binder: undelivered TRANSACTION_COMPLETE
[   52.667400][ T4863] binder: undelivered TRANSACTION_ERROR: 29189
[   52.667439][ T4863] binder: send failed reply for transaction 5, target dead
[   52.686096][ T5653] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   52.696122][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   52.696501][ T5653] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   52.701849][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   52.707282][ T5653] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   52.709639][ T5653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   52.755825][ T5724] loop2: detected capacity change from 0 to 256
[   52.760729][ T5724] vfat: Bad value for 'shortname'
[   52.800869][ T5729] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'.
[   52.807121][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'.
[   52.880329][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0
[   52.884866][ T5653] 8021q: adding VLAN 0 to HW filter on device team0
[   52.893583][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.893629][ T3800] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.900150][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.900194][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.969933][ T4717] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   52.981907][ T5743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[   53.099350][   T15] hsr_slave_0: left promiscuous mode
[   53.100879][   T15] hsr_slave_1: left promiscuous mode
[   53.102561][   T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.104340][   T15] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.106431][   T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.108315][   T15] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.449367][ T4717] Bluetooth: hci2: command tx timeout
[   53.596319][   T15] veth1_macvtap: left promiscuous mode
[   53.598295][   T15] veth0_macvtap: left promiscuous mode
[   53.598379][   T15] veth1_vlan: left promiscuous mode
[   53.598469][   T15] veth0_vlan: left promiscuous mode
[   54.615233][   T15] team0 (unregistering): Port device team_slave_1 removed
[   54.630037][   T15] team0 (unregistering): Port device team_slave_0 removed
[   54.718765][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.845419][ T5784] loop4: detected capacity change from 0 to 256
[   54.847205][ T5784] vfat: Unknown parameter 'nnonumtail'
[   55.173051][ T5653] veth0_vlan: entered promiscuous mode
[   55.194354][ T5653] veth1_vlan: entered promiscuous mode
[   55.211554][ T5653] veth0_macvtap: entered promiscuous mode
[   55.221190][ T5653] veth1_macvtap: entered promiscuous mode
[   55.264859][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.267832][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.289336][ T1293] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.292542][ T1293] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.294581][ T1293] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.296780][ T1293] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.306057][ T5795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.269'.
[   55.320414][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.321939][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.334169][   T15] IPVS: stop unused estimator thread 0...
[   55.341224][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.341254][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.396114][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'.
[   55.529066][ T4717] Bluetooth: hci2: command tx timeout
[   55.875967][ T5830] xt_hashlimit: size too large, truncated to 1048576
[   56.435257][ T5842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'.
[   56.442936][ T5839] loop2: detected capacity change from 0 to 256
[   56.445426][ T5839] vfat: Unknown parameter 'nnonumtail'
[   56.782399][ T5860] loop2: detected capacity change from 0 to 2048
[   56.788018][ T5862] loop3: detected capacity change from 0 to 1024
[   56.820943][ T5860]  loop2: p1 < > p3 < >
[   56.822325][ T5860] loop2: partition table partially beyond EOD, truncated
[   56.823754][ T5860] loop2: p1 start 3405774849 is beyond EOD, truncated
[   56.829641][ T5862] EXT4-fs (loop3): failed to initialize system zone (-117)
[   56.832716][ T5862] EXT4-fs (loop3): mount failed
[   56.885946][ T5869] xt_hashlimit: size too large, truncated to 1048576
[   57.265670][ T5887] loop4: detected capacity change from 0 to 4096
[   57.418614][ T5893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'.
[   57.465196][ T5897] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   57.487723][ T5899] loop4: detected capacity change from 0 to 512
[   57.489754][ T5899] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   57.492575][ T5899] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   57.496921][ T5899] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.299: invalid indirect mapped block 9 (level 0)
[   57.501271][ T5899] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   57.503212][ T5899] EXT4-fs (loop4): 1 truncate cleaned up
[   57.507191][ T5899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.525657][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.563126][ T5905] loop4: detected capacity change from 0 to 8
[   57.574945][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'.
[   57.609965][ T4717] Bluetooth: hci2: command tx timeout
[   57.642024][ T5908] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[   57.644243][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.302'.
[   57.747336][ T5911] syz_tun: entered allmulticast mode
[   58.005061][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'.
[   58.049142][ T5917] binder: 5916:5917 ioctl c0306201 0 returned -14
[   58.051988][ T5917] 9p: Bad value for 'wfdno'
[   58.057524][ T5920] loop3: detected capacity change from 0 to 256
[   58.057934][ T5920] vfat: Unknown parameter 'uni'
[   58.067048][ T5920] netlink: 40 bytes leftover after parsing attributes in process `syz.3.305'.
[   58.124105][ T5926] netlink: 96 bytes leftover after parsing attributes in process `syz.3.308'.
[   58.164529][ T5928] loop0: detected capacity change from 0 to 256
[   58.217737][ T5930] loop3: detected capacity change from 0 to 512
[   58.289395][ T5928] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[   58.289419][ T5928] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   58.293704][ T5928] vhci_hcd vhci_hcd.0: Device attached
[   58.296010][ T5937] usbip_core: unknown command
[   58.297030][ T5937] vhci_hcd: unknown pdu 0
[   58.297845][ T5937] usbip_core: unknown command
[   58.300584][   T39] vhci_hcd vhci_hcd.0: stop threads
[   58.300615][   T39] vhci_hcd vhci_hcd.0: release socket
[   58.300640][   T39] vhci_hcd vhci_hcd.0: disconnect device
[   58.302104][ T5928] netlink: 27 bytes leftover after parsing attributes in process `syz.0.309'.
[   58.405615][ T5906] syz_tun: left allmulticast mode
[   58.933073][ T5959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.943509][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.180643][ T5976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.217238][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.366102][ T5994] vfat: Unknown parameter 'nnonumtail'
[   59.414460][ T5986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.445896][ T6007] vfat: Bad value for 'shortname'
[   59.643473][   T15] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   59.643945][   T15] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   59.643970][   T15] EXT4-fs (loop2): This should not happen!! Data will be lost
[   59.643970][   T15] 
[   59.643981][   T15] EXT4-fs (loop2): Total free blocks count 0
[   59.643991][   T15] EXT4-fs (loop2): Free/Dirty block details
[   59.644004][   T15] EXT4-fs (loop2): free_blocks=2415919504
[   59.644016][   T15] EXT4-fs (loop2): dirty_blocks=32
[   59.644026][   T15] EXT4-fs (loop2): Block reservation details
[   59.644034][   T15] EXT4-fs (loop2): i_reserved_data_blocks=2
[   59.650101][ T1899] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28
[   59.650375][ T4720] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   59.671935][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.690826][ T4717] Bluetooth: hci2: command tx timeout
[   59.732441][ T6023] capability: warning: `syz.3.341' uses 32-bit capabilities (legacy support in use)
[   59.816944][ T6030] xt_hashlimit: size too large, truncated to 1048576
[   59.985311][ T6033] set_capacity_and_notify: 7 callbacks suppressed
[   59.985344][ T6033] loop2: detected capacity change from 0 to 256
[   60.461262][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.587023][ T6052] __nla_validate_parse: 7 callbacks suppressed
[   60.587070][ T6052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.353'.
[   60.639250][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'.
[   60.654862][ T6056] xt_hashlimit: size too large, truncated to 1048576
[   61.163167][ T6080] netlink: 'syz.4.363': attribute type 1 has an invalid length.
[   61.558013][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.5.367'.
[   61.585033][ T6094] bond1: down delay (257) is not a multiple of miimon (41943040), value rounded to 0 ms
[   61.585072][ T6094] bond1: peer notification delay (7) is not a multiple of miimon (41943040), value rounded to 0 ms
[   61.606175][ T6094] bond2: down delay (257) is not a multiple of miimon (41943040), value rounded to 0 ms
[   61.606217][ T6094] bond2: peer notification delay (7) is not a multiple of miimon (41943040), value rounded to 0 ms
[   62.213214][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.381'.
[   62.714925][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'.
[   62.753170][ T6153] vlan2: entered promiscuous mode
[   62.757746][ T6153] bond0: entered promiscuous mode
[   62.758765][ T6153] bond_slave_0: entered promiscuous mode
[   62.761383][ T6153] bond_slave_1: entered promiscuous mode
[   62.771935][ T6142] xt_hashlimit: size too large, truncated to 1048576
[   62.804315][ T6158] loop5: detected capacity change from 0 to 128
[   62.917327][ T6172] loop3: detected capacity change from 0 to 512
[   62.917658][ T6172] ext4: Unknown parameter 'seclabel'
[   62.919917][ T6176] xt_hashlimit: size too large, truncated to 1048576
[   62.936313][ T6177] loop5: detected capacity change from 0 to 512
[   63.000933][ T6177] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   63.001479][ T6177] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   63.002090][ T6177] EXT4-fs (loop5): orphan cleanup on readonly fs
[   63.002281][ T6177] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.398: Invalid inode bitmap blk 0 in block_group 0
[   63.002296][ T6177] loop5: lost filesystem error report for type 5 error -117
[   63.002932][ T6177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   63.031169][ T5653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.154971][ T4717] Bluetooth: hci0: command 0x0406 tx timeout
[   63.388783][ T6198] loop4: detected capacity change from 0 to 512
[   63.403334][ T6198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.822688][ T6221] loop3: detected capacity change from 0 to 256
[   63.824378][ T6221] vfat: Bad value for 'shortname'
[   63.836021][ T6215] xt_hashlimit: size too large, truncated to 1048576
[   64.494303][ T1595] ieee802154 phy0 wpan0: encryption failed: -22
[   64.495825][ T1595] ieee802154 phy1 wpan1: encryption failed: -22
[   64.578962][ T4726] Bluetooth: hci2: command 0x0406 tx timeout
[   64.644528][  T866] cfg80211: failed to load regulatory.db
[   64.658228][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.667927][ T6233] xt_hashlimit: size too large, truncated to 1048576
[   64.805640][ T6242] loop5: detected capacity change from 0 to 2048
[   64.842417][ T6242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.897175][   T12] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   64.903930][   T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[   64.908637][   T12] EXT4-fs (loop5): This should not happen!! Data will be lost
[   64.908637][   T12] 
[   64.910746][   T12] EXT4-fs (loop5): Total free blocks count 0
[   64.912048][   T12] EXT4-fs (loop5): Free/Dirty block details
[   64.913434][   T12] EXT4-fs (loop5): free_blocks=2415919504
[   64.913449][   T12] EXT4-fs (loop5): dirty_blocks=16
[   64.913458][   T12] EXT4-fs (loop5): Block reservation details
[   64.913465][   T12] EXT4-fs (loop5): i_reserved_data_blocks=1
[   64.920136][ T5653] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[   64.926463][ T5653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.938739][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.422'.
[   65.000032][ T6253] netlink: 'syz.0.422': attribute type 1 has an invalid length.
[   65.000067][ T6253] netlink: 'syz.0.422': attribute type 2 has an invalid length.
[   65.268206][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'.
[   65.372335][ T6275] xt_hashlimit: size too large, truncated to 1048576
[   65.423228][ T6284] loop2: detected capacity change from 0 to 512
[   65.439557][ T6284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.925730][ T6309] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[   66.751117][ T6313] loop0: detected capacity change from 0 to 512
[   66.751478][ T6313] ext4: Unknown parameter 'permit_directio'
[   66.775882][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.945488][ T6322] loop4: detected capacity change from 0 to 256
[   66.958287][ T6322] vfat: Bad value for 'shortname'
[   66.985589][ T6327] tmpfs: Bad value for 'mpol'
[   67.006111][ T6328] netlink: 63 bytes leftover after parsing attributes in process `syz.5.442'.
[   67.352571][ T6358] 9p: Bad value for 'rfdno'
[   67.369283][ T4718] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   67.370554][ T4718] Bluetooth: hci4: Injecting HCI hardware error event
[   67.480568][ T4718] Bluetooth: hci4: command 0x0406 tx timeout
[   67.793556][ T4726] Bluetooth: hci4: hardware error 0x00
[   68.312518][ T6366] loop2: detected capacity change from 0 to 1024
[   68.355756][ T6373] loop5: detected capacity change from 0 to 256
[   68.356229][ T6373] vfat: Bad value for 'shortname'
[   68.391342][ T6372] loop3: detected capacity change from 0 to 512
[   68.408423][ T6372] EXT4-fs (loop3): can't read group descriptor 0
[   68.828676][ T6386] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[   68.899226][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.5.462'.
[   68.953517][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.463'.
[   68.955915][ T6404] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   69.101848][ T6416] loop3: detected capacity change from 0 to 128
[   69.106500][ T6416] FAT-fs (loop3): Directory bread(block 1048) failed
[   69.108214][ T6416] FAT-fs (loop3): Directory bread(block 1049) failed
[   69.115679][ T6416] FAT-fs (loop3): Directory bread(block 1050) failed
[   69.117384][ T6416] FAT-fs (loop3): Directory bread(block 1051) failed
[   69.119187][ T6416] FAT-fs (loop3): Directory bread(block 1052) failed
[   69.119235][ T6416] FAT-fs (loop3): Directory bread(block 1053) failed
[   69.119257][ T6416] FAT-fs (loop3): Directory bread(block 1054) failed
[   69.119278][ T6416] FAT-fs (loop3): Directory bread(block 1055) failed
[   69.133246][ T6416] FAT-fs (loop3): FAT read failed (blocknr 128)
[   70.018985][ T4726] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[   70.157055][ T6427] netlink: 'syz.5.469': attribute type 1 has an invalid length.
[   70.196865][ T6427] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.243781][ T6427] vlan2: entered allmulticast mode
[   70.243827][ T6427] bond1: entered allmulticast mode
[   70.265545][ T6427] bond1: (slave geneve2): making interface the new active one
[   70.265577][ T6427] geneve2: entered allmulticast mode
[   70.280150][ T6427] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   70.379348][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.474'.
[   70.403565][ T6440] loop3: detected capacity change from 0 to 512
[   70.413933][ T6441] netlink: 'syz.4.473': attribute type 3 has an invalid length.
[   70.416371][ T6440] ext4: Unknown parameter 'seclabel'
[   70.490547][ T6447] xt_hashlimit: size too large, truncated to 1048576
[   70.500019][ T6446] loop0: detected capacity change from 0 to 512
[   70.503669][ T6446] ext4: Unknown parameter 'seclabel'
[   70.874830][ T6455] cgroup: name respecified
[   71.777043][ T6478] loop0: detected capacity change from 0 to 512
[   71.829489][ T6478] ext4: Unknown parameter 'permit_directio'
[   74.182848][ T6526] loop4: detected capacity change from 0 to 256
[   74.185837][ T6526] vfat: Unknown parameter 'nnonumtail'
[   74.221511][ T6528] 9p: Bad value for 'wfdno'
[   74.355203][ T6531] loop5: detected capacity change from 0 to 256
[   74.357131][ T6531] vfat: Unknown parameter 'nnonumtail'
[   75.461406][ T6548] loop4: detected capacity change from 0 to 512
[   75.463297][ T6548] EXT4-fs: inline encryption not supported
[   75.474742][ T6548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   75.540679][ T6548] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   75.540745][ T6548] EXT4-fs (loop4): 1 truncate cleaned up
[   75.541245][ T6548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.548368][ T6548] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6455: inode #12: comm syz.4.511: bad extra_isize 62 (inode size 256)
[   75.562295][ T6548] EXT4-fs (loop4): Remounting filesystem read-only
[   75.589204][ T6548] openvswitch: netlink: Key type 31 is not supported
[   75.594307][ T1093] IPVS: starting estimator thread 0...
[   75.678955][ T6557] IPVS: using max 45 ests per chain, 108000 per kthread
[   75.750410][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.797898][ T6570] cgroup: name respecified
[   76.059324][ T6572] CUSE: unknown device info "
"
[   76.059351][ T6572] CUSE: unknown device info ""
[   76.059662][ T6572] CUSE: unknown device info "ÿw"
[   76.059678][ T6572] CUSE: unknown device info ""
[   76.059684][ T6572] CUSE: unknown device info ""
[   76.059689][ T6572] CUSE: unknown device info ""
[   76.059693][ T6572] CUSE: unknown device info "/dev/fuse"
[   76.059698][ T6572] CUSE: DEVNAME unspecified
[   76.148179][ T6582] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[   76.250007][ T6591] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   76.502351][ T6607] loop0: detected capacity change from 0 to 4096
[   76.546014][ T6607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.611102][ T6611] loop5: detected capacity change from 0 to 1024
[   76.679562][ T6611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   77.340275][ T6615] cgroup: name respecified
[   77.535477][ T5653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.565644][ T6625] netlink: 'syz.5.533': attribute type 3 has an invalid length.
[   77.943039][ T6634] capability: warning: `syz.4.534' uses deprecated v2 capabilities in a way that may be insecure
[   77.968646][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.992637][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'.
[   78.160810][ T6659] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[   78.451821][ T6662] xt_hashlimit: size too large, truncated to 1048576
[   78.601695][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'.
[   78.603316][ T6684] loop5: detected capacity change from 0 to 512
[   78.606884][ T6684] ext4: Unknown parameter 'seclabel'
[   81.547188][ T6735] xt_hashlimit: size too large, truncated to 1048576
[   81.922956][   T30] audit: type=1326 audit(81.900:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.3.573" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f781a8 code=0x0
[   81.923206][   T30] audit: type=1326 audit(81.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6740 comm="syz.3.573" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff88f781a8 code=0x0
[   81.992387][ T6761] loop5: detected capacity change from 0 to 512
[   81.994205][ T6761] ext4: Unknown parameter 'permit_directio'
[   82.971651][ T6776] loop4: detected capacity change from 0 to 256
[   82.972132][ T6776] vfat: Bad value for 'shortname'
[   82.973807][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.582'.
[   84.019488][ T6796] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[   84.047724][ T6798] loop5: detected capacity change from 0 to 1024
[   84.079857][ T6798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.528483][ T6816] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   84.820521][   T26] IPVS: starting estimator thread 0...
[   84.963440][ T6824] IPVS: using max 60 ests per chain, 144000 per kthread
[   84.999028][ T6826] loop4: detected capacity change from 0 to 512
[   85.003806][ T6826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.599: bg 0: block 5: invalid block bitmap
[   85.003863][ T6826] loop4: lost filesystem error report for type 5 error -117
[   85.004076][ T6826] EXT4-fs (loop4): Remounting filesystem read-only
[   85.004142][ T6826] EXT4-fs (loop4): 2 truncates cleaned up
[   85.004698][ T6826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.022440][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.096623][ T5653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.037153][ T6844] loop0: detected capacity change from 0 to 512
[   86.048380][ T6844] ext4: Unknown parameter 'seclabel'
[   86.142075][ T6849] loop2: detected capacity change from 0 to 512
[   86.148721][ T6849] ext4: Unknown parameter 'seclabel'
[   86.872945][ T4795] IPVS: starting estimator thread 0...
[   87.038941][ T6866] IPVS: using max 60 ests per chain, 144000 per kthread
[   87.040564][ T6875] netlink: 40 bytes leftover after parsing attributes in process `syz.2.610'.
[   87.049007][ T6877] loop0: detected capacity change from 0 to 512
[   87.050577][ T6877] ext4: Unknown parameter 'permit_directio'
[   88.045508][ T6892] xt_hashlimit: size too large, truncated to 1048576
[   89.306881][ T6931] xt_hashlimit: size too large, truncated to 1048576
[   89.402354][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'.
[   89.510314][ T6952] FAULT_INJECTION: forcing a failure.
[   89.510314][ T6952] name failslab, interval 1, probability 0, space 0, times 0
[   89.513510][ T6952] CPU: 1 UID: 0 PID: 6952 Comm: syz.5.630 Not tainted syzkaller #0 PREEMPT 
[   89.513535][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   89.513541][ T6952] Call trace:
[   89.513545][ T6952]  show_stack+0x2c/0x3c (C)
[   89.513567][ T6952]  __dump_stack+0x30/0x40
[   89.513578][ T6952]  dump_stack_lvl+0xd8/0x12c
[   89.513588][ T6952]  dump_stack+0x1c/0x28
[   89.513598][ T6952]  should_fail_ex+0x41c/0x590
[   89.513609][ T6952]  should_failslab+0xc4/0x120
[   89.513617][ T6952]  __kmalloc_noprof+0x108/0x6b8
[   89.513625][ T6952]  tomoyo_encode2+0x10c/0x330
[   89.513634][ T6952]  tomoyo_encode+0x34/0x50
[   89.513642][ T6952]  tomoyo_realpath_from_path+0x488/0x4dc
[   89.513650][ T6952]  tomoyo_path_number_perm+0x1f0/0x500
[   89.513658][ T6952]  tomoyo_file_ioctl+0x2c/0x3c
[   89.513666][ T6952]  security_file_ioctl+0xdc/0x2b0
[   89.513673][ T6952]  __arm64_sys_ioctl+0xb0/0x1cc
[   89.513684][ T6952]  invoke_syscall+0x98/0x244
[   89.513694][ T6952]  el0_svc_common+0xec/0x23c
[   89.513704][ T6952]  do_el0_svc+0x4c/0x5c
[   89.513713][ T6952]  el0_svc+0x64/0x260
[   89.513724][ T6952]  el0t_64_sync_handler+0x48/0x148
[   89.513734][ T6952]  el0t_64_sync+0x198/0x19c
[   89.537228][ T6952] ERROR: Out of memory at tomoyo_realpath_from_path.
[   89.703728][ T6953] xt_hashlimit: size too large, truncated to 1048576
[   89.747346][ T6973] loop5: detected capacity change from 0 to 512
[   89.747748][ T6973] ext4: Unknown parameter 'seclabel'
[   90.118211][ T4726] Bluetooth: hci1: command 0x0406 tx timeout
[   90.538536][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'.
[   91.229079][ T4718] Bluetooth: hci2: ACL packet for unknown connection handle 201
[   91.280567][ T7001] loop3: detected capacity change from 0 to 512
[   91.280949][ T7002] fuse: Bad value for 'fd'
[   91.290709][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.644'.
[   91.350305][ T7007] nbd: must specify at least one socket
[   91.444580][ T7014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.479076][ T7014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.789027][ T7033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.654'.
[   91.827203][ T7019] xt_hashlimit: size too large, truncated to 1048576
[   91.832083][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.655'.
[   92.209208][ T7056] loop5: detected capacity change from 0 to 256
[   92.210179][ T7056] vfat: Bad value for 'shortname'
[   92.383247][ T7076] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   92.385549][ T7076] overlayfs: failed to set xattr on upper
[   92.387087][ T7076] overlayfs: ...falling back to redirect_dir=nofollow.
[   92.388789][ T7076] overlayfs: ...falling back to uuid=null.
[   92.390690][ T7076] overlayfs: ...falling back to xino=off.
[   92.392170][ T7076] overlayfs: conflicting lowerdir path
[   92.838328][ T7092] xt_hashlimit: size too large, truncated to 1048576
[   93.119374][ T7089] loop2: detected capacity change from 0 to 256
[   93.125282][ T7089] vfat: Unknown parameter 'nnonumtail'
[   93.194319][ T7109] loop4: detected capacity change from 0 to 2048
[   93.304803][ T7109]  loop4: p2 p3 p7
[   93.314337][ T7109] Injecting memory failure for pfn 0x13760f at process virtual address 0x20000000
[   93.321098][ T7109] Memory failure: 0x13760f: Sending SIGBUS to syz.4.674:7109 due to hardware memory corruption
[   93.324127][ T7109] Memory failure: 0x13760f: recovery action for dirty LRU page: Recovered
[   93.326449][ T7109] Injecting memory failure for pfn 0x121801 at process virtual address 0x20001000
[   93.604416][ T7109] Memory failure: 0x121801: recovery action for dirty LRU page: Recovered
[   93.662938][ T7125] loop5: detected capacity change from 0 to 512
[   93.689707][ T7127] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[   93.948414][ T7144] loop0: detected capacity change from 0 to 128
[   93.960076][ T7154] loop5: detected capacity change from 0 to 512
[   93.961934][ T7154] ext4: Unknown parameter 'seclabel'
[   93.966366][ T7146] xt_hashlimit: size too large, truncated to 1048576
[   94.036136][ T4718] Bluetooth: hci0: ACL packet for unknown connection handle 201
[   94.400140][ T7165] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[   94.401336][ T7163] loop2: detected capacity change from 0 to 512
[   94.401707][ T7163] ext4: Unknown parameter 'seclabel'
[   94.622415][ T7177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.697'.
[   94.625348][ T7177] usb usb8: usbfs: process 7177 (syz.4.697) did not claim interface 0 before use
[   94.817664][ T7184] fuse: Unknown parameter 'user_æîÓq½3€«ÖÕ5g*öid'
[   94.932220][ T7189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.702'.
[   95.549357][ T7205] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ''
[   95.959565][ T7207] xt_hashlimit: size too large, truncated to 1048576
[   96.047765][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.712'.
[   97.089459][ T7240] loop2: detected capacity change from 0 to 256
[   97.089915][ T7240] vfat: Bad value for 'shortname'
[   97.098229][ T7242] loop4: detected capacity change from 0 to 512
[   97.104820][ T7242] ext4: Unknown parameter 'seclabel'
[   97.428239][ T7248] loop0: detected capacity change from 0 to 1024
[   97.538569][ T7248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   99.388494][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.426620][ T7277] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[   99.728122][ T7283] Injecting memory failure for pfn 0x13c3e3 at process virtual address 0x20000000
[   99.779640][ T7283] Memory failure: 0x13c3e3: keeping poisoned page in swap cache
[   99.779946][ T7283] Memory failure: 0x13c3e3: Sending SIGBUS to syz.4.728:7283 due to hardware memory corruption
[   99.780062][ T7283] Memory failure: 0x13c3e3: recovery action for dirty swapcache page: Delayed
[   99.781044][ T7283] Injecting memory failure for pfn 0x13d280 at process virtual address 0x20001000
[   99.782226][ T7283] Memory failure: 0x13d280: keeping poisoned page in swap cache
[   99.782259][ T7283] Memory failure: 0x13d280: Sending SIGBUS to syz.4.728:7283 due to hardware memory corruption
[   99.782291][ T7283] Memory failure: 0x13d280: recovery action for dirty swapcache page: Delayed
[   99.782386][ T7283] Injecting memory failure for pfn 0x13d27f at process virtual address 0x20002000
[   99.798055][ T7283] Memory failure: 0x13d27f: keeping poisoned page in swap cache
[   99.798191][ T7283] Memory failure: 0x13d27f: recovery action for clean swapcache page: Recovered
[   99.798393][ T7283] Injecting memory failure for pfn 0x13d281 at process virtual address 0x20003000
[   99.800927][ T7283] Memory failure: 0x13d281: keeping poisoned page in swap cache
[   99.800969][ T7283] Memory failure: 0x13d281: recovery action for clean swapcache page: Recovered
[   99.800998][ T7283] Injecting memory failure for pfn 0x13d282 at process virtual address 0x20004000
[   99.802337][ T7283] Memory failure: 0x13d282: keeping poisoned page in swap cache
[   99.802372][ T7283] Memory failure: 0x13d282: recovery action for clean swapcache page: Recovered
[   99.803073][ T7283] Injecting memory failure for pfn 0x1398f7 at process virtual address 0x20005000
[   99.844052][ T7283] Memory failure: 0x1398f7: keeping poisoned page in swap cache
[   99.844116][ T7283] Memory failure: 0x1398f7: recovery action for clean swapcache page: Recovered
[   99.844163][ T7283] Injecting memory failure for pfn 0x1348a0 at process virtual address 0x20006000
[   99.845352][ T7283] Memory failure: 0x1348a0: keeping poisoned page in swap cache
[   99.845518][ T7283] Memory failure: 0x1348a0: recovery action for clean swapcache page: Recovered
[   99.845621][ T7283] Injecting memory failure for pfn 0x1348a1 at process virtual address 0x20007000
[   99.857224][ T7283] Memory failure: 0x1348a1: keeping poisoned page in swap cache
[   99.857281][ T7283] Memory failure: 0x1348a1: recovery action for clean swapcache page: Recovered
[   99.857317][ T7283] Injecting memory failure for pfn 0x1348a2 at process virtual address 0x20008000
[   99.857815][ T7283] Memory failure: 0x1348a2: keeping poisoned page in swap cache
[   99.857848][ T7283] Memory failure: 0x1348a2: recovery action for clean swapcache page: Recovered
[   99.857874][ T7283] Injecting memory failure for pfn 0x1348a3 at process virtual address 0x20009000
[   99.865667][ T7279] loop2: detected capacity change from 0 to 512
[   99.865799][ T7283] Memory failure: 0x1348a3: keeping poisoned page in swap cache
[   99.865842][ T7283] Memory failure: 0x1348a3: recovery action for clean swapcache page: Recovered
[   99.865874][ T7283] Injecting memory failure for pfn 0x1348a4 at process virtual address 0x2000a000
[   99.867079][ T7283] Memory failure: 0x1348a4: keeping poisoned page in swap cache
[   99.867125][ T7283] Memory failure: 0x1348a4: recovery action for clean swapcache page: Recovered
[   99.867151][ T7283] Injecting memory failure for pfn 0x1348a5 at process virtual address 0x2000b000
[   99.867293][ T7283] Memory failure: 0x1348a5: keeping poisoned page in swap cache
[   99.868093][ T7283] Memory failure: 0x1348a5: recovery action for clean swapcache page: Recovered
[   99.868127][ T7283] Injecting memory failure for pfn 0x1348a6 at process virtual address 0x2000c000
[   99.900478][ T7283] Memory failure: 0x1348a6: keeping poisoned page in swap cache
[   99.900614][ T7283] Memory failure: 0x1348a6: recovery action for clean swapcache page: Recovered
[   99.900779][ T7283] Injecting memory failure for pfn 0x13610a at process virtual address 0x2000d000
[   99.904588][ T7283] Memory failure: 0x13610a: keeping poisoned page in swap cache
[   99.904685][ T7283] Memory failure: 0x13610a: recovery action for clean swapcache page: Recovered
[   99.904724][ T7283] Injecting memory failure for pfn 0x13610b at process virtual address 0x2000e000
[   99.910142][ T7283] Memory failure: 0x13610b: keeping poisoned page in swap cache
[   99.910177][ T7283] Memory failure: 0x13610b: recovery action for clean swapcache page: Recovered
[   99.910206][ T7283] Injecting memory failure for pfn 0x11fcfc at process virtual address 0x2000f000
[   99.910608][ T7283] Memory failure: 0x11fcfc: keeping poisoned page in swap cache
[   99.910637][ T7283] Memory failure: 0x11fcfc: recovery action for clean swapcache page: Recovered
[   99.910779][ T7283] Injecting memory failure for pfn 0x11fcfd at process virtual address 0x20010000
[   99.912592][ T7279] ext4: Unknown parameter 'permit_directio'
[   99.912759][ T7283] Memory failure: 0x11fcfd: keeping poisoned page in swap cache
[   99.912798][ T7283] Memory failure: 0x11fcfd: recovery action for clean swapcache page: Recovered
[   99.912825][ T7283] Injecting memory failure for pfn 0x11fcfe at process virtual address 0x20011000
[   99.913220][ T7283] Memory failure: 0x11fcfe: keeping poisoned page in swap cache
[   99.913325][ T7283] Memory failure: 0x11fcfe: recovery action for clean swapcache page: Recovered
[   99.913424][ T7283] Injecting memory failure for pfn 0x11fcff at process virtual address 0x20012000
[   99.943676][ T7283] Memory failure: 0x11fcff: keeping poisoned page in swap cache
[   99.943873][ T7283] Memory failure: 0x11fcff: recovery action for clean swapcache page: Recovered
[   99.944055][ T7283] Injecting memory failure for pfn 0x11fcdc at process virtual address 0x20013000
[   99.966299][ T7283] Memory failure: 0x11fcdc: keeping poisoned page in swap cache
[   99.966563][ T7283] Memory failure: 0x11fcdc: recovery action for clean swapcache page: Recovered
[   99.966734][ T7283] Injecting memory failure for pfn 0x11fcdd at process virtual address 0x20014000
[   99.969555][ T7283] Memory failure: 0x11fcdd: keeping poisoned page in swap cache
[   99.969599][ T7283] Memory failure: 0x11fcdd: recovery action for clean swapcache page: Recovered
[   99.969749][ T7283] Injecting memory failure for pfn 0x11fd96 at process virtual address 0x20015000
[   99.971268][ T7283] Memory failure: 0x11fd96: keeping poisoned page in swap cache
[   99.971426][ T7283] Memory failure: 0x11fd96: recovery action for clean swapcache page: Recovered
[   99.971451][ T7283] Injecting memory failure for pfn 0x11e336 at process virtual address 0x20016000
[   99.997794][ T7283] Memory failure: 0x11e336: keeping poisoned page in swap cache
[   99.997969][ T7283] Memory failure: 0x11e336: recovery action for clean swapcache page: Recovered
[   99.998131][ T7283] Injecting memory failure for pfn 0x13b98c at process virtual address 0x20017000
[  100.009427][ T7283] Memory failure: 0x13b98c: keeping poisoned page in swap cache
[  100.009499][ T7283] Memory failure: 0x13b98c: recovery action for clean swapcache page: Recovered
[  100.009538][ T7283] Injecting memory failure for pfn 0x13b98d at process virtual address 0x20018000
[  100.010596][ T7283] Memory failure: 0x13b98d: keeping poisoned page in swap cache
[  100.010637][ T7283] Memory failure: 0x13b98d: recovery action for clean swapcache page: Recovered
[  100.010752][ T7283] Injecting memory failure for pfn 0x11fd94 at process virtual address 0x20019000
[  100.050240][ T7283] Memory failure: 0x11fd94: keeping poisoned page in swap cache
[  100.050407][ T7283] Memory failure: 0x11fd94: recovery action for clean swapcache page: Recovered
[  100.050572][ T7283] Injecting memory failure for pfn 0x11fd95 at process virtual address 0x2001a000
[  100.085644][ T7283] Memory failure: 0x11fd95: keeping poisoned page in swap cache
[  100.085859][ T7283] Memory failure: 0x11fd95: recovery action for clean swapcache page: Recovered
[  100.086029][ T7283] Injecting memory failure for pfn 0x11e334 at process virtual address 0x2001b000
[  100.103281][ T7283] Memory failure: 0x11e334: keeping poisoned page in swap cache
[  100.103481][ T7283] Memory failure: 0x11e334: recovery action for clean swapcache page: Recovered
[  100.103607][ T7283] Injecting memory failure for pfn 0x11e335 at process virtual address 0x2001c000
[  100.107311][ T7283] Memory failure: 0x11e335: keeping poisoned page in swap cache
[  100.107354][ T7283] Memory failure: 0x11e335: recovery action for clean swapcache page: Recovered
[  100.107456][ T7283] Injecting memory failure for pfn 0x11f714 at process virtual address 0x2001d000
[  100.113227][ T7283] Memory failure: 0x11f714: keeping poisoned page in swap cache
[  100.113411][ T7283] Memory failure: 0x11f714: recovery action for clean swapcache page: Recovered
[  100.113548][ T7283] Injecting memory failure for pfn 0x11f715 at process virtual address 0x2001e000
[  100.117338][ T7283] Memory failure: 0x11f715: keeping poisoned page in swap cache
[  100.117381][ T7283] Memory failure: 0x11f715: recovery action for clean swapcache page: Recovered
[  100.117414][ T7283] Injecting memory failure for pfn 0x11f716 at process virtual address 0x2001f000
[  100.118915][ T7283] Memory failure: 0x11f716: keeping poisoned page in swap cache
[  100.118948][ T7283] Memory failure: 0x11f716: recovery action for clean swapcache page: Recovered
[  100.118995][ T7283] Injecting memory failure for pfn 0x11f717 at process virtual address 0x20020000
[  100.222075][ T7283] Memory failure: 0x11f717: keeping poisoned page in swap cache
[  100.222144][ T7283] Memory failure: 0x11f717: recovery action for clean swapcache page: Recovered
[  100.311075][ T7288] netlink: 56 bytes leftover after parsing attributes in process `syz.5.732'.
[  101.291110][ T7314] loop4: detected capacity change from 0 to 1024
[  101.320515][ T7314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  101.932679][ T7321] loop5: detected capacity change from 0 to 256
[  102.013366][ T7321] vfat: Bad value for 'shortname'
[  102.500363][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.506113][ T1293] nci: nci_rsp_packet: unsupported rsp opcode 0xf00
[  102.543105][ T7333] netlink: 36 bytes leftover after parsing attributes in process `syz.4.745'.
[  102.648051][ T7338] loop4: detected capacity change from 0 to 512
[  102.656315][ T7338] ext4: Unknown parameter 'seclabel'
[  103.497831][ T7347] loop0: detected capacity change from 0 to 8
[  103.499805][ T7347] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[  103.499824][ T7347] unable to read xattr id index table
[  103.563205][ T7350] loop4: detected capacity change from 0 to 256
[  103.563906][ T7350] vfat: Unknown parameter 'nnonumtail'
[  104.651985][ T7373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.756'.
[  105.426890][ T7325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  105.540904][ T7398] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  105.540991][ T7398] overlayfs: overlapping lowerdir path
[  105.543225][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.766'.
[  105.580684][ T7405] loop0: detected capacity change from 0 to 512
[  105.586345][ T7405] ext4: Unknown parameter 'seclabel'
[  105.893979][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.766'.
[  105.899763][ T7397] bond2 (unregistering): Released all slaves
[  105.977480][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'.
[  106.010381][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'.
[  106.132539][ T7437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.134926][ T7437] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.562369][ T7457] fuse: Bad value for 'fd'
[  106.631126][ T7458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.780'.
[  106.633145][ T7457] netlink: 44 bytes leftover after parsing attributes in process `syz.3.780'.
[  106.762314][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'.
[  106.794348][ T7467] 8021q: adding VLAN 0 to HW filter on device bond3
[  106.816483][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'.
[  106.816604][ T7467] macvlan0: entered promiscuous mode
[  106.817037][ T7467] netlink: 'syz.3.782': attribute type 1 has an invalid length.
[  106.817048][ T7467] netlink: 'syz.3.782': attribute type 2 has an invalid length.
[  106.817058][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'.
[  106.844864][ T7473] 8021q: VLANs not supported on gre0
[  106.845432][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.784'.
[  107.868375][ T7488] loop2: detected capacity change from 0 to 1024
[  107.868756][ T7488] ext4: Unknown parameter 'fowner<00000000000000060928'
[  107.962972][ T7495] FAULT_INJECTION: forcing a failure.
[  107.962972][ T7495] name failslab, interval 1, probability 0, space 0, times 0
[  107.963823][ T7495] CPU: 0 UID: 0 PID: 7495 Comm: syz.4.789 Not tainted syzkaller #0 PREEMPT 
[  107.963840][ T7495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  107.963845][ T7495] Call trace:
[  107.963848][ T7495]  show_stack+0x2c/0x3c (C)
[  107.963869][ T7495]  __dump_stack+0x30/0x40
[  107.963879][ T7495]  dump_stack_lvl+0xd8/0x12c
[  107.963889][ T7495]  dump_stack+0x1c/0x28
[  107.963898][ T7495]  should_fail_ex+0x41c/0x590
[  107.963910][ T7495]  should_failslab+0xc4/0x120
[  107.963919][ T7495]  __kmalloc_cache_noprof+0x94/0x5ec
[  107.963928][ T7495]  dvb_dmxdev_add_pid+0x15c/0x2ec
[  107.963937][ T7495]  dvb_dmxdev_pes_filter_set+0x380/0x508
[  107.963944][ T7495]  dvb_demux_do_ioctl+0x40c/0x4bc
[  107.963952][ T7495]  dvb_usercopy+0x2a4/0x4d4
[  107.963958][ T7495]  dvb_demux_ioctl+0x3c/0x54
[  107.963966][ T7495]  __arm64_sys_ioctl+0x154/0x1cc
[  107.963977][ T7495]  invoke_syscall+0x98/0x244
[  107.963986][ T7495]  el0_svc_common+0xec/0x23c
[  107.963996][ T7495]  do_el0_svc+0x4c/0x5c
[  107.964005][ T7495]  el0_svc+0x64/0x260
[  107.964016][ T7495]  el0t_64_sync_handler+0x48/0x148
[  107.964026][ T7495]  el0t_64_sync+0x198/0x19c
[  108.260288][ T7502] loop2: detected capacity change from 0 to 256
[  108.548391][ T7520] loop0: detected capacity change from 0 to 1024
[  108.564000][ T7520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  108.771693][ T7527] bridge0: port 22(syz_tun) entered blocking state
[  108.771804][ T7527] bridge0: port 22(syz_tun) entered disabled state
[  108.771919][ T7527] syz_tun: entered allmulticast mode
[  108.773653][ T7527] syz_tun: entered promiscuous mode
[  108.773948][ T7527] bridge0: port 22(syz_tun) entered blocking state
[  108.773990][ T7527] bridge0: port 22(syz_tun) entered forwarding state
[  108.918388][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  109.120923][ T7535] loop0: detected capacity change from 0 to 1024
[  109.150509][ T7535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  109.888607][ T7545] loop5: detected capacity change from 0 to 512
[  109.902216][ T7545] ext4: Unknown parameter 'seclabel'
[  110.310437][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.808982][ T7577] 9pnet_fd: p9_fd_create_unix (7577): problem connecting socket: ./file0/file0: -20
[  112.530028][ T7602] loop5: detected capacity change from 0 to 1024
[  112.562713][ T7602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  113.193472][ T7628] loop2: detected capacity change from 0 to 512
[  113.198688][ T7628] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  113.207367][ T7628] EXT4-fs (loop2): 1 truncate cleaned up
[  113.207844][ T7628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.595464][ T5653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.800704][ T7643] loop5: detected capacity change from 0 to 8192
[  113.823257][ T7650] loop0: detected capacity change from 0 to 512
[  113.823950][ T7650] ext4: Unknown parameter 'seclabel'
[  115.355959][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  115.403072][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.776611][ T7691] loop5: detected capacity change from 0 to 256
[  115.778269][ T7691] vfat: Bad value for 'shortname'
[  116.170990][ T7700] netlink: 296 bytes leftover after parsing attributes in process `syz.4.849'.
[  116.171029][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.849'.
[  117.365165][ T7718] loop4: detected capacity change from 0 to 256
[  117.485095][ T7730] loop4: detected capacity change from 0 to 512
[  117.486859][ T7730] ext4: Unknown parameter 'seclabel'
[  117.527141][ T7728] Cannot find add_set index 0 as target
[  117.530018][ T7728] xt_hl: Unknown TTL match mode: 237
[  117.560192][ T7733] netlink: 336 bytes leftover after parsing attributes in process `syz.2.862'.
[  117.586421][ T7733] tipc: Started in network mode
[  117.586460][ T7733] tipc: Node identity 1000001, cluster identity 4369
[  117.586471][ T7733] tipc: Node number set to 16777217
[  117.586628][ T7733] tipc: Cannot configure node identity twice
[  117.586863][ T7733] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  117.892947][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'.
[  119.115492][ T7766] loop2: detected capacity change from 0 to 512
[  119.123609][ T7766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.139821][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'.
[  119.245869][ T7775] loop0: detected capacity change from 0 to 512
[  119.269309][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'.
[  119.288467][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.297702][ T7775] EXT4-fs (loop0): 1 orphan inode deleted
[  119.300450][   T40] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  119.300498][   T40] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 1
[  119.300525][   T40] loop0: lost filesystem error report for type 5 error -117
[  119.308883][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  119.308919][    C1] EXT4-fs (loop0): initial error at time 119: ext4_release_dquot:7077
[  119.308947][    C1] EXT4-fs (loop0): last error at time 119: ext4_release_dquot:7077
[  119.323354][ T7775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.360272][ T7786] loop4: detected capacity change from 0 to 256
[  119.360693][ T7786] vfat: Unknown parameter 'nnonumtail'
[  119.511885][ T7799] loop5: detected capacity change from 0 to 256
[  119.539521][ T7799] vfat: Unknown parameter 'nnonumtail'
[  119.854945][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'.
[  119.980538][ T7820] overlayfs: missing 'lowerdir'
[  120.013044][ T7825] loop4: detected capacity change from 0 to 256
[  120.014892][ T7825] vfat: Unknown parameter 'nnonumtail'
[  120.027785][ T7827] loop5: detected capacity change from 0 to 512
[  120.028195][ T7827] ext4: Unknown parameter 'seclabel'
[  121.059744][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.210316][ T7846] loop2: detected capacity change from 0 to 512
[  121.214090][ T7846] EXT4-fs: Ignoring removed bh option
[  121.214141][ T7846] EXT4-fs: Ignoring removed mblk_io_submit option
[  121.214773][ T7846] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  121.215385][ T7846] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  121.215487][ T7846] EXT4-fs (loop2): orphan cleanup on readonly fs
[  121.215995][ T7846] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 4
[  121.216030][ T7846] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  121.216067][ T7846] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.899: Failed to acquire dquot type 1
[  121.216082][ T7846] loop2: lost filesystem error report for type 5 error -5
[  121.217098][ T7846] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.899: Invalid block bitmap block 0 in block_group 0
[  121.217124][ T7846] loop2: lost filesystem error report for type 5 error -117
[  121.218862][    C0] EXT4-fs (loop2): error count since last fsck: 2
[  121.218886][    C0] EXT4-fs (loop2): last error at time 121: ext4_read_block_bitmap_nowait:483
[  121.220049][ T7846] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.899: Invalid block bitmap block 0 in block_group 0
[  121.220077][ T7846] loop2: lost filesystem error report for type 5 error -117
[  121.221568][ T7846] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.899: Invalid block bitmap block 0 in block_group 0
[  121.221597][ T7846] loop2: lost filesystem error report for type 5 error -117
[  121.222026][ T7846] Quota error (device loop2): write_blk: dquota write failed
[  121.222074][ T7846] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  121.222096][ T7846] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.899: Failed to acquire dquot type 1
[  121.222111][ T7846] loop2: lost filesystem error report for type 5 error -28
[  121.222548][ T7846] Quota error (device loop2): write_blk: dquota write failed
[  121.222599][ T7846] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  121.222616][ T7846] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.899: Failed to acquire dquot type 1
[  121.222630][ T7846] loop2: lost filesystem error report for type 5 error -28
[  121.224431][ T7846] EXT4-fs (loop2): 1 orphan inode deleted
[  121.227162][ T7846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  121.281375][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.345294][ T4718] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  121.476459][ T7878] loop5: detected capacity change from 0 to 512
[  121.478250][ T7878] ext4: Unknown parameter 'seclabel'
[  121.809329][ T7883] loop0: detected capacity change from 0 to 1024
[  121.830642][ T7883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  122.500383][ T4718] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  122.595501][ T7900] netlink: 'syz.3.916': attribute type 32 has an invalid length.
[  122.921899][ T7921] loop4: detected capacity change from 0 to 2048
[  123.136323][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.176456][ T7921]  loop4: p1 p2 p3
[  123.176456][ T7921]  p1: <netbsd: >
[  123.204988][ T7921] loop4: p3 start 65280 is beyond EOD, truncated
[  123.220597][ T4345]  loop4: p1 p2 p3
[  123.220597][ T4345]  p1: <netbsd: >
[  123.224379][ T4345] loop4: p3 start 65280 is beyond EOD, truncated
[  123.243547][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'.
[  123.373237][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'.
[  124.529920][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  124.845767][ T5307] udevd[5307]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  124.846826][ T7953] set_capacity_and_notify: 3 callbacks suppressed
[  124.846860][ T7953] loop2: detected capacity change from 0 to 128
[  125.061842][ T7948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  125.464960][ T7960] loop4: detected capacity change from 0 to 512
[  125.470730][ T7960] ------------[ cut here ]------------
[  125.470763][ T7960] EA inode 11 i_nlink=0
[  125.739899][ T7960] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x480/0x488, CPU#1: syz.4.936/7960
[  125.742515][ T7960] Modules linked in:
[  125.743131][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: syz.4.936 Tainted: G             L      syzkaller #0 PREEMPT 
[  125.744657][ T7960] Tainted: [L]=SOFTLOCKUP
[  125.745278][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[  125.746807][ T7960] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[  125.748008][ T7960] pc : ext4_xattr_inode_update_ref+0x480/0x488
[  125.749009][ T7960] lr : ext4_xattr_inode_update_ref+0x480/0x488
[  125.750025][ T7960] sp : ffff800095ab6f40
[  125.750704][ T7960] x29: ffff800095ab6fe0 x28: 0000000000000000 x27: 1fffe0001e8089e5
[  125.752055][ T7960] x26: ffff0000f4044d80 x25: dfff800000000000 x24: ffff800095ab6f60
[  125.753414][ T7960] x23: ffff700012b56dec x22: ffff80008a188000 x21: 0000000000000000
[  125.754796][ T7960] x20: 0000000000000001 x19: ffff0000f4044d40 x18: 00000000817484f6
[  125.756127][ T7960] x17: 0000000045733d91 x16: dfff800000000000 x15: 0000000000000000
[  125.757501][ T7960] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000
[  125.758841][ T7960] x11: 0000000000000000 x10: 0000000000000003 x9 : a9c6d15ca9607500
[  125.760231][ T7960] x8 : a9c6d15ca9607500 x7 : 0000000000000000 x6 : 0000000000000000
[  125.761571][ T7960] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000803b93e0
[  125.762925][ T7960] x2 : 0000000000000001 x1 : ffff0000ca65ba80 x0 : 0000000000000001
[  125.764276][ T7960] Call trace:
[  125.764802][ T7960]  ext4_xattr_inode_update_ref+0x480/0x488 (P)
[  125.765781][ T7960]  ext4_xattr_inode_dec_ref_all+0x7f0/0xb84
[  125.766823][ T7960]  ext4_xattr_delete_inode+0x778/0x900
[  125.767784][ T7960]  ext4_evict_inode+0xa0c/0xfb8
[  125.768599][ T7960]  evict+0x4c0/0x74c
[  125.769262][ T7960]  iput+0x8f0/0xc2c
[  125.769894][ T7960]  ext4_process_orphan+0x24c/0x2c0
[  125.770762][ T7960]  ext4_orphan_cleanup+0x7d4/0xd20
[  125.771692][ T7960]  ext4_fill_super+0x4628/0x4e14
[  125.772524][ T7960]  get_tree_bdev_flags+0x388/0x43c
[  125.773376][ T7960]  get_tree_bdev+0x2c/0x3c
[  125.774108][ T7960]  ext4_get_tree+0x28/0x38
[  125.774832][ T7960]  vfs_get_tree+0x90/0x28c
[  125.775559][ T7960]  fc_mount+0x24/0xac
[  125.776210][ T7960]  do_new_mount+0x2a4/0x538
[  125.776951][ T7960]  path_mount+0x5f0/0xa88
[  125.777683][ T7960]  do_mount+0xe8/0x148
[  125.778430][ T7960]  __arm64_sys_mount+0x33c/0x388
[  125.779284][ T7960]  invoke_syscall+0x98/0x244
[  125.780078][ T7960]  el0_svc_common+0xec/0x23c
[  125.780912][ T7960]  do_el0_svc+0x4c/0x5c
[  125.781599][ T7960]  el0_svc+0x64/0x260
[  125.782279][ T7960]  el0t_64_sync_handler+0x48/0x148
[  125.783111][ T7960]  el0t_64_sync+0x198/0x19c
[  125.783858][ T7960] irq event stamp: 1978
[  125.784554][ T7960] hardirqs last  enabled at (1977): [<ffff8000803b9390>] finish_task_switch+0x234/0x858
[  125.786265][ T7960] hardirqs last disabled at (1978): [<ffff8000868f0d88>] el1_brk64+0x20/0x54
[  125.787815][ T7960] softirqs last  enabled at (1846): [<ffff800080310744>] handle_softirqs+0xc28/0xd98
[  125.789435][ T7960] softirqs last disabled at (1841): [<ffff8000800204c0>] __do_softirq+0x14/0x20
[  125.790848][ T7960] ---[ end trace 0000000000000000 ]---
[  125.899095][ T7960] EXT4-fs (loop4): 1 orphan inode deleted
[  125.901915][ T7960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.926673][ T5653] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.930041][ T1595] ieee802154 phy0 wpan0: encryption failed: -22
[  125.930081][ T1595] ieee802154 phy1 wpan1: encryption failed: -22
[  125.947664][ T4721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.