last executing test programs: 3m53.394744392s ago: executing program 32 (id=8): ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) close(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r10, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) 3m36.853986836s ago: executing program 0 (id=220): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000001300)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x1c, 0x8, 0x1, 0x1, "b7967df9bf465aeb8f7657698e6809984ab6d67ce84876c3f99561a79a1947e0775798b1514bb7b80db3a07321efe977a5711fdcdd552afab560aecf41a6c489116d4c2f38dcb55b1f2bc3ae533c149ca41bb2fafea836166636a7722557a534551d7077f7ca734ee749988e703a1b74966204ffc3f714d6efb25c334268a4bd"}) 3m36.853720275s ago: executing program 0 (id=222): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$inet(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @host}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) listen(r1, 0xfffffffe) accept4$unix(r1, 0x0, 0x0, 0x0) 3m35.973921779s ago: executing program 0 (id=236): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m35.930108296s ago: executing program 0 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x1) 3m35.589768628s ago: executing program 33 (id=239): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@init_itable_val={'init_itable', 0x3d, 0x8000000000000000}}, {@init_itable_val={'init_itable', 0x3d, 0x67}}, {@errors_remount}, {@orlov}]}, 0x5, 0x4e0, &(0x7f0000000740)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x281) 3m35.589721177s ago: executing program 0 (id=242): r0 = fsopen(&(0x7f0000000180)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) setuid(0xee00) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x40) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 3m35.253791688s ago: executing program 0 (id=245): quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000001500)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m35.253690498s ago: executing program 34 (id=245): quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000001500)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m26.46898448s ago: executing program 2 (id=295): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50c, &(0x7f0000000600)="$eJzs3E9rHOcZAPBnZiVXlt3aLm5pe7GoC3ZbuvpHoe7JLu2pdWmpoZQejGqvZKGVVpZWYIke5G/QQ30qPfTci3toIJAQQ0ggx+QQHPINQowxdg4Gxwoz2lXWq91IiiUNeH4/mJ139l37ndlHz+68j0YTQGmNZA9JxPGIeDsiTvR6wcjm6s7k3RvZksTGxp8eJtk/i/XJuzfaL01a62PZQxoxFBEfXErib8n2cZdX1+am6vXaUmt7tDm/OLq8uvaz2fmpmdpMbWH855OTY2MXJsZ+sW/H+t9nv/34f/d/NXP7H++/+efmp39N4mJ+3NF1HPtlJEZa78lg/LCr7zf7PVhBKhExEBHf6XguGShwh9iTpBW/wTz/T0QlBA/KYiPXr/fMBvAqS6LoPQCK0f6mz+a/7eXQTj4o3INLmxPA9VZt585W/AcizddD+dxw+HHywsww6Zrzf10jEXHr/jv/z5Y4oDoM/a3fjojv9cr/JK+NncyreFn8K9vif7a1zpbzmyW//DU/2sP4I937I/6H6mXi/+OO+Fc74v+TPYwv/gAAAIfj3qWIGOs1/0uzaWHE1vzvxfpPNjf87j6Mb/5XrHb97862+l+6Vf+r9Kn/9f21cZe/XHnW96Wd9b9sycZv1wI5eA9uR/ygZ/zb8R7KY90d/+xnY3SXY9xs/vrdfn3iX6yN/0Sci97xb0u++vrM0enZem1s87HnGKf/dfeP/cYX/2Jl+T/cJ/47ff5/vssxfn/xvYf9+jrj/8az11/bHv/0kyPJlfyH8UjrmVtTzebSeMSR5Hfbn5/Yy9GXT/s9ar+HWfzPn+39/f/tfN3+/N9e/3/ecf3o09Y1pFn7UeusMet7EhGrb93se7nzzvHnIGXxv75D/vf6/s+e+2yXY3w4/e+/9+sTfwAAAAAAAAB4eWl+LW+SVrfaaVqtbt7D73QMp/XGcvOn042VhevR+nvQwbR9pdeJze0k2x7P219uT3RtT0bEqYj4Z+Vovl291qhfL/rgoeSOdeX/k8pm/gMl4ZafUF7yH8pL/kN5yX8oL/kP5SX/obzkP5SX/Ifykv9QXvIfykv+Qyn94fLlbNlo3/dzoTEzO3dj8cLEWHV+5Vr1WmNpsTrTaMzkf7Ezv/P/V280FscnYuXWaLO23BxdXl27Ot9YWWheze8bfbU2eAjHBOzOqTP3PkoiYv2XR/MlOu6nLVfh1VYpegeAwpj6Q3k5xweSHfqH+nXU939fgMORFr0DQGHOfV/9H8pK/R/KS/0fyss5PqD+D+Wj/g/ltby6NjdVr9eWNDQ0NLYaRX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsJ+WV9fmpur12tIBNoo+RqC34ccDcaVjO4mI5631QEQ8jYjBiKisRzyKiKGsbz3iSVcbAAAAAAAAKJ7f0gNA+RzPlyStRkSat9O0Wo34ZkScjMFkerZeG4uIb0XE/crgN7Lt8aJ3GtgXXwQAAP//CZ8aEQ==") 3m25.320045026s ago: executing program 2 (id=299): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 3m25.18991135s ago: executing program 2 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_in(r0, 0x5421, 0xfffffffffffffffe) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000d885}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c) read$FUSE(r3, &(0x7f00000043c0)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) 3m25.189638732s ago: executing program 4 (id=302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xf2, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "a11d00", 0xbc, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x78, 0x3, [], "5fe38f2b6cdc26d25b0348c631e8ae50a3b53404649f582471265208f32fe3d0e2011d2bf946ef191dbdcd3f1cb4cb6327eb08b7668e0a00dbc7f45f4d41b7dbcdf4f7c613b681b98cf2c59fea6110d840477cf39e0611ed07bb385b867371799a1cd97034425b7519c2a7a43635f6c076ed1e4e955a0001"}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x6488, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0xa0}, 0x1, {0x4c289}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x1, 0x4}, 0x2, {0x200004, 0x2, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 3m25.164608662s ago: executing program 4 (id=304): r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x3, 0x20, 0x4, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3ff, 0x7, 0x9, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x4, 0x2d, {0x8, 0x25, 0x1, 0x82, 0x3, 0x1, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x10, 0x4d, 0x7, {0x8, 0x25, 0x1, 0x2, 0x1b, 0x4, 0xa}}}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000e80)={0x1c, &(0x7f0000000180)={0x0, 0xc, 0x1, "84"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m25.101828573s ago: executing program 2 (id=305): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc5c, &(0x7f0000000380)={[{@test_dummy_encryption}, {@errors_remount}]}, 0x3, 0x459, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 3m24.783802699s ago: executing program 2 (id=307): socket$netlink(0x10, 0x3, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ef915f210070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c2402080001030000eefe000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07cfc2e1c60de0"], 0x0) 3m23.525979351s ago: executing program 4 (id=317): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0600000000000905830300b3"], 0x0) 3m22.920413654s ago: executing program 2 (id=319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x70bd29, 0x0, 0xa, 0x2, 0x40, 0x70}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 3m22.846916704s ago: executing program 35 (id=319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in=@multicast1, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x44}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x70bd29, 0x0, 0xa, 0x2, 0x40, 0x70}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 3m22.647937769s ago: executing program 4 (id=324): syz_mount_image$fuse(0x0, 0x0, 0x1810090, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m22.408834768s ago: executing program 4 (id=330): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) 3m20.705612461s ago: executing program 4 (id=338): syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000000000204, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) 3m20.577225282s ago: executing program 36 (id=338): syz_open_dev$usbfs(&(0x7f00000000c0), 0x10000000000204, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) 1m56.265887345s ago: executing program 6 (id=1208): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fremovexattr(r2, &(0x7f0000001900)=@random={'security.', 'batadv_slave_1\x00'}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000003480)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0xff}}, 0x4) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000005a00000226bd7000fddbdf250008000300", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="080001000000000008000200", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB="0800010001000000080001800400000008000300", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00'], 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044fe0000a8001600050003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000010b8e6fb420c056116db6b6828cbccaa51ccc8b7ddc631321a3b0dbfa00"/61, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000004d39000000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4f}, 0x94) 1m55.209541387s ago: executing program 6 (id=1210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000340)="01800010002cda95ae", 0x9}], 0x3}, 0x0) 1m55.176144396s ago: executing program 6 (id=1211): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") write$mtd(0xffffffffffffffff, &(0x7f00000003c0)="9d111639151ca74fdd0002696cf939b7dcc540619246c79067f31d379d03b4a0cbdc2e02f005e1b2d77e08126d375203c9e8310a3427126e2adc5e9ace490574f769c30347a89e82b995a865dde95c71b11898a2e81c498727d66fb8aeff6cbc125beea7975f6a5352e262001ecbfee945eafaa3652478e05aff55288992d7a3025de2826506d2efe0cff73452172315c5704b462f48163d9e78d13971b91f78f8ba8ef84bf01dec152ae2a8", 0xac) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x91c1, 0x491, 0x1, 0x6}, &(0x7f0000000380), &(0x7f0000000140), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f00000001c0)={0x0, 0x9ac6, 0x2000, 0x3, 0x21e, 0x0, r1}, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f00000001c0)=0x8, 0x4) sendto$inet(r2, 0x0, 0x0, 0x20000801, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x4b, 0x37, "43720702b909d4bc4c3f956f18e8fe0252c0c4397d2471951bdd97e4d2b690ad5e137cee16de02d40b4fcdf2227f128a8dd35083e5cfd5"}}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000001b00)) sendmmsg$inet(r3, &(0x7f0000000fc0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000240)="e9eeb7585b3676e8a64604ac72b944cc36171370b7ab92c95ffb69345a1ce70304695bea53cb8f1793d8d64d319f95b766cceeb2239a1cde7e580dab8b5d33f135b34873052d46", 0x47}, {&(0x7f0000000340)="70fb1b6012a402c620ad454a4bab958129399a3dac91b5ae0be1fb68d9ea", 0x1e}, {&(0x7f0000000480)="fcaf6102cf5017fb32d5b2c44080f83808a97556b40a653a1e9c545e975668e56640049360ff5e9bf39efd7c04e10dda20ed462af5659c644f34ebbeb3847c55317823175f03bfbfbcbef4a7eb4cc06c448de4016222db5a3cb1e5558fdb1f14fccb059bc7fcf3a9404339c93fb7ccda33fbe0e731f31b59b3f14614d0693e668e81f983df9564d2294cfac675bb90bf915770234867ebeba0431c263a063dc41a158711afb442ff0f944ecde5038a5d7b5f53", 0xb3}, {&(0x7f0000000540)="c7b01796ba913f677112a34a77c436e1056cc4574d0447f3591837df7766251e59ea2550264ebca95b87109c903ee6c8b3bb5be13c7f4aa079507a2f427380cede24ba7b8f4fc0a2fe442c8142db2f4a4b5771bfe4c44a9be3d756e4cbab8af72686b4e0d41f8052dce6", 0x6a}, {&(0x7f0000000700)="e0aa06edc73b3d6753", 0x9}, {&(0x7f0000000740)="6289cb657d73bbffb4c37c30d520073eef5c85f4181ad6349498a24b0ed378f4c79c61c03955fe7c90f82d781320e3074e64907d01ed784cbe03efbd9de53c9cfe", 0x41}, {&(0x7f00000007c0)="269eb81594ef6c6c7e70d5424b08ec46038641f4e3c131697e5dda2d585243b0e5d91d12658bbc3a4a82833df659b7db1f95d9bf486d68e5d72ea2e740cd5da2b39b5dceb4bce8b2e4dd7ead811d516a12b9adde55fa9140f84e9aece983b572184576b7e463d73582c6", 0x6a}, {&(0x7f00000008c0)="add3ff1884fca220f7c2fac501249a967c9392d828d4800c179158252590a525c234730fa998e24fdb650e58afbc0c329f486845e099a636ab3c4ffc5823723008f57a831157e5d9a94efdb39dd96088723ed3fa155d4f61cd68843ee4674d3c7eeade097f39dbacfa0ec8db6aa230788a9a3285cdc9e11590017b36da122cf177fd6490896cf9ae65abf2b894181c10f7dae7310c53b26b5a", 0x99}], 0x8, &(0x7f0000000b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f0000000b40)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000b80)="384f173b6823a54317adef1c03d92f5fd0755a0fe899dcce247f64259642ef81843db83d417134fcf953be75b24eb6e30bd2f86aaf8f070ef8f6b2f19ca958e07cfe399c06d406914641a611618c007a6a7c3851aeaa49e0315e9dab3d5605a4f11ef6", 0x63}, {&(0x7f0000000c00)="e8436313e935cc3fe8b5ab03a4428d6ad490a0655f3d28b0ed21851638767a7049fae596f74dc020cfaf7d160c9e27e5056a8df94196efb13ca910805c9fa26b410b29d09db95df8607024027db9c2c919aa4209e8cedf5db7c76bc15d5fd85e5d9528895e897e69e75df9cd7661d018", 0x70}, {&(0x7f0000000c80)="75c6c5d1bdea82d543a9ee87b0f3ae8f3aca720b70fffcb000ba9138f91beda9c1ab963134b0aacfa46c158525b1178663c20a789f6e0ce82d6732119cb83ee563bcc395f8a1cbc191afb00d6529d5fc9c9384099d905412013fa6b58e3037ebb6f0a3b14f4ca1f175f99722c523f67b647422c7dff461cdc201c0ddfab7c8c3afc003eb8fe553bd1b61126fc010d49d6ba81f2f7a4d5f5ccc3d8c213fb856ab49eb18d7b37fb6134eb73fa05b1f917952493cbcd6310b73f029f12358c6448c268f46e8ac095264ef2f5215deca6941c37b07dc03", 0xd5}, {&(0x7f0000000d80)="1098e09c458b38ce24969edef78edd03b7daa58e43d5303c9a2e0e5f85837afbdfd107f7bbad39fb37e20d458a9c86a5621356fa764fcc8f24711ee944eef3774fc7bb456d899dfd8ced674b6cf8713a84fbd0ef885ae8562e008ffd7e702f95adadec4f61d1ab264f3f2daca917f8a61ab335fbf3b24840609996d5", 0x7c}, {&(0x7f0000000e00)="c92522381d07148f80ee55279c25ae882ff9334cf968fa8a8f", 0x19}], 0x5, &(0x7f0000000f40)=[@ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x1a, 0x2, [{0x2, 0xd, "d5a176422db0e5fe69e483"}, {0x5, 0x7, "1beeb6c918"}]}, @timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x6, [{@rand_addr=0x64010102, 0x8}, {@multicast2, 0x5}, {@multicast2, 0xfff}]}, @end, @rr={0x7, 0x2b, 0xef, [@multicast2, @remote, @private=0xa010100, @loopback, @local, @loopback, @rand_addr=0x64010101, @local, @broadcast, @private=0x7]}]}}}], 0x78}}], 0x2, 0x8000) r5 = socket$inet6(0xa, 0x3, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in=@rand_addr=0x64010102, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, r6}, {0x81000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x7fe, 0x9}, {0x8000000000000001}, 0x5, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x4d5, 0x7a}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x7ff, 0x9}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x5}, 0x1c) symlinkat(&(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m54.257715568s ago: executing program 6 (id=1217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) futex(&(0x7f0000000080)=0x105, 0x5, 0x20001, 0x0, &(0x7f0000000100)=0x1, 0xc6ffffff) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}, {0x0, 0x3f00}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000027c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nouser_xattr}, {@noquota}], [{@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', r3}}, {@euid_eq={'euid', 0x3d, r3}}, {@context={'context', 0x3d, 'user_u'}}]}, 0x1, 0x440, &(0x7f0000000780)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x8101, 0x0) r7 = syz_ublk_setup_io_uring(0x47e8, &(0x7f00000002c0)={0x0, 0xccf3, 0x80, 0x3, 0xdc, 0x0, r6}, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xc5d9, 0x100, 0x2, 0x1d1, 0x0, r7}, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r8 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x3d, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) ptrace$getregset(0x4204, r4, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=""/131, 0x83}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xffffffff}) 1m52.929873229s ago: executing program 6 (id=1220): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m52.545923415s ago: executing program 6 (id=1234): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x301001a, &(0x7f0000000180), 0x1, 0x4cb, &(0x7f0000000580)="$eJzs3U1oHGUfAPD/bD6aN03f5P3gfUtP0UKtlCZNt7EUKrSnQtGCraCgB0OzSdNu2tKkYHIQP0ArKrSXXiyCHhSkh3hSEUR6EBXBQy+CUlBBbCCtVpEiwsrsR0ybTdo0NUPj7wfDPM/s7jz/3f/OszP/Dk0Af1udEbEjIhoiYlNEtFe356pLPF1Z0ucV8hMH0iWJUmnf5SSSiNidnzhQ21dSXa+s7qAlIs59HNHaOHvckbHxQ33FYuFYtd89Ony0e2RsfOPQcN9gYbBwON+zNZ/P927L99629/rT7wdPvXd114unL/34+Xfn3z2bxI5oqz42833cLp3ROf2ZzNSYRNx/uwfLWEvWAbBgZx889UrWMQAASy89x/93RNxdPv9vj4aonKwfnHz8SntcGZjrdR2/vnZxKeMEAAAAbt1vpfbYHhElAAAAYNnKRURbJLmu6r0AbZHLdXVV7uH9b7TmikdGRjcMHDl+uD/K98p2RFNuYKhYqN0r3BFNSdrvKbf/7G++rp+PiH9FxIn2f5T7XfuPFPuzLn4AAADAMtcWceGx597//8o5rv9TX7dnHSUAAACwGOn1/6oLreX/qusX1/kAAACwLKXX/1eev/RpuP4HAACAZat2/T/9d7g0NDQ0phtZz1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwW6mURAkAAABY1rKuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGfZnZ84UFualmjMyV1LNBBzmtoZER2V/BeqS+WRxmgpr1si/T60/pxE44zXJRHRsMixu9ZFdMaGL08+9cM76RLV7+Eid8sdYuLbrCMgS81bso6ALK15KOsIyNIXJ7KOgCydn8o6ArK0d1/WEZClPfdlHQFZevVy1hHw0c6I2HRt/a/ySC5Wl9eVKtD19Z+GcoVocT47E9EZXd/P3Da7/pObXOQwzGNqZ8T2iCjMqv/lak/paKj2VpVLhU3JwFCxsCki/hkR66NpRdrvmWeM3avP1a30vPy/NP/H99Tqf+mSjl+rBVbjmGxcce3r+vtG+xb7vqmYeiZiTWO9/CfT9d9kjvrvipsc44Nv9g7X2371kzT/L304f/75K5Vej7in7vGfTD8nbXWPDh/tHhkb3zg03DdYGCwczvdszefzvdvyvd3l+aC7NivM9vazb9b9pb9rf3n+H5P/7KTHf+v8+S/P/yNj44f6isXCsZGFj/HCutN1f8PfOp3mv/ncrcz/zcnD5QCbq9ue7BsdPdYT0Zw8MHv75oXHvFzVPo/a55Xmf/3a+r//tfO/yvyfmzX//6e6zlX+CXFO975xse72r06m+c8/4vjPTpr//hsc/8k1x//CG0+s3bu+3tiPRvn870w190n1voM6x/+WcjC1nTj/u7GbTVDWcQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEx/BAAA//8eKfNq") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001180)={[{@fat=@gid}, {@uni_xlateno}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno}, {@shortname_win95}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@rodir}, {@shortname_win95}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000079105a000000000005000000000000009500000000000000f52912b6bade8de2627e7e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xeacf, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) utimensat(r7, 0x0, &(0x7f0000000080), 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, &(0x7f0000000280)=0x3, 0x4) sendto$inet6(r8, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1m51.395859103s ago: executing program 37 (id=1234): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x301001a, &(0x7f0000000180), 0x1, 0x4cb, &(0x7f0000000580)="$eJzs3U1oHGUfAPD/bD6aN03f5P3gfUtP0UKtlCZNt7EUKrSnQtGCraCgB0OzSdNu2tKkYHIQP0ArKrSXXiyCHhSkh3hSEUR6EBXBQy+CUlBBbCCtVpEiwsrsR0ybTdo0NUPj7wfDPM/s7jz/3f/OszP/Dk0Af1udEbEjIhoiYlNEtFe356pLPF1Z0ucV8hMH0iWJUmnf5SSSiNidnzhQ21dSXa+s7qAlIs59HNHaOHvckbHxQ33FYuFYtd89Ony0e2RsfOPQcN9gYbBwON+zNZ/P927L99629/rT7wdPvXd114unL/34+Xfn3z2bxI5oqz42833cLp3ROf2ZzNSYRNx/uwfLWEvWAbBgZx889UrWMQAASy89x/93RNxdPv9vj4aonKwfnHz8SntcGZjrdR2/vnZxKeMEAAAAbt1vpfbYHhElAAAAYNnKRURbJLmu6r0AbZHLdXVV7uH9b7TmikdGRjcMHDl+uD/K98p2RFNuYKhYqN0r3BFNSdrvKbf/7G++rp+PiH9FxIn2f5T7XfuPFPuzLn4AAADAMtcWceGx597//8o5rv9TX7dnHSUAAACwGOn1/6oLreX/qusX1/kAAACwLKXX/1eev/RpuP4HAACAZat2/T/9d7g0NDQ0phtZz1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwW6mURAkAAABY1rKuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGfZnZ84UFualmjMyV1LNBBzmtoZER2V/BeqS+WRxmgpr1si/T60/pxE44zXJRHRsMixu9ZFdMaGL08+9cM76RLV7+Eid8sdYuLbrCMgS81bso6ALK15KOsIyNIXJ7KOgCydn8o6ArK0d1/WEZClPfdlHQFZevVy1hHw0c6I2HRt/a/ySC5Wl9eVKtD19Z+GcoVocT47E9EZXd/P3Da7/pObXOQwzGNqZ8T2iCjMqv/lak/paKj2VpVLhU3JwFCxsCki/hkR66NpRdrvmWeM3avP1a30vPy/NP/H99Tqf+mSjl+rBVbjmGxcce3r+vtG+xb7vqmYeiZiTWO9/CfT9d9kjvrvipsc44Nv9g7X2371kzT/L304f/75K5Vej7in7vGfTD8nbXWPDh/tHhkb3zg03DdYGCwczvdszefzvdvyvd3l+aC7NivM9vazb9b9pb9rf3n+H5P/7KTHf+v8+S/P/yNj44f6isXCsZGFj/HCutN1f8PfOp3mv/ncrcz/zcnD5QCbq9ue7BsdPdYT0Zw8MHv75oXHvFzVPo/a55Xmf/3a+r//tfO/yvyfmzX//6e6zlX+CXFO975xse72r06m+c8/4vjPTpr//hsc/8k1x//CG0+s3bu+3tiPRvn870w190n1voM6x/+WcjC1nTj/u7GbTVDWcQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEx/BAAA//8eKfNq") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001180)={[{@fat=@gid}, {@uni_xlateno}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno}, {@shortname_win95}, {@shortname_lower}, {@shortname_lower}, {@rodir}, {@rodir}, {@shortname_win95}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x9, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40500000000000079105a000000000005000000000000009500000000000000f52912b6bade8de2627e7e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xeacf, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) utimensat(r7, 0x0, &(0x7f0000000080), 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x46, &(0x7f0000000280)=0x3, 0x4) sendto$inet6(r8, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1m5.789171258s ago: executing program 1 (id=1612): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000500"}, 0x2000000000001005, 0x19dff}}}, 0x90) 1m5.774326795s ago: executing program 1 (id=1614): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x32, 0x3d, 0x4, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000002100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2800892, &(0x7f0000001b80), 0x0, 0x571, &(0x7f0000000800)="$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") r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0000000000000073013d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x430bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40530, 0x5a1b5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xff14}}}, @IFLA_MASTER={0x8}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1m5.445470115s ago: executing program 1 (id=1618): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (fail_nth: 2) 1m5.329476249s ago: executing program 1 (id=1623): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000c, 0x12, r0, 0x5eced000) 1m5.169809365s ago: executing program 1 (id=1626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x621f, 0x51, 0x1, 0x201, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) syz_io_uring_setup(0x7b52, &(0x7f0000000000)={0x0, 0x621f, 0x51, 0x1, 0x201, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) (async) 1m4.497784557s ago: executing program 1 (id=1628): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) 1m4.374996863s ago: executing program 38 (id=1628): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYRES64=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) 4.024457321s ago: executing program 7 (id=2051): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffee}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r3, r5, 0x1f, 0x0, @void}, 0x10) getsockname(r2, 0x0, &(0x7f0000000140)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r9 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) recvmsg$kcm(r9, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) 3.28599485s ago: executing program 5 (id=2066): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0xd}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)="27050200160014000600002f86dd", 0xe}, {&(0x7f0000000300)="62f306e4f2e7c2ffd848150f3f844941b8c91031237ce4fca8f2962775cd7938cfed1cf8de53757e", 0x28}], 0x2, 0x0, 0x2800}, 0x0) 3.248021992s ago: executing program 5 (id=2069): r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x44, "f56508f2686af1d21b036418fcd6d9273e2a100f7b7c745591cacde09fceb2ff543bdafc711ba5b8899403526e6ee4862eab972362d0fe683cd1e88f6d51b96b535a34f7"}, &(0x7f00000001c0)=0x4c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x5, 0x30, 0x2, 0x8}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x2, 0xe1, 0x1, 0x4337, 0x2, 0x7e, 0x6, {r2, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0x7, 0xfd65, 0x1, 0x3d}}, &(0x7f0000000340)=0xb0) r3 = syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000540)={0x4, "d19da6bef8d3621921eda540ff3639c1693aa4c61a74462a0e5f78acf2ab3551", 0x1, 0x800, 0x6f5, 0x0, 0x2, 0x0, 0x9, 0x1}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f00000005c0)={0xffffffffffffffff, r3, 0xe2b}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000680)={0x6, 'bond0\x00', {0x10}, 0xd8b}) pipe2$watch_queue(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000700)={0x8, 0x7, 0x4, 0x5421ef8ae4d5351c, 0x7, {0x0, 0xea60}, {0x2, 0x2, 0x1, 0x13, 0x2, 0xde, "f9111830"}, 0x444, 0x4, {}, 0x8, 0x0, r4}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000007c0)={0x2, 0xb22e1a59bfc7249d, 0x4, 0x4, 0x2, {r6, r7/1000+60000}, {0x6, 0x8, 0xb9, 0x4, 0x4, 0x9, "deaa06ae"}, 0x9, 0x4, {0xffffffffffffffff}, 0xffff0001, 0x0, r5}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000880)={0x0, 0x800, 0x7}) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000008c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'rose0\x00'}) 3.177122342s ago: executing program 5 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000480000000006311a400000000008510000002000000850000000800000095000007000000009500a50500000000155192650b65f8ba895d9fc7c9da7732e061c4b905d8146c3eebb3e837699a9411567068eb20afc3d52da2a7f0000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 2.139293161s ago: executing program 5 (id=2075): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000140)='./bus\x00') fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221400, 0x76) unshare(0x400) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r8, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208001e8d61881b5d500d6354", 0x34) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x181, &(0x7f0000000500)={[{@uid={'uid', 0x3d, r2}}, {@mode={'mode', 0x3d, 0x9}}, {@gid={'gid', 0x3d, 0xee00}}, {@uid={'uid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0x1}}], [{@subj_type={'subj_type', 0x3d, '}*.'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'commit'}}]}) 2.073088629s ago: executing program 7 (id=2076): r0 = fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000005c0)='GPL\x00', &(0x7f00000006c0)="128ee845e08d5594601df7145c3da312428ea0b4ea8f5c9beeba6351ee16cdd1ecd66094d987f42e4e5a81899434fe5dce70b07c3e5d1796d91368d23781f70a7f4ed2ea73ca9056edadb7482edddf39e41dbd1639e5575334ec4933489076349cfd4c2d77b0fcb0550cdc2d921230391144dd595c19dca8cc7acd3fad024b9fe0c47273e1faef2495eac2f7fd798caa9c7f6f952883f31a4971e401e75f145c4ebf1b27d7287c16105529873bddf4c0493122", 0xb3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000b200000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)=""/35, 0x23}, 0xd9}, {{&(0x7f0000000140)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)=""/141, 0x8d}], 0x5, &(0x7f00000004c0)=""/38, 0x26}, 0x2}, {{&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000580)=""/15, 0xf}, {&(0x7f00000005c0)}, {&(0x7f0000000c40)=""/4091, 0xffb}, {&(0x7f0000001c40)=""/127, 0x7f}, {&(0x7f0000001cc0)=""/138, 0x8a}], 0x5, &(0x7f0000001e00)=""/50, 0x32}, 0x7ff}], 0x3, 0x10022, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r1, &(0x7f0000000380), &(0x7f0000000600)=""/72}, 0x20) 1.965932308s ago: executing program 3 (id=2080): r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x44, "f56508f2686af1d21b036418fcd6d9273e2a100f7b7c745591cacde09fceb2ff543bdafc711ba5b8899403526e6ee4862eab972362d0fe683cd1e88f6d51b96b535a34f7"}, &(0x7f00000001c0)=0x4c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x5, 0x30, 0x2, 0x8}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x2, 0xe1, 0x1, 0x4337, 0x2, 0x7e, 0x6, {r2, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0x7, 0xfd65, 0x1, 0x3d}}, &(0x7f0000000340)=0xb0) r3 = syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000540)={0x4, "d19da6bef8d3621921eda540ff3639c1693aa4c61a74462a0e5f78acf2ab3551", 0x1, 0x800, 0x6f5, 0x0, 0x2, 0x0, 0x9, 0x1}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f00000005c0)={0xffffffffffffffff, r3, 0xe2b}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000680)={0x6, 'bond0\x00', {0x10}, 0xd8b}) pipe2$watch_queue(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000700)={0x8, 0x7, 0x4, 0x5421ef8ae4d5351c, 0x7, {0x0, 0xea60}, {0x2, 0x2, 0x1, 0x13, 0x2, 0xde, "f9111830"}, 0x444, 0x4, {}, 0x8, 0x0, r4}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000007c0)={0x2, 0xb22e1a59bfc7249d, 0x4, 0x4, 0x2, {r6, r7/1000+60000}, {0x6, 0x8, 0xb9, 0x4, 0x4, 0x9, "deaa06ae"}, 0x9, 0x4, {0xffffffffffffffff}, 0xffff0001, 0x0, r5}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000880)={0x0, 0x800, 0x7}) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000008c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'rose0\x00'}) 1.965438825s ago: executing program 3 (id=2081): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 1.949492572s ago: executing program 7 (id=2083): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xfffffffffffffe9d, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MAXIP={0x0, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}]}, 0xb8}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x102) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x20004055) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) memfd_secret(0x80000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1.912461943s ago: executing program 3 (id=2085): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002ec0)={0xffffffffffffffff, 0x58, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004e40)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x401, @empty, 0x6}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000240)="fe881530200dcd602e64a4bdf2a0e3c902041771f7918d83ae7b3f55074ff4d893dab6e34f7a3433b78faafa597220081d48895a2874838f45ac033797a18c7ac8180ccbb6a463f07be9203feaf6da7aedb8d160b1c095e2362249e8d281e73a19203ddc97145ae66f9f036d5aa1af530cfaa2592785f466bd1f8bda7b8b3dbee80c8d2b341dcbf4", 0x88}, {&(0x7f0000000300)="ad12bdf26c66f9f93cf5c982378402696d3ad31f9b0bd00614b0b0d806b92cb8347b4b788a2f1dc0fe4f104fee2cd610d39a2dbe449c47e04e4ba983634b96b6115c20b382080e578a0887ceaa8715a7be906f33c50b6e7b7564677dce556211374e46cc33d9d94e0906250e025ada1043cdb08dfb5ceb756d47e1b320ab95f93b781d36eefd9bb2817c9230414a20c283242eea3094b7a7e5b93ebc65d676d1ff08396e018be284c83dee0d3120e57f", 0xb0}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000004c0)="5ee89ba7d9d7a3fe8a9350058d2c22ef62e9e46e67c9c19d584b017b863651c3e2a7b1febc4caa8ea0c55ac0c67898b4cd7636c54ccd3d95f4204a3fb84988d2121dcb9238ed144b0893d340bd5942f322679d485b6c5131942d3e1beba68f5cabd17fbddc7cdf3832c8", 0x6a}, {&(0x7f0000000540)="9fd343c2d2b75fa614791d519708042cd3a33ae44799ec621da35e5c11e351def8d7b1a8f22241c95fc3d49c35567b2c64be8a2a128d2d14af0c8154a46d447a6f8723e0598ed61e4b6c40fbb8c53c8f7e", 0x51}, {&(0x7f00000005c0)="d5ca25d1d54680c58b3d5b7002fc2050a7845ebd6bacabee0a6604675b730bcd0c33caea5dfa1f05a23bbaf395b790068fa0db0df97b7d0eea05755ab17b15ce97663baba0e1671fd743c71246624644acf1a1cde7d9fed99ad61d", 0x5b}], 0x6, &(0x7f00000006c0)=[@rthdrdstopts={{0x98, 0x29, 0x37, {0x87, 0xf, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xdb}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x6, 0x4, "0932140b"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0xa0e, [0xb62]}}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x4}, @generic={0xe7, 0x3c, "b800d600edee5003683308918df7198e8d5a1288005cb46b0a0b22270453cef7978c36435c1c8bb4d1b5f4c9da0b03b647eedb217f7090c0f7823e31"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x89, 0x0, '\x00', [@pad1]}}}, @hopopts={{0xf8, 0x29, 0x36, {0x10c, 0x1c, '\x00', [@generic={0x8, 0xbf, "9254f5bcc886df15b04cea6aeceebcd4e95628edab8d040979f76dc60217e2649dedde375fb8d5b07c17e2e7e46810caf3cbd410a664524d3c4acc44b8637c7239b570fefcce38047949cc53580e5f4c00d39143d4734c25a153635a1931c22389d697912568ae21b55c63311b540087e6d03a944ec734f910c51d43b97e0315c6f82084919b81e692a8fd503ebfdf2444a9c8818df79462d1b86dcfed2fb7552a9541abb734a23573e3c98e883d4bb0cb59c530c1b466e9b736aa3e57d9c5"}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @private2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x33, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x2a47}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x2}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x0, 0x4, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x7, 0x7ff}}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x2}]}}}], 0x250}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000940)="d8f2c394a40afaf316c6efe5f1914c7cd9275cd35c7170be02b47d0bef83994d35e2cb4c982097698a38c2f2ff41ad596cd03525caf050b2167a0cf8eeddf7483bcebf316e5f9725048fbc428f79d24c19fe65b1bbeb040c294e7b05f5bb3f0aa879b00fdf5c837e", 0x68}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="573c4bc3f790cdab0401fa44e016144afa0e93f3d5be03841b6087f0c7da0c37c4ab34dbc56c9938012b5675fb32e30ddcd8feda2ca8926bf8e06a5570c1bfe045b71247368729e109c3568a4f952ea12f7c19e5e94715", 0x57}, {0x0}, {&(0x7f0000002600)}, {&(0x7f0000002640)="2c173a6a5441f13a78b94a0098dd8b7d9205b7b1cfd9340dc58bee392d2a70ac6b951d4e9965b8f123b271910af0024b6f0ccaba19d5fc7ba9d1e2a12c15a004f607f976184747f43557c8b854b1c4a349ce1b22", 0x54}, {&(0x7f00000026c0)="bb97d55aa7ece47a9896d0b0348d486ad87a7ce222e33521a90d16a36f66c6ba469c7f3074ff58a89a644b470e242167a087cc79dd085561a64f3c0c5df9219d42a9cea65cf5c43e6d5d632c6b0642b22e63ced9ab355b4c8bbe9e3a6f76871b61ec65ef70322f6f67851d9ebba2cd41bd6ece64d675", 0x76}], 0x7, &(0x7f00000027c0)=[@dstopts_2292={{0x130, 0x29, 0x4, {0x84, 0x22, '\x00', [@hao={0xc9, 0x10, @local}, @generic={0x2, 0xcd, "03b7c9b5f5d8c539dae9701564d1fc071882c6d8e706e75251e0819227a8c77760f83e34eaee0771d2419108299eb7a61f5923fd0f1c529d52ea74804e94a315aa237471ec553d5d655e7d96821f229ef74589dead73b55e858c4296ca516b8915373c3724f614475988c26050a5dd0f5d93949e8899e9499e69627b30c9293a0664dc49e36693df7621f994f4a2498a36812bb33cae7af878e5e8ddfb83a3ec5c8c92c7585f0d1ea649130770c19fbdd8b3d59317162456bdedb089e2e6099c7f02d1d76e0e00f5f3180278e3"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0xd3, 0x2, [0x0, 0x5]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x40}]}}}, @dstopts={{0x48, 0x29, 0x37, {0x3b, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xb2, 0x6, [0x9, 0x8]}}, @ra={0x5, 0x2, 0xce1}, @ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x9}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hopopts_2292={{0x1c0, 0x29, 0x36, {0x29, 0x34, '\x00', [@generic={0x7, 0xed, "a9fda0197ec0353dd0b4ed5741006855098cbf65d654be22db16912bf9f29b062e1c257f39cfec949efd290aa4d2f449c8e8d590c312a3949f024007ad5c2ff1b834b57df12c1fcdb04f2304a00ddea8851a916b2dd12d6a0aefd9df47f2b0b717a568c3d409de00477529a874b7a6b74ecc1cda0b4c7b1e7542614e852fd7b7a284a34d2aa5d5509b04e7f37ce1e8e687243a96e0f805b2e7c376a52070a489edf68e5c5d3e5e809badbc0467cc83bfcf8168f42aa091ba33d576e60a249803121e70793492561a1bd3936f3fc1fa62d9594fa3eff53559065464746384c78db2dbcdd8caa017dbc47e55d110"}, @pad1, @generic={0x1, 0xb0, "5d4286a8cebff2cb791e0c077fd5445807911461c6b5b20bffa537b75ef379dfb89a1eade518bf534819ea1be273c64d28a59fa36d3e3af37052934463071486aba12d25a627c8c14af24d6cc5f7f1e360648e081f51d4abc306526629210abb4e917d4b46d142273f04233263c704208c56b9aca1ba2a4bd108e7f34eca5fd71b6267c2a8c5cf8584153a4bed55b5c455eae480f1722b78c0363b93eb680ae0091cf7492ff8893c071869113b60e911"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x398}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002b80)="1d7da425a4369463987e18805d7f6bbdb85cefa7a49ad5e98d7f792a856f1d94b7de87751490540561ce2cbfba169a8acbc7034a02575554f170b81bc7c53f204bbd0988836da7ce20d219f1b20fa72d33934ec22f445ce370bdcdccc66ee492981949406df944a71f85e05e13b928d5bedee8a78c7d30d94b2778397df1c505167a2eb6f7467f5856f687a87dfb5f7f895d9e3d9c4682552f9f4637280dee78d383", 0xa2}, {&(0x7f0000002c40)="af500643a0cbf18c6232389e134290940eb0f2c89e59dfae32d03ecdb31de6d7370419ce032ec4af0164ebb26aa17acddd22207d18c768e989e7c1f92088a7b1ef7049695936ffd7cd466c3499961baf9d84a2a68dba3e427cd974a407edfac3e3d7847822f7497c2c1dbd4a92354bdcf303b13ea4ca939fd3c1cd0c3e8cc75e461f7937b7254f7a2173048733c0705b9bb48f9c42c63271a1da1130ec38a8d3ef4ee3b14faf169c6372fb25b2898c4853", 0xb1}, {&(0x7f0000002d00)="4b72abace6e51d133eb8e7c64263cc5da54f24e7e2427802d8da43a34653944b0e7b16b7190d8d4a2263af353e58feb216c89015416f1ad7273b3e1738dc37ad0653c92f26c91f7154d7bd4aa4c6579a87a6d74b8ad4a32bde831c62680e44802258661039474af8f25b5b7bb0f124b816c7ff7f51a00e79c1246f7a1b9a0c2d55afd0f1d5a88bb474b493c73aa2191260792cf6f2a93896a4e48ff91718915425a7c87d221418af5cd89b3fe2004ca7c71a11f8ef1e949fefd8f6e1b732a1e34f3d", 0xc2}], 0x3, &(0x7f0000002f00)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts={{0x140, 0x29, 0x37, {0x8, 0x24, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x8, 0xfe, "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"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x101}, @pad1, @ra={0x5, 0x2, 0x1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r1}}}, @rthdrdstopts={{0x1e0, 0x29, 0x37, {0x73, 0x38, '\x00', [@jumbo={0xc2, 0x4, 0xf}, @calipso={0x7, 0x58, {0x1, 0x14, 0x0, 0x2, [0x3, 0xffffffffffffffc4, 0x8, 0x4, 0x2, 0x9, 0x8, 0x7e, 0x295, 0x6ec]}}, @generic={0x3, 0x9c, "cec9477d72a4ecbef3673b6ba7de4a6573e6dc658c3a4f88a7204697b8c237683c5b3c457738862dc659288c90cf2632a93b5214c166865f5e2edec4e68e54913120f6557e2d529570c685c10ffcf69fa22a59602fe42c0d88965b402832fd4d8e9f7e8a85266d72fa54a5874e671e9b148ddfb1ff261ae4d8a7ad6c2c4fcbc8f2fd5654e305c202a0defb02c1111ecac15abfeb5b61d5e898776139"}, @generic={0x3, 0xc1, "898394bb23a5e0e1ddc020cc75aab745bd44e54dd38a21f979ef56741a52586cfd21158596c07b213af79adc0220f6f7270de68b6820dd34dac9cd35d5299a7b6ab36d0e477297c367eed416619eff951162c74d3ca16e4fbe91d02ff9f33e6065b240fef959c852448e2fd5c8245ca4134e9cbb905c6d6b20c8297a7656bfbdab3a1f3fc681feaa94868dba831d9fd40a7aa48a2a071ba894f29859ba7d18a684a517bae919350f8e83924d5a8d3be7ee5c5803a69223879dc811a27fd6b792ad"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @flowinfo={{0x14, 0x29, 0xb, 0x101}}], 0x3a0}}, {{&(0x7f00000032c0)={0xa, 0x4e22, 0x3, @loopback, 0xffffffff}, 0x1c, &(0x7f0000004740)=[{&(0x7f0000003300)="4e2488e1493eb8f4b25480ae5717338a31ad549b5caf9c7ab2578c95464065558431ce4f70e72635aed7bdad4317d6d0d3cd4b6b10a13f94b8ed8589ae7bbfd3decf291c3c441bf86a80eb7c29b01d0eaa6b1e1f4124619225620a4c466c2675", 0x60}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="d66d150d880a5d6451fcc6887ceb30b48b5ab2bcef0e3243fcb5bd7d7f4ad9e1d573a5027e880472bb663ba49db9f9a193cab1e5c14e20e7abb32678b58e5977c4cf296bdd0fc37a97ee7b60064d18da96f9", 0x52}, {&(0x7f0000004400)="b311c27ff39d34d0c7163c5c4aa46098142c38bf7ed019bcb857cb9267249ea559b215443ba22968025db480136d55ba9bd1000a44f3e7de9f9d6f157d6824927f615ae3a88a1eaf60a967ff41b6931058915f1ff12f999f2be8978ae78b474c3e642376c6447227a6a234faa9ebe3ad619da64768c98182e10228c500a6e348", 0x80}, {&(0x7f0000004480)="09051165f02edc1db14d9350ed1aed9c6608ad6a13781dbd5192ddf4be28d4a146f68ffae9567a2aac2b55c28ccc5993ace28cea3beae21ad0cfd3e5d2c9b39cf3e17e1ce34a7b2d3401bfeb652cc8c30ff7bdc541ffbc95d5e0c1ed8102871deeae22a554d6a4c78de705ec87952c09a69c85e8b3a36af28b230db8", 0x7c}, {&(0x7f0000004500)="50ac89833da22fb91a7ab114c0d6f84613df01c0035c8407e0a1ea6d4f16fd0f832801fca83ac8a481d28237d964055df28365cc5b641415fb3020d829d60ddf3515937dfdddbbf3d9ef07f737a21fd1113e0740cd55954f9885ad0945325a0db13b53539b99c43bb0707e164421f182d80af549847f8e1df3ff3d76d4e5c1330534c00fde9960da37fcf232b595017ceeeef8c3dee58cd928f4eb346d78bf23d73161835e247e7ec6c90aefdf08783ec8", 0xb1}, {&(0x7f00000045c0)="a439c89afc48d63cdce82a5f2532e14ac58b8aae5ae65ac62024aeb905368f0580f218a56252b7db0fd0a91dd16b1d6c2c00dae472769bcbba34355d47dbcd8220401f71b85eb28ffbf9f734ba45ad084dfd60f5415fa13196c2a2a4034d73120028d2e344742d6d03cf083c42c99c7f3f4d3666dd5446ececd71a6fcbea63a69962346a384c8367f92884ed08a5aadd82e9be8bd9cb598bb6389987762491f4844af69689d217a578eab3e25004dc3c10956bd1ace3", 0xb6}, {&(0x7f0000004680)="5a5e93cd300b6d0f53f090cd18941dbb9ed406c714ad1eb186dd439d076d93306fb6c23e4928a8ed7d37d0f0b46417c435f75b5f977817723e8ef3d869aa7f45c5091f42c861fb23890d1609ad55513c1d6d9bb48f6af4de4bdbfd94a633baea3d86d1a68efc63cda78db2745a8c3d0fff6a2bc20a47f4f5aece3657afe508c92abe4683d918877fa41d983605549089e209d6a43e6bc76b76ba491de4b4741cc753", 0xa2}], 0x8}}, {{&(0x7f00000047c0)={0xa, 0x4e24, 0x8, @loopback, 0xf}, 0x1c, &(0x7f0000004d00)=[{&(0x7f0000004800)="3418d33098cc4b398662c13e0acb3cbd15346eef5e385e7a0c09fa7006fcf71f516fef8e548e94a52b92912554b017fdd811d0f6eaea3400a8ce97b30410113be7d87b7130c6", 0x46}, {&(0x7f0000004880)="e099959d4c72965178249f6ae2bbce2cb4a7d8f8726350506e81c1fbc68a2de00882c69bd873bee0966a3d4eecd7d1c72585a97110c0f7ac9cb9e406089a66d7466c088d27788573f0b1a0d3bb5a951bfc94e8c4bd8688c399722da046a6aad9ee736c68cffcd21c079fab718b05669ddafd2d81c4ae678c42d3117b591abbcd25da8187f62a43e45280884d9577e45d76acfd23e36140f533990220d2fb25f40f013311b792f320915c472679bcc2e79723cde639611fd754aab2197a7528ea4c810ef0", 0xc4}, {&(0x7f0000004980)="2243e97c4d693769a5b3629b237c41d788cf69a34da6142cfc2d4919e1bf5ba9ae4d69e6c20fd341ad7990f21a9610b82e6ed3729bed38a712a8f66a9748853ea8eba883ad73905ed2032ecffb7aa0b9833e503f0f35cc1f74c616dc4230bee6b8499606ae036c340b62f2415175a3cc4a96cf04c5c51169c64b707c3ffbe3d79c24866dc7570c76a3e8dbd8da3a0ba193154b1034a1ec65022b50857992d61ba57f374734685a53c88b7450af06d769664d76566eafd52d0e8b5834fe7279137f5177ca6cdaf093d2406368746060d5", 0xd0}, {&(0x7f0000004a80)="8aa78f5dd8df8100b9142d91b6913151069ed5616619d35a", 0x18}, {&(0x7f0000004ac0)="5dc5ad0acfe218cc07b926b43eb0805b94ee5de75315dedc84bd1ddffb504448b638d8eb6ea7c2d14350f1255780335982966812b27279f1e57ff367a30363fea30f1eca14bd70a3aba6d9f0b16f6ddfa6433f32ce49b134d2043708f39a6aaf8fba567b1c404ff9ac17c19342389b3737b6eef12daf776db0d9286f371dd83a500f56a7d8ea9442a997c79d8747f269727bde1a8db9eff9c5b9375efe748d5036cbb01895", 0xa5}, {&(0x7f0000004b80)="a9d1563c7d78244dd05c1ab8b4b5f2ef6f191aaa0448f7dce226892740320dbf953a5c4b51102923c4b800d08bc54245819c539434ca44be6a25af39367ed20641c8da3f48f190ede6d3c573cbec46022579d4736ac4779ab55550045ff24d447f3b548d3fc3ad2d787acd4db6416e1d33a59323e2c0752ec2203130f8cf6ef89752e3f76183476e8c", 0x89}, {&(0x7f0000004c40)="74bb3c39b5a1c79d237b64959977c90115d3447516da8ff59bb4baf6f2c4a17b123b362d66923efdbe98a9cfff7e97eae5e7c3275dbc51b916e4a0bd7fb1fe40f869aa876252ca232e65b5dd0fc08657947a568b9aad067189", 0x59}, {&(0x7f0000004cc0)="e3ff5dbf8e9af968845611588fa1dd0221a1eab28d28a728a1d8622ec895bd128fdfb6589b432ac4e77bd4840c78f3c506539a", 0x33}], 0x8, &(0x7f0000004d80)=[@hoplimit={{0x14, 0x29, 0x34, 0x8001}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x11, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r4}}}], 0x98}}], 0x5, 0x20000000) r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x100800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) 1.796861121s ago: executing program 3 (id=2088): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r0 = fanotify_init(0x8, 0x80000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fremovexattr(r0, &(0x7f00000003c0)=@known='security.selinux\x00') r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) bind(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x10000, @private1, 0x5}}}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4}}, @var={0x5, 0x0, 0x0, 0x11}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x6b, 0x0, 0x1}, 0x28) 1.795379324s ago: executing program 7 (id=2089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0xffffffff, {0x3}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 1.578000557s ago: executing program 7 (id=2091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 870.01764ms ago: executing program 8 (id=2092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="20000000130a01030000000000000000020000000900010073797a3000000000995bd971013aeec0ea2b7156a379fcd1511f7c10410eee2b5a91c97915995754e3891143c10eeb9e85df2c934c98d76a0e2695b488716466ac87d6435794f525992d3e540b15f1b718bbbf97d0cf15b135ea8c29563f823ba1199dc15d19c213e4563168c3283eddeea27d5cafca73f838fc"], 0x20}, 0x1, 0x0, 0xc00e}, 0x24004050) 819.697792ms ago: executing program 8 (id=2093): r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x44, "f56508f2686af1d21b036418fcd6d9273e2a100f7b7c745591cacde09fceb2ff543bdafc711ba5b8899403526e6ee4862eab972362d0fe683cd1e88f6d51b96b535a34f7"}, &(0x7f00000001c0)=0x4c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x5, 0x30, 0x2, 0x8}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x2, 0xe1, 0x1, 0x4337, 0x2, 0x7e, 0x6, {r2, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0x7, 0xfd65, 0x1, 0x3d}}, &(0x7f0000000340)=0xb0) r3 = syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000540)={0x4, "d19da6bef8d3621921eda540ff3639c1693aa4c61a74462a0e5f78acf2ab3551", 0x1, 0x800, 0x6f5, 0x0, 0x2, 0x0, 0x9, 0x1}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f00000005c0)={0xffffffffffffffff, r3, 0xe2b}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000680)={0x6, 'bond0\x00', {0x10}, 0xd8b}) pipe2$watch_queue(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000700)={0x8, 0x7, 0x4, 0x5421ef8ae4d5351c, 0x7, {0x0, 0xea60}, {0x2, 0x2, 0x1, 0x13, 0x2, 0xde, "f9111830"}, 0x444, 0x4, {}, 0x8, 0x0, r4}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000007c0)={0x2, 0xb22e1a59bfc7249d, 0x4, 0x4, 0x2, {r6, r7/1000+60000}, {0x6, 0x8, 0xb9, 0x4, 0x4, 0x9, "deaa06ae"}, 0x9, 0x4, {0xffffffffffffffff}, 0xffff0001, 0x0, r5}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000880)={0x0, 0x800, 0x7}) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000008c0)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@private0, @in=@initdev}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000a40)=0xe8) 729.744818ms ago: executing program 8 (id=2094): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8605, &(0x7f0000000880)={[{@grpjquota}, {@abort}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}]}, 0x81, 0x645, &(0x7f0000000180)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000035, 0x20000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet(0x2, 0x3, 0x9) openat(r0, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) shutdown(r6, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c0007800800064081"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4) finit_module(0xffffffffffffffff, 0x0, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000090601020000000000000000020000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb06000440000400000500070006000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x40010) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, &(0x7f00000000c0)) 657.525235ms ago: executing program 9 (id=2095): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x325, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x19, 0x0, 0x3, r0, 0x0, 0x0, 0x9, 0x0, 0x5000000}]) 626.857284ms ago: executing program 7 (id=2096): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x2020, 0x0, 0x3, 0x5, 0x1}, 0x8) 626.118734ms ago: executing program 3 (id=2097): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x9c, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0xff}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xca, 0x6, 0x0, 0x1, 0x1, 0x2}}, {0x4}}]}]}, 0x9c}, 0x1, 0x0, 0x48000000, 0x40}, 0x0) 538.005649ms ago: executing program 9 (id=2098): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) unshare(0x64000600) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xb, "2a16561edfd2f20ab3ed4a"}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffc821d437808f3fcaa6ec9c5f0bb40dfeaaaaaaaaaa00080600000001ffff"], 0x0) 352.299543ms ago: executing program 9 (id=2099): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01001410000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 350.346205ms ago: executing program 8 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bc2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x54}]}, 0x24}, 0x1, 0x0, 0x0, 0xd5}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c002f0010003904f7ffffff00000000d0ddc260", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c000280080003000a"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 288.092334ms ago: executing program 3 (id=2101): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000140)='./bus\x00') fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221400, 0x76) unshare(0x400) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000001500)={0x5, 0xff, 0x0, 0x7f, 0x11, "60da9be1777e1af0"}) write(r8, &(0x7f0000001000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4f208001e8d61881b5d500d6354", 0x34) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), 0x181, &(0x7f0000000500)={[{@uid={'uid', 0x3d, r2}}, {@mode={'mode', 0x3d, 0x9}}, {@gid={'gid', 0x3d, 0xee00}}, {@uid={'uid', 0x3d, r3}}, {@mode={'mode', 0x3d, 0x1}}], [{@subj_type={'subj_type', 0x3d, '}*.'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'commit'}}]}) 261.729955ms ago: executing program 5 (id=2102): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = socket$inet(0xa, 0x1, 0x84) listen(r3, 0x8) listen(r3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x28202) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@dioread_nolock}, {@bh}, {@dioread_lock}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000280)={0x0, 0x0, 0x8}, 0x8) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r8, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000040)={r8, 0x1, 0x6, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x28) 205.756533ms ago: executing program 9 (id=2103): ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) close(0xffffffffffffffff) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) 205.336659ms ago: executing program 8 (id=2104): r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x44, "f56508f2686af1d21b036418fcd6d9273e2a100f7b7c745591cacde09fceb2ff543bdafc711ba5b8899403526e6ee4862eab972362d0fe683cd1e88f6d51b96b535a34f7"}, &(0x7f00000001c0)=0x4c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x5, 0x30, 0x2, 0x8}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x2, 0xe1, 0x1, 0x4337, 0x2, 0x7e, 0x6, {r2, @in={{0x2, 0x4e21, @multicast1}}, 0x6, 0x7, 0xfd65, 0x1, 0x3d}}, &(0x7f0000000340)=0xb0) r3 = syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000540)={0x4, "d19da6bef8d3621921eda540ff3639c1693aa4c61a74462a0e5f78acf2ab3551", 0x1, 0x800, 0x6f5, 0x0, 0x2, 0x0, 0x9, 0x1}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f00000005c0)={0xffffffffffffffff, r3, 0xe2b}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000680)={0x6, 'bond0\x00', {0x10}, 0xd8b}) pipe2$watch_queue(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000700)={0x8, 0x7, 0x4, 0x5421ef8ae4d5351c, 0x7, {0x0, 0xea60}, {0x2, 0x2, 0x1, 0x13, 0x2, 0xde, "f9111830"}, 0x444, 0x4, {}, 0x8, 0x0, r4}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, &(0x7f00000007c0)={0x2, 0xb22e1a59bfc7249d, 0x4, 0x4, 0x2, {r6, r7/1000+60000}, {0x6, 0x8, 0xb9, 0x4, 0x4, 0x9, "deaa06ae"}, 0x9, 0x4, {0xffffffffffffffff}, 0xffff0001, 0x0, r5}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000000880)={0x0, 0x800, 0x7}) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f00000008c0)=0x1, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@private0, @in=@initdev}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000a40)=0xe8) 94.621248ms ago: executing program 9 (id=2105): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) syz_open_dev$video(0x0, 0x485, 0x42e43) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x24, r0, 0x121, 0x70bd28, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000454) 38.549432ms ago: executing program 8 (id=2106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.147797ms ago: executing program 9 (id=2107): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x78e, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) 0s ago: executing program 5 (id=2108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffb6e}) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) kernel console output (not intermixed with test programs): e failslab, interval 1, probability 0, space 0, times 0 [ 176.882224][ T9324] CPU: 0 UID: 0 PID: 9324 Comm: syz.8.1271 Not tainted syzkaller #0 PREEMPT [ 176.882250][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 176.882256][ T9324] Call trace: [ 176.882260][ T9324] show_stack+0x2c/0x3c (C) [ 176.882284][ T9324] __dump_stack+0x30/0x40 [ 176.882297][ T9324] dump_stack_lvl+0xd8/0x12c [ 176.882307][ T9324] dump_stack+0x1c/0x28 [ 176.882316][ T9324] should_fail_ex+0x41c/0x590 [ 176.882329][ T9324] should_failslab+0xc4/0x120 [ 176.882338][ T9324] __kmalloc_noprof+0x108/0x6b8 [ 176.882346][ T9324] tomoyo_encode2+0x10c/0x330 [ 176.882355][ T9324] tomoyo_encode+0x34/0x50 [ 176.882375][ T9324] tomoyo_realpath_from_path+0x488/0x4dc [ 176.882384][ T9324] tomoyo_path_number_perm+0x1f0/0x500 [ 176.882392][ T9324] tomoyo_file_ioctl+0x2c/0x3c [ 176.882400][ T9324] security_file_ioctl+0xdc/0x2b0 [ 176.882408][ T9324] __arm64_sys_ioctl+0xa8/0x1c4 [ 176.882418][ T9324] invoke_syscall+0x98/0x244 [ 176.882428][ T9324] el0_svc_common+0xec/0x23c [ 176.882438][ T9324] do_el0_svc+0x4c/0x5c [ 176.882447][ T9324] el0_svc+0x64/0x260 [ 176.882457][ T9324] el0t_64_sync_handler+0x48/0x148 [ 176.882465][ T9324] el0t_64_sync+0x198/0x19c [ 176.909982][ T9324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.998035][ T9335] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1274'. [ 177.468650][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.500406][ T4398] 8021q: adding VLAN 0 to HW filter on device eth22 [ 177.571377][ T9162] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 177.589393][ T9162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.589770][ T9162] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 177.598830][ T9162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.599423][ T9162] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 177.612850][ T9162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.613555][ T9162] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.681849][ T9376] netlink: 'syz.7.1280': attribute type 3 has an invalid length. [ 177.933762][ T4725] Bluetooth: hci0: command tx timeout [ 178.364822][ T9162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.426298][ T9377] bridge0: port 3(wlan1) entered blocking state [ 178.426359][ T9377] bridge0: port 3(wlan1) entered disabled state [ 178.426586][ T9377] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 178.427772][ T9377] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 178.656865][ T9162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.672640][ T9162] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.687663][ T9162] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.689333][ T9162] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.696443][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.696490][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.697038][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.697057][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.749800][ T4398] 8021q: adding VLAN 0 to HW filter on device eth23 [ 178.864686][ T9417] tipc: Started in network mode [ 178.864725][ T9417] tipc: Node identity 96955e218648, cluster identity 4711 [ 178.864823][ T9417] tipc: Enabled bearer , priority 0 [ 178.866211][ T9417] syzkaller0: entered promiscuous mode [ 178.866235][ T9417] syzkaller0: entered allmulticast mode [ 178.866905][ T9422] cgroup: Name too long [ 178.876476][ T9417] tipc: Resetting bearer [ 178.888717][ T9416] tipc: Resetting bearer [ 178.913434][ T9422] netlink: 'syz.7.1290': attribute type 22 has an invalid length. [ 178.913471][ T9422] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1290'. [ 178.918688][ T9416] tipc: Disabling bearer [ 179.065635][ T9162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.097480][ T9162] veth0_vlan: entered promiscuous mode [ 179.117617][ T9162] veth1_vlan: entered promiscuous mode [ 179.139799][ T9162] veth0_macvtap: entered promiscuous mode [ 179.172750][ T9162] veth1_macvtap: entered promiscuous mode [ 179.200197][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.201295][ T9162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.273499][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.275039][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.276810][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.282208][ T1157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.646868][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.646907][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.972531][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.974144][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.012364][ T4725] Bluetooth: hci0: command tx timeout [ 180.120567][ T9469] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1297'. [ 180.209748][ T9480] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1301'. [ 180.212479][ T9478] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1301'. [ 180.272727][ T9482] loop7: detected capacity change from 0 to 256 [ 181.262436][ T9522] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1308'. [ 181.356216][ T9527] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1310'. [ 181.833465][ T9556] netlink: 'syz.8.1315': attribute type 3 has an invalid length. [ 182.605346][ T9566] loop9: detected capacity change from 0 to 512 [ 182.611310][ T9564] netlink: 'syz.1.1317': attribute type 3 has an invalid length. [ 182.620887][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 182.621032][ T9564] netlink: 'syz.1.1317': attribute type 3 has an invalid length. [ 182.621041][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 182.640280][ T9566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.753643][ T9575] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1323'. [ 183.803096][ T9588] netlink: 'syz.7.1322': attribute type 3 has an invalid length. [ 183.837030][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.993839][ T9600] fuse: Bad value for 'fd' [ 184.744222][ T9603] 9p: Bad value for 'rfdno' [ 184.761073][ T9611] binfmt_misc: Unknown parameter '€' [ 184.761668][ T9611] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1326'. [ 185.158805][ T9636] loop8: detected capacity change from 0 to 512 [ 185.234785][ T9643] netlink: 'syz.9.1335': attribute type 3 has an invalid length. [ 185.334195][ T9644] bridge0: port 3(wlan1) entered blocking state [ 185.334537][ T9644] bridge0: port 3(wlan1) entered disabled state [ 185.336456][ T9644] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 185.340744][ T9644] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 185.889069][ T9645] fuse: fd is not a fuse device [ 185.890696][ T9645] fuse: fd is not a fuse device [ 185.912374][ T9647] FAULT_INJECTION: forcing a failure. [ 185.912374][ T9647] name failslab, interval 1, probability 0, space 0, times 0 [ 185.914843][ T9647] CPU: 0 UID: 0 PID: 9647 Comm: syz.7.1338 Not tainted syzkaller #0 PREEMPT [ 185.914868][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 185.914874][ T9647] Call trace: [ 185.914878][ T9647] show_stack+0x2c/0x3c (C) [ 185.914899][ T9647] __dump_stack+0x30/0x40 [ 185.914910][ T9647] dump_stack_lvl+0xd8/0x12c [ 185.914920][ T9647] dump_stack+0x1c/0x28 [ 185.914930][ T9647] should_fail_ex+0x41c/0x590 [ 185.914941][ T9647] should_failslab+0xc4/0x120 [ 185.914949][ T9647] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 185.914957][ T9647] __alloc_skb+0x1f0/0x610 [ 185.914966][ T9647] ovs_meter_cmd_reply_start+0x64/0x1b0 [ 185.914976][ T9647] ovs_meter_cmd_get+0xbc/0x338 [ 185.914984][ T9647] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 185.914994][ T9647] genl_rcv_msg+0x43c/0x620 [ 185.915002][ T9647] netlink_rcv_skb+0x238/0x414 [ 185.915010][ T9647] genl_rcv+0x38/0x50 [ 185.915018][ T9647] netlink_unicast+0x600/0x7f8 [ 185.915025][ T9647] netlink_sendmsg+0x648/0x948 [ 185.915032][ T9647] __sock_sendmsg+0xc8/0x17c [ 185.915040][ T9647] ____sys_sendmsg+0x3d0/0x6c8 [ 185.915048][ T9647] ___sys_sendmsg+0x198/0x224 [ 185.915056][ T9647] __sys_sendmsg+0x158/0x204 [ 185.915064][ T9647] __arm64_sys_sendmsg+0x80/0x94 [ 185.915072][ T9647] invoke_syscall+0x98/0x244 [ 185.915082][ T9647] el0_svc_common+0xec/0x23c [ 185.915091][ T9647] do_el0_svc+0x4c/0x5c [ 185.915101][ T9647] el0_svc+0x64/0x260 [ 185.915109][ T9647] el0t_64_sync_handler+0x48/0x148 [ 185.915118][ T9647] el0t_64_sync+0x198/0x19c [ 185.994614][ T9636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.312975][ T9681] vhci_hcd vhci_hcd.3: invalid port number 0 [ 186.695646][ T9686] 9p: Bad value for 'rfdno' [ 187.146520][ T9683] bond2: ARP target 9.0.0.0 is already present [ 187.146552][ T9683] bond2: option arp_ip_target: invalid value (9) [ 187.173726][ T9683] bond2 (unregistering): Released all slaves [ 187.196154][ T6198] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.201304][ T9681] loop9: detected capacity change from 0 to 512 [ 187.257894][ T9681] EXT4-fs warning (device loop9): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop9. [ 187.297949][ T9701] syzkaller0: entered promiscuous mode [ 187.297985][ T9701] syzkaller0: entered allmulticast mode [ 187.373829][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.373893][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.712142][ T9712] xt_hashlimit: size too large, truncated to 1048576 [ 187.747071][ T9714] loop1: detected capacity change from 0 to 2048 [ 187.825139][ T9714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.830472][ T9714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.292311][ T9747] netlink: 'syz.1.1355': attribute type 3 has an invalid length. [ 189.041530][ T9756] FAULT_INJECTION: forcing a failure. [ 189.041530][ T9756] name failslab, interval 1, probability 0, space 0, times 0 [ 189.041567][ T9756] CPU: 1 UID: 0 PID: 9756 Comm: syz.9.1358 Not tainted syzkaller #0 PREEMPT [ 189.041582][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 189.041588][ T9756] Call trace: [ 189.041592][ T9756] show_stack+0x2c/0x3c (C) [ 189.041613][ T9756] __dump_stack+0x30/0x40 [ 189.041625][ T9756] dump_stack_lvl+0xd8/0x12c [ 189.041635][ T9756] dump_stack+0x1c/0x28 [ 189.041645][ T9756] should_fail_ex+0x41c/0x590 [ 189.041656][ T9756] should_failslab+0xc4/0x120 [ 189.041665][ T9756] kmem_cache_alloc_noprof+0x94/0x5d8 [ 189.041674][ T9756] skb_clone+0x1ac/0x320 [ 189.041683][ T9756] __netlink_deliver_tap+0x364/0x6f4 [ 189.041693][ T9756] netlink_deliver_tap+0x1d8/0x1dc [ 189.041701][ T9756] netlink_unicast+0x5dc/0x7f8 [ 189.041707][ T9756] netlink_sendmsg+0x648/0x948 [ 189.041715][ T9756] __sock_sendmsg+0xc8/0x17c [ 189.041723][ T9756] ____sys_sendmsg+0x3d0/0x6c8 [ 189.041731][ T9756] ___sys_sendmsg+0x198/0x224 [ 189.041739][ T9756] __sys_sendmsg+0x158/0x204 [ 189.041746][ T9756] __arm64_sys_sendmsg+0x80/0x94 [ 189.041754][ T9756] invoke_syscall+0x98/0x244 [ 189.041765][ T9756] el0_svc_common+0xec/0x23c [ 189.041774][ T9756] do_el0_svc+0x4c/0x5c [ 189.041783][ T9756] el0_svc+0x64/0x260 [ 189.041793][ T9756] el0t_64_sync_handler+0x48/0x148 [ 189.041802][ T9756] el0t_64_sync+0x198/0x19c [ 189.041858][ T9756] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1358'. [ 189.041876][ T9756] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1358'. [ 189.179345][ T9748] bridge0: port 3(wlan1) entered blocking state [ 189.179391][ T9748] bridge0: port 3(wlan1) entered disabled state [ 189.179566][ T9748] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 189.180219][ T9748] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 189.180475][ T9748] bridge0: port 3(wlan1) entered blocking state [ 189.180545][ T9748] bridge0: port 3(wlan1) entered forwarding state [ 189.229964][ T9770] loop7: detected capacity change from 0 to 512 [ 189.233306][ T1157] bridge0: port 3(wlan1) entered disabled state [ 189.246121][ T9772] netlink: 'syz.1.1363': attribute type 6 has an invalid length. [ 189.246153][ T9772] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1363'. [ 189.246181][ T9772] netlink: 'syz.1.1363': attribute type 6 has an invalid length. [ 189.254512][ T9770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.651858][ T9792] netlink: 'syz.9.1362': attribute type 3 has an invalid length. [ 190.230118][ T9797] fuse: fd is not a fuse device [ 190.729518][ T9774] EXT4-fs error (device loop7): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 190.784396][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 191.173579][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.180778][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1378'. [ 191.239241][ T9856] xt_hashlimit: size too large, truncated to 1048576 [ 191.240719][ T9852] loop8: detected capacity change from 0 to 512 [ 191.318745][ T9854] loop7: detected capacity change from 0 to 4096 [ 191.319142][ T9854] EXT4-fs: inline encryption not supported [ 191.322303][ T9854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.322322][ T9854] EXT4-fs (loop7): Test dummy encryption mode enabled [ 191.323076][ T9854] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 191.323126][ T9854] System zones: 0-5 [ 191.324080][ T9854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.438065][ T9871] netlink: 'syz.8.1380': attribute type 29 has an invalid length. [ 191.777048][ T9891] FAULT_INJECTION: forcing a failure. [ 191.777048][ T9891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.777083][ T9891] CPU: 0 UID: 0 PID: 9891 Comm: syz.9.1387 Not tainted syzkaller #0 PREEMPT [ 191.777093][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 191.777098][ T9891] Call trace: [ 191.777101][ T9891] show_stack+0x2c/0x3c (C) [ 191.777119][ T9891] __dump_stack+0x30/0x40 [ 191.777130][ T9891] dump_stack_lvl+0xd8/0x12c [ 191.777140][ T9891] dump_stack+0x1c/0x28 [ 191.777149][ T9891] should_fail_ex+0x41c/0x590 [ 191.777160][ T9891] should_fail+0x14/0x24 [ 191.777170][ T9891] should_fail_usercopy+0x20/0x30 [ 191.777180][ T9891] _inline_copy_from_user+0x3c/0x174 [ 191.777188][ T9891] __sys_bpf+0x1b4/0x8c8 [ 191.777195][ T9891] __arm64_sys_bpf+0xc8/0xe4 [ 191.777205][ T9891] invoke_syscall+0x98/0x244 [ 191.777215][ T9891] el0_svc_common+0xec/0x23c [ 191.777225][ T9891] do_el0_svc+0x4c/0x5c [ 191.777234][ T9891] el0_svc+0x64/0x260 [ 191.777244][ T9891] el0t_64_sync_handler+0x48/0x148 [ 191.777252][ T9891] el0t_64_sync+0x198/0x19c [ 192.014439][ T9895] loop1: detected capacity change from 0 to 512 [ 192.022785][ T4725] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 192.060275][ T4725] Bluetooth: hci1: Injecting HCI hardware error event [ 192.094204][ T4725] Bluetooth: hci1: hardware error 0x00 [ 192.102386][ T9895] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 192.128239][ T9895] EXT4-fs (loop1): 1 truncate cleaned up [ 192.134075][ T9895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.210912][ T9895] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1383: invalid indirect mapped block 4294901760 (level 0) [ 192.212280][ T9895] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1383: invalid indirect mapped block 4294967295 (level 1) [ 192.589311][ T9872] cgroup: Unexpected value for 'nofavordynmods' [ 192.661860][ T9902] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1390'. [ 192.743666][ T9904] FAULT_INJECTION: forcing a failure. [ 192.743666][ T9904] name failslab, interval 1, probability 0, space 0, times 0 [ 192.743702][ T9904] CPU: 0 UID: 0 PID: 9904 Comm: syz.9.1391 Not tainted syzkaller #0 PREEMPT [ 192.743717][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 192.743724][ T9904] Call trace: [ 192.743728][ T9904] show_stack+0x2c/0x3c (C) [ 192.743750][ T9904] __dump_stack+0x30/0x40 [ 192.743761][ T9904] dump_stack_lvl+0xd8/0x12c [ 192.743771][ T9904] dump_stack+0x1c/0x28 [ 192.743781][ T9904] should_fail_ex+0x41c/0x590 [ 192.743793][ T9904] should_failslab+0xc4/0x120 [ 192.743801][ T9904] kmem_cache_alloc_noprof+0x94/0x5d8 [ 192.743810][ T9904] skb_clone+0x1ac/0x320 [ 192.743819][ T9904] __netlink_deliver_tap+0x364/0x6f4 [ 192.743829][ T9904] netlink_deliver_tap+0x1d8/0x1dc [ 192.743837][ T9904] netlink_unicast+0x5dc/0x7f8 [ 192.743844][ T9904] netlink_sendmsg+0x648/0x948 [ 192.743851][ T9904] __sock_sendmsg+0xc8/0x17c [ 192.743859][ T9904] ____sys_sendmsg+0x3d0/0x6c8 [ 192.743867][ T9904] ___sys_sendmsg+0x198/0x224 [ 192.743875][ T9904] __sys_sendmsg+0x158/0x204 [ 192.743883][ T9904] __arm64_sys_sendmsg+0x80/0x94 [ 192.743891][ T9904] invoke_syscall+0x98/0x244 [ 192.743901][ T9904] el0_svc_common+0xec/0x23c [ 192.743911][ T9904] do_el0_svc+0x4c/0x5c [ 192.743920][ T9904] el0_svc+0x64/0x260 [ 192.743930][ T9904] el0t_64_sync_handler+0x48/0x148 [ 192.743938][ T9904] el0t_64_sync+0x198/0x19c [ 192.744004][ T9904] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1391'. [ 192.744024][ T9904] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1391'. [ 192.779575][ T9162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.851298][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.347394][ T9939] loop8: detected capacity change from 0 to 512 [ 193.891567][ T9978] loop7: detected capacity change from 0 to 512 [ 193.953838][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1412'. [ 194.162313][ T9978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.165090][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 194.490517][T10001] netlink: 'syz.1.1417': attribute type 3 has an invalid length. [ 194.932111][ T4725] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 195.222857][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.314764][T10009] loop8: detected capacity change from 0 to 8192 [ 195.424009][T10009] loop8: AHDI p1 p2 p4 [ 195.464954][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1426'. [ 195.481055][T10009] loop8: p4 start 117378816 is beyond EOD, truncated [ 196.037034][ T9205] udevd[9205]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 196.049545][T10029] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1428'. [ 196.069794][T10031] loop9: detected capacity change from 0 to 1024 [ 196.070168][T10031] EXT4-fs: Ignoring removed nobh option [ 196.070197][T10031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.099141][T10031] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.173663][T10043] FAULT_INJECTION: forcing a failure. [ 196.173663][T10043] name failslab, interval 1, probability 0, space 0, times 0 [ 196.173698][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.8.1431 Not tainted syzkaller #0 PREEMPT [ 196.173710][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 196.173716][T10043] Call trace: [ 196.173720][T10043] show_stack+0x2c/0x3c (C) [ 196.173744][T10043] __dump_stack+0x30/0x40 [ 196.173755][T10043] dump_stack_lvl+0xd8/0x12c [ 196.173765][T10043] dump_stack+0x1c/0x28 [ 196.173775][T10043] should_fail_ex+0x41c/0x590 [ 196.173786][T10043] should_failslab+0xc4/0x120 [ 196.173794][T10043] __kvmalloc_node_noprof+0x160/0x7d8 [ 196.173803][T10043] vmemdup_user+0x38/0xe0 [ 196.173812][T10043] map_get_next_key+0x1a0/0x590 [ 196.173820][T10043] __sys_bpf+0x4b4/0x8c8 [ 196.173827][T10043] __arm64_sys_bpf+0xc8/0xe4 [ 196.173837][T10043] invoke_syscall+0x98/0x244 [ 196.173847][T10043] el0_svc_common+0xec/0x23c [ 196.173856][T10043] do_el0_svc+0x4c/0x5c [ 196.173866][T10043] el0_svc+0x64/0x260 [ 196.173875][T10043] el0t_64_sync_handler+0x48/0x148 [ 196.173884][T10043] el0t_64_sync+0x198/0x19c [ 196.466934][T10051] 9p: Bad value for 'rfdno' [ 196.477966][T10051] fuse: fd is not a fuse device [ 196.486645][T10051] pim6reg: entered allmulticast mode [ 196.640478][T10061] netlink: 'syz.1.1435': attribute type 3 has an invalid length. [ 197.416002][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.508625][T10070] xt_ecn: cannot match TCP bits for non-tcp packets [ 197.518025][T10070] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.525337][T10070] sctp: [Deprecated]: syz.8.1441 (pid 10070) Use of int in maxseg socket option. [ 197.525337][T10070] Use struct sctp_assoc_value instead [ 197.582578][T10072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1443'. [ 197.582614][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1443'. [ 197.678054][T10083] loop8: detected capacity change from 0 to 512 [ 197.753035][T10083] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 197.768784][T10083] EXT4-fs (loop8): 1 truncate cleaned up [ 197.769257][T10083] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.921528][T10092] netlink: 'syz.5.1447': attribute type 3 has an invalid length. [ 197.941047][T10092] bridge0: port 3(wlan1) entered blocking state [ 197.941201][T10092] bridge0: port 3(wlan1) entered disabled state [ 197.942226][T10092] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 197.948799][T10092] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 198.800505][T10106] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1452'. [ 199.886243][ T6198] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.925743][T10138] loop8: detected capacity change from 0 to 128 [ 199.957473][T10140] netlink: 'syz.5.1461': attribute type 4 has an invalid length. [ 199.957510][T10140] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1461'. [ 200.025680][T10151] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1465'. [ 200.369187][T10161] xt_hashlimit: size too large, truncated to 1048576 [ 200.954247][T10181] loop7: detected capacity change from 0 to 256 [ 200.956546][T10181] vfat: Bad value for 'nfs' [ 201.552232][ T4725] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 201.571794][T10188] loop1: detected capacity change from 0 to 1024 [ 202.044395][T10188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.179510][T10188] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1481: bg 0: block 112: padding at end of block bitmap is not set [ 202.435664][T10200] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1473'. [ 202.435783][T10200] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1473'. [ 203.052695][T10196] netlink: 67 bytes leftover after parsing attributes in process `syz.8.1482'. [ 203.060513][T10207] loop7: detected capacity change from 0 to 512 [ 203.078595][T10210] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1484'. [ 203.084125][T10210] bridge2: entered promiscuous mode [ 203.085117][T10210] bridge2: entered allmulticast mode [ 203.152291][T10213] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1485'. [ 203.170391][T10207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.075627][T10232] netlink: 'syz.5.1490': attribute type 3 has an invalid length. [ 204.313682][T10236] syzkaller0: entered promiscuous mode [ 204.313723][T10236] syzkaller0: entered allmulticast mode [ 204.323471][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.330341][ T9162] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 204.427613][T10245] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1497'. [ 204.527693][T10252] loop9: detected capacity change from 0 to 512 [ 204.555832][T10252] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1500: invalid indirect mapped block 4294967295 (level 1) [ 204.555872][T10252] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 204.558457][T10252] EXT4-fs (loop9): Remounting filesystem read-only [ 204.558603][T10252] EXT4-fs (loop9): 2 truncates cleaned up [ 204.559032][T10252] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.598362][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.059333][ T4722] Bluetooth: hci3: command 0x0406 tx timeout [ 205.059412][ T4722] Bluetooth: hci2: command 0x0406 tx timeout [ 205.228184][T10292] FAULT_INJECTION: forcing a failure. [ 205.228184][T10292] name failslab, interval 1, probability 0, space 0, times 0 [ 205.228217][T10292] CPU: 1 UID: 0 PID: 10292 Comm: syz.1.1506 Not tainted syzkaller #0 PREEMPT [ 205.228230][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 205.228236][T10292] Call trace: [ 205.228240][T10292] show_stack+0x2c/0x3c (C) [ 205.228262][T10292] __dump_stack+0x30/0x40 [ 205.228274][T10292] dump_stack_lvl+0xd8/0x12c [ 205.228284][T10292] dump_stack+0x1c/0x28 [ 205.228293][T10292] should_fail_ex+0x41c/0x590 [ 205.228305][T10292] should_failslab+0xc4/0x120 [ 205.228313][T10292] __kvmalloc_node_noprof+0x160/0x7d8 [ 205.228323][T10292] map_get_next_key+0x1f8/0x590 [ 205.228331][T10292] __sys_bpf+0x4b4/0x8c8 [ 205.228338][T10292] __arm64_sys_bpf+0xc8/0xe4 [ 205.228348][T10292] invoke_syscall+0x98/0x244 [ 205.228358][T10292] el0_svc_common+0xec/0x23c [ 205.228374][T10292] do_el0_svc+0x4c/0x5c [ 205.228384][T10292] el0_svc+0x64/0x260 [ 205.228394][T10292] el0t_64_sync_handler+0x48/0x148 [ 205.228402][T10292] el0t_64_sync+0x198/0x19c [ 205.250208][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1504'. [ 205.516010][T10311] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1510'. [ 205.674220][ T4710] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 205.675268][ T4710] Bluetooth: hci5: Injecting HCI hardware error event [ 205.676034][ T4710] Bluetooth: hci5: hardware error 0x00 [ 206.131475][T10334] netlink: 'syz.1.1514': attribute type 3 has an invalid length. [ 206.983031][T10343] netlink: 192 bytes leftover after parsing attributes in process `syz.9.1518'. [ 207.064322][T10348] netlink: 'syz.9.1520': attribute type 3 has an invalid length. [ 207.068312][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1520'. [ 207.068432][T10348] netlink: 'syz.9.1520': attribute type 3 has an invalid length. [ 207.068446][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1520'. [ 207.114308][T10350] loop8: detected capacity change from 0 to 512 [ 207.137445][T10350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.174910][T10358] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 207.228084][T10361] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1525'. [ 207.430409][T10191] EXT4-fs error (device loop8): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 207.772019][ T4710] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 208.149021][ T6198] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.272241][T10385] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1533'. [ 208.275330][T10385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1533'. [ 208.283440][T10387] netlink: 'syz.7.1534': attribute type 1 has an invalid length. [ 208.368343][T10388] FAULT_INJECTION: forcing a failure. [ 208.368343][T10388] name failslab, interval 1, probability 0, space 0, times 0 [ 208.368407][T10388] CPU: 1 UID: 0 PID: 10388 Comm: syz.8.1532 Not tainted syzkaller #0 PREEMPT [ 208.368419][T10388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 208.368425][T10388] Call trace: [ 208.368428][T10388] show_stack+0x2c/0x3c (C) [ 208.368448][T10388] __dump_stack+0x30/0x40 [ 208.368458][T10388] dump_stack_lvl+0xd8/0x12c [ 208.368468][T10388] dump_stack+0x1c/0x28 [ 208.368478][T10388] should_fail_ex+0x41c/0x590 [ 208.368488][T10388] should_failslab+0xc4/0x120 [ 208.368497][T10388] __kmalloc_cache_noprof+0x94/0x5ec [ 208.368506][T10388] io_uring_alloc_task_context+0xb4/0x598 [ 208.368515][T10388] __io_uring_add_tctx_node+0x3ac/0x4e4 [ 208.368526][T10388] io_uring_create+0x4c8/0x830 [ 208.368534][T10388] __arm64_sys_io_uring_setup+0x27c/0x288 [ 208.368542][T10388] invoke_syscall+0x98/0x244 [ 208.368553][T10388] el0_svc_common+0xec/0x23c [ 208.368562][T10388] do_el0_svc+0x4c/0x5c [ 208.368572][T10388] el0_svc+0x64/0x260 [ 208.368581][T10388] el0t_64_sync_handler+0x48/0x148 [ 208.368590][T10388] el0t_64_sync+0x198/0x19c [ 208.599425][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1537'. [ 208.648128][T10403] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1539'. [ 208.685611][T10410] loop1: detected capacity change from 0 to 256 [ 208.687452][T10410] vfat: Bad value for 'nfs' [ 211.039662][T10461] tipc: Enabled bearer , priority 0 [ 211.043155][T10461] syzkaller0: entered promiscuous mode [ 211.044253][T10461] syzkaller0: entered allmulticast mode [ 211.048853][T10461] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 211.060333][T10461] tipc: Resetting bearer [ 211.388395][T10475] fuse: fd is not a fuse device [ 212.417927][T10460] tipc: Resetting bearer [ 212.543949][T10460] tipc: Disabling bearer [ 213.564319][T10503] loop9: detected capacity change from 0 to 512 [ 213.570274][T10503] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.578188][T10519] tipc: Enabling of bearer rejected, failed to enable media [ 214.630483][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.915243][T10568] FAULT_INJECTION: forcing a failure. [ 214.915243][T10568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.918172][T10568] CPU: 0 UID: 0 PID: 10568 Comm: syz.7.1585 Not tainted syzkaller #0 PREEMPT [ 214.918192][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 214.918198][T10568] Call trace: [ 214.918202][T10568] show_stack+0x2c/0x3c (C) [ 214.918228][T10568] __dump_stack+0x30/0x40 [ 214.918240][T10568] dump_stack_lvl+0xd8/0x12c [ 214.918250][T10568] dump_stack+0x1c/0x28 [ 214.918260][T10568] should_fail_ex+0x41c/0x590 [ 214.918271][T10568] should_fail+0x14/0x24 [ 214.918280][T10568] should_fail_usercopy+0x20/0x30 [ 214.918290][T10568] _inline_copy_from_user+0x3c/0x174 [ 214.918300][T10568] copy_msghdr_from_user+0xb8/0x194 [ 214.918310][T10568] ___sys_sendmsg+0x14c/0x224 [ 214.918318][T10568] __sys_sendmsg+0x158/0x204 [ 214.918326][T10568] __arm64_sys_sendmsg+0x80/0x94 [ 214.918334][T10568] invoke_syscall+0x98/0x244 [ 214.918344][T10568] el0_svc_common+0xec/0x23c [ 214.918354][T10568] do_el0_svc+0x4c/0x5c [ 214.918368][T10568] el0_svc+0x64/0x260 [ 214.918378][T10568] el0t_64_sync_handler+0x48/0x148 [ 214.918387][T10568] el0t_64_sync+0x198/0x19c [ 215.176368][T10571] __nla_validate_parse: 1 callbacks suppressed [ 215.181101][T10571] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1586'. [ 215.185331][T10571] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1586'. [ 215.216610][T10574] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1587'. [ 215.254012][T10578] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1589'. [ 215.255771][T10578] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1589'. [ 215.272299][T10574] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1587'. [ 215.388566][T10582] tipc: Enabled bearer , priority 0 [ 215.391719][T10582] tipc: Resetting bearer [ 216.377222][T10581] tipc: Disabling bearer [ 216.385963][T10589] loop9: detected capacity change from 0 to 512 [ 216.390018][T10589] journal_path: Non-blockdev passed as './file0' [ 216.392021][T10589] EXT4-fs: error: could not find journal device path [ 216.501800][T10598] loop7: detected capacity change from 0 to 512 [ 216.521014][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1599'. [ 216.521483][T10602] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1599'. [ 216.528965][T10598] EXT4-fs (loop7): Test dummy encryption mode enabled [ 216.528991][T10598] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 216.558002][T10598] EXT4-fs (loop7): 1 truncate cleaned up [ 216.558483][T10598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.577933][T10607] FAULT_INJECTION: forcing a failure. [ 216.577933][T10607] name failslab, interval 1, probability 0, space 0, times 0 [ 216.586389][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.1.1600 Not tainted syzkaller #0 PREEMPT [ 216.586415][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 216.586422][T10607] Call trace: [ 216.586426][T10607] show_stack+0x2c/0x3c (C) [ 216.586452][T10607] __dump_stack+0x30/0x40 [ 216.586468][T10607] dump_stack_lvl+0xd8/0x12c [ 216.586479][T10607] dump_stack+0x1c/0x28 [ 216.586490][T10607] should_fail_ex+0x41c/0x590 [ 216.586502][T10607] should_failslab+0xc4/0x120 [ 216.586511][T10607] kmem_cache_alloc_noprof+0x94/0x5d8 [ 216.586520][T10607] skb_clone+0x1ac/0x320 [ 216.586530][T10607] nfnetlink_rcv+0x3c0/0x16ec [ 216.586540][T10607] netlink_unicast+0x600/0x7f8 [ 216.586548][T10607] netlink_sendmsg+0x648/0x948 [ 216.586556][T10607] __sock_sendmsg+0xc8/0x17c [ 216.586564][T10607] ____sys_sendmsg+0x3d0/0x6c8 [ 216.586572][T10607] ___sys_sendmsg+0x198/0x224 [ 216.586579][T10607] __sys_sendmsg+0x158/0x204 [ 216.586587][T10607] __arm64_sys_sendmsg+0x80/0x94 [ 216.586596][T10607] invoke_syscall+0x98/0x244 [ 216.586606][T10607] el0_svc_common+0xec/0x23c [ 216.586616][T10607] do_el0_svc+0x4c/0x5c [ 216.586625][T10607] el0_svc+0x64/0x260 [ 216.586635][T10607] el0t_64_sync_handler+0x48/0x148 [ 216.586643][T10607] el0t_64_sync+0x198/0x19c [ 216.717414][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.796884][T10614] veth1_vlan: entered allmulticast mode [ 216.839146][T10616] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1604'. [ 216.859429][T10626] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1608'. [ 216.927634][T10632] netlink: 'syz.7.1610': attribute type 3 has an invalid length. [ 216.927750][T10632] netlink: 'syz.7.1610': attribute type 3 has an invalid length. [ 217.018957][T10641] loop1: detected capacity change from 0 to 512 [ 217.024327][T10641] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 217.024347][T10641] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 217.169827][T10646] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 217.269077][T10641] macvtap1: entered promiscuous mode [ 217.351142][T10650] FAULT_INJECTION: forcing a failure. [ 217.351142][T10650] name failslab, interval 1, probability 0, space 0, times 0 [ 217.353886][T10650] CPU: 0 UID: 0 PID: 10650 Comm: syz.1.1618 Not tainted syzkaller #0 PREEMPT [ 217.353901][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 217.353910][T10650] Call trace: [ 217.353914][T10650] show_stack+0x2c/0x3c (C) [ 217.353938][T10650] __dump_stack+0x30/0x40 [ 217.353950][T10650] dump_stack_lvl+0xd8/0x12c [ 217.353960][T10650] dump_stack+0x1c/0x28 [ 217.353970][T10650] should_fail_ex+0x41c/0x590 [ 217.353981][T10650] should_failslab+0xc4/0x120 [ 217.353990][T10650] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 217.353998][T10650] __alloc_skb+0x1f0/0x610 [ 217.354008][T10650] netlink_alloc_large_skb+0xd4/0x114 [ 217.354016][T10650] netlink_sendmsg+0x4c4/0x948 [ 217.354024][T10650] __sock_sendmsg+0xc8/0x17c [ 217.354031][T10650] ____sys_sendmsg+0x3d0/0x6c8 [ 217.354039][T10650] ___sys_sendmsg+0x198/0x224 [ 217.354047][T10650] __sys_sendmsg+0x158/0x204 [ 217.354055][T10650] __arm64_sys_sendmsg+0x80/0x94 [ 217.354063][T10650] invoke_syscall+0x98/0x244 [ 217.354073][T10650] el0_svc_common+0xec/0x23c [ 217.354083][T10650] do_el0_svc+0x4c/0x5c [ 217.354092][T10650] el0_svc+0x64/0x260 [ 217.354102][T10650] el0t_64_sync_handler+0x48/0x148 [ 217.354110][T10650] el0t_64_sync+0x198/0x19c [ 217.438194][T10658] loop9: detected capacity change from 0 to 256 [ 217.459616][T10660] loop1: detected capacity change from 0 to 512 [ 217.479108][T10660] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 217.489319][T10662] loop7: detected capacity change from 0 to 512 [ 217.549341][T10660] EXT4-fs (loop1): 1 truncate cleaned up [ 217.549898][T10660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.560466][T10662] EXT4-fs error (device loop7): dx_probe:791: inode #2: comm syz.7.1619: Attempting to read directory block (0) that is past i_size (256) [ 217.560508][T10662] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 217.563571][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 217.563585][ C0] EXT4-fs (loop7): initial error at time 473: dx_probe:791: inode 2 [ 217.563603][ C0] EXT4-fs (loop7): last error at time 473: dx_probe:791: inode 2 [ 217.570660][T10662] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 217.571165][T10662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.573812][ T9162] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 217.577734][ T9162] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 217.583443][ T9162] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 217.856004][ T9882] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.320143][ T5792] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.333647][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.465789][ T5792] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.544514][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.546585][ T4711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.548204][ T4711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.552917][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.556850][ T4711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.586181][T10693] loop7: detected capacity change from 0 to 2048 [ 218.629993][T10693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.640452][ T5792] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.659749][T10693] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 16: comm syz.7.1634: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 218.727420][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.765174][ T5792] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.903714][T10719] veth1_vlan: entered allmulticast mode [ 218.918577][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.921157][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.922807][T10689] bridge_slave_0: entered allmulticast mode [ 218.925256][T10689] bridge_slave_0: entered promiscuous mode [ 218.929499][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.932518][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.934132][T10689] bridge_slave_1: entered allmulticast mode [ 218.937043][T10689] bridge_slave_1: entered promiscuous mode [ 218.956035][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.958568][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.968177][T10689] team0: Port device team_slave_0 added [ 218.970180][T10689] team0: Port device team_slave_1 added [ 219.070925][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.070957][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.070984][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.083840][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.083917][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.084218][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.214834][ T5792] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 219.215982][ T5792] mac80211_hwsim hwsim23 wlan1: left promiscuous mode [ 219.217631][ T5792] bridge0: port 3(wlan1) entered disabled state [ 219.219902][ T5792] bridge_slave_1: left allmulticast mode [ 219.219927][ T5792] bridge_slave_1: left promiscuous mode [ 219.220247][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.223037][ T5792] bridge_slave_0: left allmulticast mode [ 219.223050][ T5792] bridge_slave_0: left promiscuous mode [ 219.223142][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.311915][T10734] loop7: detected capacity change from 0 to 512 [ 219.412311][T10734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.789333][ T5792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.804277][ T5792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.843274][ T5792] bond0 (unregistering): Released all slaves [ 219.848136][T10689] hsr_slave_0: entered promiscuous mode [ 219.849549][T10689] hsr_slave_1: entered promiscuous mode [ 219.850939][T10689] debugfs: 'hsr0' already exists in 'hsr' [ 219.864488][T10689] Cannot create hsr debugfs directory [ 219.899263][T10759] bond2: entered promiscuous mode [ 219.900309][T10759] bond2: entered allmulticast mode [ 220.031407][T10765] loop8: detected capacity change from 0 to 8192 [ 220.048998][T10765] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.053778][T10765] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 220.057925][T10765] FAT-fs (loop8): Filesystem has been set read-only [ 220.060262][T10771] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 220.060290][T10771] overlayfs: missing 'lowerdir' [ 220.336255][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.417116][T10774] __nla_validate_parse: 11 callbacks suppressed [ 220.417150][T10774] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.1651'. [ 220.546227][ T5792] hsr_slave_0: left promiscuous mode [ 220.547448][ T5792] hsr_slave_1: left promiscuous mode [ 220.547731][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.547744][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.551673][ T5792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.551710][ T5792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.564248][ T5792] veth1_macvtap: left promiscuous mode [ 220.564300][ T5792] veth0_macvtap: left promiscuous mode [ 220.564356][ T5792] veth1_vlan: left promiscuous mode [ 220.564412][ T5792] veth0_vlan: left promiscuous mode [ 220.572122][ T4710] Bluetooth: hci0: command tx timeout [ 220.869820][ T5792] team0 (unregistering): Port device team_slave_1 removed [ 220.885611][ T5792] team0 (unregistering): Port device team_slave_0 removed [ 220.978686][ T4398] 8021q: adding VLAN 0 to HW filter on device eth0 [ 222.075556][ T4398] 8021q: adding VLAN 0 to HW filter on device eth1 [ 223.202936][ T4710] Bluetooth: hci0: command tx timeout [ 223.612525][T10689] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.663775][T10850] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1670'. [ 223.663882][T10850] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1670'. [ 224.273108][T10689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.762092][T10852] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1669'. [ 224.762131][T10852] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1669'. [ 225.265649][T10689] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.292140][ T4710] Bluetooth: hci0: command tx timeout [ 225.297041][T10689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.299894][T10689] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.422246][T10689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.434578][T10689] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.453597][T10689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.454450][ T4398] 8021q: adding VLAN 0 to HW filter on device eth2 [ 225.631449][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.963711][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.972632][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.972673][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.986036][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.986083][ T5792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.261205][ T4398] 8021q: adding VLAN 0 to HW filter on device eth3 [ 226.267111][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.304101][T10689] veth0_vlan: entered promiscuous mode [ 226.311120][T10689] veth1_vlan: entered promiscuous mode [ 226.331049][T10689] veth0_macvtap: entered promiscuous mode [ 226.339293][T10689] veth1_macvtap: entered promiscuous mode [ 226.355152][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.361077][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.366804][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.366858][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.366878][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.366895][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.454629][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.454659][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.472337][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.472372][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.692611][T10934] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1681'. [ 226.692645][T10934] FAULT_INJECTION: forcing a failure. [ 226.692645][T10934] name failslab, interval 1, probability 0, space 0, times 0 [ 226.692680][T10934] CPU: 1 UID: 0 PID: 10934 Comm: syz.8.1681 Not tainted syzkaller #0 PREEMPT [ 226.692692][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 226.692698][T10934] Call trace: [ 226.692701][T10934] show_stack+0x2c/0x3c (C) [ 226.692721][T10934] __dump_stack+0x30/0x40 [ 226.692732][T10934] dump_stack_lvl+0xd8/0x12c [ 226.692742][T10934] dump_stack+0x1c/0x28 [ 226.692752][T10934] should_fail_ex+0x41c/0x590 [ 226.692764][T10934] should_failslab+0xc4/0x120 [ 226.692772][T10934] kmem_cache_alloc_noprof+0x94/0x5d8 [ 226.692781][T10934] xfrm_state_alloc+0x2c/0x270 [ 226.692791][T10934] xfrm_add_sa+0xfa4/0x3004 [ 226.692800][T10934] xfrm_user_rcv_msg+0x4e0/0x950 [ 226.692807][T10934] netlink_rcv_skb+0x238/0x414 [ 226.692816][T10934] xfrm_netlink_rcv+0x80/0x9c [ 226.692824][T10934] netlink_unicast+0x600/0x7f8 [ 226.692831][T10934] netlink_sendmsg+0x648/0x948 [ 226.692839][T10934] __sock_sendmsg+0xc8/0x17c [ 226.692847][T10934] ____sys_sendmsg+0x3d0/0x6c8 [ 226.692856][T10934] ___sys_sendmsg+0x198/0x224 [ 226.692863][T10934] __sys_sendmsg+0x158/0x204 [ 226.692872][T10934] __arm64_sys_sendmsg+0x80/0x94 [ 226.692880][T10934] invoke_syscall+0x98/0x244 [ 226.692890][T10934] el0_svc_common+0xec/0x23c [ 226.692900][T10934] do_el0_svc+0x4c/0x5c [ 226.692909][T10934] el0_svc+0x64/0x260 [ 226.692919][T10934] el0t_64_sync_handler+0x48/0x148 [ 226.692928][T10934] el0t_64_sync+0x198/0x19c [ 226.704191][T10936] loop3: detected capacity change from 0 to 512 [ 226.726345][T10936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.810473][T10937] loop9: detected capacity change from 0 to 4096 [ 226.821417][T10937] EXT4-fs: inline encryption not supported [ 226.824599][T10937] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.824654][T10937] EXT4-fs: Ignoring removed bh option [ 226.827510][T10937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.856608][T10937] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 226.857672][T10937] System zones: 0-5 [ 226.860957][T10937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.953733][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1685'. [ 226.982365][T10956] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1686'. [ 227.713656][T10960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1683'. [ 227.932295][ T4710] Bluetooth: hci0: command tx timeout [ 228.939937][T10939] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 229.307692][T10689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.394702][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.444946][T11000] xt_hashlimit: size too large, truncated to 1048576 [ 230.604347][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1698'. [ 230.606997][T11023] loop9: detected capacity change from 0 to 256 [ 230.608289][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1699'. [ 230.614477][T11023] loop9: detected capacity change from 0 to 2048 [ 230.634517][T11023] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.648812][T11023] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1699: bg 0: block 345: padding at end of block bitmap is not set [ 230.665952][T11023] netlink: 'syz.9.1699': attribute type 1 has an invalid length. [ 230.796635][T11029] loop7: detected capacity change from 0 to 512 [ 230.803729][T11029] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.810494][T11034] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1701'. [ 230.810538][T11034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1701'. [ 230.828184][T11023] bond3: entered promiscuous mode [ 230.828412][T11023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.569877][T11029] syz.7.1700: attempt to access beyond end of device [ 231.569877][T11029] loop7: rw=524288, sector=17179852706, nr_sectors = 16 limit=512 [ 231.583835][T11029] syz.7.1700: attempt to access beyond end of device [ 231.583835][T11029] loop7: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 231.606152][T11029] syz.7.1700: attempt to access beyond end of device [ 231.606152][T11029] loop7: rw=0, sector=17179852706, nr_sectors = 8 limit=512 [ 231.679512][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.821418][T11050] netlink: 428 bytes leftover after parsing attributes in process `syz.9.1703'. [ 231.821464][T11050] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1703'. [ 231.926374][T11061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1706'. [ 231.926722][T11061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1706'. [ 231.937221][T11061] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1706'. [ 232.154588][T11055] loop8: detected capacity change from 0 to 4096 [ 232.370344][T11095] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1711'. [ 232.374203][T11095] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1711'. [ 232.815750][T11107] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1714'. [ 233.001267][T11123] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1717'. [ 233.001312][T11123] FAULT_INJECTION: forcing a failure. [ 233.001312][T11123] name failslab, interval 1, probability 0, space 0, times 0 [ 233.001344][T11123] CPU: 1 UID: 0 PID: 11123 Comm: syz.7.1717 Not tainted syzkaller #0 PREEMPT [ 233.001358][T11123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 233.001364][T11123] Call trace: [ 233.001367][T11123] show_stack+0x2c/0x3c (C) [ 233.001396][T11123] __dump_stack+0x30/0x40 [ 233.001408][T11123] dump_stack_lvl+0xd8/0x12c [ 233.001418][T11123] dump_stack+0x1c/0x28 [ 233.001428][T11123] should_fail_ex+0x41c/0x590 [ 233.001439][T11123] should_failslab+0xc4/0x120 [ 233.001447][T11123] __kmalloc_node_track_caller_noprof+0x108/0x6d4 [ 233.001456][T11123] kmemdup_noprof+0x44/0x8c [ 233.001465][T11123] xfrm_add_sa+0x1b58/0x3004 [ 233.001474][T11123] xfrm_user_rcv_msg+0x4e0/0x950 [ 233.001481][T11123] netlink_rcv_skb+0x238/0x414 [ 233.001490][T11123] xfrm_netlink_rcv+0x80/0x9c [ 233.001497][T11123] netlink_unicast+0x600/0x7f8 [ 233.001504][T11123] netlink_sendmsg+0x648/0x948 [ 233.001512][T11123] __sock_sendmsg+0xc8/0x17c [ 233.001520][T11123] ____sys_sendmsg+0x3d0/0x6c8 [ 233.001528][T11123] ___sys_sendmsg+0x198/0x224 [ 233.001536][T11123] __sys_sendmsg+0x158/0x204 [ 233.001544][T11123] __arm64_sys_sendmsg+0x80/0x94 [ 233.001552][T11123] invoke_syscall+0x98/0x244 [ 233.001561][T11123] el0_svc_common+0xec/0x23c [ 233.001571][T11123] do_el0_svc+0x4c/0x5c [ 233.001580][T11123] el0_svc+0x64/0x260 [ 233.001590][T11123] el0t_64_sync_handler+0x48/0x148 [ 233.001599][T11123] el0t_64_sync+0x198/0x19c [ 233.262554][T11134] netlink: 'syz.7.1718': attribute type 3 has an invalid length. [ 234.001508][T11140] loop9: detected capacity change from 0 to 256 [ 234.001869][T11140] vfat: Unknown parameter 't' [ 234.469425][T11152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1725'. [ 234.637431][T11165] loop3: detected capacity change from 0 to 512 [ 234.651236][T11166] input: syz0 as /devices/virtual/input/input10 [ 234.668224][T11165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.892132][ T9216] udevd[9216]: setting mode of /dev/input/event2 to 020660 failed: No such file or directory [ 234.896966][ T9216] udevd[9216]: setting owner of /dev/input/event2 to uid=0, gid=103 failed: No such file or directory [ 234.919673][T11195] binder: 11194:11195 cannot find target node [ 234.919717][T11195] binder: 11194:11195 transaction async to 0:0 failed 20/29189/-22, code 0 size 0-0 line 3234 [ 234.988589][T10689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.006452][T11202] syz_tun: entered allmulticast mode [ 235.350711][T11200] syz_tun: left allmulticast mode [ 235.447000][T11217] loop9: detected capacity change from 0 to 8 [ 235.468716][T11217] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 235.468754][T11217] unable to read xattr id index table [ 235.475097][T11217] SQUASHFS error: zlib decompression failed, data probably corrupt [ 235.475132][T11217] SQUASHFS error: Failed to read block 0x9b: -5 [ 235.475140][T11217] SQUASHFS error: Unable to read metadata cache entry [99] [ 235.475147][T11217] SQUASHFS error: Unable to read inode 0x127 [ 235.596504][T11225] bond4: entered promiscuous mode [ 235.596538][T11225] bond4: entered allmulticast mode [ 235.663257][T11231] loop9: detected capacity change from 0 to 128 [ 235.670036][T11231] EXT4-fs: Ignoring removed nobh option [ 235.681649][T11231] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.705938][T11231] fscrypt (loop9, inode 12): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 235.737233][ T6298] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.905948][T11249] [U] zÍ»´iœùÊý®Ò[27| [ 235.905969][T11249] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 235.905977][T11249] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 235.905988][T11249] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 235.906007][T11249] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 235.906012][T11249] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 235.906016][T11249] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 235.906023][T11249] [U] ‰ϼcEv‹û @ý [ 235.906026][T11249] [U] aÆ„% [ 235.906032][T11249] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 235.906039][T11249] [U] éf1Ïp±3 [ 235.906042][T11249] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 235.906046][T11249] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 235.906056][T11249] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n_?lP¡Gw±‹“jL®6ŠÔ$© Ù™´È3¹9c!¥ÌŒ¾41Ž'còušÅ(E°yæ&} [ 235.906066][T11249] [U] ÉvÕS&îLk*KÐ@‰¹VŸ€…™…Öà¯y·3)¨M†Û55ՠܧ«ñþkJŽáªÄOlŽùQý [ 235.906070][T11249] [U] ûÛÒçùÖL˜üFÃÚ¸k®Ýmf¥ [ 235.906076][T11249] [U] #º„¤jÆQl*óòÚ…'>‘þ [ 235.906080][T11249] [U] üŸ¤’uëΪiR¨ïUߎÑeÊéÙ’\L;4Lr­W<ò¾Os$, priority 0 [ 236.343780][T11262] tipc: Resetting bearer [ 236.360913][T11260] tipc: Disabling bearer [ 236.510415][T11273] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 236.510441][T11273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.516895][T11273] vhci_hcd vhci_hcd.0: Device attached [ 236.521292][T11273] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(7) [ 236.521312][T11273] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 236.524663][T11273] vhci_hcd vhci_hcd.0: Device attached [ 236.529462][T11273] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(9) [ 236.529485][T11273] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.546182][T11273] vhci_hcd vhci_hcd.0: Device attached [ 236.977581][ T4308] usb 20-1: new low-speed USB device number 2 using vhci_hcd [ 237.417971][T11284] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(11) [ 237.417993][T11284] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 237.420174][T11284] vhci_hcd vhci_hcd.0: Device attached [ 237.626412][T11285] vhci_hcd: connection closed [ 237.630661][ T4906] vhci_hcd vhci_hcd.9: stop threads [ 237.633977][ T4906] vhci_hcd vhci_hcd.9: release socket [ 237.640307][ T4906] vhci_hcd vhci_hcd.9: disconnect device [ 237.643612][T11278] vhci_hcd: connection closed [ 237.643762][T11280] vhci_hcd: connection closed [ 237.645340][ T4906] vhci_hcd vhci_hcd.9: stop threads [ 237.647310][ T4906] vhci_hcd vhci_hcd.9: release socket [ 237.648377][ T4906] vhci_hcd vhci_hcd.9: disconnect device [ 237.649790][ T4906] vhci_hcd vhci_hcd.9: stop threads [ 237.650851][ T4906] vhci_hcd vhci_hcd.9: release socket [ 237.652169][T11275] vhci_hcd: connection reset by peer [ 237.655609][ T4906] vhci_hcd vhci_hcd.9: disconnect device [ 237.662213][ T4906] vhci_hcd vhci_hcd.9: stop threads [ 237.662280][ T4906] vhci_hcd vhci_hcd.9: release socket [ 237.662307][ T4906] vhci_hcd vhci_hcd.9: disconnect device [ 237.713388][T11299] loop3: detected capacity change from 0 to 8192 [ 237.760179][T11308] xt_hashlimit: size too large, truncated to 1048576 [ 237.786461][T11299] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 237.787810][T11299] bond1 (unregistering): Released all slaves [ 239.462054][ T4710] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 239.462106][ T4710] Bluetooth: hci0: Injecting HCI hardware error event [ 239.464232][ T4710] Bluetooth: hci0: hardware error 0x00 [ 239.693061][T11366] __nla_validate_parse: 5 callbacks suppressed [ 239.694406][T11366] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1768'. [ 239.753410][T11367] overlay: Unknown parameter '/' [ 239.805973][T11371] netlink: 'syz.5.1770': attribute type 4 has an invalid length. [ 239.806008][T11371] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1770'. [ 239.839929][T11374] xt_hashlimit: size too large, truncated to 1048576 [ 239.903907][T11378] loop9: detected capacity change from 0 to 512 [ 239.922515][T11378] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.993193][T11384] fuse: Unknown parameter '®bñ‘„S$ä.Æ?Ä*á-3…¨WÜc;öU€ÎÓ'·(åUGûòåiÄX­MFƒÕ$Ø¥uÚº­odÛzTu#¯óÙé‘?™ª5²¯@$F¬7eR' [ 240.018200][T11367] overlayfs: failed lookup in lower (newroot/19, name='file0', err=-40): overlapping layers [ 241.630505][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.709731][ T4710] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 242.396947][T11431] loop7: detected capacity change from 0 to 1024 [ 242.397997][T11431] EXT4-fs: Ignoring removed nobh option [ 242.398012][T11431] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.599047][ T4308] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 243.096483][T11442] loop9: detected capacity change from 0 to 512 [ 243.442527][T11442] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.475456][T11431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.536637][T11451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1792'. [ 243.539537][T11451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1792'. [ 243.543549][T11451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1792'. [ 243.650298][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'. [ 244.000412][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.016502][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.041853][T11471] loop9: detected capacity change from 0 to 256 [ 244.172943][T11474] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1795'. [ 244.172980][T11474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1795'. [ 244.850923][T11479] No such timeout policy "syz1" [ 245.477696][T11503] loop8: detected capacity change from 0 to 512 [ 245.484195][T11503] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.499768][T11507] loop7: detected capacity change from 0 to 512 [ 245.610422][T11507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.751349][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1810'. [ 245.751833][T11512] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 245.752000][T11512] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 245.752683][T11512] bridge0: port 3(wlan1) entered disabled state [ 245.770013][T11512] bridge_slave_1: left allmulticast mode [ 245.770094][T11512] bridge_slave_1: left promiscuous mode [ 245.770625][T11512] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.856363][T11512] bridge_slave_0: left allmulticast mode [ 245.856396][T11512] bridge_slave_0: left promiscuous mode [ 245.856497][T11512] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.050841][T11518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 246.051735][T11518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 246.054172][T11518] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 246.355925][T11533] overlayfs: missing 'lowerdir' [ 246.438055][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'. [ 246.576274][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.809526][T11548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1824'. [ 246.982345][ T6198] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.021266][T11554] bond1: entered promiscuous mode [ 247.190604][T11554] bond1: entered allmulticast mode [ 247.437402][T11564] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1823'. [ 247.724207][T11567] loop8: detected capacity change from 0 to 512 [ 247.736883][T11567] EXT4-fs error (device loop8): ext4_quota_enable:7232: inode #4: comm syz.8.1827: iget: checksum invalid [ 247.736921][T11567] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -74 [ 247.737088][T11567] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.1827: Bad quota inode: 4, type: 1 [ 247.737104][T11567] loop8: lost filesystem error report for type 5 error -117 [ 247.739694][T11567] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-74, ino=4). Please run e2fsck to fix. [ 247.740174][T11567] EXT4-fs (loop8): mount failed [ 247.741992][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 247.742009][ C0] EXT4-fs (loop8): initial error at time 503: ext4_quota_enable:7232: inode 4 [ 247.742025][ C0] EXT4-fs (loop8): last error at time 503: ext4_quota_enable:7235 [ 247.811809][T11567] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1827'. [ 247.811852][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1827'. [ 247.937998][T11575] netlink: 'syz.8.1831': attribute type 1 has an invalid length. [ 247.946683][T11579] netlink: 'syz.7.1832': attribute type 10 has an invalid length. [ 247.964734][T11579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.970310][T11579] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 247.976906][T11579] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1832'. [ 247.985160][T11586] loop8: detected capacity change from 0 to 512 [ 248.215577][T11586] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.218722][T11579] team0: Port device bond0 removed [ 248.225331][T11579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.230210][T11583] loop3: detected capacity change from 0 to 2048 [ 248.254388][T11583] loop3: p3 < > p4 < > [ 248.254426][T11583] loop3: partition table partially beyond EOD, truncated [ 248.254921][T11583] loop3: p3 start 4284289 is beyond EOD, truncated [ 248.259645][ T4342] loop3: p3 < > p4 < > [ 248.259674][ T4342] loop3: partition table partially beyond EOD, truncated [ 248.259745][ T4342] loop3: p3 start 4284289 is beyond EOD, truncated [ 248.263446][T11579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.293932][T11579] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 248.394372][T11579] bond0 (unregistering): Released all slaves [ 249.362488][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.362537][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.959924][ T6198] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.115769][T11606] netlink: 'syz.7.1838': attribute type 3 has an invalid length. [ 250.127733][T11607] FAULT_INJECTION: forcing a failure. [ 250.127733][T11607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.127769][T11607] CPU: 1 UID: 0 PID: 11607 Comm: syz.9.1840 Not tainted syzkaller #0 PREEMPT [ 250.127785][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 250.127792][T11607] Call trace: [ 250.127795][T11607] show_stack+0x2c/0x3c (C) [ 250.127817][T11607] __dump_stack+0x30/0x40 [ 250.127827][T11607] dump_stack_lvl+0xd8/0x12c [ 250.127837][T11607] dump_stack+0x1c/0x28 [ 250.127850][T11607] should_fail_ex+0x41c/0x590 [ 250.127861][T11607] should_fail_alloc_page+0xec/0x10c [ 250.127870][T11607] prepare_alloc_pages+0x194/0x4a4 [ 250.127879][T11607] __alloc_frozen_pages_noprof+0x134/0x320 [ 250.127888][T11607] alloc_pages_mpol+0x1ec/0x3c0 [ 250.127897][T11607] alloc_frozen_pages_noprof+0xc4/0x10c [ 250.127905][T11607] alloc_pages_noprof+0x30/0x148 [ 250.127914][T11607] get_free_pages_noprof+0x1c/0xbc [ 250.127923][T11607] __kasan_populate_vmalloc+0x48/0x1d0 [ 250.127933][T11607] alloc_vmap_area+0xdf4/0x13e8 [ 250.127942][T11607] __get_vm_area_node+0x210/0x32c [ 250.127951][T11607] __vmalloc_node_range_noprof+0x2c8/0x105c [ 250.127960][T11607] __vmalloc_node_noprof+0xec/0x14c [ 250.127969][T11607] __vmalloc_noprof+0x64/0x8c [ 250.127978][T11607] bpf_prog_alloc_no_stats+0x60/0x488 [ 250.127986][T11607] bpf_prog_alloc+0x48/0x110 [ 250.127993][T11607] bpf_prog_load+0x5dc/0x15f8 [ 250.128000][T11607] __sys_bpf+0x870/0x8c8 [ 250.128007][T11607] __arm64_sys_bpf+0xc8/0xe4 [ 250.128017][T11607] invoke_syscall+0x98/0x244 [ 250.128027][T11607] el0_svc_common+0xec/0x23c [ 250.128037][T11607] do_el0_svc+0x4c/0x5c [ 250.128046][T11607] el0_svc+0x64/0x260 [ 250.128056][T11607] el0t_64_sync_handler+0x48/0x148 [ 250.128065][T11607] el0t_64_sync+0x198/0x19c [ 250.128432][T11607] syz.9.1840: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 250.128524][T11607] CPU: 1 UID: 0 PID: 11607 Comm: syz.9.1840 Not tainted syzkaller #0 PREEMPT [ 250.128534][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 250.128538][T11607] Call trace: [ 250.128540][T11607] show_stack+0x2c/0x3c (C) [ 250.128552][T11607] __dump_stack+0x30/0x40 [ 250.128562][T11607] dump_stack_lvl+0xd8/0x12c [ 250.128572][T11607] dump_stack+0x1c/0x28 [ 250.128581][T11607] warn_alloc+0x1bc/0x1d0 [ 250.128589][T11607] __vmalloc_node_range_noprof+0x2e8/0x105c [ 250.128599][T11607] __vmalloc_node_noprof+0xec/0x14c [ 250.128608][T11607] __vmalloc_noprof+0x64/0x8c [ 250.128617][T11607] bpf_prog_alloc_no_stats+0x60/0x488 [ 250.128625][T11607] bpf_prog_alloc+0x48/0x110 [ 250.128632][T11607] bpf_prog_load+0x5dc/0x15f8 [ 250.128640][T11607] __sys_bpf+0x870/0x8c8 [ 250.128647][T11607] __arm64_sys_bpf+0xc8/0xe4 [ 250.128657][T11607] invoke_syscall+0x98/0x244 [ 250.128667][T11607] el0_svc_common+0xec/0x23c [ 250.128677][T11607] do_el0_svc+0x4c/0x5c [ 250.128686][T11607] el0_svc+0x64/0x260 [ 250.128695][T11607] el0t_64_sync_handler+0x48/0x148 [ 250.128704][T11607] el0t_64_sync+0x198/0x19c [ 250.128715][T11607] Mem-Info: [ 250.128724][T11607] active_anon:8758 inactive_anon:24207 isolated_anon:0 [ 250.128724][T11607] active_file:3499 inactive_file:17399 isolated_file:0 [ 250.128724][T11607] unevictable:768 dirty:175 writeback:0 [ 250.128724][T11607] slab_reclaimable:9654 slab_unreclaimable:96040 [ 250.128724][T11607] mapped:35049 shmem:26636 pagetables:1710 [ 250.128724][T11607] sec_pagetables:0 bounce:0 [ 250.128724][T11607] kernel_misc_reclaimable:0 [ 250.128724][T11607] free:1439466 free_pcp:4826 free_cma:7616 [ 250.128747][T11607] Node 0 active_anon:35032kB inactive_anon:96828kB active_file:13996kB inactive_file:69596kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:140196kB dirty:700kB writeback:0kB shmem:106544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10580kB pagetables:6840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 250.128771][T11607] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 250.128801][T11607] lowmem_reserve[]: 0 0 3651 3651 3651 [ 250.128841][T11607] Node 0 Normal free:2679976kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35032kB inactive_anon:96828kB active_file:13996kB inactive_file:69596kB unevictable:3072kB writepending:700kB zspages:0kB present:5242880kB managed:3739532kB mlocked:0kB bounce:0kB free_pcp:19304kB local_pcp:15924kB free_cma:0kB [ 250.128871][T11607] lowmem_reserve[]: 0 0 0 0 0 [ 250.128909][T11607] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 250.129023][T11607] Node 0 Normal: 2200*4kB (UME) 1043*8kB (UME) 144*16kB (UM) 261*32kB (UME) 220*64kB (UME) 62*128kB (UM) 30*256kB (UME) 14*512kB (UME) 4*1024kB (M) 1*2048kB (M) 637*4096kB (UM) = 2679960kB [ 250.129175][T11607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.129185][T11607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 250.129195][T11607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 250.129204][T11607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 250.129213][T11607] 47503 total pagecache pages [ 250.129220][T11607] 0 pages in swap cache [ 250.129226][T11607] Free swap = 124996kB [ 250.129233][T11607] Total swap = 124996kB [ 250.129240][T11607] 2097152 pages RAM [ 250.129246][T11607] 0 pages HighMem/MovableOnly [ 250.129252][T11607] 392221 pages reserved [ 250.129259][T11607] 8192 pages cma reserved [ 250.129265][T11607] 0 pages hwpoisoned [ 251.049732][T11618] loop9: detected capacity change from 0 to 128 [ 251.067578][T11618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 251.067645][T11618] System zones: 1-3, 19-19, 35-36 [ 251.068197][T11618] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.239082][ T6298] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.317329][T11651] loop9: detected capacity change from 0 to 512 [ 251.350226][T11651] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.361898][T11655] __nla_validate_parse: 1 callbacks suppressed [ 251.364156][T11655] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1851'. [ 251.486930][T11661] loop8: detected capacity change from 0 to 512 [ 251.505203][T11661] EXT4-fs (loop8): Test dummy encryption mode enabled [ 251.507720][T11661] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 251.507771][T11661] System zones: 1-2, 4-12, 8-8 [ 251.507984][T11661] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.1853: iget: bad i_size value: 38620345925642 [ 251.507999][T11661] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.508158][T11661] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.1853: couldn't read orphan inode 15 (err -117) [ 251.508171][T11661] loop8: lost filesystem error report for type 5 error -117 [ 251.508746][T11661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.540859][T11660] loop3: detected capacity change from 0 to 1024 [ 251.545745][T11661] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1853: bg 0: block 5: invalid block bitmap [ 251.559814][T11660] EXT4-fs: Ignoring removed bh option [ 251.564827][T11661] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 251.564856][T11661] EXT4-fs (loop8): This should not happen!! Data will be lost [ 251.564856][T11661] [ 251.564878][T11661] EXT4-fs (loop8): Total free blocks count 0 [ 251.564892][T11661] EXT4-fs (loop8): Free/Dirty block details [ 251.564915][T11661] EXT4-fs (loop8): free_blocks=0 [ 251.564933][T11661] EXT4-fs (loop8): dirty_blocks=2 [ 251.564945][T11661] EXT4-fs (loop8): Block reservation details [ 251.564956][T11661] EXT4-fs (loop8): i_reserved_data_blocks=2 [ 251.592744][T11660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.680369][ T6198] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 251.685604][ T6198] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.703507][T11660] syzkaller0: entered promiscuous mode [ 251.718663][T11660] syzkaller0: entered allmulticast mode [ 252.679393][ T6298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.730385][T11689] loop7: detected capacity change from 0 to 256 [ 252.945099][T11704] loop8: detected capacity change from 0 to 512 [ 252.949323][T11704] EXT4-fs (loop8): Test dummy encryption mode enabled [ 252.959729][T11704] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c064e0ad, mo2=0002] [ 252.960287][T11704] EXT4-fs (loop8): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.000017][ T6198] EXT4-fs (loop8): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 253.581701][T11721] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1867'. [ 253.586540][T11721] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1867'. [ 253.756691][T11731] vlan1: entered allmulticast mode [ 253.756767][T11731] veth0_vlan: entered allmulticast mode [ 253.959823][T10689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.068790][T11746] FAULT_INJECTION: forcing a failure. [ 254.068790][T11746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.071523][T11746] CPU: 1 UID: 0 PID: 11746 Comm: syz.7.1872 Not tainted syzkaller #0 PREEMPT [ 254.071545][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 254.071551][T11746] Call trace: [ 254.071555][T11746] show_stack+0x2c/0x3c (C) [ 254.071581][T11746] __dump_stack+0x30/0x40 [ 254.071594][T11746] dump_stack_lvl+0xd8/0x12c [ 254.071605][T11746] dump_stack+0x1c/0x28 [ 254.071614][T11746] should_fail_ex+0x41c/0x590 [ 254.071626][T11746] should_fail_alloc_page+0xec/0x10c [ 254.071634][T11746] prepare_alloc_pages+0x194/0x4a4 [ 254.071643][T11746] __alloc_frozen_pages_noprof+0x134/0x320 [ 254.071652][T11746] __alloc_pages_noprof+0x18/0x100 [ 254.071659][T11746] alloc_pages_bulk_noprof+0x564/0x730 [ 254.071667][T11746] __kasan_populate_vmalloc+0xc0/0x1d0 [ 254.071678][T11746] alloc_vmap_area+0xdf4/0x13e8 [ 254.071687][T11746] __get_vm_area_node+0x210/0x32c [ 254.071695][T11746] __vmalloc_node_range_noprof+0x2c8/0x105c [ 254.071705][T11746] __vmalloc_node_noprof+0xec/0x14c [ 254.071714][T11746] __vmalloc_noprof+0x64/0x8c [ 254.071722][T11746] bpf_prog_alloc_no_stats+0x60/0x488 [ 254.071730][T11746] bpf_prog_alloc+0x48/0x110 [ 254.071737][T11746] bpf_prog_load+0x5dc/0x15f8 [ 254.071745][T11746] __sys_bpf+0x870/0x8c8 [ 254.071752][T11746] __arm64_sys_bpf+0xc8/0xe4 [ 254.071762][T11746] invoke_syscall+0x98/0x244 [ 254.071772][T11746] el0_svc_common+0xec/0x23c [ 254.071781][T11746] do_el0_svc+0x4c/0x5c [ 254.071791][T11746] el0_svc+0x64/0x260 [ 254.071800][T11746] el0t_64_sync_handler+0x48/0x148 [ 254.071809][T11746] el0t_64_sync+0x198/0x19c [ 254.445540][T11771] loop7: detected capacity change from 0 to 512 [ 254.457838][T11771] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.362978][T11789] Injecting memory failure for pfn 0x136188 at process virtual address 0x20003000 [ 255.620079][T11789] Memory failure: 0x136188: recovery action for clean LRU page: Recovered [ 255.620126][T11789] Injecting memory failure for pfn 0x11e7fe at process virtual address 0x20004000 [ 255.630276][T11789] Memory failure: 0x11e7fe: recovery action for clean LRU page: Recovered [ 255.645297][ T5773] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.768111][T11803] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1886'. [ 255.769753][T11803] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1886'. [ 255.791652][T11801] netlink: 'syz.7.1884': attribute type 3 has an invalid length. [ 255.887459][T11810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 255.887525][T11810] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 255.894617][T11818] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1891'. [ 255.896040][T11810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 255.896070][T11810] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 256.444882][ T1157] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.659355][ T4711] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.690091][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.692543][ T1157] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.762531][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.764576][ T4711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.766927][ T4711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.782477][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.783396][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.784333][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.784727][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.784945][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.802966][T11833] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1898'. [ 256.854527][ T1157] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.015014][T11855] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1901'. [ 257.017931][ T1157] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.023532][T11855] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1901'. [ 257.039740][ T30] audit: type=1326 audit(513.005:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11839 comm="syz.3.1899" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81178f68 code=0x0 [ 257.066737][T11859] xt_hashlimit: size too large, truncated to 1048576 [ 257.151780][ T4711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.154265][ T4711] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.156058][ T4711] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.158702][ T4711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.160159][ T4711] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.386003][ T1157] mac80211_hwsim hwsim21 wlan1: left allmulticast mode [ 257.386060][ T1157] mac80211_hwsim hwsim21 wlan1: left promiscuous mode [ 257.386160][ T1157] bridge0: port 3(wlan1) entered disabled state [ 257.391366][ T1157] bridge_slave_1: left allmulticast mode [ 257.391403][ T1157] bridge_slave_1: left promiscuous mode [ 257.391490][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.396667][ T1157] bridge_slave_0: left allmulticast mode [ 257.396687][ T1157] bridge_slave_0: left promiscuous mode [ 257.397298][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.759613][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.800852][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.844568][ T1157] bond0 (unregistering): Released all slaves [ 257.848343][ T1157] bond1 (unregistering): Released all slaves [ 257.854496][ T1157] bond2 (unregistering): Released all slaves [ 257.861064][ T1157] bond3 (unregistering): Released all slaves [ 257.866047][ T1157] bond4 (unregistering): Released all slaves [ 258.726657][ T1157] tipc: Left network mode [ 258.747753][T11829] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.747801][T11829] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.747871][T11829] bridge_slave_0: entered allmulticast mode [ 258.748294][T11829] bridge_slave_0: entered promiscuous mode [ 258.749064][T11829] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.749091][T11829] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.749161][T11829] bridge_slave_1: entered allmulticast mode [ 258.749600][T11829] bridge_slave_1: entered promiscuous mode [ 258.812860][ T4710] Bluetooth: hci2: command tx timeout [ 258.814961][ T4710] Bluetooth: hci3: command tx timeout [ 258.826757][T11827] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.837363][T11827] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.837561][T11827] bridge_slave_0: entered allmulticast mode [ 258.838515][T11827] bridge_slave_0: entered promiscuous mode [ 258.850286][T11829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.872267][T11827] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.872315][T11827] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.872428][T11827] bridge_slave_1: entered allmulticast mode [ 258.872873][T11827] bridge_slave_1: entered promiscuous mode [ 258.893773][T11829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.980636][T11829] team0: Port device team_slave_0 added [ 259.001275][T11829] team0: Port device team_slave_1 added [ 259.006809][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 259.233053][ T4711] Bluetooth: hci1: command tx timeout [ 259.774313][T11827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.777285][T11827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.793160][T11829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.794600][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.794628][T11829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.801047][T11829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.802831][T11829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.802857][T11829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.976096][T11829] hsr_slave_0: entered promiscuous mode [ 259.976483][T11829] hsr_slave_1: entered promiscuous mode [ 260.005506][T11827] team0: Port device team_slave_0 added [ 260.011293][T11827] team0: Port device team_slave_1 added [ 260.217826][ T1157] hsr_slave_0: left promiscuous mode [ 260.218845][ T1157] hsr_slave_1: left promiscuous mode [ 260.219140][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.219151][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.223403][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.223417][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.229378][ T1157] veth1_macvtap: left promiscuous mode [ 260.229431][ T1157] veth0_macvtap: left promiscuous mode [ 260.229509][ T1157] veth0_vlan: left promiscuous mode [ 260.380355][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 260.387594][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 260.467438][T11827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.469046][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.473902][T11827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.484768][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 260.504769][T11827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.506204][T11827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.510790][T11827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.631571][T11827] hsr_slave_0: entered promiscuous mode [ 260.631921][T11827] hsr_slave_1: entered promiscuous mode [ 260.637098][T11827] debugfs: 'hsr0' already exists in 'hsr' [ 260.637130][T11827] Cannot create hsr debugfs directory [ 260.868426][T11864] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.870398][T11864] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.870505][T11864] bridge_slave_0: entered allmulticast mode [ 260.876109][T11864] bridge_slave_0: entered promiscuous mode [ 260.880065][T11864] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.880103][T11864] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.880188][T11864] bridge_slave_1: entered allmulticast mode [ 260.890126][T11864] bridge_slave_1: entered promiscuous mode [ 260.893461][ T4711] Bluetooth: hci3: command tx timeout [ 260.893490][ T4711] Bluetooth: hci2: command tx timeout [ 261.004030][T11864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.008828][T11864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.073553][ T1157] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.086653][T11864] team0: Port device team_slave_0 added [ 261.090019][T11864] team0: Port device team_slave_1 added [ 261.100266][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 261.112097][T11864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.112127][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.112143][T11864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.112674][T11864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.112682][T11864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.112698][T11864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.174735][T11864] hsr_slave_0: entered promiscuous mode [ 261.175088][T11864] hsr_slave_1: entered promiscuous mode [ 261.175283][T11864] debugfs: 'hsr0' already exists in 'hsr' [ 261.175293][T11864] Cannot create hsr debugfs directory [ 261.243547][ T1157] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.292018][ T4710] Bluetooth: hci1: command tx timeout [ 261.317347][ T1157] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.398972][ T1157] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.549564][T11827] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.596434][ T1157] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 261.596489][ T1157] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 261.596584][ T1157] bridge0: port 3(wlan1) entered disabled state [ 261.600271][ T1157] bridge_slave_1: left allmulticast mode [ 261.600307][ T1157] bridge_slave_1: left promiscuous mode [ 261.600382][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.609843][ T1157] bridge_slave_0: left allmulticast mode [ 261.609880][ T1157] bridge_slave_0: left promiscuous mode [ 261.609964][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.707091][ T1157] bond1 (unregistering): Released all slaves [ 261.734600][T11994] loop3: detected capacity change from 0 to 512 [ 261.736348][T11994] ext4: Unknown parameter 'subj_user' [ 261.747741][T11827] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.790042][ T1157] tipc: Left network mode [ 261.882486][T11827] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.079419][T11827] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.083653][T12027] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1914'. [ 262.089010][ T4398] 8021q: adding VLAN 0 to HW filter on device eth4 [ 262.151171][ T1157] hsr_slave_0: left promiscuous mode [ 262.166237][ T1157] hsr_slave_1: left promiscuous mode [ 262.166596][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.166615][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.174264][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.175816][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.181784][ T1157] veth1_macvtap: left promiscuous mode [ 262.184037][ T1157] veth0_macvtap: left promiscuous mode [ 262.185145][ T1157] veth0_vlan: left promiscuous mode [ 262.532420][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 262.536923][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 262.653045][ T4398] 8021q: adding VLAN 0 to HW filter on device eth5 [ 262.973248][ T4711] Bluetooth: hci3: command tx timeout [ 262.973779][ T4710] Bluetooth: hci2: command tx timeout [ 263.372016][ T4710] Bluetooth: hci1: command tx timeout [ 263.658135][T11827] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 263.696325][T11827] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.698088][T11827] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 263.716449][T11827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.722088][T11827] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 263.725099][T11827] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 263.730820][T11827] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 263.738460][T11827] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.816011][ T4398] 8021q: adding VLAN 0 to HW filter on device eth6 [ 263.871761][T11827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.878124][T11827] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.880071][ T4906] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.880098][ T4906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.884297][ T4906] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.884337][ T4906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.215801][T12094] 9p: Bad value for 'rfdno' [ 264.310757][T12094] tipc: Started in network mode [ 264.310800][T12094] tipc: Node identity aaaaaaaaaa3, cluster identity 9 [ 264.310870][T12094] tipc: Enabled bearer , priority 10 [ 264.620663][T12088] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.620702][T12088] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 264.672641][T12088] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.672672][T12088] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 264.706737][T11864] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 264.714590][T11864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.714957][T11864] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 264.717613][T11864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.721324][T11827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.724267][T11864] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 264.730469][T11864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.735913][T12088] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.735936][T12088] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 264.789283][T11864] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 264.799517][T11864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.872871][T11829] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 264.878982][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.882540][T11829] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 264.898904][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.899371][T11829] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 264.901245][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.909000][T11829] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 264.927911][T11829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.990871][T11827] veth0_vlan: entered promiscuous mode [ 265.020911][T11827] veth1_vlan: entered promiscuous mode [ 265.068292][T11864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.075776][T11827] veth0_macvtap: entered promiscuous mode [ 265.106592][T11829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.115672][T11864] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.123238][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.123284][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.123819][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.123839][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.150919][T11827] veth1_macvtap: entered promiscuous mode [ 265.181827][T11829] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.187409][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.187458][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.201934][T11827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.209885][T11827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.214114][ T5792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.217522][ T1157] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.217601][ T1157] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.217655][ T1157] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.229523][ T30] audit: type=1326 audit(521.195:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.229569][ T30] audit: type=1326 audit(521.195:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.229596][ T30] audit: type=1326 audit(521.195:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.229614][ T30] audit: type=1326 audit(521.185:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.229628][ T30] audit: type=1326 audit(521.195:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.229643][ T30] audit: type=1326 audit(521.195:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.229657][ T30] audit: type=1326 audit(521.195:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.229671][ T30] audit: type=1326 audit(521.195:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.229686][ T30] audit: type=1326 audit(521.195:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.233932][ T30] audit: type=1326 audit(521.205:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12175 comm="syz.3.1927" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff81178f68 code=0x7ffc0000 [ 265.239332][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.239365][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.339017][T12180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1928'. [ 265.363091][ T4811] IPVS: starting estimator thread 0... [ 265.375132][T11829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.418838][ T4906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.418874][ T4906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.424984][ T9] tipc: Node number set to 10136234 [ 265.462165][T12184] IPVS: using max 61 ests per chain, 146400 per kthread [ 265.472864][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.472895][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.518591][T12194] loop3: detected capacity change from 0 to 256 [ 265.625045][T12212] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1930'. [ 265.660410][T12217] loop8: detected capacity change from 0 to 128 [ 265.682701][T11864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.693621][T12217] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 265.756239][T11827] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.803755][T11829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.842351][T12239] FAULT_INJECTION: forcing a failure. [ 265.842351][T12239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.842390][T12239] CPU: 1 UID: 0 PID: 12239 Comm: syz.3.1934 Not tainted syzkaller #0 PREEMPT [ 265.842405][T12239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 265.842412][T12239] Call trace: [ 265.842417][T12239] show_stack+0x2c/0x3c (C) [ 265.842438][T12239] __dump_stack+0x30/0x40 [ 265.842450][T12239] dump_stack_lvl+0xd8/0x12c [ 265.842460][T12239] dump_stack+0x1c/0x28 [ 265.842470][T12239] should_fail_ex+0x41c/0x590 [ 265.842481][T12239] should_fail+0x14/0x24 [ 265.842491][T12239] should_fail_usercopy+0x20/0x30 [ 265.842501][T12239] _inline_copy_from_user+0x3c/0x174 [ 265.842510][T12239] copy_from_bpfptr+0x70/0xb0 [ 265.842517][T12239] bpf_prog_load+0x880/0x15f8 [ 265.842524][T12239] __sys_bpf+0x870/0x8c8 [ 265.842531][T12239] __arm64_sys_bpf+0xc8/0xe4 [ 265.842541][T12239] invoke_syscall+0x98/0x244 [ 265.842552][T12239] el0_svc_common+0xec/0x23c [ 265.842562][T12239] do_el0_svc+0x4c/0x5c [ 265.842571][T12239] el0_svc+0x64/0x260 [ 265.842581][T12239] el0t_64_sync_handler+0x48/0x148 [ 265.842589][T12239] el0t_64_sync+0x198/0x19c [ 265.899390][T11864] veth0_vlan: entered promiscuous mode [ 265.904296][T11864] veth1_vlan: entered promiscuous mode [ 265.937537][T12249] netlink: 192 bytes leftover after parsing attributes in process `syz.8.1935'. [ 265.949793][T11864] veth0_macvtap: entered promiscuous mode [ 265.958476][T11864] veth1_macvtap: entered promiscuous mode [ 265.965742][T11864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.966772][T11864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.990696][ T1157] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.991610][ T1157] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.991738][ T1084] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.991768][ T1084] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.042393][ T5792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.042414][ T5792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.114260][T12260] netlink: 'syz.8.1937': attribute type 3 has an invalid length. [ 266.170288][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.170322][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.279057][T11829] veth0_vlan: entered promiscuous mode [ 266.282835][T11829] veth1_vlan: entered promiscuous mode [ 266.285120][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 266.287572][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 266.291106][T11829] veth0_macvtap: entered promiscuous mode [ 266.300013][T11829] veth1_macvtap: entered promiscuous mode [ 266.307866][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 266.309988][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1940'. [ 266.537455][T11829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.560690][T12280] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1903'. [ 266.595851][T11829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.600862][T12284] loop8: detected capacity change from 0 to 256 [ 266.613030][T12280] loop7: detected capacity change from 0 to 128 [ 266.641198][ T39] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.641263][ T39] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.641286][ T39] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.641304][ T39] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.694440][T12294] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1943'. [ 266.711043][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.711080][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.757165][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.757202][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.769245][T12304] netlink: 'syz.5.1946': attribute type 3 has an invalid length. [ 266.769347][T12304] netlink: 'syz.5.1946': attribute type 3 has an invalid length. [ 266.849411][T12307] loop8: detected capacity change from 0 to 2048 [ 266.882673][T12307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.951200][T12322] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1947: bg 0: block 345: padding at end of block bitmap is not set [ 266.961435][T12322] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 266.961884][T12322] EXT4-fs (loop8): This should not happen!! Data will be lost [ 266.961884][T12322] [ 266.967222][ T1084] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 512 with max blocks 1037 with error 28 [ 266.967254][ T1084] EXT4-fs (loop8): This should not happen!! Data will be lost [ 266.967254][ T1084] [ 266.967277][ T1084] EXT4-fs (loop8): Total free blocks count 0 [ 266.967289][ T1084] EXT4-fs (loop8): Free/Dirty block details [ 266.967307][ T1084] EXT4-fs (loop8): free_blocks=0 [ 266.967321][ T1084] EXT4-fs (loop8): dirty_blocks=1040 [ 266.967331][ T1084] EXT4-fs (loop8): Block reservation details [ 268.083825][T11827] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 268.090105][T12349] __nla_validate_parse: 3 callbacks suppressed [ 268.091248][T12349] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1953'. [ 268.096289][T12349] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1953'. [ 268.098035][T12349] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1953'. [ 268.336012][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1956'. [ 268.369342][T12355] loop9: detected capacity change from 0 to 256 [ 268.390909][T12367] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1955'. [ 268.399788][T12355] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 268.399832][T12355] FAT-fs (loop9): Filesystem has been set read-only [ 268.774311][T12372] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1955'. [ 268.789444][T12370] bond2: entered promiscuous mode [ 268.790460][T12370] bond2: entered allmulticast mode [ 269.980598][T12401] FAULT_INJECTION: forcing a failure. [ 269.980598][T12401] name failslab, interval 1, probability 0, space 0, times 0 [ 269.980638][T12401] CPU: 1 UID: 0 PID: 12401 Comm: syz.9.1965 Tainted: G L syzkaller #0 PREEMPT [ 269.980655][T12401] Tainted: [L]=SOFTLOCKUP [ 269.980659][T12401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 269.980664][T12401] Call trace: [ 269.980667][T12401] show_stack+0x2c/0x3c (C) [ 269.980685][T12401] __dump_stack+0x30/0x40 [ 269.980695][T12401] dump_stack_lvl+0xd8/0x12c [ 269.980705][T12401] dump_stack+0x1c/0x28 [ 269.980714][T12401] should_fail_ex+0x41c/0x590 [ 269.980725][T12401] should_failslab+0xc4/0x120 [ 269.980733][T12401] __kmalloc_cache_noprof+0x94/0x5ec [ 269.980742][T12401] bpf_prog_alloc_no_stats+0xdc/0x488 [ 269.980750][T12401] bpf_prog_alloc+0x48/0x110 [ 269.980757][T12401] bpf_prog_load+0x5dc/0x15f8 [ 269.980764][T12401] __sys_bpf+0x870/0x8c8 [ 269.980771][T12401] __arm64_sys_bpf+0xc8/0xe4 [ 269.980781][T12401] invoke_syscall+0x98/0x244 [ 269.980791][T12401] el0_svc_common+0xec/0x23c [ 269.980801][T12401] do_el0_svc+0x4c/0x5c [ 269.980810][T12401] el0_svc+0x64/0x260 [ 269.980820][T12401] el0t_64_sync_handler+0x48/0x148 [ 269.980828][T12401] el0t_64_sync+0x198/0x19c [ 270.005921][T12402] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1966'. [ 270.021023][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1966'. [ 270.170699][T12419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1972'. [ 270.173976][T12419] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1972'. [ 270.471622][T12412] loop9: detected capacity change from 0 to 8192 [ 270.568163][T12433] xt_hashlimit: size too large, truncated to 1048576 [ 270.979561][T12460] 9p: Bad value for 'rfdno' [ 271.101895][T12471] loop8: detected capacity change from 0 to 1024 [ 271.106121][T12471] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.115636][T12471] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8002c018, mo2=0002] [ 271.178400][T12471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 271.188087][T12471] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1979: bg 0: block 112: padding at end of block bitmap is not set [ 271.213323][T12471] tipc: Started in network mode [ 271.214265][T12471] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 271.215595][T12471] tipc: Enabled bearer , priority 10 [ 271.958596][T12480] loop7: detected capacity change from 0 to 1024 [ 271.984182][T12480] EXT4-fs (loop7): failed to initialize system zone (-117) [ 271.984245][T12480] EXT4-fs (loop7): mount failed [ 271.988745][T12488] loop9: detected capacity change from 0 to 1024 [ 272.000574][T12488] EXT4-fs: Ignoring removed bh option [ 272.004956][T11827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.007253][T12488] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 272.019662][T12488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.156673][T12508] netlink: 'syz.7.1994': attribute type 3 has an invalid length. [ 272.156777][T12508] netlink: 'syz.7.1994': attribute type 3 has an invalid length. [ 272.333344][ T4532] tipc: Node number set to 10136234 [ 272.493939][T12520] loop3: detected capacity change from 0 to 256 [ 272.933474][T12538] loop7: detected capacity change from 0 to 512 [ 272.935087][T11829] EXT4-fs error (device loop9): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 272.935606][T11829] EXT4-fs (loop9): Remounting filesystem read-only [ 272.940093][T11829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.970617][T12538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.300607][T12549] __nla_validate_parse: 7 callbacks suppressed [ 273.300654][T12549] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2006'. [ 273.300673][T12549] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2006'. [ 273.301294][T12549] EXT4-fs (loop7): shut down requested (0) [ 273.336183][T12551] netlink: 'syz.9.2010': attribute type 3 has an invalid length. [ 273.446726][T12554] loop8: detected capacity change from 0 to 2048 [ 273.474239][T12554] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.529103][T11827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.549094][T12561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2014'. [ 273.587120][T12563] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2016'. [ 273.591310][T12563] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2016'. [ 273.986457][T11864] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.077249][T12594] loop9: detected capacity change from 0 to 256 [ 275.120647][T12598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2028'. [ 275.695285][T12603] netlink: 'syz.9.2030': attribute type 3 has an invalid length. [ 275.745681][T12606] loop3: detected capacity change from 0 to 512 [ 275.755827][T12606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.857318][T12609] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.2033: iget: bad i_size value: 2533274857506816 [ 275.864902][T12614] syzkaller0: entered promiscuous mode [ 275.864931][T12614] syzkaller0: entered allmulticast mode [ 276.333673][T12631] loop7: detected capacity change from 0 to 128 [ 276.794927][T12631] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 277.198625][T12639] loop9: detected capacity change from 0 to 1024 [ 277.199031][T12639] EXT4-fs: Ignoring removed bh option [ 277.200590][T12639] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 277.203856][T12639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.557760][T12631] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 277.557782][T12631] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 277.557916][T12631] vhci_hcd vhci_hcd.0: Device attached [ 277.566748][T12643] vhci_hcd: connection closed [ 277.572954][ T5792] vhci_hcd vhci_hcd.7: stop threads [ 277.576946][ T5792] vhci_hcd vhci_hcd.7: release socket [ 277.577978][ T5792] vhci_hcd vhci_hcd.7: disconnect device [ 277.694063][T12646] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2042'. [ 277.696093][T12646] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2042'. [ 277.698186][T12646] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2042'. [ 277.744650][T12649] netlink: 'syz.8.2043': attribute type 1 has an invalid length. [ 277.754501][T10689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.777133][T12649] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2043'. [ 277.821528][T12655] loop3: detected capacity change from 0 to 512 [ 277.823216][T12648] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 277.823607][T12655] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 277.824890][T12655] EXT4-fs (loop3): 1 truncate cleaned up [ 277.825412][T12655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.728609][T11829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.741301][T11864] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.839471][T12675] __nla_validate_parse: 3 callbacks suppressed [ 278.840873][T12675] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2054'. [ 278.842885][T12675] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2054'. [ 278.845055][T12675] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2054'. [ 278.952020][T10689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.005128][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2059'. [ 279.037835][T12692] xt_hashlimit: size too large, truncated to 1048576 [ 279.063071][T12687] bond1: entered promiscuous mode [ 279.063104][T12687] bond1: entered allmulticast mode [ 279.317309][T12703] can0: slcan on ttyS3. [ 279.370710][T12702] capability: warning: `syz.7.2051' uses 32-bit capabilities (legacy support in use) [ 279.432616][T12704] can0 (unregistered): slcan off ttyS3. [ 279.446140][T12714] loop9: detected capacity change from 0 to 512 [ 279.450743][T12717] loop8: detected capacity change from 0 to 512 [ 279.456459][T12717] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 279.460062][T12714] EXT4-fs: Ignoring removed oldalloc option [ 279.460098][T12714] EXT4-fs: Ignoring removed i_version option [ 279.468570][T12714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 279.479510][T12714] EXT4-fs (loop9): orphan cleanup on readonly fs [ 279.479757][T12714] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2065: invalid indirect mapped block 4294967295 (level 1) [ 279.479775][T12714] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 279.479920][T12714] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2065: invalid indirect mapped block 4294967295 (level 1) [ 279.479934][T12714] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 279.480717][T12714] EXT4-fs (loop9): 2 truncates cleaned up [ 279.481178][T12714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.487566][T12717] EXT4-fs (loop8): 1 truncate cleaned up [ 279.488004][T12717] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.551735][T11829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.584880][T12727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2071'. [ 280.687991][T11827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.799222][T12753] loop9: detected capacity change from 0 to 512 [ 280.807738][T12753] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 280.815339][T12753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.853543][T12763] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2083'. [ 280.869639][T12753] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 280.876242][T12757] loop8: detected capacity change from 0 to 512 [ 280.880661][T12753] EXT4-fs (loop9): Remounting filesystem read-only [ 280.885710][T12757] EXT4-fs (loop8): Test dummy encryption mode enabled [ 280.895562][T12757] EXT4-fs (loop8): 1 truncate cleaned up [ 280.897416][T12757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.950170][T11829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.954187][ T4906] __quota_error: 36 callbacks suppressed [ 280.954214][ T4906] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 280.954240][ T4906] Quota error (device loop9): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 280.964389][T11827] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.985459][T12770] loop3: detected capacity change from 0 to 512 [ 280.997690][T12770] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 281.006771][T12770] EXT4-fs (loop3): 1 truncate cleaned up [ 281.007324][T12770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.072756][T12777] virt_wifi0: entered promiscuous mode [ 281.072794][T12777] virt_wifi0: entered allmulticast mode [ 282.169225][T10689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.346383][T12799] bridge0: port 3(syz_tun) entered blocking state [ 282.348047][T12799] bridge0: port 3(syz_tun) entered disabled state [ 282.348180][T12799] syz_tun: entered allmulticast mode [ 282.348693][T12799] syz_tun: entered promiscuous mode [ 282.348952][T12799] bridge0: port 3(syz_tun) entered blocking state [ 282.348989][T12799] bridge0: port 3(syz_tun) entered forwarding state [ 282.487535][T12808] loop3: detected capacity change from 0 to 1024 [ 282.487901][T12808] EXT4-fs: Ignoring removed nobh option [ 282.487915][T12808] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.516698][T12808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.764009][T12826] loop9: detected capacity change from 0 to 2048 [ 282.772672][ C0] ------------[ cut here ]------------ [ 282.772684][ C0] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x554/0x650, CPU#0: ksoftirqd/0/14 [ 282.775015][ C0] Modules linked in: [ 282.775624][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT [ 282.777150][ C0] Tainted: [L]=SOFTLOCKUP [ 282.777834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 282.779329][ C0] pstate: 43400005 (nZcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 282.780493][ C0] pc : inet_sock_destruct+0x554/0x650 [ 282.781293][ C0] lr : inet_sock_destruct+0x554/0x650 [ 282.782169][ C0] sp : ffff80008ec37a30 [ 282.782855][ C0] x29: ffff80008ec37a40 x28: 1fffe00018342751 x27: ffff0000c5dcc908 [ 282.784219][ C0] x26: ffff0000c1a13a88 x25: ffff0000c5dcc400 x24: 1fffe00018bb9892 [ 282.785517][ C0] x23: ffff0000c5dcc490 x22: dfff800000000000 x21: ffff0000d4d0ce80 [ 282.786750][ C0] x20: 0000000000000090 x19: ffff0000c5dcc68c x18: 0000000000000000 [ 282.788018][ C0] x17: ffff80008a74f000 x16: 0000000000000002 x15: ffff80008a2d8da0 [ 282.789280][ C0] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 282.790647][ C0] x11: 0000000000000000 x10: ffff600018bb98d5 x9 : 0000000000000100 [ 282.791934][ C0] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000000000003f [ 282.793203][ C0] x5 : 0000000000000040 x4 : 0000000000000008 x3 : ffff8000854f4ee0 [ 282.794418][ C0] x2 : 0000000000000090 x1 : ffff0000c1a13a80 x0 : 0000000000000000 [ 282.795656][ C0] Call trace: [ 282.796130][ C0] inet_sock_destruct+0x554/0x650 (P) [ 282.797019][ C0] udp_destruct_sock+0x28/0x38 [ 282.797714][ C0] __sk_destruct+0x80/0x854 [ 282.798548][ C0] rcu_core+0x598/0xf04 [ 282.799255][ C0] rcu_core_si+0x10/0x1c [ 282.799979][ C0] handle_softirqs+0x2ec/0xd98 [ 282.800783][ C0] run_ksoftirqd+0x70/0xbc [ 282.801527][ C0] smpboot_thread_fn+0x4e4/0x97c [ 282.802445][ C0] kthread+0x304/0x3d4 [ 282.803126][ C0] ret_from_fork+0x10/0x20 [ 282.803794][ C0] irq event stamp: 2890043 [ 282.804446][ C0] hardirqs last enabled at (2890042): [] kasan_quarantine_put+0xb4/0x1c4 [ 282.806016][ C0] hardirqs last disabled at (2890043): [] el1_brk64+0x20/0x54 [ 282.807391][ C0] softirqs last enabled at (2889550): [] handle_softirqs+0xc28/0xd98 [ 282.808888][ C0] softirqs last disabled at (2889555): [] run_ksoftirqd+0x70/0xbc [ 282.810461][ C0] ---[ end trace 0000000000000000 ]--- [ 282.842712][T12826] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.864946][T11829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.426793][T10689] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.