last executing test programs: 1m16.01794893s ago: executing program 2 (id=1172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000)) 1m15.913999095s ago: executing program 2 (id=1176): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x31a, &(0x7f0000000580)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1748, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17a8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x20004090) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 1m14.918636202s ago: executing program 2 (id=1186): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x31a, &(0x7f0000000580)="$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") socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1748, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17a8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x20004090) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 1m13.446254261s ago: executing program 2 (id=1203): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x4000006, 0x3}, {0x6, 0xc}, 0x7fff, 0x6}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000100), 0x9, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@can={{0x2, 0x0, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "985300"}, 0x10}}, 0xd209f6d814827b17) read(r1, &(0x7f0000002fc0)=""/52, 0x34) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000004c0)=@ethtool_coalesce={0x1, 0x2, 0x0, 0x5, 0x0, 0x80, 0x6, 0x6, 0x1, 0x80000001, 0x5, 0x8, 0x2, 0x7fff, 0x7, 0x9, 0x5, 0x69, 0xf, 0x1d, 0x2, 0x4, 0x1}}) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0xb, 0x0, @void}, 0x10) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000300)={0x1, 0x4, 0x8, 0x10000, 0x15, "75e651e022a9f5e2250185ed95540da26100ca"}) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r6, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) 1m13.276384741s ago: executing program 2 (id=1204): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1m12.935337332s ago: executing program 2 (id=1209): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x25, 0xffff, 0xb747}}) sendmsg$nl_route(r0, &(0x7f0000004540)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004500)={&(0x7f0000004440)=@ipv6_getaddr={0x18, 0x16, 0x200, 0x70bd2a, 0x25dfdbff, {0xa, 0x38, 0x18, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x5000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) shutdown(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f0000000580)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x80800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={r2, 0xe1a, 0xb4e, 0x7}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xbd}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1a304b17}, {0xc, 0x90, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7f}, {0xc, 0x90, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000001}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8000000000000000}, {0xc, 0x90, 0x1}}]}, 0x1bc}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xc4, r5, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x5fa8, 0x1, 0xb, 0x6, 0xff, 0xf, 0x1d, 0x2, 0x9, 0x8000]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x54, 0xac, "a12dbcf2377f258dbff51655e0a04c0a176c31c5b653de16a4202be84ec5bab0166e1086c13d90d213791bdaf7f53bef29cd60f674fd7af6bf52ce830d7099463f55af3f9bff78211ac408521faea7c7"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x101202, 0x0) write$P9_RVERSION(r10, &(0x7f0000000600)={0x13, 0x65, 0xffff, 0x3, 0x6, '9P2000'}, 0x13) 1m12.710076414s ago: executing program 32 (id=1209): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1e, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wg1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x25, 0xffff, 0xb747}}) sendmsg$nl_route(r0, &(0x7f0000004540)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004500)={&(0x7f0000004440)=@ipv6_getaddr={0x18, 0x16, 0x200, 0x70bd2a, 0x25dfdbff, {0xa, 0x38, 0x18, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x5000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) shutdown(r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f0000000580)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x80800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={r2, 0xe1a, 0xb4e, 0x7}) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xbd}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1a304b17}, {0xc, 0x90, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7f}, {0xc, 0x90, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x80000001}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8000000000000000}, {0xc, 0x90, 0x1}}]}, 0x1bc}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xc4, r5, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x5fa8, 0x1, 0xb, 0x6, 0xff, 0xf, 0x1d, 0x2, 0x9, 0x8000]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_FLAGS={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x54, 0xac, "a12dbcf2377f258dbff51655e0a04c0a176c31c5b653de16a4202be84ec5bab0166e1086c13d90d213791bdaf7f53bef29cd60f674fd7af6bf52ce830d7099463f55af3f9bff78211ac408521faea7c7"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x101202, 0x0) write$P9_RVERSION(r10, &(0x7f0000000600)={0x13, 0x65, 0xffff, 0x3, 0x6, '9P2000'}, 0x13) 13.497081899s ago: executing program 1 (id=1811): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) timer_create(0x4, &(0x7f0000000200)={0x0, 0x1d, 0x4, @thr={&(0x7f00000000c0)="86349f0bf346751c950e11b9f5470e937a5d331b98bb85bf8eb99402fe368eff10441e574afe50d974631fabfb4b41ad0a04841cdfb2c27796f316a4787bbdc34ecf1415b9d924e513ac60aee878d84a9e0b35539b7cddde4d988e903ba955358236fa937367e6f7429cd4608e18e4189ba601d8f778c44f50fdf8328d662ba55147566a3b2915320f1c7510a4c99dbce51f226846f52feca439156fed28b02c7945a657f268b616ba", &(0x7f0000000180)="ab8d24868775b0f6e5c41e3751c3d13487aad6523f17c1a792fc438fe09ad23331b243a6f03f8dd70bbaa8232f49b8acf50fe4e6395d254adea25222678e222ca8aabd00cd28bf70181741c322b895ec8c679fbafbd0f323d4bf2888"}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xaf9ba000) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) (async) getpid() (async) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) (async) syz_emit_ethernet(0x85, &(0x7f0000000400)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "0100", 0x4f, 0x11, 0x1, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x4f, 0x0, @opaque="a446d30d87b3b4fe825dc7029aab5a80a10147ddcbe6153a2ce364fe1e673d533702ea311a7ebf249e58f4fc363737b059b592e05b75f12508d7500d668d3a6e11a04319088197"}}}}}}, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 12.20612491s ago: executing program 1 (id=1816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000000000000000fffffff300851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000d300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 9.032275086s ago: executing program 1 (id=1823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000080) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.690415794s ago: executing program 1 (id=1828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) 6.491283001s ago: executing program 3 (id=1843): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x31a, &(0x7f0000000580)="$eJzs3c9LG2kcx/Hv5IdJdF1zWPaw7MKDC8sui0MM7G0pSlEoDbSoKdTSwljHNmRMJAlCpFQPhV577sFDj6VQCr31Ukp7lEL/grb25sVbPQSnJPMjMZnGqMUf+H4dnMd5nk+eZ/JMFB+Tma3/Hy3mF+LSLikhCbvlNfnn7fqnP6bf/OR8r9Tk+MxoWqmQiNy492z4dWXg2sufX8VkI3lrazv9ZeP3GZHdmbsSUrmyKti2MtRcsVjRRt7ZDbpSVy3TKJsqVyibpYpbb8xZplqwiktLVWUU5gf7l0pmuayMQlXlzaqqFFWlVFXGHSNXULquq8H+jnGfS0m/FOqo07oFs093bFu261MSWxPbtgNar3mFqLuNNevChxwwTou2+ff3RwPadpwcTP+Zt2NHAucf54Pz+v/8uLf5t1ePaVg4JtPXZy+PZzITU0rFRRYfLmeXs87Wqf84IDmxxJT1qX9nayK2T7T618lLmYmUakjKX4urbn51Oev8chhfaOQ3vVBLXrz8qJNXe/NR6W/mTUnLkPwigfm0l5dQS75P/v6zJa/LkHy4LUWxZL5+Jrfk748qdfFKpq3/RKMdAAAAAAAAAABnka58zfV7TTT33/wJXY813vHh1yfqu+vtnLy/vp6SIakFr8+nAtf3I/Jb5GSPHQAAAACA86JcXckblmWWjlRIfa8q/CTRpYuoiNQLIg+G64Pp2tev7oh7G1ifiHRWhbt3saeQ+M/p7/mUOzD5AU/UvoV4oy/7/SHj3oc18kbthVeVkKDGIREZ6/kEGOkLfObjJU2OcMjeSdhjSnp5ZIkf+MTWIuXqSsw9QG2fxvGOR9ZqTmHXXfhqT9na/sOwDSvq7BF/Brunxg70cuj9cEY23TlxNomgHxpf/SU+AAAAAGdIyx9OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADghPif/9fcO/33cvEw77r9e6vEvUV8c8/NC86VBdrvE891/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcQt8CAAD//+NWuVk=") r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1748, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17a8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 5.511516893s ago: executing program 3 (id=1853): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) 5.41680876s ago: executing program 4 (id=1854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000004c0)={'nat\x00', 0x0, 0x3, 0xfc, [0x8000000000000000, 0x80000001, 0x2, 0x3a, 0x3ff, 0x1], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f00000001c0)=""/252}, &(0x7f0000000540)=0x78) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) set_robust_list(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000001, 0x108}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020031000100010000000000040000000000000010000300000000002000010000000000"], 0x24, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r7, 0x400, 0x1) fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$key(0xf, 0x3, 0x2) 5.411012946s ago: executing program 3 (id=1857): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x31a, &(0x7f0000000580)="$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") socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1720, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1780) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x20004090) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 4.77898145s ago: executing program 0 (id=1860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000000000000000000f3000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000d300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 4.359059834s ago: executing program 3 (id=1861): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000010c0)={[{@nombcache}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601080000000000000000000001010500050009000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x6, r1, {r1}}, './file1\x00'}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x20a382, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000001040)={0xc}) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') (async) sendfile(r3, r1, 0x0, 0x4) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x2, &(0x7f0000001080)="e427a9", 0x5, 0x0, 0x0, {0x2, r11}}) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x35) (async) io_uring_enter(r7, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000000)={0x7, 'vlan1\x00', {0xa}, 0x4}) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, &(0x7f0000000000)) fallocate(r4, 0x0, 0x9, 0x10002) copy_file_range(r4, 0x0, r4, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 4.136396596s ago: executing program 3 (id=1862): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 3.794419937s ago: executing program 0 (id=1864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000008300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000001850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r5 = socket$netlink(0x10, 0x3, 0x9) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0xe, 0x6) r6 = io_uring_setup(0x5415, &(0x7f0000000080)={0x0, 0x1b89, 0x800, 0x2, 0xa5}) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r7, 0xf, &(0x7f0000000180)={0x5, 0x81}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095", @ANYRESOCT=r5, @ANYBLOB="1a2458fae774", @ANYRESDEC=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r11 = syz_open_procfs(0x0, 0x0) preadv(r11, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote, r9}, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 3.548225053s ago: executing program 0 (id=1865): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x10022, 0x0) (async, rerun: 32) shutdown(r0, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='timerslack_ns\x00') (async, rerun: 64) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xddb6, 0x300, 0x4004, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x3, &(0x7f00000001c0), 0x1, 0x48}) (async) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) ioctl$GIO_UNIMAP(r3, 0x4b66, 0x0) epoll_create1(0x80000) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r9, &(0x7f00000059c0)={0x2020}, 0x2020) (async) read$FUSE(r9, &(0x7f00000000c0)={0x2020}, 0x2020) (async, rerun: 32) write$tun(r2, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESDEC], 0xfdef) (rerun: 32) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r2, 0x20, &(0x7f0000000400)={0xfffffffc, 0x5, 0x3bbe, 0x1, &(0x7f0000000200)={&(0x7f0000000140)="95a62735425833fd35c0a83dc0c6ceb8eff96622671cbbf482ac60f051b9143bb1795cb745df02ae99d40ee90d4de79eafaa9a073962aff2346490a1b97a39409a1f064cd4eebe8439fa4ba7ca1ccc066d7438bcecb2746510f850c427e231ad88b8061d7242d02bc02dbadc41fe1aaae6c9cad84096b4c95ee1cf7cafdf1bf3b4008283c293f30b3a3b23052fb59468b0", 0x91, 0x5, 0x1, 0x6e2f}, &(0x7f0000000340)={&(0x7f0000000240)="13fe2d1100a250888f9bbd41836130519fe6ffdadea7f126cbbdd83c05dda6e4e7dbf00d3b9c46d9fc1e4f6e1175649c527c782d59542778771d55bb329e7870de101b63d67f9cd855d8c8a08476855b23406aa663d2b02948913759b134133ba5e9391616855d50830681f78990a0114828eb936d6c228c6f34ca7821e552e9fd654ca81722f1cefe6ad19a9abf1bb5ffdaca571623a45373d5189f119b13e4ab1a942ed9400db4cdadc4236d9bf33795ea33324371e37fb2f88c8df05154f969471be1615e44e29f61ecf4654481f2998a71f9d1c5fb8488", 0xd9, 0x0, 0xc1d4, 0x8000}, {0x6, 0x9, 0x9}, 0x8, 0xcf87}, 0x1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, &(0x7f0000000780)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r10, 0xcc8c, 0x8000, 0x8, 0x5, 0xfffffffc}, 0x14) 3.5299172s ago: executing program 3 (id=1866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB="0000009800fffff0067aa45800000000030000000000000000c8b9dbbb2e5dbdebd35bdd88d42757b8ee48755406c52224460782e94460489f7d39e7c6391b327c9d4dbcb809bc78d3433b669141b7a2946bc80d34248c6d03b1d59bf556d6f6d3b804521134fe42bcaa23ab996043146274f3a4a0c494c4dfb9ea8148cf4b4852240e5aadf82ec2bec37f556e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000008, 0x32, 0xffffffffffffffff, 0x2e7f4000) (async) r5 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x38, 0x63, 0x33, 0x38, 0x0, 0x61, 0x65, 0x32, 0x64, 0x2, 0x33, 0x66, 0x36, 0x62, 0x33, 0x32]}, &(0x7f0000000100)={0x0, "00379bce1955667799aabbc4ddfcff001122334455666b8899aabbccddaeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x6b, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) (async) r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0x4) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) (async, rerun: 64) keyctl$clear(0x7, r6) (async, rerun: 64) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r5) (async) add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x61, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x41}, 0x48, r5) 3.349194911s ago: executing program 33 (id=1866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB="0000009800fffff0067aa45800000000030000000000000000c8b9dbbb2e5dbdebd35bdd88d42757b8ee48755406c52224460782e94460489f7d39e7c6391b327c9d4dbcb809bc78d3433b669141b7a2946bc80d34248c6d03b1d59bf556d6f6d3b804521134fe42bcaa23ab996043146274f3a4a0c494c4dfb9ea8148cf4b4852240e5aadf82ec2bec37f556e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000008, 0x32, 0xffffffffffffffff, 0x2e7f4000) (async) r5 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x38, 0x63, 0x33, 0x38, 0x0, 0x61, 0x65, 0x32, 0x64, 0x2, 0x33, 0x66, 0x36, 0x62, 0x33, 0x32]}, &(0x7f0000000100)={0x0, "00379bce1955667799aabbc4ddfcff001122334455666b8899aabbccddaeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x6b, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) (async) r6 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usb-conn-gpio/uevent\x00', 0x1, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0x4) (async) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) (async, rerun: 64) keyctl$clear(0x7, r6) (async, rerun: 64) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r5) (async) add_key$keyring(&(0x7f0000000340), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x61, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x41}, 0x48, r5) 3.194057206s ago: executing program 5 (id=1869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a000001090001007379000480340001800c0001007061796c6f61640024000280080001400000000a080003400000004f08000440000000370800024000000002180001800800010001400000000b0900020073797a3200000000140000001100010000000000000000000000000a"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fsetxattr$smack_xattr_label(r3, &(0x7f0000000340)='security.SMACK64EXEC\x00', &(0x7f0000000380)={'^&:\'-'}, 0x6, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) faccessat(0xffffffffffffff9c, 0x0, 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xfffffffffffffffc, 0x4020010) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101402, 0x85) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r8, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r7, &(0x7f0000000200)='p', 0x8200, 0x600}]) 3.193140058s ago: executing program 0 (id=1870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x28, 0x0, 0xa, 0xffffffff, 0x10000, @value=r3}, 0x28) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8044) r5 = accept$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req={0xa45b, 0x10, 0x1010000, 0x10001}, 0x10) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="9b5fe37041d8"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@rand_addr=0x64010100, @multicast2, 0x1, "5df63a14ac4083fd6b376120dbd156ceeea2b24640e24fd867b051db8522044a", 0x6, 0x0, 0x667d, 0x80000001}, 0x3c) 2.800225499s ago: executing program 0 (id=1871): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db25", 0xa3}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d", 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd9", 0x11}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f155331714de07", 0x24}], 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x2fa) 2.700611641s ago: executing program 0 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) fchmod(r0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) (async, rerun: 32) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000480)={{0xffff, 0x4003, 0x91c, 0x218b}, 'syz0\x00', 0x3d}) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x2c0) (async) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000580)={[{@nobarrier}, {@noblock_validity}, {@discard}, {@errors_continue}, {@nogrpid, 0x0}, {@noauto_da_alloc}, {@norecovery}, {@journal_checksum}, {@mblk_io_submit}, {@data_err_ignore}, {@sysvgroups}, {@nodiscard}, {@oldalloc}, {@orlov}, {@data_journal}, {@data_writeback}, {@auto_da_alloc}], [{@audit}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}], 0x2c}, 0x0, 0x502, &(0x7f00000029c0)="$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") (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r6, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000004100)=""/4097, 0x1001}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)=""/18, 0x12}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x9200000000000000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 64) fsetxattr$smack_xattr_label(r7, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f00000000c0)={'s.events\x00\x00\x00\x00'}, 0xd, 0x1) (rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.341572167s ago: executing program 5 (id=1873): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52000, 0x19) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, 0xffffffffffffffff) 2.321420815s ago: executing program 4 (id=1874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) syz_io_uring_setup(0x7cb0, &(0x7f00000002c0)={0x0, 0xa56b, 0x1000, 0x3, 0x2d4}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet6(r0, &(0x7f00000001c0)="a6e297", 0x3, 0x200008c0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc4, 0x0, 0x0}, &(0x7f0000000100)=0x21) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 2.060179942s ago: executing program 4 (id=1875): r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc5c, &(0x7f0000000000)={[{@errors_remount}, {@grpid}]}, 0x3, 0x459, &(0x7f00000009c0)="$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") r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a10c10, &(0x7f0000001e80)=ANY=[], 0xfc, 0x2b6, &(0x7f0000000480)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd2942, 0x4) io_setup(0x20ff, &(0x7f0000000100)=0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, r2, 0xec776000) io_submit(r3, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)='p', 0x8200, 0x600}]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c000280050001000000000024000180140001"], 0x80}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./lower/file1\x00', 0x42, 0x1ff) mount(0x0, &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='overlay\x00', 0x0, &(0x7f0000000340)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt/file1\x00', 0x0) umount2(&(0x7f0000000580)='./mnt\x00', 0x0) mount(0x0, &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='overlay\x00', 0x0, &(0x7f0000000640)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x800, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x14) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000001c0)=0x2) 1.724859764s ago: executing program 4 (id=1876): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 1.58000188s ago: executing program 4 (id=1877): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES8, @ANYRES32, @ANYRESOCT], 0x2, 0x1ca, &(0x7f0000000780)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001000000f5ffffff00000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000351b844d05fb5ac676c2ae213d5c2afbf64582b178e8efd8c9181bca7ce5531d69db7a5e05cd5a929fd27e41495441a7d23c6c8cf911ca77ee88efabf19be4e8115a69a4b0318d6e393f5440c6a27bb3f8aeb9286f36014a598f527fa8d76cea8acb86332d84c64a67fa991a5164d9e34620384ba0e6950c0296bd1b5961824213d428ccd7a0d8c3ce70ba78a958b47952164f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x1b, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff73}}, @alu={0x4, 0x1, 0x1, 0x6, 0x9, 0xfffffffffffffff0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x19, 0x1c, &(0x7f0000000600)=""/28, 0x41100, 0x6b, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000700)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x8, 0xffffffff, 0x9594}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r5, r5, r4, r5, r5], 0x0, 0x10, 0x101}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 1.268212826s ago: executing program 5 (id=1878): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x114) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x800, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000280)={0x0, 0x2b25, 0x7fff, 0x0, 0xc0c}) syslog(0x2, 0xffffffffffffffff, 0x4b) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TUNSETOFFLOAD(r3, 0x8008743f, 0xf0ff1f00000008) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) (async) sendmsg$rds(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x0, 0x0, 0x8010}, 0x2004c040) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000005, 0x32, 0x0, 0x471ac000) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000c0) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}}) 1.171211739s ago: executing program 5 (id=1879): socket(0x8, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000090"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 649.885708ms ago: executing program 4 (id=1880): r0 = syz_io_uring_setup(0xd3c, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) read(r4, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) 587.891295ms ago: executing program 1 (id=1881): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db25", 0xa3}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d", 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd9", 0x11}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f155331714de07", 0x24}], 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6b", 0x2fa) 480.859284ms ago: executing program 1 (id=1882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x80c00, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x4010, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfffff8a8, 0x2000010, 0x8010, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x3, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xc}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}}, 0x4048000) socket$kcm(0x10, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xc00c000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x23, 0x0, &(0x7f0000000140)) llistxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x251a17, &(0x7f00000002c0)={[{@auto_da_alloc}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 192.029741ms ago: executing program 5 (id=1883): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_MCE_KILL(0x4c, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCMBIC(r7, 0x5417, &(0x7f00000057c0)=0x7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/vhci\x00', 0x8802, 0x0) read$FUSE(r8, &(0x7f0000001080)={0x2020}, 0x104d) ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, &(0x7f0000000180)={0x9, 0x2c, 0x5, 0x8}) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r9, &(0x7f0000000300)='tahvo ', 0x6) close(0x3) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x25dfdbfe, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r2, 0x900}, 0x14}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x40800) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000500030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x94}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a0c6) r11 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) mkdirat(0xffffffffffffffff, &(0x7f0000003280)='mnt/encrypted_dir\x00', 0x108) ioctl$DRM_IOCTL_VERSION(r11, 0xc0406400, &(0x7f0000001540)={0x8, 0x0, 0x260, 0x1000, &(0x7f0000000400)=""/4096, 0x15, &(0x7f0000001400)=""/21, 0xd3, &(0x7f0000001440)=""/211}) 0s ago: executing program 5 (id=1884): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nombcache}, {@usrquota}, {@lazytime}, {@nouid32}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048820) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0xc}, {0x8, 0xfff3}}}, 0x24}}, 0x40004) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="3435b2f8a7fa8c195ec6c5f2d25e90bd4973c249d676e7ee9ee3557881b5be4ed5ee6492fef1fc9c788ec6e2fb49a2aba783bb520312a20d2b2bcd8dd8e0971e637185a7f64e9747df12f432f4de424a3359b2c7489e", &(0x7f0000000180)=""/215}, 0x20) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x21) fcntl$setstatus(r5, 0x4, 0x800) r6 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x64, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x4) ioctl$UBLK_U_CMD_GET_DEV_INFO(r6, 0x80207502, &(0x7f0000000400)={0x0, 0xffff, 0x40, &(0x7f00000002c0)=@ublk_ctrl_dev_info_new=@any_dev}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000003080)='.\x00', 0xa0000, 0x90) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, 0x0) kernel console output (not intermixed with test programs): ooks POSTROUTING, but only valid from PREROUTING [ 111.227450][ T7944] tipc: Started in network mode [ 111.227493][ T7944] tipc: Node identity ac14140f, cluster identity 4711 [ 111.227596][ T7944] tipc: New replicast peer: 255.255.255.255 [ 111.227793][ T7944] tipc: Enabled bearer , priority 10 [ 111.297663][ T7958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.986'. [ 111.306223][ T7958] geneve2: entered promiscuous mode [ 111.308515][ T7958] geneve2: entered allmulticast mode [ 111.342235][ T7959] loop3: detected capacity change from 0 to 128 [ 111.347640][ T7959] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.394383][ T7959] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.065012][ T7979] FAULT_INJECTION: forcing a failure. [ 112.065012][ T7979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.067925][ T7979] CPU: 1 UID: 0 PID: 7979 Comm: syz.4.989 Tainted: G L syzkaller #0 PREEMPT [ 112.067954][ T7979] Tainted: [L]=SOFTLOCKUP [ 112.067958][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 112.067965][ T7979] Call trace: [ 112.067969][ T7979] show_stack+0x2c/0x3c (C) [ 112.067996][ T7979] __dump_stack+0x30/0x40 [ 112.068008][ T7979] dump_stack_lvl+0xd8/0x12c [ 112.068019][ T7979] dump_stack+0x1c/0x28 [ 112.068029][ T7979] should_fail_ex+0x41c/0x590 [ 112.068038][ T7979] should_fail+0x14/0x24 [ 112.068045][ T7979] should_fail_usercopy+0x20/0x30 [ 112.068052][ T7979] _inline_copy_from_user+0x3c/0x174 [ 112.068064][ T7979] copy_msghdr_from_user+0xb8/0x194 [ 112.068074][ T7979] ___sys_sendmsg+0x14c/0x224 [ 112.068083][ T7979] __sys_sendmsg+0x158/0x204 [ 112.068092][ T7979] __arm64_sys_sendmsg+0x88/0x9c [ 112.068101][ T7979] invoke_syscall+0x98/0x244 [ 112.068112][ T7979] el0_svc_common+0xec/0x23c [ 112.068122][ T7979] do_el0_svc+0x4c/0x5c [ 112.068131][ T7979] el0_svc+0x64/0x260 [ 112.068149][ T7979] el0t_64_sync_handler+0x44/0x104 [ 112.068159][ T7979] el0t_64_sync+0x198/0x19c [ 112.189422][ T7983] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 112.392171][ T4829] tipc: Node number set to 2886997007 [ 112.424023][ T4720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.547399][ T7995] set_capacity_and_notify: 1 callbacks suppressed [ 112.552714][ T7995] loop4: detected capacity change from 0 to 128 [ 112.582244][ T8003] tipc: Started in network mode [ 112.582292][ T8003] tipc: Node identity ac14140f, cluster identity 4711 [ 112.582413][ T8003] tipc: New replicast peer: 255.255.255.255 [ 112.582827][ T8003] tipc: Enabled bearer , priority 10 [ 112.654851][ T8011] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 112.697227][ T8012] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 112.760561][ T8018] loop1: detected capacity change from 0 to 256 [ 113.088050][ T8040] FAULT_INJECTION: forcing a failure. [ 113.088050][ T8040] name fail_futex, interval 1, probability 0, space 0, times 1 [ 113.091224][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.2.1004 Tainted: G L syzkaller #0 PREEMPT [ 113.091258][ T8040] Tainted: [L]=SOFTLOCKUP [ 113.091263][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 113.091269][ T8040] Call trace: [ 113.091273][ T8040] show_stack+0x2c/0x3c (C) [ 113.091302][ T8040] __dump_stack+0x30/0x40 [ 113.091314][ T8040] dump_stack_lvl+0xd8/0x12c [ 113.091325][ T8040] dump_stack+0x1c/0x28 [ 113.091335][ T8040] should_fail_ex+0x41c/0x590 [ 113.091346][ T8040] should_fail+0x14/0x24 [ 113.091352][ T8040] get_futex_key+0x1ec/0x12b0 [ 113.091362][ T8040] futex_wake+0x10c/0x594 [ 113.091371][ T8040] do_futex+0x2c4/0x378 [ 113.091379][ T8040] mm_release+0x188/0x274 [ 113.091388][ T8040] exit_mm_release+0x30/0x40 [ 113.091395][ T8040] exit_mm+0x54/0x264 [ 113.091405][ T8040] do_exit+0x524/0x1a74 [ 113.091415][ T8040] do_group_exit+0x198/0x238 [ 113.091421][ T8040] get_signal+0xfb0/0x1094 [ 113.091429][ T8040] arch_do_signal_or_restart+0x288/0x444c [ 113.091440][ T8040] exit_to_user_mode_loop+0x70/0x17c [ 113.091449][ T8040] el0_svc+0x18c/0x260 [ 113.091459][ T8040] el0t_64_sync_handler+0x44/0x104 [ 113.091468][ T8040] el0t_64_sync+0x198/0x19c [ 113.274538][ T8066] tipc: Enabling of bearer rejected, already enabled [ 113.699491][ T4816] tipc: Node number set to 2886997007 [ 114.201980][ T8102] loop4: detected capacity change from 0 to 128 [ 114.223565][ T8107] netlink: 'syz.2.1025': attribute type 2 has an invalid length. [ 114.225355][ T8108] netlink: 'syz.2.1025': attribute type 2 has an invalid length. [ 114.227034][ T8107] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 114.228610][ T8108] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 114.232614][ T8107] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1025'. [ 114.232779][ T8108] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1025'. [ 114.238071][ T8109] loop1: detected capacity change from 0 to 128 [ 114.261469][ T8109] EXT4-fs (loop1): Test dummy encryption mode enabled [ 114.339493][ T8109] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.373591][ T8115] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 114.758014][ T8127] loop3: detected capacity change from 0 to 128 [ 114.766155][ T8129] binder: 8128:8129 tried to acquire reference to desc 0, got 1 instead [ 114.766936][ T8129] binder: 8128:8129 ioctl c0306201 0 returned -14 [ 114.768157][ T6152] binder: release 8128:8129 transaction 232 out, still active [ 114.826519][ T6152] binder: undelivered TRANSACTION_COMPLETE [ 114.832432][ T6152] binder: send failed reply for transaction 232, target dead [ 114.951824][ T8132] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 115.194157][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.308852][ T8149] nvmet: failed to open file ./0Ԙ *x¡8: (-2) [ 115.570293][ T8143] loop1: detected capacity change from 0 to 8 [ 115.581709][ T8143] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 115.581752][ T8143] unable to read xattr id index table [ 115.591001][ T8157] FAULT_INJECTION: forcing a failure. [ 115.591001][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 115.591056][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.4.1043 Tainted: G L syzkaller #0 PREEMPT [ 115.591072][ T8157] Tainted: [L]=SOFTLOCKUP [ 115.591077][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 115.591082][ T8157] Call trace: [ 115.591085][ T8157] show_stack+0x2c/0x3c (C) [ 115.591112][ T8157] __dump_stack+0x30/0x40 [ 115.591122][ T8157] dump_stack_lvl+0xd8/0x12c [ 115.591132][ T8157] dump_stack+0x1c/0x28 [ 115.591148][ T8157] should_fail_ex+0x41c/0x590 [ 115.591158][ T8157] should_failslab+0xc4/0x120 [ 115.591168][ T8157] __kmalloc_noprof+0x108/0x6b8 [ 115.591179][ T8157] tomoyo_realpath_from_path+0xbc/0x4dc [ 115.591189][ T8157] tomoyo_path_number_perm+0x1f0/0x500 [ 115.591197][ T8157] tomoyo_file_ioctl+0x2c/0x3c [ 115.591205][ T8157] security_file_ioctl+0xdc/0x2b0 [ 115.591213][ T8157] __arm64_sys_ioctl+0xb0/0x1cc [ 115.591224][ T8157] invoke_syscall+0x98/0x244 [ 115.591234][ T8157] el0_svc_common+0xec/0x23c [ 115.591244][ T8157] do_el0_svc+0x4c/0x5c [ 115.591253][ T8157] el0_svc+0x64/0x260 [ 115.591264][ T8157] el0t_64_sync_handler+0x44/0x104 [ 115.591273][ T8157] el0t_64_sync+0x198/0x19c [ 115.591368][ T8157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.617491][ T8143] SQUASHFS error: zlib decompression failed, data probably corrupt [ 115.617536][ T8143] SQUASHFS error: Failed to read block 0x9b: -5 [ 115.617565][ T8143] SQUASHFS error: Unable to read metadata cache entry [99] [ 115.617583][ T8143] SQUASHFS error: Unable to read inode 0x127 [ 115.668525][ T8160] binder: 8159:8160 tried to acquire reference to desc 0, got 1 instead [ 115.777113][ T8172] loop1: detected capacity change from 0 to 128 [ 115.794367][ T8172] EXT4-fs (loop1): Test dummy encryption mode enabled [ 115.809026][ T8172] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.894045][ T8184] fuse: Unknown parameter 'grkut_id' [ 116.239732][ T8196] capability: warning: `syz.4.1055' uses deprecated v2 capabilities in a way that may be insecure [ 116.266364][ T30] audit: type=1326 audit(116.240:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.3.1053" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b792a8 code=0x0 [ 116.593036][ T8216] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 116.609054][ T4816] binder: release 8159:8160 transaction 237 out, still active [ 116.610657][ T4816] binder: undelivered TRANSACTION_COMPLETE [ 116.628268][ T6152] binder: send failed reply for transaction 237, target dead [ 116.652257][ T4711] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.735501][ T8233] loop1: detected capacity change from 0 to 512 [ 116.767967][ T8233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.791601][ T8239] loop2: detected capacity change from 0 to 512 [ 116.794237][ T8239] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 116.803592][ T8239] EXT4-fs (loop2): 1 truncate cleaned up [ 116.806450][ T8239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.879577][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.331684][ T8260] loop1: detected capacity change from 0 to 128 [ 117.594271][ T8273] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 117.687137][ T8276] loop4: detected capacity change from 0 to 128 [ 117.698805][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.776283][ T8281] loop2: detected capacity change from 0 to 128 [ 117.897465][ T8287] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 117.911865][ T8288] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 118.230462][ T8301] binder: 8300:8301 ioctl c00c620f 0 returned -14 [ 118.288267][ T8309] loop1: detected capacity change from 0 to 512 [ 118.293520][ T8309] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 118.298704][ T8309] EXT4-fs (loop1): 1 truncate cleaned up [ 118.301412][ T8309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.813406][ T8323] loop2: detected capacity change from 0 to 1024 [ 118.824246][ T8323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.888859][ T30] audit: type=1326 audit(118.860:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8183 comm="syz.3.1053" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6b792a8 code=0x7fc00000 [ 119.835220][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.838364][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.846842][ T8331] nvmet: failed to open file ./0Ԙ *x¡8: (-2) [ 120.002635][ T8339] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 120.185328][ T8356] FAULT_INJECTION: forcing a failure. [ 120.185328][ T8356] name fail_futex, interval 1, probability 0, space 0, times 0 [ 120.187191][ T8357] loop3: detected capacity change from 0 to 128 [ 120.190313][ T8356] CPU: 1 UID: 0 PID: 8356 Comm: syz.4.1093 Tainted: G L syzkaller #0 PREEMPT [ 120.190341][ T8356] Tainted: [L]=SOFTLOCKUP [ 120.190346][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 120.190353][ T8356] Call trace: [ 120.190357][ T8356] show_stack+0x2c/0x3c (C) [ 120.190382][ T8356] __dump_stack+0x30/0x40 [ 120.190396][ T8356] dump_stack_lvl+0xd8/0x12c [ 120.190409][ T8356] dump_stack+0x1c/0x28 [ 120.190421][ T8356] should_fail_ex+0x41c/0x590 [ 120.190430][ T8356] should_fail+0x14/0x24 [ 120.190437][ T8356] get_futex_key+0x1ec/0x12b0 [ 120.190448][ T8356] futex_wake+0x10c/0x594 [ 120.190458][ T8356] do_futex+0x2c4/0x378 [ 120.190468][ T8356] __arm64_sys_futex+0x2e4/0x418 [ 120.190478][ T8356] invoke_syscall+0x98/0x244 [ 120.190490][ T8356] el0_svc_common+0xec/0x23c [ 120.190502][ T8356] do_el0_svc+0x4c/0x5c [ 120.190514][ T8356] el0_svc+0x64/0x260 [ 120.190525][ T8356] el0t_64_sync_handler+0x44/0x104 [ 120.190535][ T8356] el0t_64_sync+0x198/0x19c [ 120.279145][ T8359] netlink: 'syz.2.1087': attribute type 13 has an invalid length. [ 120.279164][ T8359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1087'. [ 120.341981][ T8360] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 120.455975][ T8363] loop4: detected capacity change from 0 to 128 [ 120.459556][ T8363] EXT4-fs (loop4): Test dummy encryption mode enabled [ 120.465042][ T8363] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.551603][ T8371] loop1: detected capacity change from 0 to 1024 [ 120.563443][ T8371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.912964][ T8378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 121.130058][ T8404] FAULT_INJECTION: forcing a failure. [ 121.130058][ T8404] name failslab, interval 1, probability 0, space 0, times 0 [ 121.130093][ T8404] CPU: 0 UID: 0 PID: 8404 Comm: syz.2.1110 Tainted: G L syzkaller #0 PREEMPT [ 121.130109][ T8404] Tainted: [L]=SOFTLOCKUP [ 121.130113][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 121.130119][ T8404] Call trace: [ 121.130127][ T8404] show_stack+0x2c/0x3c (C) [ 121.130153][ T8404] __dump_stack+0x30/0x40 [ 121.130166][ T8404] dump_stack_lvl+0xd8/0x12c [ 121.130176][ T8404] dump_stack+0x1c/0x28 [ 121.130186][ T8404] should_fail_ex+0x41c/0x590 [ 121.130194][ T8404] should_failslab+0xc4/0x120 [ 121.130203][ T8404] __kmalloc_noprof+0x108/0x6b8 [ 121.130212][ T8404] tomoyo_encode2+0x10c/0x330 [ 121.130221][ T8404] tomoyo_encode+0x34/0x50 [ 121.130228][ T8404] tomoyo_realpath_from_path+0x488/0x4dc [ 121.130237][ T8404] tomoyo_path_number_perm+0x1f0/0x500 [ 121.130245][ T8404] tomoyo_file_ioctl+0x2c/0x3c [ 121.130253][ T8404] security_file_ioctl+0xdc/0x2b0 [ 121.130261][ T8404] __arm64_sys_ioctl+0xb0/0x1cc [ 121.130272][ T8404] invoke_syscall+0x98/0x244 [ 121.130282][ T8404] el0_svc_common+0xec/0x23c [ 121.130292][ T8404] do_el0_svc+0x4c/0x5c [ 121.130301][ T8404] el0_svc+0x64/0x260 [ 121.130310][ T8404] el0t_64_sync_handler+0x44/0x104 [ 121.130319][ T8404] el0t_64_sync+0x198/0x19c [ 121.130828][ T8404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.130860][ T8404] binder: 8403:8404 ioctl c00c620f 20000000 returned -22 [ 121.149236][ T8366] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 121.217362][ T8409] binder: 8408:8409 ioctl c00c620f 20000000 returned -22 [ 121.288136][ T8415] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 121.508698][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.542131][ T8419] nvmet: failed to open file ./0Ԙ *x¡8: (-2) [ 121.546741][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.618625][ T8425] loop2: detected capacity change from 0 to 128 [ 121.647450][ T8426] loop4: detected capacity change from 0 to 1024 [ 121.650754][ T8426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.702217][ T8426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 121.749663][ T8431] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 121.786181][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.836348][ T8434] loop1: detected capacity change from 0 to 512 [ 121.837170][ T8434] ext4: Unknown parameter 'hash' [ 121.853395][ T8440] FAULT_INJECTION: forcing a failure. [ 121.853395][ T8440] name failslab, interval 1, probability 0, space 0, times 0 [ 121.853436][ T8440] CPU: 0 UID: 0 PID: 8440 Comm: syz.4.1124 Tainted: G L syzkaller #0 PREEMPT [ 121.853450][ T8440] Tainted: [L]=SOFTLOCKUP [ 121.853454][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 121.853460][ T8440] Call trace: [ 121.853464][ T8440] show_stack+0x2c/0x3c (C) [ 121.853483][ T8440] __dump_stack+0x30/0x40 [ 121.853494][ T8440] dump_stack_lvl+0xd8/0x12c [ 121.853504][ T8440] dump_stack+0x1c/0x28 [ 121.853514][ T8440] should_fail_ex+0x41c/0x590 [ 121.853522][ T8440] should_failslab+0xc4/0x120 [ 121.853530][ T8440] kmem_cache_alloc_noprof+0x94/0x5d8 [ 121.853540][ T8440] skb_clone+0x1ac/0x320 [ 121.853551][ T8440] __netlink_deliver_tap+0x364/0x6f4 [ 121.853561][ T8440] netlink_deliver_tap+0x1d8/0x1dc [ 121.853569][ T8440] __netlink_sendskb+0x78/0xd0 [ 121.853578][ T8440] netlink_sendskb+0x2c/0xdc [ 121.853586][ T8440] netlink_unicast+0x2c0/0x7f8 [ 121.853594][ T8440] netlink_ack+0x570/0x890 [ 121.853606][ T8440] netlink_rcv_skb+0x21c/0x414 [ 121.853616][ T8440] nfnetlink_rcv+0x218/0x16ec [ 121.853624][ T8440] netlink_unicast+0x600/0x7f8 [ 121.853632][ T8440] netlink_sendmsg+0x648/0x948 [ 121.853640][ T8440] __sock_sendmsg+0xc8/0x17c [ 121.853649][ T8440] ____sys_sendmsg+0x3d0/0x6c8 [ 121.853658][ T8440] ___sys_sendmsg+0x198/0x224 [ 121.853667][ T8440] __sys_sendmsg+0x158/0x204 [ 121.853676][ T8440] __arm64_sys_sendmsg+0x88/0x9c [ 121.853685][ T8440] invoke_syscall+0x98/0x244 [ 121.853695][ T8440] el0_svc_common+0xec/0x23c [ 121.853704][ T8440] do_el0_svc+0x4c/0x5c [ 121.853714][ T8440] el0_svc+0x64/0x260 [ 121.853723][ T8440] el0t_64_sync_handler+0x44/0x104 [ 121.853731][ T8440] el0t_64_sync+0x198/0x19c [ 121.974145][ T8444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.982555][ T8444] EXT4-fs (loop4): 1 truncate cleaned up [ 121.984456][ T8444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.041952][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.134376][ T8453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.543226][ T8466] nvmet: failed to open file ./0Ԙ *x¡8: (-2) [ 122.653007][ T8473] EXT4-fs: inline encryption not supported [ 122.668801][ T8473] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 122.675681][ T8473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1133: invalid indirect mapped block 2683928664 (level 1) [ 122.675730][ T8473] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.679123][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 122.679151][ C1] EXT4-fs (loop3): initial error at time 122: ext4_free_branches:1023: inode 13 [ 122.679171][ C1] EXT4-fs (loop3): last error at time 122: ext4_free_branches:1023: inode 13 [ 122.695658][ T8473] EXT4-fs (loop3): 1 truncate cleaned up [ 122.711892][ T8473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.778005][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.804464][ T8488] set_capacity_and_notify: 4 callbacks suppressed [ 122.806244][ T8488] loop3: detected capacity change from 0 to 128 [ 123.659956][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.791522][ T8498] loop2: detected capacity change from 0 to 128 [ 123.975924][ T8506] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 124.046233][ T8508] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 124.567812][ T8524] loop3: detected capacity change from 0 to 1024 [ 124.658625][ T8524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.139807][ T8549] bond1 (unregistering): Released all slaves [ 125.210765][ T8553] loop4: detected capacity change from 0 to 8192 [ 125.221261][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.221261][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.225204][ T8549] buffer_io_error: 138 callbacks suppressed [ 125.225258][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.232435][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.232435][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.232482][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.232511][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.232511][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.232523][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.232544][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.232544][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.232554][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.232573][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.232573][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.232583][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.232622][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.232622][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.232632][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.232649][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.232649][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.232659][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.232676][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.232676][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.232686][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.232703][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.232703][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.232712][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.232729][ T8549] syz.4.1156: attempt to access beyond end of device [ 125.232729][ T8549] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 125.232740][ T8549] Buffer I/O error on dev loop4, logical block 57847, async page read [ 125.306571][ T8555] loop1: detected capacity change from 0 to 512 [ 125.312160][ T8555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 125.328546][ T8555] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1158: Unimplemented hash flags: 0x0001 [ 125.332947][ T8555] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1158: Corrupt directory, running e2fsck is recommended [ 125.358527][ T8555] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.1158: Unimplemented hash flags: 0x0001 [ 125.358587][ T8555] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1158: Corrupt directory, running e2fsck is recommended [ 125.430984][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.480763][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.497241][ T8560] FAULT_INJECTION: forcing a failure. [ 125.497241][ T8560] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.497289][ T8560] CPU: 1 UID: 0 PID: 8560 Comm: syz.1.1161 Tainted: G L syzkaller #0 PREEMPT [ 125.497304][ T8560] Tainted: [L]=SOFTLOCKUP [ 125.497308][ T8560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 125.497314][ T8560] Call trace: [ 125.497317][ T8560] show_stack+0x2c/0x3c (C) [ 125.497340][ T8560] __dump_stack+0x30/0x40 [ 125.497351][ T8560] dump_stack_lvl+0xd8/0x12c [ 125.497361][ T8560] dump_stack+0x1c/0x28 [ 125.497370][ T8560] should_fail_ex+0x41c/0x590 [ 125.497379][ T8560] should_fail_alloc_page+0xec/0x10c [ 125.497388][ T8560] prepare_alloc_pages+0x194/0x4a4 [ 125.497398][ T8560] __alloc_frozen_pages_noprof+0x134/0x320 [ 125.497406][ T8560] alloc_pages_mpol+0x1ec/0x3c0 [ 125.497415][ T8560] alloc_frozen_pages_noprof+0xc4/0x10c [ 125.497424][ T8560] alloc_pages_noprof+0x30/0x148 [ 125.497433][ T8560] do_pte_missing+0xebc/0x2a24 [ 125.497441][ T8560] handle_mm_fault+0x14f8/0x2514 [ 125.497448][ T8560] do_page_fault+0x4b0/0xb88 [ 125.497458][ T8560] do_translation_fault+0xc4/0x114 [ 125.497467][ T8560] do_mem_abort+0x70/0x194 [ 125.497476][ T8560] el1_abort+0x50/0x74 [ 125.497486][ T8560] el1h_64_sync_handler+0xdc/0x130 [ 125.497494][ T8560] el1h_64_sync+0x6c/0x70 [ 125.497502][ T8560] __arch_copy_from_user+0xb8/0x23c (P) [ 125.497512][ T8560] write_flush+0x120/0x344 [ 125.497523][ T8560] write_flush_procfs+0x7c/0x94 [ 125.497533][ T8560] proc_reg_write+0x1d0/0x248 [ 125.497544][ T8560] vfs_write+0x2a4/0xa0c [ 125.497551][ T8560] ksys_write+0x12c/0x228 [ 125.497558][ T8560] __arm64_sys_write+0x84/0x98 [ 125.497564][ T8560] invoke_syscall+0x98/0x244 [ 125.497574][ T8560] el0_svc_common+0xec/0x23c [ 125.497584][ T8560] do_el0_svc+0x4c/0x5c [ 125.497593][ T8560] el0_svc+0x64/0x260 [ 125.497601][ T8560] el0t_64_sync_handler+0x44/0x104 [ 125.497610][ T8560] el0t_64_sync+0x198/0x19c [ 125.559701][ T8563] loop3: detected capacity change from 0 to 128 [ 125.601429][ T8567] loop1: detected capacity change from 0 to 256 [ 125.830165][ T8572] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 125.934179][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935663][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.144814][ T8582] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 126.475455][ T8589] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 126.575791][ T8591] loop1: detected capacity change from 0 to 1024 [ 126.604307][ T8591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.043634][ T8602] binder: 8600:8602 ioctl c00c620f 20000000 returned -22 [ 127.052101][ T8605] FAULT_INJECTION: forcing a failure. [ 127.052101][ T8605] name failslab, interval 1, probability 0, space 0, times 0 [ 127.052154][ T8605] CPU: 1 UID: 0 PID: 8605 Comm: syz.3.1174 Tainted: G L syzkaller #0 PREEMPT [ 127.052168][ T8605] Tainted: [L]=SOFTLOCKUP [ 127.052172][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 127.052177][ T8605] Call trace: [ 127.052180][ T8605] show_stack+0x2c/0x3c (C) [ 127.052200][ T8605] __dump_stack+0x30/0x40 [ 127.052212][ T8605] dump_stack_lvl+0xd8/0x12c [ 127.052222][ T8605] dump_stack+0x1c/0x28 [ 127.052231][ T8605] should_fail_ex+0x41c/0x590 [ 127.052240][ T8605] should_failslab+0xc4/0x120 [ 127.052250][ T8605] kmem_cache_alloc_noprof+0x94/0x5d8 [ 127.052260][ T8605] pagetable_pte_ctor+0x7c/0x268 [ 127.052268][ T8605] do_pte_missing+0xed0/0x2a24 [ 127.052276][ T8605] handle_mm_fault+0x14f8/0x2514 [ 127.052283][ T8605] do_page_fault+0x4b0/0xb88 [ 127.052293][ T8605] do_translation_fault+0xc4/0x114 [ 127.052302][ T8605] do_mem_abort+0x70/0x194 [ 127.052310][ T8605] el1_abort+0x50/0x74 [ 127.052320][ T8605] el1h_64_sync_handler+0xdc/0x130 [ 127.052328][ T8605] el1h_64_sync+0x6c/0x70 [ 127.052336][ T8605] __arch_copy_from_user+0xb8/0x23c (P) [ 127.052346][ T8605] write_flush+0x120/0x344 [ 127.052357][ T8605] write_flush_procfs+0x7c/0x94 [ 127.052367][ T8605] proc_reg_write+0x1d0/0x248 [ 127.052377][ T8605] vfs_write+0x2a4/0xa0c [ 127.052385][ T8605] ksys_write+0x12c/0x228 [ 127.052391][ T8605] __arm64_sys_write+0x84/0x98 [ 127.052398][ T8605] invoke_syscall+0x98/0x244 [ 127.052408][ T8605] el0_svc_common+0xec/0x23c [ 127.052418][ T8605] do_el0_svc+0x4c/0x5c [ 127.052427][ T8605] el0_svc+0x64/0x260 [ 127.052435][ T8605] el0t_64_sync_handler+0x44/0x104 [ 127.052443][ T8605] el0t_64_sync+0x198/0x19c [ 127.137755][ T8608] loop2: detected capacity change from 0 to 128 [ 127.336444][ T8620] loop3: detected capacity change from 0 to 256 [ 127.423459][ T8622] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 127.576336][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.938540][ T8630] batman_adv: batadv0: Adding interface: veth0 [ 127.940210][ T8630] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.945426][ T8630] batman_adv: batadv0: Interface activated: veth0 [ 128.141278][ T8639] set_capacity_and_notify: 1 callbacks suppressed [ 128.142485][ T8639] loop2: detected capacity change from 0 to 128 [ 128.267193][ T8643] binder: 8642:8643 tried to acquire reference to desc 0, got 1 instead [ 128.272880][ T4802] binder: release 8642:8643 transaction 242 out, still active [ 128.272920][ T4802] binder: undelivered TRANSACTION_COMPLETE [ 128.272957][ T4802] binder: undelivered TRANSACTION_COMPLETE [ 128.283204][ T4802] binder: send failed reply for transaction 242, target dead [ 128.284790][ T4802] binder: undelivered transaction 243, process died. [ 128.304924][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.304977][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.307425][ T8630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.307437][ T8630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.308660][ T8630] batman_adv: batadv0: Interface deactivated: veth0 [ 128.308672][ T8630] batman_adv: batadv0: Removing interface: veth0 [ 128.324713][ T8646] loop3: detected capacity change from 0 to 128 [ 128.539271][ T4726] Bluetooth: hci3: command 0x040f tx timeout [ 128.707083][ T8655] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 128.758744][ T8656] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 129.355946][ T8675] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 129.378630][ T8675] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 129.379464][ T8675] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 129.944319][ T8691] loop4: detected capacity change from 0 to 512 [ 129.953662][ T8691] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.106305][ T3519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.210272][ T3519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.312144][ T3519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.417384][ T3519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.455194][ T8702] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 130.478084][ T4726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 130.482637][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 130.490623][ T4726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 130.493506][ T4726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 130.495227][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 130.831158][ T3519] bond0 (unregistering): (slave 30): Releasing backup interface [ 130.862149][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.905416][ T3519] bond0 (unregistering): Released all slaves [ 130.970190][ T3519] tipc: Disabling bearer [ 130.972219][ T3519] tipc: Left network mode [ 131.055966][ T4420] block nbd1: Possible stuck request 0000000054f524f5: control (read@0,4096B). Runtime 60 seconds [ 131.273577][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 131.351942][ T8757] loop3: detected capacity change from 0 to 128 [ 131.369435][ T8757] EXT4-fs (loop3): Test dummy encryption mode enabled [ 131.395997][ T8757] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.512252][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.513697][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.515702][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.517400][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.528832][ T3519] veth1_macvtap: left promiscuous mode [ 131.531246][ T8782] binder: 8779:8782 tried to acquire reference to desc 0, got 1 instead [ 131.534393][ T3519] veth0_macvtap: left promiscuous mode [ 131.535796][ T3519] veth1_vlan: left promiscuous mode [ 131.537097][ T3519] veth0_vlan: left promiscuous mode [ 131.538687][ T867] binder: release 8779:8782 transaction 248 out, still active [ 131.538735][ T867] binder: undelivered TRANSACTION_COMPLETE [ 131.538758][ T867] binder: undelivered TRANSACTION_COMPLETE [ 131.549846][ T4829] binder: send failed reply for transaction 248, target dead [ 131.551379][ T4829] binder: undelivered transaction 249, process died. [ 131.567747][ T8788] loop1: detected capacity change from 0 to 512 [ 131.570196][ T8788] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.602083][ T8788] EXT4-fs (loop1): 1 truncate cleaned up [ 131.607653][ T8788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.704055][ T8799] fuse: fd is not a fuse device [ 131.724113][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 131.728360][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 131.759747][ T8799] fuse: fd is not a fuse device [ 131.805708][ T8772] wg2 speed is unknown, defaulting to 1000 [ 131.807339][ T8772] wg2 speed is unknown, defaulting to 1000 [ 131.808169][ T8772] wg2 speed is unknown, defaulting to 1000 [ 131.828647][ T8801] 9p: Could not find request transport: f3rfdno=0x0000000000000009 [ 131.848136][ T8772] infiniband syz0: set active [ 131.848175][ T8772] infiniband syz0: added wg2 [ 131.861977][ T8772] RDS/IB: syz0: added [ 131.862103][ T8772] smc: adding ib device syz0 with port count 1 [ 131.862164][ T8772] smc: ib device syz0 port 1 has no pnetid [ 131.863492][ T8772] wg2 speed is unknown, defaulting to 1000 [ 131.898578][ T8772] wg2 speed is unknown, defaulting to 1000 [ 131.931790][ T8772] wg2 speed is unknown, defaulting to 1000 [ 131.945969][ T4829] wg2 speed is unknown, defaulting to 1000 [ 131.946684][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 131.958612][ T6152] wg2 speed is unknown, defaulting to 1000 [ 132.020016][ T8772] wg2 speed is unknown, defaulting to 1000 [ 132.021783][ T8808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1236'. [ 132.115733][ T8810] loop4: detected capacity change from 0 to 256 [ 132.140492][ T8772] wg2 speed is unknown, defaulting to 1000 [ 132.278142][ T4720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.371995][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.373648][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.375388][ T8704] bridge_slave_0: entered allmulticast mode [ 132.386012][ T8704] bridge_slave_0: entered promiscuous mode [ 132.388758][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.396845][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.398547][ T8704] bridge_slave_1: entered allmulticast mode [ 132.402211][ T8704] bridge_slave_1: entered promiscuous mode [ 132.405464][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 132.450755][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.501986][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.522417][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.569390][ T4724] Bluetooth: hci3: command tx timeout [ 132.647730][ T8704] team0: Port device team_slave_0 added [ 132.648771][ T8704] team0: Port device team_slave_1 added [ 132.650593][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 132.717594][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'. [ 132.730315][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.731712][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.737251][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.738108][ T8877] 9p: Bad value for 'rfdno' [ 132.783965][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.785496][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.792543][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.797459][ T8885] loop1: detected capacity change from 0 to 256 [ 132.815489][ T8704] hsr_slave_0: entered promiscuous mode [ 132.815868][ T8704] hsr_slave_1: entered promiscuous mode [ 132.816093][ T8704] debugfs: 'hsr0' already exists in 'hsr' [ 132.816111][ T8704] Cannot create hsr debugfs directory [ 132.891606][ T8885] vfat: Unknown parameter '0000000000000000000301777777777777777777777000000000000000000000x0000000000000003' [ 133.021518][ T8877] process 'syz.0.1245' launched './file1' with NULL argv: empty string added [ 133.163829][ T8875] wg2 speed is unknown, defaulting to 1000 [ 133.226505][ T8704] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.238192][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.240647][ T8704] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.246326][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.248540][ T8704] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.253432][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.256421][ T8704] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.262163][ T8704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.319658][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.330600][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.336922][ T1248] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.336977][ T1248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.355653][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.355719][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.426560][ T8911] loop3: detected capacity change from 0 to 4096 [ 133.448329][ T8911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.982679][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1258'. [ 134.001798][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.117313][ T8946] wg2 speed is unknown, defaulting to 1000 [ 134.151728][ T8704] veth0_vlan: entered promiscuous mode [ 134.175538][ T8704] veth1_vlan: entered promiscuous mode [ 134.232646][ T8953] geneve2: entered promiscuous mode [ 134.232698][ T8953] geneve2: entered allmulticast mode [ 134.238599][ T8704] veth0_macvtap: entered promiscuous mode [ 134.261444][ T8704] veth1_macvtap: entered promiscuous mode [ 134.270450][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.274302][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.287212][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.289299][ T3737] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.292125][ T3737] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.292176][ T3737] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.292195][ T3737] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.349730][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.350025][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.350058][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.350081][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.428932][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.428973][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.444099][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.444140][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.612206][ T8982] loop3: detected capacity change from 0 to 4096 [ 134.649509][ T4724] Bluetooth: hci3: command tx timeout [ 134.695223][ T8982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.012017][ T8993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1276'. [ 135.013782][ T8993] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 135.028495][ T9003] loop1: detected capacity change from 0 to 256 [ 135.097844][ T9006] loop4: detected capacity change from 0 to 128 [ 135.281452][ T9008] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 135.468373][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.675974][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 135.898680][ T9055] netlink: 'syz.0.1297': attribute type 4 has an invalid length. [ 136.237916][ T9062] loop4: detected capacity change from 0 to 2048 [ 136.262732][ T9062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.363718][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.405432][ T9079] binder: 9078:9079 tried to acquire reference to desc 0, got 1 instead [ 136.417323][ T867] binder: release 9078:9079 transaction 254 out, still active [ 136.417370][ T867] binder: undelivered TRANSACTION_COMPLETE [ 136.417400][ T867] binder: undelivered TRANSACTION_COMPLETE [ 136.431604][ T9084] loop1: detected capacity change from 0 to 256 [ 136.439580][ T867] binder: send failed reply for transaction 254, target dead [ 136.439614][ T867] binder: undelivered transaction 255, process died. [ 136.463525][ T9088] loop4: detected capacity change from 0 to 512 [ 136.474285][ T9088] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.524331][ T9088] EXT4-fs error (device loop4): __ext4_iget:5533: inode #11: block 2: comm syz.4.1309: invalid block [ 136.526666][ T9088] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 136.527321][ T9088] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1309: couldn't read orphan inode 11 (err -117) [ 136.529329][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 136.529345][ C0] EXT4-fs (loop4): initial error at time 136: __ext4_iget:5533: inode 11: block 2 [ 136.529369][ C0] EXT4-fs (loop4): last error at time 136: __ext4_iget:5533: inode 11: block 2 [ 136.531942][ T9088] loop4: lost filesystem error report for type 5 error -117 [ 136.542294][ T9088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.583996][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.612374][ T9096] loop3: detected capacity change from 0 to 512 [ 136.614916][ T9096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 136.615267][ T9096] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 136.661159][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.664107][ T9096] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.668605][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.689542][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.692498][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.693520][ T9101] loop3: detected capacity change from 0 to 512 [ 136.697486][ T9096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.700213][ T9096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.713423][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 136.715619][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 136.717834][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 136.729719][ T9096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 136.730157][ T4724] Bluetooth: hci3: command tx timeout [ 136.742195][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.742244][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.742784][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.742809][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.747881][ T9107] FAULT_INJECTION: forcing a failure. [ 136.747881][ T9107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.747905][ T9107] CPU: 1 UID: 0 PID: 9107 Comm: syz.4.1311 Tainted: G L syzkaller #0 PREEMPT [ 136.747918][ T9107] Tainted: [L]=SOFTLOCKUP [ 136.747922][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 136.747927][ T9107] Call trace: [ 136.747930][ T9107] show_stack+0x2c/0x3c (C) [ 136.747952][ T9107] __dump_stack+0x30/0x40 [ 136.747964][ T9107] dump_stack_lvl+0xd8/0x12c [ 136.747974][ T9107] dump_stack+0x1c/0x28 [ 136.747983][ T9107] should_fail_ex+0x41c/0x590 [ 136.747992][ T9107] should_fail+0x14/0x24 [ 136.747998][ T9107] should_fail_usercopy+0x20/0x30 [ 136.748005][ T9107] simple_read_from_buffer+0xc4/0x238 [ 136.748017][ T9107] proc_fail_nth_read+0x1a8/0x248 [ 136.748026][ T9107] vfs_read+0x230/0x8c8 [ 136.748034][ T9107] ksys_read+0x12c/0x228 [ 136.748040][ T9107] __arm64_sys_read+0x84/0x98 [ 136.748047][ T9107] invoke_syscall+0x98/0x244 [ 136.748057][ T9107] el0_svc_common+0xec/0x23c [ 136.748067][ T9107] do_el0_svc+0x4c/0x5c [ 136.748076][ T9107] el0_svc+0x64/0x260 [ 136.748086][ T9107] el0t_64_sync_handler+0x44/0x104 [ 136.748094][ T9107] el0t_64_sync+0x198/0x19c [ 136.769414][ T5259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.770995][ T5259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.771028][ T5259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.771048][ T5259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.824195][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.826309][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.854464][ T6152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.989615][ T6152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.017419][ T9119] loop3: detected capacity change from 0 to 128 [ 137.036124][ T9119] EXT4-fs (loop3): Test dummy encryption mode enabled [ 137.046068][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1319'. [ 137.054325][ T9124] ip_tables: iptables: counters copy to user failed while replacing table [ 137.054562][ T9119] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.216627][ T9141] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4710] was attempted by ""[9141] [ 137.296093][ T6152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 137.336506][ T9145] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 137.378090][ T9148] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 137.381171][ T9148] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 137.855458][ T4720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.107307][ T9169] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 138.113881][ T9169] EXT4-fs (loop3): 1 truncate cleaned up [ 138.114373][ T9169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.145201][ T9173] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 138.163504][ T9169] EXT4-fs (loop3): can't disable delalloc during remount [ 138.168937][ T9177] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 138.177745][ T9177] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 138.324697][ T9189] EXT4-fs (loop5): Test dummy encryption mode enabled [ 138.328297][ T9189] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.337871][ T9186] 9p: Bad value for 'rfdno' [ 138.620388][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.708440][ T9202] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.880471][ T4724] Bluetooth: hci3: command tx timeout [ 139.083365][ T9215] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 139.140228][ T9219] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 139.141467][ T9219] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 139.240083][ T8704] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.347183][ T9235] set_capacity_and_notify: 3 callbacks suppressed [ 139.347335][ T9235] loop5: detected capacity change from 0 to 512 [ 139.348814][ T9235] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 139.354832][ T9235] EXT4-fs (loop5): 1 truncate cleaned up [ 139.355352][ T9235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.762617][ T4726] block nbd2: Receive control failed (result -32) [ 139.762617][ T4724] block nbd2: Receive control failed (result -32) [ 139.796402][ T9243] loop1: detected capacity change from 0 to 256 [ 139.979012][ T9258] loop4: detected capacity change from 0 to 128 [ 139.985609][ T9258] EXT4-fs (loop4): Test dummy encryption mode enabled [ 139.993575][ T9258] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.226684][ T9256] psci: CPU1 killed (polled 0 ms) [ 140.257756][ T8704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.363767][ T9266] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 140.367220][ T9266] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 140.370131][ T9266] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 140.791563][ T9272] loop5: detected capacity change from 0 to 512 [ 140.798622][ T9272] EXT4-fs: Ignoring removed i_version option [ 140.807513][ T9272] EXT4-fs: Ignoring removed bh option [ 140.861203][ T9272] EXT4-fs error (device loop5): ext4_orphan_get:1399: comm syz.5.1366: inode #13: comm syz.5.1366: iget: illegal inode # [ 140.863797][ T9272] loop5: lost filesystem error report for type 5 error -117 [ 140.864271][ T9272] EXT4-fs (loop5): Remounting filesystem read-only [ 140.867599][ T9272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.935132][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.948500][ T9272] EXT4-fs (loop5): shut down requested (2) [ 140.950664][ T9277] loop3: detected capacity change from 0 to 256 [ 140.969906][ T4829] hsr0: entered promiscuous mode [ 140.980321][ T9277] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.209212][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.224135][ T8704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.553438][ T9297] loop3: detected capacity change from 0 to 512 [ 141.564088][ T9297] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 141.592819][ T9297] EXT4-fs (loop3): 1 truncate cleaned up [ 141.598078][ T9297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.725086][ T9301] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 141.729775][ T9303] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 141.990523][ T9308] loop1: detected capacity change from 0 to 128 [ 142.213096][ T9316] loop5: detected capacity change from 0 to 128 [ 142.227287][ T9317] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 142.242237][ T9316] EXT4-fs (loop5): Test dummy encryption mode enabled [ 142.248918][ T9316] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.434439][ T8704] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.456195][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.611713][ T9324] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 142.819494][ T5259] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.892832][ T9334] FAULT_INJECTION: forcing a failure. [ 142.892832][ T9334] name failslab, interval 1, probability 0, space 0, times 0 [ 142.895735][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.4.1386 Tainted: G L syzkaller #0 PREEMPT [ 142.895757][ T9334] Tainted: [L]=SOFTLOCKUP [ 142.895761][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 142.895768][ T9334] Call trace: [ 142.895772][ T9334] show_stack+0x2c/0x3c (C) [ 142.895797][ T9334] __dump_stack+0x30/0x40 [ 142.895809][ T9334] dump_stack_lvl+0xd8/0x12c [ 142.895820][ T9334] dump_stack+0x1c/0x28 [ 142.895830][ T9334] should_fail_ex+0x41c/0x590 [ 142.895839][ T9334] should_failslab+0xc4/0x120 [ 142.895848][ T9334] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 142.895857][ T9334] __alloc_skb+0x1f0/0x610 [ 142.895868][ T9334] netlink_ack+0x11c/0x890 [ 142.895878][ T9334] netlink_rcv_skb+0x21c/0x414 [ 142.895887][ T9334] sock_diag_rcv+0x28/0x38 [ 142.895898][ T9334] netlink_unicast+0x600/0x7f8 [ 142.895906][ T9334] netlink_sendmsg+0x648/0x948 [ 142.895915][ T9334] __sock_sendmsg+0xc8/0x17c [ 142.895924][ T9334] ____sys_sendmsg+0x3d0/0x6c8 [ 142.895934][ T9334] ___sys_sendmsg+0x198/0x224 [ 142.895943][ T9334] __sys_sendmsg+0x158/0x204 [ 142.895952][ T9334] __arm64_sys_sendmsg+0x88/0x9c [ 142.895961][ T9334] invoke_syscall+0x98/0x244 [ 142.895971][ T9334] el0_svc_common+0x19c/0x23c [ 142.895981][ T9334] do_el0_svc+0x4c/0x5c [ 142.895991][ T9334] el0_svc+0x64/0x260 [ 142.896001][ T9334] el0t_64_sync_handler+0x44/0x104 [ 142.896009][ T9334] el0t_64_sync+0x198/0x19c [ 142.994965][ T9336] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 143.002796][ T9336] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 143.046005][ T9336] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 143.107797][ T9344] FAULT_INJECTION: forcing a failure. [ 143.107797][ T9344] name failslab, interval 1, probability 0, space 0, times 0 [ 143.107848][ T9344] CPU: 0 UID: 0 PID: 9344 Comm: syz.4.1388 Tainted: G L syzkaller #0 PREEMPT [ 143.107872][ T9344] Tainted: [L]=SOFTLOCKUP [ 143.107877][ T9344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 143.107884][ T9344] Call trace: [ 143.107888][ T9344] show_stack+0x2c/0x3c (C) [ 143.107913][ T9344] __dump_stack+0x30/0x40 [ 143.107926][ T9344] dump_stack_lvl+0xd8/0x12c [ 143.107938][ T9344] dump_stack+0x1c/0x28 [ 143.107950][ T9344] should_fail_ex+0x41c/0x590 [ 143.107959][ T9344] should_failslab+0xc4/0x120 [ 143.107969][ T9344] __kmalloc_noprof+0x108/0x6b8 [ 143.107980][ T9344] landlock_init_hierarchy_log+0x158/0x534 [ 143.107991][ T9344] landlock_merge_ruleset+0x490/0x6b0 [ 143.108003][ T9344] __arm64_sys_landlock_restrict_self+0x260/0x6e0 [ 143.108017][ T9344] invoke_syscall+0x98/0x244 [ 143.108029][ T9344] el0_svc_common+0xec/0x23c [ 143.108041][ T9344] do_el0_svc+0x4c/0x5c [ 143.108053][ T9344] el0_svc+0x64/0x260 [ 143.108064][ T9344] el0t_64_sync_handler+0x44/0x104 [ 143.108074][ T9344] el0t_64_sync+0x198/0x19c [ 143.292407][ T9356] loop3: detected capacity change from 0 to 128 [ 143.308419][ T9356] EXT4-fs (loop3): Test dummy encryption mode enabled [ 143.317530][ T9356] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.454509][ T4720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.476062][ T9359] loop4: detected capacity change from 0 to 512 [ 143.530402][ T9359] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 143.533519][ T9359] EXT4-fs (loop4): 1 truncate cleaned up [ 143.535534][ T9359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.786400][ T9370] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 144.099020][ T9381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1385'. [ 144.266562][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.458257][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 145.094523][ T9433] loop4: detected capacity change from 0 to 128 [ 145.130909][ T9433] EXT4-fs (loop4): Test dummy encryption mode enabled [ 145.144680][ T9433] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.306247][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.539590][ T9452] FAULT_INJECTION: forcing a failure. [ 145.539590][ T9452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.543219][ T9452] CPU: 0 UID: 0 PID: 9452 Comm: syz.1.1404 Tainted: G L syzkaller #0 PREEMPT [ 145.543245][ T9452] Tainted: [L]=SOFTLOCKUP [ 145.543249][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 145.543255][ T9452] Call trace: [ 145.543259][ T9452] show_stack+0x2c/0x3c (C) [ 145.543287][ T9452] __dump_stack+0x30/0x40 [ 145.543298][ T9452] dump_stack_lvl+0xd8/0x12c [ 145.543309][ T9452] dump_stack+0x1c/0x28 [ 145.543318][ T9452] should_fail_ex+0x41c/0x590 [ 145.543327][ T9452] should_fail+0x14/0x24 [ 145.543334][ T9452] should_fail_usercopy+0x20/0x30 [ 145.543341][ T9452] simple_read_from_buffer+0xc4/0x238 [ 145.543352][ T9452] proc_fail_nth_read+0x1a8/0x248 [ 145.543361][ T9452] vfs_read+0x230/0x8c8 [ 145.543369][ T9452] ksys_read+0x12c/0x228 [ 145.543375][ T9452] __arm64_sys_read+0x84/0x98 [ 145.543382][ T9452] invoke_syscall+0x98/0x244 [ 145.543393][ T9452] el0_svc_common+0xec/0x23c [ 145.543403][ T9452] do_el0_svc+0x4c/0x5c [ 145.543413][ T9452] el0_svc+0x64/0x260 [ 145.543423][ T9452] el0t_64_sync_handler+0x44/0x104 [ 145.543431][ T9452] el0t_64_sync+0x198/0x19c [ 145.864683][ T9470] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 145.963341][ T9477] loop5: detected capacity change from 0 to 128 [ 146.009953][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1405'. [ 146.358588][ T9484] xt_connbytes: Forcing CT accounting to be enabled [ 146.358636][ T9484] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 146.923650][ T9502] FAULT_INJECTION: forcing a failure. [ 146.923650][ T9502] name failslab, interval 1, probability 0, space 0, times 0 [ 146.923707][ T9502] CPU: 0 UID: 0 PID: 9502 Comm: syz.1.1409 Tainted: G L syzkaller #0 PREEMPT [ 146.923730][ T9502] Tainted: [L]=SOFTLOCKUP [ 146.923736][ T9502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 146.923744][ T9502] Call trace: [ 146.923747][ T9502] show_stack+0x2c/0x3c (C) [ 146.923770][ T9502] __dump_stack+0x30/0x40 [ 146.923783][ T9502] dump_stack_lvl+0xd8/0x12c [ 146.923795][ T9502] dump_stack+0x1c/0x28 [ 146.923807][ T9502] should_fail_ex+0x41c/0x590 [ 146.923816][ T9502] should_failslab+0xc4/0x120 [ 146.923826][ T9502] __kmalloc_cache_noprof+0x94/0x5ec [ 146.923837][ T9502] landlock_merge_ruleset+0xf4/0x6b0 [ 146.923851][ T9502] __arm64_sys_landlock_restrict_self+0x260/0x6e0 [ 146.923864][ T9502] invoke_syscall+0x98/0x244 [ 146.923877][ T9502] el0_svc_common+0xec/0x23c [ 146.923889][ T9502] do_el0_svc+0x4c/0x5c [ 146.923900][ T9502] el0_svc+0x64/0x260 [ 146.923913][ T9502] el0t_64_sync_handler+0x44/0x104 [ 146.923923][ T9502] el0t_64_sync+0x198/0x19c [ 147.079351][ T9512] FAULT_INJECTION: forcing a failure. [ 147.079351][ T9512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.079403][ T9512] CPU: 0 UID: 0 PID: 9512 Comm: syz.4.1411 Tainted: G L syzkaller #0 PREEMPT [ 147.079421][ T9512] Tainted: [L]=SOFTLOCKUP [ 147.079425][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 147.079433][ T9512] Call trace: [ 147.079436][ T9512] show_stack+0x2c/0x3c (C) [ 147.079459][ T9512] __dump_stack+0x30/0x40 [ 147.079470][ T9512] dump_stack_lvl+0xd8/0x12c [ 147.079480][ T9512] dump_stack+0x1c/0x28 [ 147.079490][ T9512] should_fail_ex+0x41c/0x590 [ 147.079499][ T9512] should_fail+0x14/0x24 [ 147.079505][ T9512] should_fail_usercopy+0x20/0x30 [ 147.079512][ T9512] _inline_copy_from_user+0x3c/0x174 [ 147.079522][ T9512] kstrtouint_from_user+0xcc/0x174 [ 147.079530][ T9512] proc_fail_nth_write+0x9c/0x234 [ 147.079539][ T9512] vfs_write+0x2a4/0xa0c [ 147.079547][ T9512] ksys_write+0x12c/0x228 [ 147.079554][ T9512] __arm64_sys_write+0x84/0x98 [ 147.079561][ T9512] invoke_syscall+0x98/0x244 [ 147.079571][ T9512] el0_svc_common+0x19c/0x23c [ 147.079581][ T9512] do_el0_svc+0x4c/0x5c [ 147.079590][ T9512] el0_svc+0x64/0x260 [ 147.079600][ T9512] el0t_64_sync_handler+0x44/0x104 [ 147.079609][ T9512] el0t_64_sync+0x198/0x19c [ 147.309825][ T9518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1412'. [ 148.662145][ T9541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.880101][ T9556] netlink: 'syz.0.1417': attribute type 2 has an invalid length. [ 148.933148][ T9563] loop5: detected capacity change from 0 to 1024 [ 149.006656][ T9563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.477421][ T9587] loop4: detected capacity change from 0 to 128 [ 149.650471][ T5263] Bluetooth: hci5: Frame reassembly failed (-84) [ 149.727300][ T9592] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 149.747415][ T8704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.878190][ T4726] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 150.069515][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 150.071848][ T9622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1431'. [ 150.249767][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.366562][ T9628] loop1: detected capacity change from 0 to 256 [ 150.922437][ T9639] loop1: detected capacity change from 0 to 512 [ 151.061495][ T9639] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 151.064580][ T9639] EXT4-fs (loop1): 1 truncate cleaned up [ 151.066509][ T9639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.153816][ T9642] loop5: detected capacity change from 0 to 128 [ 151.721717][ T4724] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 151.735685][ T9652] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 151.797449][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.150786][ T9663] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 152.657426][ T9678] loop1: detected capacity change from 0 to 512 [ 152.680960][ T9678] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 152.687083][ T9678] EXT4-fs (loop1): 1 truncate cleaned up [ 152.692607][ T9678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.079940][ T9685] loop4: detected capacity change from 0 to 256 [ 153.208609][ T9687] loop3: detected capacity change from 0 to 128 [ 153.529922][ T9695] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 153.535687][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.132840][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1462'. [ 154.262859][ T9715] netlink: 'syz.5.1464': attribute type 1 has an invalid length. [ 154.341990][ T9715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.367798][ T9717] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.369519][ T9717] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 154.372529][ T9717] bond1: (slave gre1): Error -95 calling set_mac_address [ 154.541778][ T9723] loop1: detected capacity change from 0 to 512 [ 154.555710][ T9723] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 154.575281][ T9723] EXT4-fs (loop1): 1 truncate cleaned up [ 154.578144][ T9723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.659658][ T9726] binder: BC_ATTEMPT_ACQUIRE not supported [ 154.661021][ T9726] binder: 9713:9726 ioctl c0306201 20000100 returned -22 [ 154.675804][ T9721] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 154.684730][ T9721] bond1: (slave gre1): Error -95 calling set_mac_address [ 154.896801][ T9715] gretap1: entered promiscuous mode [ 154.912294][ T9715] bond1: (slave gretap1): making interface the new active one [ 154.915365][ T9715] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 155.216231][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.368964][ T9749] loop3: detected capacity change from 0 to 512 [ 155.377725][ T9749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.380404][ T9749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.389682][ T9749] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 155.403336][ T9749] EXT4-fs (loop3): 1 truncate cleaned up [ 155.406513][ T9749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.443769][ T9753] overlayfs: failed to clone upperpath [ 155.495391][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.635204][ T9764] xt_hashlimit: size too large, truncated to 1048576 [ 155.820626][ T9768] binder: 9763:9768 ioctl c00c620f 20000000 returned -22 [ 155.986370][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.988562][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.021796][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 156.258528][ T9788] loop3: detected capacity change from 0 to 512 [ 156.286858][ T9788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.505408][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.873690][ T9813] loop1: detected capacity change from 0 to 256 [ 156.983360][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1496'. [ 156.987144][ T9818] loop3: detected capacity change from 0 to 256 [ 157.009700][ T9818] vfat: Unknown parameter '+' [ 157.042295][ T9818] loop3: detected capacity change from 0 to 512 [ 157.062592][ T9818] EXT4-fs: Ignoring removed bh option [ 157.065304][ T9818] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.065375][ T9818] ext4: Unknown parameter 'fsuuid' [ 157.112505][ T9818] overlayfs: missing 'lowerdir' [ 157.223424][ T9826] binder: 9825:9826 ioctl 3ba0 20001ec0 returned -22 [ 157.225614][ T9826] binder: 9825:9826 ioctl 80284504 20000380 returned -22 [ 157.239814][ T9826] binder: 9825:9826 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 157.241613][ T9826] binder: 9825:9826 ioctl c0306201 200001c0 returned -22 [ 157.372348][ T9832] syzkaller0: entered promiscuous mode [ 157.373726][ T9832] syzkaller0: entered allmulticast mode [ 157.438030][ T9827] loop4: detected capacity change from 0 to 512 [ 157.438481][ T9827] ext3: Bad value for 'commit' [ 157.728307][ T9839] FAULT_INJECTION: forcing a failure. [ 157.728307][ T9839] name failslab, interval 1, probability 0, space 0, times 0 [ 157.731741][ T9839] CPU: 0 UID: 0 PID: 9839 Comm: syz.1.1503 Tainted: G L syzkaller #0 PREEMPT [ 157.731768][ T9839] Tainted: [L]=SOFTLOCKUP [ 157.731773][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 157.731779][ T9839] Call trace: [ 157.731783][ T9839] show_stack+0x2c/0x3c (C) [ 157.731812][ T9839] __dump_stack+0x30/0x40 [ 157.731827][ T9839] dump_stack_lvl+0xd8/0x12c [ 157.731840][ T9839] dump_stack+0x1c/0x28 [ 157.731853][ T9839] should_fail_ex+0x41c/0x590 [ 157.731862][ T9839] should_failslab+0xc4/0x120 [ 157.731872][ T9839] __kmalloc_noprof+0x108/0x6b8 [ 157.731884][ T9839] create_ruleset+0x30/0x100 [ 157.731897][ T9839] landlock_create_ruleset+0x6c/0x1f8 [ 157.731909][ T9839] __arm64_sys_landlock_create_ruleset+0x3e0/0x588 [ 157.731922][ T9839] invoke_syscall+0x98/0x244 [ 157.731935][ T9839] el0_svc_common+0xec/0x23c [ 157.731947][ T9839] do_el0_svc+0x4c/0x5c [ 157.731959][ T9839] el0_svc+0x64/0x260 [ 157.731970][ T9839] el0t_64_sync_handler+0x44/0x104 [ 157.731980][ T9839] el0t_64_sync+0x198/0x19c [ 157.840007][ T9843] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 157.854342][ T9843] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 157.865224][ T9850] loop1: detected capacity change from 0 to 128 [ 158.166208][ T9854] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 158.229862][ T9857] binder: 9856:9857 ioctl c00c620f 20000000 returned -22 [ 158.453848][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 158.455734][ T9865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1511'. [ 158.457866][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1511'. [ 158.460050][ T9865] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1511'. [ 158.464502][ T9865] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1511'. [ 158.659358][ T9867] 9p: Unknown Cache mode or invalid value f [ 159.703613][ T9898] syz.3.1523 (9898): attempted to duplicate a private mapping with mremap. This is not supported. [ 159.788348][ T9901] loop1: detected capacity change from 0 to 1024 [ 159.799661][ T9901] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.859039][ T9901] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.1524: lblock 2 mapped to illegal pblock 2 (length 1) [ 159.865382][ T9901] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.869117][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 159.869162][ C0] EXT4-fs (loop1): initial error at time 159: ext4_map_blocks:791: inode 3: block 2 [ 159.869212][ C0] EXT4-fs (loop1): last error at time 159: ext4_map_blocks:791: inode 3: block 2 [ 159.920937][ T9901] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 159.924113][ T9901] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.1524: lblock 0 mapped to illegal pblock 48 (length 1) [ 159.927704][ T9901] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 159.935499][ T9901] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 159.940625][ T9901] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1524: Failed to acquire dquot type 0 [ 159.942943][ T9901] loop1: lost filesystem error report for type 5 error -117 [ 159.943438][ T9901] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 159.947751][ T9901] loop1: lost filesystem error report for type 5 error -117 [ 159.952602][ T9901] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.1524: mark_inode_dirty error [ 159.956096][ T9901] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 159.964128][ T9901] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 159.967785][ T9901] EXT4-fs (loop1): 1 orphan inode deleted [ 159.971074][ T9901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.989445][ T9607] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.993771][ T9607] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 159.993827][ T9607] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:28: Failed to release dquot type 0 [ 160.059790][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.083644][ T9607] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 160.083685][ T9607] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 160.083868][ T9607] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 160.083889][ T9607] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:28: Failed to release dquot type 0 [ 160.083907][ T9607] loop1: lost filesystem error report for type 5 error -117 [ 160.095277][ T4711] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 160.100462][ T4711] loop1: lost filesystem error report for type 5 error -117 [ 160.102479][ T4711] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 160.105935][ T4711] loop1: lost filesystem error report for type 5 error -117 [ 160.106156][ T4711] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 160.110367][ T4711] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 160.216060][ T9917] FAULT_INJECTION: forcing a failure. [ 160.216060][ T9917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.222253][ T9917] CPU: 0 UID: 0 PID: 9917 Comm: syz.1.1528 Tainted: G L syzkaller #0 PREEMPT [ 160.222279][ T9917] Tainted: [L]=SOFTLOCKUP [ 160.222284][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 160.222291][ T9917] Call trace: [ 160.222297][ T9917] show_stack+0x2c/0x3c (C) [ 160.222324][ T9917] __dump_stack+0x30/0x40 [ 160.222338][ T9917] dump_stack_lvl+0xd8/0x12c [ 160.222350][ T9917] dump_stack+0x1c/0x28 [ 160.222362][ T9917] should_fail_ex+0x41c/0x590 [ 160.222371][ T9917] should_fail+0x14/0x24 [ 160.222379][ T9917] should_fail_usercopy+0x20/0x30 [ 160.222387][ T9917] _inline_copy_from_user+0x3c/0x174 [ 160.222400][ T9917] __arm64_sys_landlock_create_ruleset+0x318/0x588 [ 160.222413][ T9917] invoke_syscall+0x98/0x244 [ 160.222425][ T9917] el0_svc_common+0xec/0x23c [ 160.222437][ T9917] do_el0_svc+0x4c/0x5c [ 160.222449][ T9917] el0_svc+0x64/0x260 [ 160.222460][ T9917] el0t_64_sync_handler+0x44/0x104 [ 160.222470][ T9917] el0t_64_sync+0x198/0x19c [ 160.814074][ T9935] wg2 speed is unknown, defaulting to 1000 [ 160.858014][ T9940] fuse: Unknown parameter 'rootmole' [ 160.891071][ T9940] loop3: detected capacity change from 0 to 512 [ 160.982749][ T9940] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 160.989116][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 160.989162][ C0] EXT4-fs (loop3): initial error at time 160: ext4_mb_generate_buddy:1317 [ 160.989196][ C0] EXT4-fs (loop3): last error at time 160: ext4_mb_generate_buddy:1317 [ 161.000714][ T9940] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1534: attempt to clear invalid blocks 1024 len 1 [ 161.004320][ T9940] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 161.004849][ T9940] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1534: invalid indirect mapped block 1819239214 (level 0) [ 161.010195][ T9940] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 161.010495][ T9940] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1534: invalid indirect mapped block 33554432 (level 2) [ 161.015391][ T9940] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 161.016667][ T9940] EXT4-fs (loop3): 1 truncate cleaned up [ 161.181873][ T4420] block nbd1: Possible stuck request 0000000054f524f5: control (read@0,4096B). Runtime 90 seconds [ 161.232758][ T9940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.459488][ T9950] FAULT_INJECTION: forcing a failure. [ 161.459488][ T9950] name failslab, interval 1, probability 0, space 0, times 0 [ 161.462356][ T9950] CPU: 0 UID: 0 PID: 9950 Comm: syz.1.1539 Tainted: G L syzkaller #0 PREEMPT [ 161.462383][ T9950] Tainted: [L]=SOFTLOCKUP [ 161.462387][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 161.462395][ T9950] Call trace: [ 161.462399][ T9950] show_stack+0x2c/0x3c (C) [ 161.462426][ T9950] __dump_stack+0x30/0x40 [ 161.462440][ T9950] dump_stack_lvl+0xd8/0x12c [ 161.462453][ T9950] dump_stack+0x1c/0x28 [ 161.462464][ T9950] should_fail_ex+0x41c/0x590 [ 161.462475][ T9950] should_failslab+0xc4/0x120 [ 161.462485][ T9950] __kmalloc_noprof+0x108/0x6b8 [ 161.462496][ T9950] sk_prot_alloc+0xc4/0x1e8 [ 161.462507][ T9950] sk_alloc+0x44/0x3ac [ 161.462515][ T9950] can_create+0x19c/0x5c0 [ 161.462526][ T9950] __sock_create+0x31c/0x670 [ 161.462536][ T9950] __sys_socket_create+0xc0/0x11c [ 161.462547][ T9950] __sys_socket+0x44/0xec [ 161.462557][ T9950] __arm64_sys_socket+0x84/0x9c [ 161.462568][ T9950] invoke_syscall+0x98/0x244 [ 161.462581][ T9950] el0_svc_common+0xec/0x23c [ 161.462593][ T9950] do_el0_svc+0x4c/0x5c [ 161.462604][ T9950] el0_svc+0x64/0x260 [ 161.462616][ T9950] el0t_64_sync_handler+0x44/0x104 [ 161.462626][ T9950] el0t_64_sync+0x198/0x19c [ 161.494419][ T9950] netlink: 'syz.1.1539': attribute type 21 has an invalid length. [ 161.496416][ T9950] IPv6: NLM_F_CREATE should be specified when creating new route [ 161.674911][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.852425][ T9955] FAULT_INJECTION: forcing a failure. [ 161.852425][ T9955] name failslab, interval 1, probability 0, space 0, times 0 [ 161.855133][ T9955] CPU: 0 UID: 0 PID: 9955 Comm: syz.1.1541 Tainted: G L syzkaller #0 PREEMPT [ 161.855160][ T9955] Tainted: [L]=SOFTLOCKUP [ 161.855164][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 161.855171][ T9955] Call trace: [ 161.855174][ T9955] show_stack+0x2c/0x3c (C) [ 161.855197][ T9955] __dump_stack+0x30/0x40 [ 161.855210][ T9955] dump_stack_lvl+0xd8/0x12c [ 161.855222][ T9955] dump_stack+0x1c/0x28 [ 161.855234][ T9955] should_fail_ex+0x41c/0x590 [ 161.855243][ T9955] should_failslab+0xc4/0x120 [ 161.855253][ T9955] __kmalloc_noprof+0x108/0x6b8 [ 161.855263][ T9955] landlock_init_hierarchy_log+0x158/0x534 [ 161.855274][ T9955] landlock_merge_ruleset+0x490/0x6b0 [ 161.855287][ T9955] __arm64_sys_landlock_restrict_self+0x260/0x6e0 [ 161.855300][ T9955] invoke_syscall+0x98/0x244 [ 161.855313][ T9955] el0_svc_common+0xec/0x23c [ 161.855325][ T9955] do_el0_svc+0x4c/0x5c [ 161.855337][ T9955] el0_svc+0x64/0x260 [ 161.855348][ T9955] el0t_64_sync_handler+0x44/0x104 [ 161.855359][ T9955] el0t_64_sync+0x198/0x19c [ 161.970472][ T9959] overlayfs: failed to clone upperpath [ 162.033579][ T9964] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1544'. [ 162.282526][ T9971] loop1: detected capacity change from 0 to 512 [ 162.513247][ T9971] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1547: bad orphan inode 13 [ 162.515878][ T9971] loop1: lost filesystem error report for type 5 error -117 [ 162.516981][ T9971] ext4_test_bit(bit=12, block=4) = 1 [ 162.519760][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 162.519777][ C0] EXT4-fs (loop1): initial error at time 162: ext4_orphan_get:1425 [ 162.519791][ C0] EXT4-fs (loop1): last error at time 162: ext4_orphan_get:1425 [ 162.525202][ T9971] is_bad_inode(inode)=0 [ 162.526452][ T9971] NEXT_ORPHAN(inode)=0 [ 162.527502][ T9971] max_ino=32 [ 162.529060][ T9971] i_nlink=1 [ 162.530699][ T9971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.596626][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.908501][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.916698][ T9983] fuse: fd is not a fuse device [ 163.168533][T10014] loop1: detected capacity change from 0 to 128 [ 163.487588][T10027] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 163.664395][T10043] loop4: detected capacity change from 0 to 128 [ 163.724774][T10043] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.861549][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.414786][T10070] binder: 10069:10070 got transaction to invalid handle, 3 [ 164.414826][T10070] binder: 10069:10070 cannot find target node [ 164.414859][T10070] binder: 10069:10070 transaction call to 0:0 failed 259/29201/-22, code 0 size 80-24 line 3252 [ 164.489732][ T6152] binder: undelivered TRANSACTION_ERROR: 29201 [ 164.651261][T10100] loop5: detected capacity change from 0 to 512 [ 164.704843][T10100] EXT4-fs warning (device loop5): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 165.057431][T10129] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1573'. [ 165.394458][T10139] comedi comedi0: bad chanlist[0]=0x000000bf chan=191 range length=2 [ 165.661592][T10147] netlink: 'syz.3.1583': attribute type 4 has an invalid length. [ 165.686132][T10149] FAULT_INJECTION: forcing a failure. [ 165.686132][T10149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.686186][T10149] CPU: 0 UID: 0 PID: 10149 Comm: syz.4.1584 Tainted: G L syzkaller #0 PREEMPT [ 165.686206][T10149] Tainted: [L]=SOFTLOCKUP [ 165.686210][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 165.686216][T10149] Call trace: [ 165.686219][T10149] show_stack+0x2c/0x3c (C) [ 165.686244][T10149] __dump_stack+0x30/0x40 [ 165.686258][T10149] dump_stack_lvl+0xd8/0x12c [ 165.686271][T10149] dump_stack+0x1c/0x28 [ 165.686282][T10149] should_fail_ex+0x41c/0x590 [ 165.686294][T10149] should_fail+0x14/0x24 [ 165.686302][T10149] should_fail_usercopy+0x20/0x30 [ 165.686311][T10149] _inline_copy_from_user+0x3c/0x174 [ 165.686327][T10149] __arm64_sys_landlock_create_ruleset+0x318/0x588 [ 165.686340][T10149] invoke_syscall+0x98/0x244 [ 165.686354][T10149] el0_svc_common+0xec/0x23c [ 165.686366][T10149] do_el0_svc+0x4c/0x5c [ 165.686378][T10149] el0_svc+0x64/0x260 [ 165.686390][T10149] el0t_64_sync_handler+0x44/0x104 [ 165.686400][T10149] el0t_64_sync+0x198/0x19c [ 165.755611][ T4726] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 165.970245][T10158] overlayfs: failed to clone upperpath [ 166.001316][T10158] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1589'. [ 166.103699][T10170] loop1: detected capacity change from 0 to 128 [ 166.444235][T10189] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1597'. [ 166.609965][T10197] FAULT_INJECTION: forcing a failure. [ 166.609965][T10197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.612975][T10197] CPU: 0 UID: 0 PID: 10197 Comm: syz.3.1599 Tainted: G L syzkaller #0 PREEMPT [ 166.613004][T10197] Tainted: [L]=SOFTLOCKUP [ 166.613009][T10197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 166.613017][T10197] Call trace: [ 166.613023][T10197] show_stack+0x2c/0x3c (C) [ 166.613048][T10197] __dump_stack+0x30/0x40 [ 166.613062][T10197] dump_stack_lvl+0xd8/0x12c [ 166.613075][T10197] dump_stack+0x1c/0x28 [ 166.613087][T10197] should_fail_ex+0x41c/0x590 [ 166.613098][T10197] should_fail+0x14/0x24 [ 166.613106][T10197] should_fail_usercopy+0x20/0x30 [ 166.613115][T10197] _inline_copy_from_user+0x3c/0x174 [ 166.613133][T10197] __arm64_sys_landlock_create_ruleset+0x318/0x588 [ 166.613146][T10197] invoke_syscall+0x98/0x244 [ 166.613160][T10197] el0_svc_common+0xec/0x23c [ 166.613172][T10197] do_el0_svc+0x4c/0x5c [ 166.613184][T10197] el0_svc+0x64/0x260 [ 166.613196][T10197] el0t_64_sync_handler+0x44/0x104 [ 166.613206][T10197] el0t_64_sync+0x198/0x19c [ 166.675275][T10198] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 166.742117][T10200] loop3: detected capacity change from 0 to 512 [ 166.751612][T10200] ext4: Unknown parameter 'fsuuid' [ 166.828505][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1600'. [ 167.406260][T10224] loop5: detected capacity change from 0 to 128 [ 167.431190][T10224] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.483280][T10231] fuse: Unknown parameter 'f]' [ 167.496344][T10231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1608'. [ 167.498590][T10231] netlink: 'syz.0.1608': attribute type 1 has an invalid length. [ 167.517383][ T8704] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.532488][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.604864][T10232] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 168.228926][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 168.330533][T10267] bridge_slave_0: left allmulticast mode [ 168.331919][T10267] bridge_slave_0: left promiscuous mode [ 168.333522][T10267] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.350820][T10268] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 168.350865][T10268] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 168.350887][T10268] PKCS7: Unsupported data type 106 [ 168.577673][T10276] loop1: detected capacity change from 0 to 512 [ 168.584602][T10276] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.597774][T10276] EXT4-fs (loop1): 1 truncate cleaned up [ 168.606454][T10276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.877714][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.968593][T10289] loop1: detected capacity change from 0 to 512 [ 168.973221][T10289] ext3: Unknown parameter 'obj_role' [ 169.014034][T10289] loop1: detected capacity change from 0 to 512 [ 169.018373][T10289] ext3: Unknown parameter 'obj_role' [ 169.188913][T10295] binder: 10294:10295 ioctl c0306201 20000080 returned -14 [ 169.212867][T10295] binder: BINDER_SET_CONTEXT_MGR already set [ 169.215446][T10295] binder: 10294:10295 ioctl 4018620d 20000040 returned -16 [ 169.400579][T10304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.402311][T10304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.408128][T10313] loop3: detected capacity change from 0 to 128 [ 169.418736][T10312] loop1: detected capacity change from 0 to 128 [ 169.725920][T10321] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 169.735827][T10320] loop4: detected capacity change from 0 to 128 [ 169.765427][T10320] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.864635][ T4710] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.032938][T10333] loop4: detected capacity change from 0 to 512 [ 170.043848][T10333] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 170.058873][T10333] EXT4-fs (loop4): 1 truncate cleaned up [ 170.064111][T10333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.157098][T10337] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 170.333976][T10339] loop5: detected capacity change from 0 to 512 [ 170.350505][T10339] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 170.796040][T10355] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 170.819275][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 170.824419][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 170.832496][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 170.834826][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 170.838713][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 170.841390][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 170.844182][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 170.847343][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1647'. [ 171.277191][T10330] pim6reg9: entered allmulticast mode [ 171.879516][ T9607] Bluetooth: hci5: Frame reassembly failed (-84) [ 171.989305][T10413] netlink: 'syz.0.1658': attribute type 1 has an invalid length. [ 172.844739][T10469] loop3: detected capacity change from 0 to 512 [ 172.874330][T10469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.895568][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.014626][T10478] binder: tried to use weak ref as strong ref [ 173.016373][T10478] binder: 10477:10478 Acquire 1 refcount change on invalid ref 0 ret -22 [ 173.029814][T10478] binder: 10477:10478 ioctl 6609 0 returned -22 [ 173.217575][T10483] tmpfs: Bad value for 'size' [ 173.220305][T10483] __nla_validate_parse: 28 callbacks suppressed [ 173.222014][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'. [ 173.233491][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.233987][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.253425][T10483] bridge0: entered allmulticast mode [ 173.313627][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.506380][T10500] 9pnet_fd: p9_fd_create_tcp (10500): problem connecting socket to 127.0.0.1 [ 173.531791][T10500] 9pnet_fd: p9_fd_create_tcp (10500): problem connecting socket to 127.0.0.1 [ 173.543385][T10500] 9pnet_fd: p9_fd_create_tcp (10500): problem connecting socket to 127.0.0.1 [ 173.551180][T10500] 9pnet_fd: p9_fd_create_tcp (10500): problem connecting socket to 127.0.0.1 [ 173.573109][T10500] 9pnet_fd: p9_fd_create_tcp (10500): problem connecting socket to 127.0.0.1 [ 173.575913][T10500] 9pnet_fd: p9_fd_create_tcp (10500): problem connecting socket to 127.0.0.1 [ 173.578703][T10500] 9pnet_fd: p9_fd_create_tcp (10500): problem connecting socket to 127.0.0.1 [ 173.590350][T10500] 9pnet_virtio: no channels available for device 127.0.0.1 [ 173.698585][T10509] FAULT_INJECTION: forcing a failure. [ 173.698585][T10509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.702106][T10509] CPU: 0 UID: 0 PID: 10509 Comm: syz.3.1680 Tainted: G L syzkaller #0 PREEMPT [ 173.702132][T10509] Tainted: [L]=SOFTLOCKUP [ 173.702136][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 173.702143][T10509] Call trace: [ 173.702147][T10509] show_stack+0x2c/0x3c (C) [ 173.702174][T10509] __dump_stack+0x30/0x40 [ 173.702188][T10509] dump_stack_lvl+0xd8/0x12c [ 173.702200][T10509] dump_stack+0x1c/0x28 [ 173.702212][T10509] should_fail_ex+0x41c/0x590 [ 173.702221][T10509] should_fail+0x14/0x24 [ 173.702229][T10509] should_fail_usercopy+0x20/0x30 [ 173.702237][T10509] _inline_copy_from_user+0x3c/0x174 [ 173.702250][T10509] __arm64_sys_landlock_create_ruleset+0x318/0x588 [ 173.702263][T10509] invoke_syscall+0x98/0x244 [ 173.702276][T10509] el0_svc_common+0xec/0x23c [ 173.702288][T10509] do_el0_svc+0x4c/0x5c [ 173.702300][T10509] el0_svc+0x64/0x260 [ 173.702311][T10509] el0t_64_sync_handler+0x44/0x104 [ 173.702321][T10509] el0t_64_sync+0x198/0x19c [ 173.907927][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1681'. [ 173.907995][T10510] netlink: 'syz.1.1681': attribute type 7 has an invalid length. [ 173.908021][T10510] netlink: 'syz.1.1681': attribute type 8 has an invalid length. [ 173.908034][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1681'. [ 173.910079][T10510] ip6gretap0: entered promiscuous mode [ 173.910625][T10510] syz_tun: entered promiscuous mode [ 173.929697][ T4724] Bluetooth: hci5: command 0x1003 tx timeout [ 173.931012][ T4726] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 173.937612][T10510] ip6gretap0: left promiscuous mode [ 173.961501][T10510] syz_tun: left promiscuous mode [ 174.148127][T10516] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1684'. [ 174.367181][T10493] netlink: 'syz.4.1676': attribute type 11 has an invalid length. [ 174.596623][T10530] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1688'. [ 174.606978][T10530] gretap0: entered promiscuous mode [ 175.595742][T10530] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1688'. [ 175.598048][T10530] 0{X: renamed from gretap0 [ 175.607293][T10530] 0{X: left promiscuous mode [ 175.612263][T10530] 0{X: entered allmulticast mode [ 175.631217][T10530] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 175.815795][T10541] FAULT_INJECTION: forcing a failure. [ 175.815795][T10541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.818361][T10541] CPU: 0 UID: 0 PID: 10541 Comm: syz.5.1692 Tainted: G L syzkaller #0 PREEMPT [ 175.818387][T10541] Tainted: [L]=SOFTLOCKUP [ 175.818391][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 175.818398][T10541] Call trace: [ 175.818402][T10541] show_stack+0x2c/0x3c (C) [ 175.818427][T10541] __dump_stack+0x30/0x40 [ 175.818441][T10541] dump_stack_lvl+0xd8/0x12c [ 175.818453][T10541] dump_stack+0x1c/0x28 [ 175.818465][T10541] should_fail_ex+0x41c/0x590 [ 175.818474][T10541] should_fail+0x14/0x24 [ 175.818481][T10541] should_fail_usercopy+0x20/0x30 [ 175.818490][T10541] _inline_copy_from_user+0x3c/0x174 [ 175.818503][T10541] __arm64_sys_landlock_create_ruleset+0x318/0x588 [ 175.818516][T10541] invoke_syscall+0x98/0x244 [ 175.818529][T10541] el0_svc_common+0xec/0x23c [ 175.818541][T10541] do_el0_svc+0x4c/0x5c [ 175.818552][T10541] el0_svc+0x64/0x260 [ 175.818563][T10541] el0t_64_sync_handler+0x44/0x104 [ 175.818573][T10541] el0t_64_sync+0x198/0x19c [ 176.123316][T10551] loop4: detected capacity change from 0 to 128 [ 176.143935][T10552] loop5: detected capacity change from 0 to 128 [ 176.449780][T10553] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 176.498030][T10557] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 176.614707][T10560] loop3: detected capacity change from 0 to 1024 [ 176.617788][T10560] EXT4-fs: Ignoring removed orlov option [ 176.647130][T10560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.756749][T10566] usbcore.quirks: string doesn't fit in 127 chars. [ 177.043418][T10570] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 177.101356][T10570] team0: Port device dummy0 added [ 177.291417][T10581] FAULT_INJECTION: forcing a failure. [ 177.291417][T10581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.294397][T10581] CPU: 0 UID: 0 PID: 10581 Comm: syz.5.1706 Tainted: G L syzkaller #0 PREEMPT [ 177.294419][T10581] Tainted: [L]=SOFTLOCKUP [ 177.294423][T10581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 177.294430][T10581] Call trace: [ 177.294434][T10581] show_stack+0x2c/0x3c (C) [ 177.294463][T10581] __dump_stack+0x30/0x40 [ 177.294477][T10581] dump_stack_lvl+0xd8/0x12c [ 177.294489][T10581] dump_stack+0x1c/0x28 [ 177.294503][T10581] should_fail_ex+0x41c/0x590 [ 177.294513][T10581] should_fail+0x14/0x24 [ 177.294520][T10581] should_fail_usercopy+0x20/0x30 [ 177.294529][T10581] _inline_copy_from_user+0x3c/0x174 [ 177.294542][T10581] __arm64_sys_landlock_create_ruleset+0x318/0x588 [ 177.294555][T10581] invoke_syscall+0x98/0x244 [ 177.294568][T10581] el0_svc_common+0xec/0x23c [ 177.294580][T10581] do_el0_svc+0x4c/0x5c [ 177.294592][T10581] el0_svc+0x64/0x260 [ 177.294603][T10581] el0t_64_sync_handler+0x44/0x104 [ 177.294613][T10581] el0t_64_sync+0x198/0x19c [ 177.331611][ T6152] hid-generic 61C2:80000000:0009.0002: item fetching failed at offset 0/110 [ 177.336503][ T6152] hid-generic 61C2:80000000:0009.0002: probe with driver hid-generic failed with error -22 [ 177.344540][T10580] netlink: 'syz.4.1705': attribute type 3 has an invalid length. [ 177.347751][T10580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1705'. [ 177.421355][T10583] loop5: detected capacity change from 0 to 128 [ 177.426433][T10583] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 177.448077][ T5286] udevd[5286]: incorrect ext4 checksum on /dev/loop5 [ 177.617653][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.631510][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.631551][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.631566][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.631579][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.631592][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.631604][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.631616][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.631628][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.631639][ T6152] hid-generic 0005:10CF:0005.0003: unknown main item tag 0x0 [ 177.648473][ T6152] hid-generic 0005:10CF:0005.0003: hidraw0: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 177.699674][T10589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1708'. [ 178.020749][T10605] loop5: detected capacity change from 0 to 128 [ 178.192841][T10608] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 178.476788][T10612] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 178.621405][T10623] FAULT_INJECTION: forcing a failure. [ 178.621405][T10623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.624575][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.1.1717 Tainted: G L syzkaller #0 PREEMPT [ 178.624599][T10623] Tainted: [L]=SOFTLOCKUP [ 178.624603][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 178.624610][T10623] Call trace: [ 178.624614][T10623] show_stack+0x2c/0x3c (C) [ 178.624640][T10623] __dump_stack+0x30/0x40 [ 178.624654][T10623] dump_stack_lvl+0xd8/0x12c [ 178.624668][T10623] dump_stack+0x1c/0x28 [ 178.624681][T10623] should_fail_ex+0x41c/0x590 [ 178.624691][T10623] should_fail+0x14/0x24 [ 178.624699][T10623] should_fail_usercopy+0x20/0x30 [ 178.624708][T10623] _inline_copy_from_user+0x3c/0x174 [ 178.624722][T10623] __arm64_sys_landlock_create_ruleset+0x318/0x588 [ 178.624735][T10623] invoke_syscall+0x98/0x244 [ 178.624748][T10623] el0_svc_common+0xec/0x23c [ 178.624760][T10623] do_el0_svc+0x4c/0x5c [ 178.624771][T10623] el0_svc+0x64/0x260 [ 178.624783][T10623] el0t_64_sync_handler+0x44/0x104 [ 178.624793][T10623] el0t_64_sync+0x198/0x19c [ 178.830644][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.294974][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 180.043821][T10662] loop3: detected capacity change from 0 to 4096 [ 180.055539][T10662] EXT4-fs (loop3): Test dummy encryption mode enabled [ 180.167596][T10662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.337462][T10672] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 180.416551][ T4720] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.931766][T10687] netlink: 'syz.3.1733': attribute type 5 has an invalid length. [ 181.011868][T10695] loop4: detected capacity change from 0 to 1024 [ 181.012734][T10695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.075158][T10695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.131797][T10703] wg2 speed is unknown, defaulting to 1000 [ 181.155096][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.242042][T10706] loop3: detected capacity change from 0 to 128 [ 181.308405][T10706] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 181.578022][T10717] netlink: 'syz.5.1745': attribute type 1 has an invalid length. [ 181.581692][T10715] loop4: detected capacity change from 0 to 128 [ 181.618715][T10718] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 [ 181.618763][T10718] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 181.932435][T10722] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 182.226845][T10728] warning: `syz.5.1747' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 182.378106][T10730] netlink: 'syz.1.1748': attribute type 18 has an invalid length. [ 182.444969][T10730] bond0: Error: Cannot enslave bond to itself. [ 183.002111][T10749] loop4: detected capacity change from 0 to 256 [ 183.491287][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1755'. [ 184.038806][T10769] loop4: detected capacity change from 0 to 128 [ 184.382550][T10775] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 184.668163][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1762'. [ 184.816079][ T4720] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.878954][T10794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 184.882127][T10794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 185.455167][T10814] loop4: detected capacity change from 0 to 512 [ 185.473821][T10814] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.490292][T10814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.559391][T10813] Quota error (device loop4): do_check_range: Getting block 4128768 out of range 0-5 [ 186.458382][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.481368][T10845] FAULT_INJECTION: forcing a failure. [ 186.481368][T10845] name fail_futex, interval 1, probability 0, space 0, times 0 [ 186.484415][T10845] CPU: 0 UID: 0 PID: 10845 Comm: syz.3.1780 Tainted: G L syzkaller #0 PREEMPT [ 186.484441][T10845] Tainted: [L]=SOFTLOCKUP [ 186.484445][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 186.484452][T10845] Call trace: [ 186.484456][T10845] show_stack+0x2c/0x3c (C) [ 186.484483][T10845] __dump_stack+0x30/0x40 [ 186.484497][T10845] dump_stack_lvl+0xd8/0x12c [ 186.484510][T10845] dump_stack+0x1c/0x28 [ 186.484521][T10845] should_fail_ex+0x41c/0x590 [ 186.484531][T10845] should_fail+0x14/0x24 [ 186.484538][T10845] get_futex_key+0x1ec/0x12b0 [ 186.484549][T10845] futex_wake+0x10c/0x594 [ 186.484560][T10845] do_futex+0x2c4/0x378 [ 186.484569][T10845] __arm64_sys_futex+0x2e4/0x418 [ 186.484579][T10845] invoke_syscall+0x98/0x244 [ 186.484592][T10845] el0_svc_common+0xec/0x23c [ 186.484604][T10845] do_el0_svc+0x4c/0x5c [ 186.484616][T10845] el0_svc+0x64/0x260 [ 186.484627][T10845] el0t_64_sync_handler+0x44/0x104 [ 186.484637][T10845] el0t_64_sync+0x198/0x19c [ 186.706710][T10854] Driver unsupported XDP return value 0 on prog (id 244) dev N/A, expect packet loss! [ 186.788091][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'. [ 186.820378][T10860] overlayfs: overlapping lowerdir path [ 186.853573][T10860] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.853865][T10857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.385906][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.385969][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.253920][T10909] loop5: detected capacity change from 0 to 512 [ 188.262996][T10909] ext3: Unknown parameter 'context' [ 188.536903][T10918] fuse: fd is not a fuse device [ 188.603982][T10924] loop4: detected capacity change from 0 to 512 [ 188.648144][T10924] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 188.662058][T10924] EXT4-fs (loop4): orphan cleanup on readonly fs [ 188.664917][T10924] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1800: bad orphan inode 15 [ 188.668141][T10924] loop4: lost filesystem error report for type 5 error -117 [ 188.669378][ C0] EXT4-fs (loop4): initial error at time 188: ext4_orphan_get:1425 [ 188.669428][ C0] EXT4-fs (loop4): last error at time 188: ext4_orphan_get:1425 [ 188.677413][T10926] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1801'. [ 188.685038][T10924] ext4_test_bit(bit=14, block=18) = 1 [ 188.687130][T10924] is_bad_inode(inode)=0 [ 188.689217][T10924] NEXT_ORPHAN(inode)=1023 [ 188.690785][T10924] max_ino=32 [ 188.690819][T10924] i_nlink=0 [ 188.724827][T10924] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1800: bg 0: block 161: padding at end of block bitmap is not set [ 188.728836][T10924] loop4: lost filesystem error report for type 5 error -117 [ 188.732827][T10924] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 188.736296][T10924] loop4: lost filesystem error report for type 5 error -117 [ 188.752506][T10924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 188.842342][T10933] netlink: 'syz.0.1804': attribute type 4 has an invalid length. [ 188.843974][T10933] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1804'. [ 188.905818][T10945] trusted_key: encrypted_key: master key parameter 'us000000004096' is invalid [ 188.906020][T10945] trusted_key: encrypted_key: master key parameter 'defaUlt' is invalid [ 188.935141][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.264103][T10948] proc: Bad value for 'gid' [ 189.484510][T10965] 9p: Bad value for 'rfdno' [ 189.499058][T10948] Trying to write to read-only block-device nullb0 [ 189.575701][T10970] loop4: detected capacity change from 0 to 1024 [ 189.798077][T10981] netlink: 'syz.3.1814': attribute type 4 has an invalid length. [ 190.769271][T10983] veth1_to_hsr: entered allmulticast mode [ 191.764196][ T4420] block nbd1: Possible stuck request 0000000054f524f5: control (read@0,4096B). Runtime 120 seconds [ 194.126230][T11011] autofs: Unknown parameter '' [ 194.396990][T11024] loop5: detected capacity change from 0 to 2048 [ 194.499024][T11024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.729763][T11049] netlink: 'syz.3.1831': attribute type 3 has an invalid length. [ 195.077935][T11041] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 195.108070][T11041] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 195.111693][T11041] EXT4-fs (loop5): This should not happen!! Data will be lost [ 195.111693][T11041] [ 195.114036][T11041] EXT4-fs (loop5): Total free blocks count 0 [ 195.114072][T11041] EXT4-fs (loop5): Free/Dirty block details [ 195.114167][T11041] EXT4-fs (loop5): free_blocks=4096 [ 195.114199][T11041] EXT4-fs (loop5): dirty_blocks=64 [ 195.114213][T11041] EXT4-fs (loop5): Block reservation details [ 195.114225][T11041] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 195.367332][T11021] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 195.458085][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1833'. [ 195.541560][T11110] rnbd_client L127: Can't parse path ip:: -22 [ 195.579006][ T8704] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 195.617677][T11123] rnbd_client L213: map_device: Parameters missing [ 195.706464][T11126] team0: No ports can be present during mode change [ 195.708270][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 195.710733][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 195.854562][T11131] loop3: detected capacity change from 0 to 4096 [ 195.863864][T11131] EXT4-fs: inline encryption not supported [ 195.866492][T11131] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 196.028497][T11139] loop4: detected capacity change from 0 to 128 [ 196.552655][T11149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1842'. [ 196.554726][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 196.557083][T11148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1842'. [ 196.559662][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1842'. [ 196.617415][T11151] loop3: detected capacity change from 0 to 128 [ 196.755091][T11154] wg2 speed is unknown, defaulting to 1000 [ 196.929753][T11158] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 197.126149][T11153] loop5: detected capacity change from 0 to 8192 [ 197.265286][T11153] cgroup: noprefix used incorrectly [ 197.361765][T11172] netlink: 'syz.4.1850': attribute type 27 has an invalid length. [ 197.363596][T11172] netlink: 'syz.4.1850': attribute type 4 has an invalid length. [ 197.365636][T11172] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1850'. [ 197.528527][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1852'. [ 197.766809][T11191] loop3: detected capacity change from 0 to 128 [ 198.136517][T11201] netlink: 'syz.5.1855': attribute type 13 has an invalid length. [ 198.136555][T11201] netlink: 'syz.5.1855': attribute type 58 has an invalid length. [ 198.138528][T11201] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1855'. [ 198.388774][T11211] loop5: detected capacity change from 0 to 512 [ 198.398688][ T4798] IPVS: starting estimator thread 0... [ 198.411716][T11211] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 198.411753][T11211] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 198.411793][T11211] System zones: 0-1, 15-15, 18-18, 34-34 [ 198.411956][T11211] EXT4-fs (loop5): orphan cleanup on readonly fs [ 198.411998][T11211] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 198.412048][T11211] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 198.412067][T11211] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 198.424113][T11211] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1859: bad orphan inode 16 [ 198.424153][T11211] loop5: lost filesystem error report for type 5 error -117 [ 198.426413][T11211] ext4_test_bit(bit=15, block=18) = 1 [ 198.426441][T11211] is_bad_inode(inode)=0 [ 198.426453][T11211] NEXT_ORPHAN(inode)=0 [ 198.426465][T11211] max_ino=32 [ 198.426477][T11211] i_nlink=2 [ 198.426997][T11211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.660200][T11212] IPVS: using max 60 ests per chain, 144000 per kthread [ 198.725066][T11218] loop3: detected capacity change from 0 to 1024 [ 198.754545][T11218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.767600][T11223] overlayfs: failed to resolve '/)/#U};;]I`D}ͺ&E}=qۚvǝFܕ[ъ?<7WM 1 [ 199.907895][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.913435][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.915615][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.925366][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.111230][T11262] mmap: syz.5.1869 (11262) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 200.133102][T11262] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1869: bg 0: block 3: invalid block bitmap [ 200.137255][T11262] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 200.137303][T11262] EXT4-fs (loop5): This should not happen!! Data will be lost [ 200.137303][T11262] [ 200.137318][T11262] EXT4-fs (loop5): Total free blocks count 0 [ 200.137332][T11262] EXT4-fs (loop5): Free/Dirty block details [ 200.137346][T11262] EXT4-fs (loop5): free_blocks=0 [ 200.137359][T11262] EXT4-fs (loop5): dirty_blocks=32 [ 200.137370][T11262] EXT4-fs (loop5): Block reservation details [ 200.137381][T11262] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 200.315805][T11253] wg2 speed is unknown, defaulting to 1000 [ 200.688425][ T8704] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 200.694255][ T8704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 200.809290][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.846901][T11285] loop5: detected capacity change from 0 to 512 [ 200.862235][T11285] EXT4-fs (loop5): 1 truncate cleaned up [ 200.871500][T11285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.995396][T11289] loop4: detected capacity change from 0 to 512 [ 201.007134][T11289] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.020828][T11289] EXT4-fs (loop4): 1 truncate cleaned up [ 201.023957][T11289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.156684][T11293] __nla_validate_parse: 3 callbacks suppressed [ 201.159288][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1875'. [ 201.161707][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1875'. [ 201.178571][T11293] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.1875: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 201.188389][T11293] EXT4-fs (loop4): Remounting filesystem read-only [ 201.280580][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.352204][T11253] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.353921][T11253] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.355984][T11253] bridge_slave_0: entered allmulticast mode [ 201.358253][T11253] bridge_slave_0: entered promiscuous mode [ 201.367983][T11253] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.371253][T11253] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.373218][T11253] bridge_slave_1: entered allmulticast mode [ 201.379931][T11253] bridge_slave_1: entered promiscuous mode [ 201.437011][T11253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.455643][T11253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.488296][T11301] loop4: detected capacity change from 0 to 8 [ 201.499484][T11301] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 201.499519][T11301] unable to read xattr id index table [ 201.504707][T11301] unable to read fragment index table [ 201.507873][T11253] team0: Port device team_slave_0 added [ 201.528260][T11253] team0: Port device team_slave_1 added [ 201.576316][T11253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.577767][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.585585][T11253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.592055][T11253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.593907][T11253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.599889][T11253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.653302][T11253] hsr_slave_0: entered promiscuous mode [ 201.655271][T11253] hsr_slave_1: entered promiscuous mode [ 201.658909][T11253] debugfs: 'hsr0' already exists in 'hsr' [ 201.660552][T11253] Cannot create hsr debugfs directory [ 201.696214][ T8704] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.782999][T11305] capability: warning: `syz.5.1878' uses 32-bit capabilities (legacy support in use) [ 202.157900][ T4724] Bluetooth: hci4: command tx timeout [ 202.209590][T11253] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.217158][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.221755][T11253] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.226905][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.231300][T11253] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.240272][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.243383][T11253] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.255110][T11253] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.443762][T11253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.464915][T11253] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.475226][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.475283][ T9596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.494487][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.494540][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.847533][T11253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.060701][T11253] veth0_vlan: entered promiscuous mode [ 203.071609][T11349] loop5: detected capacity change from 0 to 512 [ 203.077949][T11348] loop1: detected capacity change from 0 to 512 [ 203.101966][T11253] veth1_vlan: entered promiscuous mode [ 203.134366][T11349] [ 203.134906][T11349] ====================================================== [ 203.136143][T11349] WARNING: possible circular locking dependency detected [ 203.137465][T11349] syzkaller #0 Tainted: G L [ 203.138572][T11349] ------------------------------------------------------ [ 203.139878][T11349] syz.5.1884/11349 is trying to acquire lock: [ 203.141012][T11349] ffff0000cfaecc18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 203.142890][T11349] [ 203.142890][T11349] but task is already holding lock: [ 203.144200][T11349] ffff0000da6a5520 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 203.146011][T11349] [ 203.146011][T11349] which lock already depends on the new lock. [ 203.146011][T11349] [ 203.147996][T11349] [ 203.147996][T11349] the existing dependency chain (in reverse order) is: [ 203.149668][T11349] [ 203.149668][T11349] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 203.151095][T11349] down_write+0x50/0xc0 [ 203.151970][T11349] ext4_destroy_inline_data+0x30/0x114 [ 203.153051][T11349] ext4_do_writepages+0x3e4/0x3bc0 [ 203.154042][T11349] ext4_writepages+0x198/0x2dc [ 203.155040][T11349] do_writepages+0x284/0x47c [ 203.155946][T11349] filemap_writeback+0x230/0x2bc [ 203.156926][T11349] filemap_flush+0x30/0x40 [ 203.157821][T11349] ext4_convert_inline_data+0x138/0x4e8 [ 203.158940][T11349] ext4_page_mkwrite+0x1d0/0xd1c [ 203.159954][T11349] do_page_mkwrite+0x138/0x2b8 [ 203.160913][T11349] do_wp_page+0x1270/0x4074 [ 203.161815][T11349] handle_mm_fault+0x1190/0x2514 [ 203.162850][T11349] do_page_fault+0x4b0/0xb88 [ 203.163763][T11349] do_mem_abort+0x70/0x194 [ 203.164753][T11349] el1_abort+0x50/0x74 [ 203.165634][T11349] el1h_64_sync_handler+0xdc/0x130 [ 203.166657][T11349] el1h_64_sync+0x6c/0x70 [ 203.167513][T11349] __sys_sendmmsg+0x374/0x580 [ 203.168421][T11349] __arm64_sys_sendmmsg+0xac/0xc8 [ 203.169414][T11349] invoke_syscall+0x98/0x244 [ 203.170348][T11349] el0_svc_common+0xec/0x23c [ 203.171288][T11349] do_el0_svc+0x4c/0x5c [ 203.172168][T11349] el0_svc+0x64/0x260 [ 203.173002][T11349] el0t_64_sync_handler+0x44/0x104 [ 203.174109][T11349] el0t_64_sync+0x198/0x19c [ 203.175025][T11349] [ 203.175025][T11349] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 203.176590][T11349] __lock_acquire+0x17c0/0x2ebc [ 203.177584][T11349] lock_acquire+0x140/0x364 [ 203.178515][T11349] percpu_down_read_internal+0x5c/0x294 [ 203.179636][T11349] ext4_writepages+0x170/0x2dc [ 203.180597][T11349] do_writepages+0x284/0x47c [ 203.181492][T11349] __writeback_single_inode+0x140/0x1880 [ 203.182632][T11349] writeback_single_inode+0x400/0xb20 [ 203.183686][T11349] write_inode_now+0x170/0x208 [ 203.184624][T11349] iput+0x7cc/0xc2c [ 203.185416][T11349] ext4_xattr_block_set+0x1b1c/0x21e8 [ 203.186511][T11349] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 203.187671][T11349] __ext4_expand_extra_isize+0x2a4/0x378 [ 203.188795][T11349] __ext4_mark_inode_dirty+0x394/0x828 [ 203.189822][T11349] ext4_evict_inode+0x798/0xfb8 [ 203.190842][T11349] evict+0x4c0/0x74c [ 203.191712][T11349] iput+0x8f0/0xc2c [ 203.192480][T11349] ext4_process_orphan+0x24c/0x2c0 [ 203.193474][T11349] ext4_orphan_cleanup+0x7d4/0xd20 [ 203.194439][T11349] ext4_fill_super+0x4628/0x4e14 [ 203.195387][T11349] get_tree_bdev_flags+0x388/0x43c [ 203.196395][T11349] get_tree_bdev+0x2c/0x3c [ 203.197202][T11349] ext4_get_tree+0x28/0x38 [ 203.197959][T11349] vfs_get_tree+0x90/0x28c [ 203.198724][T11349] fc_mount+0x24/0xac [ 203.199487][T11349] do_new_mount+0x2a4/0x538 [ 203.200397][T11349] path_mount+0x5f0/0xa88 [ 203.201310][T11349] do_mount+0xe8/0x148 [ 203.202137][T11349] __arm64_sys_mount+0x33c/0x388 [ 203.202993][T11349] invoke_syscall+0x98/0x244 [ 203.203795][T11349] el0_svc_common+0xec/0x23c [ 203.204745][T11349] do_el0_svc+0x4c/0x5c [ 203.205543][T11349] el0_svc+0x64/0x260 [ 203.206349][T11349] el0t_64_sync_handler+0x44/0x104 [ 203.207402][T11349] el0t_64_sync+0x198/0x19c [ 203.208359][T11349] [ 203.208359][T11349] other info that might help us debug this: [ 203.208359][T11349] [ 203.210264][T11349] Possible unsafe locking scenario: [ 203.210264][T11349] [ 203.211626][T11349] CPU0 CPU1 [ 203.212626][T11349] ---- ---- [ 203.213643][T11349] lock(&ei->xattr_sem); [ 203.214451][T11349] lock(&sbi->s_writepages_rwsem); [ 203.215878][T11349] lock(&ei->xattr_sem); [ 203.217162][T11349] rlock(&sbi->s_writepages_rwsem); [ 203.218126][T11349] [ 203.218126][T11349] *** DEADLOCK *** [ 203.218126][T11349] [ 203.219557][T11349] 3 locks held by syz.5.1884/11349: [ 203.220476][T11349] #0: ffff0000cb5de0d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 203.222128][T11349] #1: ffff0000cb5de640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 203.223800][T11349] #2: ffff0000da6a5520 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 203.225633][T11349] [ 203.225633][T11349] stack backtrace: [ 203.226703][T11349] CPU: 0 UID: 0 PID: 11349 Comm: syz.5.1884 Tainted: G L syzkaller #0 PREEMPT [ 203.228610][T11349] Tainted: [L]=SOFTLOCKUP [ 203.229320][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 203.231156][T11349] Call trace: [ 203.231689][T11349] show_stack+0x2c/0x3c (C) [ 203.232519][T11349] __dump_stack+0x30/0x40 [ 203.233248][T11349] dump_stack_lvl+0xd8/0x12c [ 203.234101][T11349] dump_stack+0x1c/0x28 [ 203.234857][T11349] print_circular_bug+0x328/0x330 [ 203.235795][T11349] check_noncircular+0x158/0x174 [ 203.236638][T11349] __lock_acquire+0x17c0/0x2ebc [ 203.237494][T11349] lock_acquire+0x140/0x364 [ 203.238310][T11349] percpu_down_read_internal+0x5c/0x294 [ 203.239310][T11349] ext4_writepages+0x170/0x2dc [ 203.240176][T11349] do_writepages+0x284/0x47c [ 203.241018][T11349] __writeback_single_inode+0x140/0x1880 [ 203.242020][T11349] writeback_single_inode+0x400/0xb20 [ 203.242973][T11349] write_inode_now+0x170/0x208 [ 203.243821][T11349] iput+0x7cc/0xc2c [ 203.244521][T11349] ext4_xattr_block_set+0x1b1c/0x21e8 [ 203.245488][T11349] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 203.246536][T11349] __ext4_expand_extra_isize+0x2a4/0x378 [ 203.247532][T11349] __ext4_mark_inode_dirty+0x394/0x828 [ 203.248547][T11349] ext4_evict_inode+0x798/0xfb8 [ 203.249403][T11349] evict+0x4c0/0x74c [ 203.250113][T11349] iput+0x8f0/0xc2c [ 203.250800][T11349] ext4_process_orphan+0x24c/0x2c0 [ 203.251781][T11349] ext4_orphan_cleanup+0x7d4/0xd20 [ 203.252719][T11349] ext4_fill_super+0x4628/0x4e14 [ 203.253633][T11349] get_tree_bdev_flags+0x388/0x43c [ 203.254519][T11349] get_tree_bdev+0x2c/0x3c [ 203.255275][T11349] ext4_get_tree+0x28/0x38 [ 203.256084][T11349] vfs_get_tree+0x90/0x28c [ 203.256886][T11349] fc_mount+0x24/0xac [ 203.257606][T11349] do_new_mount+0x2a4/0x538 [ 203.258411][T11349] path_mount+0x5f0/0xa88 [ 203.259169][T11349] do_mount+0xe8/0x148 [ 203.259872][T11349] __arm64_sys_mount+0x33c/0x388 [ 203.260745][T11349] invoke_syscall+0x98/0x244 [ 203.261580][T11349] el0_svc_common+0xec/0x23c [ 203.262441][T11349] do_el0_svc+0x4c/0x5c [ 203.263160][T11349] el0_svc+0x64/0x260 [ 203.263887][T11349] el0t_64_sync_handler+0x44/0x104 [ 203.264827][T11349] el0t_64_sync+0x198/0x19c [ 203.310891][T11253] veth0_macvtap: entered promiscuous mode [ 203.313459][T11253] veth1_macvtap: entered promiscuous mode [ 203.330037][T11253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.340406][T11253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.359652][ T9596] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.359699][ T9596] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.359729][ T9596] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.359747][ T9596] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.384380][T11253] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 203.396213][ T3737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.396243][ T3737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.403581][T11253] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 203.459632][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.459665][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.779728][T11349] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1884: iget: bad extra_isize 58 (inode size 256) [ 203.782401][T11349] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.782825][T11349] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1884: error while reading EA inode 11 err=-117 [ 203.787236][T11349] loop5: lost filesystem error report for type 5 error -117 [ 203.787501][T11349] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1884: iget: bad extra_isize 58 (inode size 256) [ 203.791653][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 203.791667][ C0] EXT4-fs (loop5): initial error at time 203: ext4_xattr_inode_iget:441: inode 11 [ 203.791682][ C0] EXT4-fs (loop5): last error at time 203: ext4_xattr_inode_iget:446 [ 203.797407][T11349] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 203.797796][T11349] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1884: error while reading EA inode 11 err=-117 [ 203.802528][T11349] loop5: lost filesystem error report for type 5 error -117 [ 203.802793][T11349] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1884: iget: bad extra_isize 58 (inode size 256) [ 203.806951][T11349] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 203.807182][T11349] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1884: error while reading EA inode 18 err=-117 [ 203.811677][T11349] loop5: lost filesystem error report for type 5 error -117 [ 203.811924][T11349] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1884: iget: bad extra_isize 58 (inode size 256) [ 203.815889][T11349] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 203.816110][T11349] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1884: error while reading EA inode 18 err=-117 [ 203.822101][T11349] loop5: lost filesystem error report for type 5 error -117 [ 203.822386][T11349] EXT4-fs (loop5): 1 orphan inode deleted [ 203.825838][T11349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.841553][T11349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.137515][T11319] syz_tun (unregistering): left allmulticast mode [ 204.163429][ T3737] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.202331][ T3737] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.222474][ T3737] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.242666][ T3737] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.301703][ T3737] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.337791][ T3737] bridge_slave_1: left allmulticast mode [ 204.339041][ T3737] bridge_slave_1: left promiscuous mode [ 204.345555][ T3737] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.431488][ T3737] bond1 (unregistering): (slave gretap1): Releasing active interface [ 204.458557][ T3737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.464701][ T3737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.467750][ T3737] bond0 (unregistering): Released all slaves [ 204.474278][ T3737] bond1 (unregistering): Released all slaves [ 204.483019][ T3737] bond2 (unregistering): Released all slaves [ 204.574942][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 204.651298][ T3737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.652877][ T3737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.654825][ T3737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.656508][ T3737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.661086][ T3737] veth1_macvtap: left promiscuous mode [ 204.662280][ T3737] veth0_macvtap: left promiscuous mode [ 204.666846][ T3737] veth1_vlan: left promiscuous mode [ 204.668061][ T3737] veth0_vlan: left promiscuous mode [ 204.818794][ T3737] team0 (unregistering): Port device team_slave_1 removed [ 204.828521][ T3737] team0 (unregistering): Port device team_slave_0 removed [ 204.893920][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 205.001769][ T3737] IPVS: stop unused estimator thread 0... [ 205.025068][ T3737] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.084028][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 205.190741][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 205.314444][ T4402] 8021q: adding VLAN 0 to HW filter on device eth8 [ 206.011714][ T3737] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.072201][ T3737] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.082625][ T3737] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.124244][ T3737] bridge_slave_1: left allmulticast mode [ 206.125446][ T3737] bridge_slave_1: left promiscuous mode [ 206.126887][ T3737] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.132107][ T3737] bridge_slave_0: left allmulticast mode [ 206.133291][ T3737] bridge_slave_0: left promiscuous mode [ 206.134785][ T3737] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.183675][ T3737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.186692][ T3737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.190493][ T3737] bond0 (unregistering): Released all slaves [ 206.347456][ T3737] hsr_slave_0: left promiscuous mode [ 206.348787][ T3737] hsr_slave_1: left promiscuous mode [ 206.349025][ T3737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.349043][ T3737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.357627][ T3737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.357655][ T3737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.363300][ T3737] veth1_macvtap: left promiscuous mode [ 206.363342][ T3737] veth0_macvtap: left promiscuous mode [ 206.363394][ T3737] veth1_vlan: left promiscuous mode [ 206.363429][ T3737] veth0_vlan: left promiscuous mode [ 206.467173][ T3737] team0 (unregistering): Port device team_slave_1 removed [ 206.471578][ T3737] team0 (unregistering): Port device team_slave_0 removed [ 206.513507][ T4402] 8021q: adding VLAN 0 to HW filter on device eth9 [ 206.657487][ T4402] 8021q: adding VLAN 0 to HW filter on device eth10 [ 206.764190][ T4402] 8021q: adding VLAN 0 to HW filter on device eth11 [ 206.870718][ T4402] 8021q: adding VLAN 0 to HW filter on device eth12 [ 209.611809][ T4345] udevd[4345]: worker [4734] /devices/virtual/block/nbd1 is taking a long time