last executing test programs: 1m47.706201851s ago: executing program 0 (id=14): syz_emit_ethernet(0x6e, &(0x7f0000000200)={@random="5b37182347bc", @random='a\t\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "9d0080", 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x5, {0xa, 0x6, "e397f7", 0x5, 0x6, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@hopopts={0x5e}]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2841, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002580)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6}}, &(0x7f0000002680)=0xe8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x109081, 0x34) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000002780)={{{@in6=@private1, @in=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0xc, {0x1, 0x3, 0x0, '\x00', {0x7ff, 0x0, 0x80000ae3, 0x5, r6, r7, 0x8000, '\x00', 0x6, 0x3, 0x1000000000001, 0x2000004, {0x1, 0x6}, {0x3, 0x45}, {0x14000000, 0x37}, {0x0, 0xa02}, 0x22e3, 0xfffffff8, 0x80000000, 0x5}}}}) write$FUSE_ENTRY(r1, &(0x7f00000026c0)={0x90, 0x0, r2, {0x4, 0x2, 0x0, 0x6, 0x1, 0x40, {0x3, 0xa9, 0x2, 0x500000000, 0x7, 0x8000, 0x4, 0x7f, 0x3ee, 0x1000, 0x0, r3, r7, 0x8001, 0xf8b}}}, 0x90) 1m47.621029007s ago: executing program 0 (id=16): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2814000, &(0x7f00000002c0)={[{@block_validity}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@quota}, {@nomblk_io_submit}, {@grpjquota}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x24ab4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb"], &(0x7f0000001f80)=""/211, 0x18, 0xd3, 0xb, 0xfffffff9}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x8b8, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r5, &(0x7f0000000080)='\x00\x00', 0x2}]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) write$cgroup_int(r0, &(0x7f0000000080)=0xa, 0x12) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xc00) 1m46.622055238s ago: executing program 0 (id=36): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0xa, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="000000000000f1000000001b0000000018000000000000000000000000000000950000000000c20d248a22212c010000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x43}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x7, 0x24, 0x68, 0x0, 0xc, 0x21, 0x0, @rand_addr=0x64010100, @local}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x10500, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x9, 0x6, 0x904, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_COMMENT={0xc, 0x1a, '-$^!-#)\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) write$P9_RWALK(r3, &(0x7f0000000180)={0x57, 0x6f, 0x2, {0x6, [{0x4, 0x4, 0x7}, {0x40, 0x0, 0x4}, {0xa058db7832bd926, 0x4, 0x5}, {0x10, 0x2, 0x3}, {0x20, 0x1, 0x6}, {0x80, 0x3}]}}, 0x57) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r5) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)=ANY=[], 0x28) 1m46.240830794s ago: executing program 0 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0xac}}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) msgget(0x2, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m45.869623079s ago: executing program 0 (id=48): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) splice(r0, 0x0, r1, 0x0, 0x7c1f, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) r3 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x2, 0x0, 0xfffffffb}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x10400) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) write$binfmt_aout(r4, &(0x7f0000000940)={{0x10b, 0x7, 0x93, 0x215, 0x44, 0x4e, 0x39a, 0x5}, "ac9438ea3d2cc96d077be53a725a3f4d222bdbde1e8ec8386c95e2c6099b34a1adf844c261c7ac983d5e221f2dfef82d3056cbd0369607412b7c242abd4e057fe7e788e63e62ce22f2dc3430108acb3fc4255ca4a2477d7ad8f7da593f33e059255c0ac4b3360d6f7d6d16e8d2291c3501119a36a085ac5600d5edd36b4ea04e2b694ce5a7f5197e2f9aa292675d3c3889c3ef", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xab3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3005840, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000300)='./file0/file0\x00', 0x5000, &(0x7f00000003c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\boE\xf1l\xd9\xa6\x94/dev/input/mice\x00'}}, {@seclabel}, {@hash}, {@subj_role={'subj_role', 0x3d, '/dev/input/mice\x00'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_gt={'euid>', 0xee00}}]}}, 0x1, 0x0, &(0x7f0000000600)="b050f3e6d787c9ea619ab1d044d4eb6266c81585a378ef1f261796e3a0039728a45756100277a5be067e059158c7b383ca085ab438333fe536c140c265ab1f89cd6bb6ca5a90b4fc6cd588665c7032fee329ea2769ad8ec436d3c2e48f1a04bfcf564c169f2795b91f4fb74f68be41799b57ff3858af2311e64739a5b0fc6c09027268cfd6eab2e6e75016b797aba4d0a66d452c537f49ccce7f225b4e2065afd909722d5812cb9c6d8b6bdcc1436ba784887ee77392103feb26d82baeea14d57e7f7f2af6f315742d9c5cb6a53999c65543ea0e556de0ff90c57c0b01ac2a") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x4000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) open_tree(r5, &(0x7f0000000700)='./file0\x00', 0x8000) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000900)='./file0/file0\x00', 0x0, 0x2185099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000200)=""/256) 1m44.298679838s ago: executing program 0 (id=61): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x31c4, &(0x7f0000000080)={0x0, 0x7977, 0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) read$char_usb(r6, 0x0, 0x0) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbc, 0x10, 0x1, 0x7b, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x200, 0x1000002, 0x23}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0xc02, 0x40000001, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x2, 0x26d}}], 0x1, 0x0, 0x0) 1m44.224728068s ago: executing program 32 (id=61): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x31c4, &(0x7f0000000080)={0x0, 0x7977, 0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) read$char_usb(r6, 0x0, 0x0) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbc, 0x10, 0x1, 0x7b, 0x0, r6}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x200, 0x1000002, 0x23}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0xc02, 0x40000001, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x2, 0x26d}}], 0x1, 0x0, 0x0) 1m41.569092209s ago: executing program 2 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000020000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300f6657468315f6d61637687d7700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) 1m41.568731883s ago: executing program 2 (id=92): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@auto_da_alloc}, {@jqfmt_vfsold}, {@dax_never}, {@usrjquota}]}, 0x1, 0x61d, &(0x7f0000001680)="$eJzs3c9rHGUfAPDv7CZp0uZ90768iA2KAQ8tSNOkFqtebOvBHgoW7EHEQ0OT1NDtD5oUbC20BQ8KCiJei/TiP+BdevcmgnrzLFSRioKWrMzsbLtJZps07e4mnc8Hdnfmmdl5nu8+fTrPs5NnJ4DSGkufKhE7IxZPJBEjLduGo7FxLN/vzu9XTqaPJOr1t35LIsnTmvsv5q/b0qckYjAivjsc8b/qynznL10+PVWrN1yN2Ltw5vze+UuX98ydmTo1c2rm7OS+l/cfmHhlcv/kY4lzW/565Oibz3z64XsvzX5f25PEwTje/8F0LItjHepJQeJYjMViHmJrel9EHEgXCj6XzWZNIWzpfDlYn2r+77E/Ip6Kkahmaw0jMfdJTwsHdFS9GlEHSirR/qGkmv2A5th+bePg4x3ulXTP7UONAdDK+Psa343EYDY22nonaRkZNb7b2P4Y8k/zuHtl9Eb6iCXfQ/x1r3b6HkM+7Vy7HhFPF8WfZGXbnkWaxl9ZMtZPImIiIgby8r2+jqxbj9X0iN/DPHwhHiL+1nqoRMTB/DVNP7zO/MeWrXc7fgDK6dah/ESenY3vn//Svkez/xMF/Z/hgnPXevT6/Ne+/9c83w9m/Z7Ksn5Y2mc5VnzI/uUJP3985PN2+bf2/+5eSbJyNPuC3XD7esTosvg/SoPN+z9p/ElB/ae7nDi4tjze+OHXI+22LY1/9Ea346/fjNhVOP653ytNlx5wfXLv7FxtZqLxXJjHN9+++1W7/Hsdf1r/W9vE31L/leXvSz+T82vM4+tjN88MtNk2vGr8lV8GksZ4s3mM96cWFi5MRgwkR/NdWtL3PbgszX2ax0jj3/18cftf8u//+tLjDLUOYFZx/u3Td9ptW0/9t1xMXqyvsQztpPFPr17/K9p/mvbZGvP4852Lz7bbVhB/RB7/0KMEBgAAAAAAACVUya7BJpXxe8uVyvh4Y77s/2NrpXZufuGF2XMXz05H7M7+HrK/0rzSPdJYT9L1yfzvYZvr+5atvxgROyLii+pQtj5+8lxtutfBAwAAAAAAAAAAAAAAAAAAwAaxLZ//37xP9R/Vxvx/oCQ6eYM5YGPT/qG8sva/4hZPQBk4/0N5af9QXto/lJf2D+Wl/UN5af9QXto/lJf2DwAAAABPpB3P3fopiYhrrw5lj9RAvq3a05IBndZfkFa/2oOCAF3nHA/lde/Sv+n/UDpF/f8V/s5/HLDzxQF6IClKzDoH9Qc3/luF7wQAAAAAAAAAAAAAOmDXzvbz/9c0NwDYtEz7g/J6hPn/fjoANjk//Q/lZYwPrDaLf7DdBvP/AQAAAAAAAAAAAKBrhrNHUhnP5wIPR6UyPh7xn4jYHv3J7FxtZiIi/hsRP1b7t6Trk70uNAAAAAAAAAAAAAAAAAAAADxh5i9dPj1Vq81caF34Z0XKk73QvAtqF/J6LR7yXZF0/2MZioieV0rHFvpaUpKIa2nNb4iCXZiPjVGMbKHH/zEBAAAAAAAAAAAAAAAAAEAJtcw9Ljb6ZZdLBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdd//+/51b6HWMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDm9G8AAAD//yhFQh8=") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf250900020073797a3200000000080041007369770014003300766972745f77696669300000000000e68f8d520760cb451b850209d835c19fa44a14ea2462631c5cf0c14807ac"], 0x38}}, 0x0) (async) r2 = syz_io_uring_setup(0x3b3, &(0x7f00000001c0)={0x0, 0xa96a, 0x4000, 0x2, 0x1b4}, &(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(0x0, 0xfffffffe, 0x2, 0x2010, r2, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a3f4fc2c9a6bb6a7a00e70a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 1m41.267894983s ago: executing program 2 (id=97): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x18, 0x140d, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000080}, 0x24044890) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x8, 0x80cb, 0x3, 0x40, {{0x26, 0x4, 0x2, 0x5, 0x98, 0x66, 0x8, 0x10, 0x2f, 0x0, @loopback, @remote, {[@timestamp={0x44, 0xc, 0x77, 0x0, 0x6, [0x0, 0x2]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x6, 0xe, "c9a739b1ae5565957a9f7f29"}, {0x7, 0x5, "12bb27"}, {0x2, 0x2}, {0x5, 0x4, 'e}'}]}, @end, @cipso={0x86, 0x47, 0x1, [{0x1, 0x11, "2e7f552925421e555f96ffbf284143"}, {0x2, 0xa, "0d8a740dce1fee4a"}, {0x3, 0x6, "10ba747f"}, {0x0, 0x8, "4c60426b91e1"}, {0x1, 0x8, "d0a2aca9d9bf"}, {0x5, 0x9, "9d40b35f8b3cf1"}, {0x5, 0x7, "71dcb4233c"}]}, @cipso={0x86, 0xf, 0x0, [{0x7, 0x9, "740bdb1d8568a3"}]}]}}}}}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0xc, r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000002238030008000a00", @ANYRES32=r10, @ANYBLOB="2400128009000100626f9c1190905c4e234f00000000000200"/36], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r14, 0x4008af25, &(0x7f00000003c0)={0x1}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r13, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r13, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0xd6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000400)={0xaac, r1, 0xb03, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0xd3, 0x4, "e0f5686178fc98e12fb9fc45732f8a2685f21c8d0c69a35561a55f2a3cffb2882debe4150f3a6f216bc630a5ec9e63c51c80da3fc53a4e0527a5d9bd50b320f43cc4a9875f706572e274465c243685434b9f0e786d4141015cd78ccdb34cf1ce913efea5583412d3eb8c241c34ae0eef2599125ec91c55492dd036f2565eeadf2fd3b7eebd2c84eba45af17597ded5ecb59505951d33cfef6f27bdd520213349e212e9ae1b58629f0a6407a758d2da61110a2050b9cf76cc19c1cef198dde1abed699057ae603f1171e42875934de8"}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4b5f1a45}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1386}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xa0, 0x5, "a443e15c8fb82e49517391ca1f9dc4d429ce9c376bae60b9bf24232db93a8afde741bfc466ab047f525cef6dba3a8fbf44bb07ca7ed63e27b60cd4125a6a694e96bdeffaaaf99c8664176cbb2540b9f758694541d5f8bfb381743039b3b8976378c3d4ad917173c8b649bbbb592c18944ef2d20abb94036d5cb73e66ab6a9db110bab4f0a117ec7635e9ab6a034e89995b3118c3f871950a2b4eb315"}, @ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "7bff4050d826e80e78b215fb4bfd84ce4b50c6a22c95b45c"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "f71a3b2cc20c86e5bbb3bc0a5ff3c4881af7af847f868d6d203561f41ec308d28a58f6c23af4f4fc548fbca33282203a4de508a190843c9ab8a5689168fdc6c2c2d3423b350ed67904f778e4f61369830c070369141ab1866f392bca095ce5fc9a2ff25f5f3d57a5966400c5c58c79933f2cab4c5025aa20e07b9e52f30b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xdc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "42c194361ea39346fd9e9871d228502eef7d41ebd733392074e6b924da8041fea5cc260cbc33140b186c903a0f032f353da99b5769efc6c48ca410936a97ba5928e79cf7254e6d0c2541ccfc82ad9df48688ed735845ffeae5aaca9c7fec4e9fca915093a1011b4035cae96bd47df7b693d818265d803cfd1aee7845980bd21c8f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "d5707684880633e0c69fdf055ed6876cab730563a14e6975e2decf1a5f986ad2c8f0955d90cedc23d6f6e51c223e424d24a91361809aa009d515b175"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x400, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfe, 0x5, "92450188164a5f113fbd1cd56d4517ea63d3560e42a7b65dbd95ffe18bb9ed6483aa9b99e424f4391613473a7b8d6410e21386b2eb493f229d0e225e999e8b3f5946639abf60130928ff25bdfb132040053d662366ccd9c3412dbc60568ce900b04706d7705eae6113583a467bb75edf4366acbdb044a226a0a93b29625444e8d3da4e2154ea912462f1020e21a6295d6ca4a88af5e808a8d062b89489a7fb1ea1823220167706ed6c4f3a81a7be02e76f99ba3b850a65cfbb5cd7838f1f0d9fb8a93a336067845c5b36fdcb1cc34f8d43a727ee91c96e7faa9dbf504a915d7982f0521cfa55bd801b27c4e6c4406e633cf7b585014b505eb3fa"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x180, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\':^(&]$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&)$^\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-,{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}/&-^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@.\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fb}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3b3a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#-!-$#%{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '--[^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!:#)@.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '#'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xf5./\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '{,,$\\\'+%&{]]*+-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+,\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "735f48bc0000b9c73ccabbcce9a7541a8216ea61fce1319987340fe0a1005e01f35bb76318afa7f02e96007ce6d39160b0d12f2907d9eb2937a4094993875de995e08a606e14b4c876ed038112f1ac39534fc9c3d1f6a2cfaf5f08331d04013d6654ac3303a5fd2692d00e5617fbe19b7e87960e6c3064a167fc8a8eaba559797f1c53b4058599c20b815faf918b8fa09a2e1eb95e2ab48efc0b2cd453d3b87382910c7442f87fabb0a1151548b7a3ec7b2fe69b6b10fc5e5a8ac652ad89931b33394f40859f4dac7f55278cb50e1204"}, @ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "e9cf76aa8a48eb8ae61850f694a17ee06d5297838f6724f8946a43e2666b2be7dd55e154c83f0960954590be07e482fe974980408b987a0ea7a9df27d1dd5a038a2060e50df265e948611e59d5f64b7b16187243fd1f720efcd6b53047ce0b23da5ba842ead7de08b427acba756d6258585fa79def48dbc06de1b8a9a7dab82e"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x298, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0xa6, 0x5, "1ea1c99bf5ccb4ccb2704831049f5b0366dc9740654e16324bf66d71066cde2e9658c5362f5865a41bfef85d7a59fae721a82b1675955b7d060f63921be485193afe0e7bfd28f10b9900f21a8c443a619b786b2afdef0b89e1ddd9b32c673166a16b6ca961e23efe817bce3ddd86248608eeed1352a86c97f5d9fbbf3dbc5e4c43e9358f47f99570f28fd6acdb5f9e4d7e254393d42b78d7a7c0299640447a8ae299"}, @ETHTOOL_A_BITSET_MASK={0x6c, 0x5, "8f2123f1eed39bb22391f2c123d3894ead348aa79b2afc7dcfdd565b678b446055b074b2d5841fdfb26c0aeff17376bc4ef6bae095c715ba3a2745b16c7e606d730018255c61304bfbd653712bfe02fe7d4fc5d9452db4cbb72caa8470236279fcad09270d7fb81e"}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c00}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!*(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\(}\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',l+]/#)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{%$(\':\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':\xb2&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0xaac}, 0x1, 0x0, 0x0, 0x4080000}, 0x40) 1m40.897751877s ago: executing program 2 (id=104): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb1}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x8012) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f00000026c0)='./file0/../file0\x00', 0x4000, 0x7ff, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180), 0x18000, &(0x7f0000002800)={[{@grpquota}, {@gid={'gid', 0x3d, r5}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x78]}}, {@grpquota}], [{@subj_user={'subj_user', 0x3d, 'syz2\x00'}}, {@euid_eq={'euid', 0x3d, r6}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@measure}, {@obj_user={'obj_user', 0x3d, '\'*#'}}]}) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x8, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m40.808849264s ago: executing program 2 (id=105): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2814000, &(0x7f00000002c0)={[{@block_validity}, {@auto_da_alloc}, {@noblock_validity}, {@nomblk_io_submit}, {@inlinecrypt}, {@quota}, {@nomblk_io_submit}, {@grpjquota}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @local}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) fallocate(r0, 0x0, 0xfff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb"], &(0x7f0000001f80)=""/211, 0x18, 0xd3, 0xb, 0xfffffff9}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x8b8, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r5, &(0x7f0000000080)='\x00\x00', 0x2}]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) write$cgroup_int(r0, &(0x7f0000000080)=0xa, 0x12) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xc00) 1m40.233987494s ago: executing program 2 (id=111): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008046, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) write(r0, 0x0, 0x0) 1m40.098627558s ago: executing program 33 (id=111): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008046, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) write(r0, 0x0, 0x0) 1m38.468134618s ago: executing program 3 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x88be}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x6, 0x1c, 0x64, 0xe000, 0x1, 0x2, 0x0, @empty, @broadcast}, {0x11, 0x1, 0x0, @multicast1}}}}}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x51}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6}, 0x70) 1m38.1365472s ago: executing program 3 (id=133): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6, 0x0, 0x4, 0x180}]}) socket$unix(0x1, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x1) r7 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001dc0)={0xffffffffffffffff, r10, 0x2b, 0x0, @val=@tracing={0x0, 0x80000000000000ce}}, 0x20) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x8000}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd88, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"], 0x0) 1m37.197431045s ago: executing program 3 (id=137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7}}]}}]}, 0x48}}, 0x20040084) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0xbc}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)='s', 0x1}], 0x1}, 0x4011) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1m36.99516982s ago: executing program 3 (id=142): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@quiet}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@rodir}, {@fat=@dos1xfloppy}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_winnt}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000140), &(0x7f0000000180)={'U-', 0x6}, 0x16, 0x3) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x80010, r0, 0x76000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x44000, &(0x7f0000000500)={[{@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x33]}}, {@quota}, {@huge_within_size}, {}, {@inode32}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x78]}}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}], [{@appraise}]}) 1m36.915323172s ago: executing program 3 (id=143): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000002c0)={0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000080ffff8910180000000000ce050000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fstatfs(r0, &(0x7f00000001c0)=""/109) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000140)=0xca4a) write$ppp(r0, &(0x7f0000000100)="4227ad", 0x3) getdents64(0xffffffffffffffff, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8e9) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000000c0)={0x2, 0xe38, 0x7fffffff, 0x4, 0x6, "81a8a7991d22f8bae493d194d32fcbba0e47d1", 0x2, 0x80000000}) 1m36.420526204s ago: executing program 3 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async, rerun: 64) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)="05", 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x3, [{0x7, 0x1, 0x8000}]}]}, {0x0, [0x0, 0x30, 0x61, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x2}, 0x28) 1m36.31432497s ago: executing program 34 (id=148): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async, rerun: 64) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') (async, rerun: 64) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)="05", 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x3, [{0x7, 0x1, 0x8000}]}]}, {0x0, [0x0, 0x30, 0x61, 0x2e, 0x5f, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x2}, 0x28) 7.711449712s ago: executing program 1 (id=984): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x670, 0x5, 0x500, 0x228, 0x0, 0xffffffff, 0x0, 0x228, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, 0x0, {[{{@ip={@multicast2, @local, 0xff000000, 0xffffff00, 'macsec0\x00', 'wg1\x00', {0xff}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0x0, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e26, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x2}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'nicvf0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "c81f"}}, @common=@ttl={{0x28}, {0x2, 0x6}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @multicast2, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r6, 0x80047453, 0xffffffffffffffff) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x2, 0x4) r7 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r7, 0xc1086201, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x2a0471a, &(0x7f0000000240)={[{@abort}, {@abort}, {@prjquota}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x82, 0x4a4, &(0x7f0000001740)="$eJzs3M1rXFUfAODfvfno+/Yz72vVthaNFjH4kTRp1S7cKAouKgq6qLqKSVqK00aaCKaENorUjSAFXatLwb/AnRtRV4LgSvdSKJpNq4iM3Jl7zcwk00nSZCbtPA9Mc86ce+ecc8899557TmcC6FqD2T9JxM6I+Dki9lSj9RsMVv9cX5yf+GNxfiKJcvnl35LKdtcW5yeKTYv9duSRoTQifT/JM6k3M3f+zfFSaepcHh+ZPfPWyMzc+cdOnxk/NXVq6uzYsWNHj4w++cTY4xtSz6xe1w5cmD64//lXL78wceLyG999mZV3Z55eW4916V/+1mBW8d/LFY1pD8Z/byq7rWZXTTjp7WBBWJOeiMiaqy/r/+Vy+WJN2p547r0Wu+/Y5OIBmyi7N21b4f38vrhQbiq5YSpwK0ii0yUAOqO432fPv8WrjcOPjrv6dPUBKKv39fxVTemNNN+mr+H5diMNRsSJhT8/zV6xEfMQAAAtfDjxyfF4dKXxXxp31Wy3O19DGYiI/0XE/yPijojYGxF3RlS2vTsi9q0m05oFgsaloeXjn/TK+mvXWjb+eypf26of/xWjvxjoyWO7KvXvS06eLk0dzo/JUPRty+KjN8jj62d//KhZWu34L3tl+RdjwbwcV3obJugmx2fHK4PSDXD13YgDvfFXuVwu6v938WhQtFISEfsj4sDaPnp3ETj98BcHm23Uuv7LPm7JBqwzlT+PeKja/guxOD+xdFiTulDD+mT/rqX1yZH/RGnq8EhxViz3/Q+XXmqW/+rrvzmy9t9ef/7nKZ/N5YGB12vXa2eiycrlzqZ5XPrlg6bPNOs9//uTVyrXo2LZ9Z3x2dlzoxH9yfFKvO79mn0r8bGl7bP6Dx3KUor6F3umlWtc5O1/T0QczNfL7o2I+/Ky3x8RD0TEoaa1j/j2meZpW6H9J2vaP4ni+lec//suVP8W7T+35sC2+OarZvmvrv2PVkJD+TuV618Lqy3g+o8cAAAA3DrSysxNkg7/G07T4eHqf+zdG9vT0vTM7CMnp98+O1md4RmIvrSY6dpTMx86mizkn1iNj+VzxUX6kXze+OOeqMSHJ6ZLkx2uO3S7HU36f+bXnk6XDth0K62jja3whTbg9tPY/9P66MUX21kYoK18Xxu6V4v+n7arHED7uf9D91qp/19siFsLgNuT+z90L/0fupf+D92rof/3xE+dKgnQRuv4On+p+DmG9f0agMDNB/q3QDEi3SpHo3Vg65yrr7U50+LWvvbdO3hRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2ED/BAAA//8GqOkq") chdir(&(0x7f0000000140)='./file0\x00') statx(0xffffffffffffffff, &(0x7f00000001c0)='./file2\x00', 0x4000, 0x2dd8806920477201, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x22002, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@grpid}, {@grpjquota, 0x22}], [{@dont_appraise}, {@seclabel}, {@subj_user}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x35, 0x58, 0x66, 0x35, 0x65, 0x64], 0x2d, [0x63, 0x62, 0x34, 0x38], 0x2d, [0x36, 0x65, 0x36, 0x37], 0x2d, [0x61, 0x30, 0x53, 0x38], 0x2d, [0x62, 0x62, 0x31, 0x30, 0x63, 0x66, 0x34, 0x35]}}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r8}}], 0x2}, 0xc4, 0x486, &(0x7f0000001280)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x52) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r10, &(0x7f0000005ac0)=[{{&(0x7f0000000d00)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c, 0x0}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x4dc7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0, 0x0, &(0x7f0000006ec0)=ANY=[@ANYBLOB="880000"], 0x1310}}], 0x2, 0x2000fb00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 3.420799432s ago: executing program 5 (id=990): r0 = syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0xfd, 0x2b0, &(0x7f00000007c0)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000e8c0ada6e200000000feffb3ff00000800", @ANYRES32=0x0, @ANYBLOB="070d000001a0010014000300776c616e3100000000000000000000000a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000740)=""/126) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x1e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9da, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f0000000140)='./file0\x00', r3}, 0x18) sendfile(r0, r0, &(0x7f00000000c0)=0x8000000000000000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x5035c1, 0xa9) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r6, 0x0, 0x6, 0x8) close(r5) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x93) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='l'], 0x9, 0x0) 3.37274602s ago: executing program 1 (id=991): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x24ab4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], &(0x7f0000001f80)=""/211, 0x18, 0xd3, 0xb, 0xfffffff9}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) io_setup(0x8b8, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 3.112835889s ago: executing program 5 (id=996): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80800) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'filter\x00', 0x4f, "8e64e9cbd6795830c9aa20accbaca03a63e144c3db9d936c472aab8fe764df89b7db4dcc7f1c439429efcd4f34d44f93b466721c08680bbfe353c095c729bc4f889ef80e4de51b088ca8f508e73b43"}, &(0x7f0000000100)=0x73) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x41}, @loopback, 0x1b, 0x1b}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000200)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000280)='/)$(\x00', &(0x7f00000002c0)="a32752f550321c99ec57710a2531857df639ad5a744902630fb11fc5f93fe354b249b424a9a7737a8fb35ae3d676ddab3aa18342a5c50d410f85e9ec4fd532548ba03ca4903d4e60e69556ca49a45f322b8bdadcf95ed0226e2c2502478d7e8ca30beb1366b00db0d138f2c3350e55ef1b8d4a11c01a70c27db4a8a09aed5e2e6f37b44833a687e1c7334761e90d59bdeab4523305baf1cfc7e49928abd46be023e948448fa404497eb84c43acb3784aa8c1310137c0108d1ddf8e69ef98bcdd5901a3f7b0c9645a31d260be1e55d7c3f53d21618f6fe5c25b84e459", 0xdc) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000003c0)) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r4, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x401, 0x30}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x94c29e79282c1628}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d1dace3037054cd21832bcbd953f9c47"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000700)={'sit0\x00', &(0x7f00000006c0)={@rand_addr=0x64010100, 0x0, 0x0, 0x30, 0x0, [{@private}, {@multicast1}, {@loopback}]}}) r5 = syz_open_dev$dri(&(0x7f0000000740), 0xb, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000780)) syz_emit_ethernet(0x61, &(0x7f00000007c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="dd4e328962da", @void, {@llc={0x4, {@snap={0xaa, 0x0, "87", "f6f247", 0x1, "28f9dd1a711a480aaea314908d9f808375cf1e55d1888644651eb8366ad409538f7f9a3498b485624a8025b993e6eaf7a925135511d2e2dbe9b3134d3f83171ac653438f5c3c8b11ab31fc"}}}}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000840)={0x0, 0x11, 0x8}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={@multicast2, 0x0, 0x0, 0x40, 0x0, [{@dev}, {@initdev}, {@loopback}, {@dev}]}}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000940)={'nat\x00', 0x0, 0x0, 0x0, [0x200, 0x3, 0x4, 0xdca7, 0x3, 0x100]}, &(0x7f00000009c0)=0x78) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000a00)={0x0, @aes128, 0x0, @desc1}) sched_setscheduler(0xffffffffffffffff, 0x5, &(0x7f0000000a40)=0x1) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000a80)=0x3, 0x4) 3.094405075s ago: executing program 6 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c7ffffffffffffffe4"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2.947945798s ago: executing program 5 (id=999): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x55, 0xa}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) pipe2(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}]}}) 2.806467933s ago: executing program 7 (id=1001): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder0\x00', 0x802, 0x0) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x11, r1, 0x4e000) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder0\x00', 0x802, 0x0) (async) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x11, r1, 0x4e000) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) 2.804808206s ago: executing program 6 (id=1002): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) close(r1) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e63, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@dontfrag={{0x14, 0x29, 0x32, 0xffff}}], 0x18}, 0x3400c0d4) (async) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e63, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@dontfrag={{0x14, 0x29, 0x32, 0xffff}}], 0x18}, 0x3400c0d4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000027c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xdf, 0x1000}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 2.786900172s ago: executing program 5 (id=1003): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 2.700183828s ago: executing program 7 (id=1004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x1) ioctl$TCSETS(r1, 0x8924, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="1806000000000000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000008500000061000000bf91000000000000b5020000000000002800000000000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe26}, 0x94) 2.64440426s ago: executing program 6 (id=1005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000fa0000000000000000001e000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1d, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa10000000000000701ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000015000000760000008500000061000000bf91000000000000b5020000000000002800000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 2.642339504s ago: executing program 5 (id=1006): prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) (async) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) (async) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003f40)=[{{&(0x7f0000000380)={0x2, 0x6e20, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c844) (async, rerun: 32) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff900ce5c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2) (async) r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc}, {0x8, 0x3}, {0xffff, 0xffe0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) (async) r12 = socket(0x400000000010, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r14, {0xc, 0xc}, {0xc, 0xfff1}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x844) (async, rerun: 64) pidfd_getfd(r6, r7, 0x0) (async, rerun: 64) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="c002000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000300000008000000060000000000000009000000000000000400000000000000fc00000000000080030000000000000000000000000000000100008058000000040000000090000009000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f30000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0801000000000000030000200000000002000000000000000104000000000000090000000000000088bc000009000000040000000000000005000000000000000500000000000000060000000000000003000000000000002e01000000000000af06000008000000fafffff700c0000004000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="04000000080000000a000000ffffffffffdfffff01040000000000000b"], 0x0, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) (async) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r15 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r15, &(0x7f0000000200)='\\x01020304 2000000000 0 0 0 krb5 \\x00000000ffffff7f0000000000000000120000000102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f10', 0x8b) file_getattr(r6, &(0x7f0000000a00)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000009c0), 0x18, 0x400) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000900)={[{@commit={'commit', 0x3d, 0x2}}, {@nodiscard}, {}, {@usrquota}, {@resgid={'resgid', 0x3d, r5}}, {@nodioread_nolock}, {@dax_never}]}, 0x1, 0x514, &(0x7f00000001c0)="$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") (rerun: 32) 2.522682544s ago: executing program 6 (id=1007): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000540), &(0x7f00000005c0)=0x8) pselect6(0x40, &(0x7f0000003d00)={0x9, 0xe1c8, 0x8, 0x1000, 0x0, 0xf5, 0x40, 0xb08}, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=@newtaction={0x1b4, 0x30, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{0x1a0, 0x1, [@m_connmark={0x19c, 0xb, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xb8e5, 0x8, 0x3, 0xfffffff2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x10000000, 0x0, 0x992}, 0x380}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0xffffffffffffffff, 0x4, 0x2}, 0x56}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x10000, 0x2, 0x48, 0xffff0000}, 0x63fe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xcc, 0xccf, 0x1, 0x0, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4000, 0x8000, 0x7, 0xb28d, 0x3}, 0x95}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x20000000, 0x202, 0x7}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x9, 0x20000000, 0x9, 0xa521}, 0x7}}]}, {0x89, 0x6, "c4dcb08aad33090f1e34215f36f3fa4a8be6921942b529851029a0bb7a62c3c81da33cbfec7ef131c0720d9a015d61f86314c0036ae795188c67dc5237ddef9a200ef3dca0b3027871176514c69ff692185297bb872f9c638d8e5cc183d29a07f39c374fd18d492e08b01486c75def91d81df5048706923417b9d078244b413884efa169e3"}, {0xc}, {0xc}}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000a00)={0x7d, {{0x29, 0x4e24, 0x7, @loopback, 0xd611}}}, 0x88) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r5}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0xf, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0x0) syz_emit_ethernet(0xdf, &(0x7f0000000b40)={@local, @dev, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0xa, 0x4, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x4, 0x33, 0x0, @remote={0xac, 0x24}, @remote, {[@lsrr={0x83, 0x13, 0xad, [@loopback, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, "6dc3060000000000000003b5912e27ecfbfdbb03474a2466a116e30e0df579c02b2a72eabbb0200fe526498ee3a751e882c1e16f12dbe7f3d9a7acedb39a233041a851cf6929c630e8a1da36982ae132aa9424e37d1a11d3389901000000b7b1a4cf40ed33ca1f3ffe594d85c4ea2a4db2370a8cece750800e85bcec545dc14bf7dbcb20b65d16474604645319a283a0b864e8adb41c4e43edaba631747e000000"}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="07000817a9000000511a71b32ea896fe71fd3d97388ccfd4c46eb26b118b70a5ae8ea837aeccf3b3e11039413643bfec91d84fade484048c5be2276e0f8073903d2874447108063496e40d46ae1b63d745e6827ecb4c38ecf58389f7df7d65c48f0ac87ea74f3f8f469c64729ae257bbf1613cfb11bea657c8dd60400b79f4cd0074bc7120c381b88a59154461f6c174da98aad71c7d14dc07b4ff2cb8fa2497", @ANYBLOB="5c4da1697b14c51db7e1dade5bd8664fa5fb04d7a371ad45fc74af6e96707bca0ae3e13efbd41a51cbce16ec874386ed5cf4a21abbd82fc107bfffc8f520f95c44124c248700532a8419eb3d", @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESDEC=r1], 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xe5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400), 0xfe, 0x59c, &(0x7f0000000440)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xff04, 0x0) 2.520434651s ago: executing program 1 (id=1009): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002400)='.\x00', 0x0, 0xa0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, 0x0}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x1, 0x2, 0x8000, 0xffffff01}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r6, &(0x7f0000000040)}, 0x20) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x3, 0x52a9, 0x20008000c61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x204441, 0x0) fallocate(r7, 0x0, 0x2000, 0x8003) 2.377519235s ago: executing program 7 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x321) syz_read_part_table(0x107a, &(0x7f0000001280)="$eJzs0LFJREEQBuB/udt3HgqCTViGpuY2YyAqWIGpgR3YgqklCQYju95pBXrJ9/GYN8zs/sGGg9q+9fMkdZdss5qjo+R1/b192p2q04zlRyWftdnkqtLSkywjIqmqfWC1qmpJT8/ty8PPeBrN5W7SZ11mPTmev/fc53lJHpM2v7FdZzXa35Trs4ub/dX+5w8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/gKwAA//+J6CLW") r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80800) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) socket$packet(0x11, 0x2, 0x300) 2.218931703s ago: executing program 4 (id=1012): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x140002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) (async) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x1000000}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x1, 0x3, 0x0, 0xeacf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}}, 0x0) 2.062079392s ago: executing program 4 (id=1013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000bc0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = timerfd_create(0x8, 0x0) (async) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0xc, 0x4, 0x7, 0x0, 0xba, 0x1}) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) (async) timerfd_settime(r5, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) 1.98500044s ago: executing program 7 (id=1014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x2841, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20040084) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0xbc}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)='s', 0x1}], 0x1}, 0x4011) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 1.836465003s ago: executing program 4 (id=1015): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x70, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010101}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x70}}, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x244ac, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) 1.584609032s ago: executing program 6 (id=1016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100, 0x2}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x14, 0x0, &(0x7f00000006c0)=[@acquire, @dead_binder_done], 0x0, 0x0, 0x0}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000600000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x65a080, 0xb) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x3, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) (async) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0xe, 0xb}, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) (async) r15 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r15, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r15, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) 1.556934006s ago: executing program 1 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffde9, 0x10, &(0x7f0000000040)}, 0x48) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x8100, r7, 0x1, 0x3, 0x6, @remote}, 0x14) 496.69877ms ago: executing program 7 (id=1018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac000000060a0b0400000000000000000200000080000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800b0001007470726f787900001400028008000140000000020800024000000003340001800a00010071756f74610000002400028008000240000000000c00044000000000000000020c00014000000000000000090900010073797a30000000000900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x800) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r3, 0x15, 0x0, @val=@iter={0x0}}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x37, 0x0, &(0x7f0000000280)=0x21) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x101401) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000000)={0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f0000000180), 0x1, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r10, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) 427.818354ms ago: executing program 5 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x80880) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB], 0x22) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x7f8) 427.020378ms ago: executing program 4 (id=1020): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20a7d52d1a3a1003}, 0x14048801) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000020605000000005f0987357913e83029c1a39d51027a00000000000000000005e9"], 0x2c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0xa2243) ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf25030000005800018044000400200001000a004e220000000500002d003a2d003a0040ffffe000000102000000200002000a00000000000000ff0100000000000000000000000000019c0000000d0001007564703a"], 0x6c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20040084) 327.872694ms ago: executing program 4 (id=1021): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000020000005787"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) (async) open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="08000000020000005787"], 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0], 0x1}) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) 318.467827ms ago: executing program 6 (id=1022): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x20}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) 316.219791ms ago: executing program 1 (id=1023): r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f3, &(0x7f0000000040)={'ip6gre0\x00', @random}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x3, 0x4, 0x7, 0xff57, 0x18, "c61c769df390df0d"}) r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000040)={[{@barrier_val={'barrier', 0x3d, 0x7}}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") ioctl$XFS_IOC_COMMIT_RANGE(r2, 0x40585883, &(0x7f0000000540)={r2, 0x0, 0x3c4, 0xe, 0x6, 0x4, [0xffffffffffffff85, 0x10000, 0x7, 0x0, 0x0, 0x7]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x7, 0x4, 0x3}, 0x50) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f00000005c0)=0x9, 0x4) (async) r5 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r5, &(0x7f0000000740)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x500, 0x80000, @empty, 0xfffffff8, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r5], 0x108}}], 0x2, 0xc040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) umount2(&(0x7f0000000080)='./file0\x00', 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) (async) preadv(r3, &(0x7f0000000480)=[{&(0x7f0000000140)=""/182, 0xb6}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000380)=""/238, 0xee}], 0x4, 0x0, 0x1) 40.825294ms ago: executing program 4 (id=1024): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4048040) (async) syz_clone3(&(0x7f0000000440)={0x100002000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket(0x10, 0x3, 0x0) (async) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0xfffffc51, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) (async) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 39.824018ms ago: executing program 1 (id=1025): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x74}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x9, 0x101000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x80000001, '\x00', 0x0, r1, 0x2, 0x0, 0x1}, 0x50) 0s ago: executing program 7 (id=1026): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@barrier}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xe1}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x100000001, 0x50001) unshare(0x2c020400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r2, r1, 0x12, 0xa, r1, @void, @value=r2}, 0x20) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ndmsg+0x88/0x9c [ 53.579457][ T6111] invoke_syscall+0x98/0x244 [ 53.579469][ T6111] el0_svc_common+0xec/0x23c [ 53.579481][ T6111] do_el0_svc+0x4c/0x5c [ 53.579492][ T6111] el0_svc+0x64/0x260 [ 53.579504][ T6111] el0t_64_sync_handler+0x44/0x104 [ 53.579514][ T6111] el0t_64_sync+0x198/0x19c [ 54.415741][ T6138] 9p: Bad value for 'wfdno' [ 54.415881][ T6138] 9p: Bad value for 'wfdno' [ 54.415996][ T6138] 9p: Bad value for 'wfdno' [ 54.416100][ T6138] 9p: Bad value for 'wfdno' [ 54.416192][ T6138] 9p: Bad value for 'wfdno' [ 54.416289][ T6138] 9p: Bad value for 'wfdno' [ 54.416373][ T6138] 9p: Bad value for 'wfdno' [ 54.416457][ T6138] 9p: Bad value for 'wfdno' [ 54.416536][ T6138] 9p: Bad value for 'wfdno' [ 54.416619][ T6138] 9p: Bad value for 'wfdno' [ 54.416700][ T6138] 9p: Bad value for 'wfdno' [ 54.416783][ T6138] 9p: Bad value for 'wfdno' [ 54.416862][ T6138] 9p: Bad value for 'wfdno' [ 54.432703][ T6138] 9p: Bad value for 'wfdno' [ 54.437176][ T6138] 9p: Bad value for 'wfdno' [ 54.437300][ T6138] 9p: Bad value for 'wfdno' [ 54.437384][ T6138] 9p: Bad value for 'wfdno' [ 54.437511][ T6138] 9p: Bad value for 'wfdno' [ 54.437600][ T6138] 9p: Bad value for 'wfdno' [ 54.437679][ T6138] 9p: Bad value for 'wfdno' [ 54.437771][ T6138] 9p: Bad value for 'wfdno' [ 54.437890][ T6138] 9p: Bad value for 'wfdno' [ 54.437993][ T6138] 9p: Bad value for 'wfdno' [ 54.438074][ T6138] 9p: Bad value for 'wfdno' [ 54.438156][ T6138] 9p: Bad value for 'wfdno' [ 54.438236][ T6138] 9p: Bad value for 'wfdno' [ 54.438316][ T6138] 9p: Bad value for 'wfdno' [ 54.438396][ T6138] 9p: Bad value for 'wfdno' [ 54.438482][ T6138] 9p: Bad value for 'wfdno' [ 54.438560][ T6138] 9p: Bad value for 'wfdno' [ 54.438641][ T6138] 9p: Bad value for 'wfdno' [ 54.438728][ T6138] 9p: Bad value for 'wfdno' [ 54.438820][ T6138] 9p: Bad value for 'wfdno' [ 54.591960][ T6152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.593415][ T6152] EXT4-fs: inline encryption not supported [ 54.594689][ T6152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.634397][ T6152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.674856][ T6155] EXT4-fs (loop5): Test dummy encryption mode enabled [ 54.684558][ T6155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.694767][ T6155] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 54.909082][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.000090][ T6182] syzkaller0: entered promiscuous mode [ 55.000138][ T6182] syzkaller0: entered allmulticast mode [ 55.177062][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.309008][ T6217] vlan2: entered promiscuous mode [ 55.310080][ T6217] vlan0: entered promiscuous mode [ 55.310320][ T6217] vlan2: entered allmulticast mode [ 55.310339][ T6217] vlan0: entered allmulticast mode [ 55.310353][ T6217] veth0_vlan: entered allmulticast mode [ 55.663327][ T6244] set_capacity_and_notify: 2 callbacks suppressed [ 55.663386][ T6244] loop7: detected capacity change from 0 to 1024 [ 55.663782][ T6244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.663793][ T6244] EXT4-fs: inline encryption not supported [ 55.663801][ T6244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.693609][ T6244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.700377][ T6253] loop1: detected capacity change from 0 to 128 [ 55.700748][ T6253] ext4: Bad value for 'max_batch_time' [ 55.848922][ T6260] can: request_module (can-proto-0) failed. [ 56.335014][ T6286] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 56.455576][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.480032][ T6290] __nla_validate_parse: 117 callbacks suppressed [ 56.481508][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.269'. [ 56.706230][ T6307] netlink: 'syz.4.274': attribute type 83 has an invalid length. [ 56.718078][ T6307] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 56.774256][ T6314] loop7: detected capacity change from 0 to 1024 [ 56.816712][ T6315] gtp0: entered allmulticast mode [ 56.817448][ T6314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.847422][ T6314] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.276: bg 0: block 112: padding at end of block bitmap is not set [ 56.859373][ T6314] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 56.859410][ T6314] EXT4-fs (loop7): This should not happen!! Data will be lost [ 56.859410][ T6314] [ 56.859423][ T6314] EXT4-fs (loop7): Total free blocks count 0 [ 56.859436][ T6314] EXT4-fs (loop7): Free/Dirty block details [ 56.859448][ T6314] EXT4-fs (loop7): free_blocks=0 [ 56.859460][ T6314] EXT4-fs (loop7): dirty_blocks=64 [ 56.859471][ T6314] EXT4-fs (loop7): Block reservation details [ 56.859480][ T6314] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 56.950385][ T6334] 9p: Bad value for 'wfdno' [ 56.950477][ T5587] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 56.953791][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.032112][ T6337] loop7: detected capacity change from 0 to 128 [ 57.034311][ T6337] EXT4-fs (loop7): Test dummy encryption mode enabled [ 57.061730][ T6337] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.065378][ T6341] gretap1: entered allmulticast mode [ 57.080134][ T6340] loop1: detected capacity change from 0 to 512 [ 57.092035][ T6337] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 57.094057][ T6337] EXT4-fs error (device loop7): ext4_validate_block_bitmap:423: comm syz.7.281: bg 0: bad block bitmap checksum [ 57.130623][ T6340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.139903][ T6340] netlink: 'syz.1.282': attribute type 3 has an invalid length. [ 57.148891][ T6340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.282'. [ 57.159226][ T5587] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.295746][ T6356] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 57.295746][ T6356] The task syz.1.282 (6356) triggered the difference, watch for misbehavior. [ 57.835166][ T6382] loop4: detected capacity change from 0 to 512 [ 57.842025][ T6382] EXT4-fs (loop4): Test dummy encryption mode enabled [ 57.843655][ T6382] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.869780][ T6382] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.870930][ T6382] EXT4-fs (loop4): 1 truncate cleaned up [ 57.871395][ T6382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.896427][ T6386] 9p: Bad value for 'rfdno' [ 57.902070][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.959100][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.041825][ T6397] netlink: 600 bytes leftover after parsing attributes in process `syz.4.291'. [ 58.042208][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.042310][ T6397] netlink: 600 bytes leftover after parsing attributes in process `syz.4.291'. [ 58.042435][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.042500][ T6397] netlink: 600 bytes leftover after parsing attributes in process `syz.4.291'. [ 58.042604][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.042671][ T6397] netlink: 600 bytes leftover after parsing attributes in process `syz.4.291'. [ 58.042782][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.042848][ T6397] netlink: 600 bytes leftover after parsing attributes in process `syz.4.291'. [ 58.042967][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.043032][ T6397] netlink: 600 bytes leftover after parsing attributes in process `syz.4.291'. [ 58.043148][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.043211][ T6397] netlink: 600 bytes leftover after parsing attributes in process `syz.4.291'. [ 58.043327][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.043394][ T6397] netlink: 600 bytes leftover after parsing attributes in process `syz.4.291'. [ 58.043503][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.043664][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.043828][ T6397] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.267545][ T6419] »»»»»»: renamed from vlan0 (while UP) [ 58.369739][ T6428] netlink: 'syz.5.301': attribute type 1 has an invalid length. [ 58.478626][ T6433] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 58.577732][ T6404] psci: CPU1 killed (polled 0 ms) [ 58.734811][ T6447] 9p: Bad value for 'rfdno' [ 58.880561][ T6460] loop6: detected capacity change from 0 to 512 [ 58.896613][ T6460] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 58.924192][ T6460] EXT4-fs (loop6): 1 truncate cleaned up [ 58.924740][ T6460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.954332][ T6464] loop4: detected capacity change from 0 to 512 [ 58.975726][ T6460] warning: `syz.6.308' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.997292][ T6464] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.309: corrupted in-inode xattr: invalid ea_ino [ 58.997329][ T6464] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.000322][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 59.000342][ C0] EXT4-fs (loop4): initial error at time 58: ext4_iget_extra_inode:5180: inode 15 [ 59.000362][ C0] EXT4-fs (loop4): last error at time 58: ext4_iget_extra_inode:5180: inode 15 [ 59.012157][ T6464] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.309: couldn't read orphan inode 15 (err -117) [ 59.012201][ T6464] loop4: lost filesystem error report for type 5 error -117 [ 59.028024][ T6464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.029065][ T6464] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.049431][ T6460] EXT4-fs error (device loop6): __ext4_expand_extra_isize:6455: inode #12: comm syz.6.308: bad extra_isize 62 (inode size 256) [ 59.059656][ T6460] EXT4-fs (loop6): Remounting filesystem read-only [ 59.118210][ T6476] evm: overlay not supported [ 59.179737][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.186404][ T6476] binder: BINDER_SET_CONTEXT_MGR already set [ 59.186461][ T6476] binder: 6475:6476 ioctl 4018620d 20004a80 returned -16 [ 59.186796][ T6476] binder: 6475:6476 got transaction to invalid handle, 1 [ 59.186899][ T6476] binder: 6475:6476 cannot find target node [ 59.186922][ T6476] binder: 6475:6476 transaction call to 0:0 failed 4/29201/-22, code 0 size 72-24 line 3252 [ 59.209747][ T6476] binder: 6475:6476 got transaction to invalid handle, 3 [ 59.209788][ T6476] binder: 6475:6476 cannot find target node [ 59.209819][ T6476] binder: 6475:6476 transaction call to 0:0 failed 5/29201/-22, code 0 size 0-0 line 3252 [ 59.264012][ T4808] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.284804][ T4808] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.537278][ T6494] loop6: detected capacity change from 0 to 1024 [ 59.611412][ T6494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.638476][ T6503] Soft offlining pfn 0x11f091 at process virtual address 0x20000000 [ 59.949061][ T6503] Soft offlining pfn 0x11eb41 at process virtual address 0x20001000 [ 59.964554][ T6503] Soft offlining pfn 0x134ad9 at process virtual address 0x20002000 [ 60.015621][ T6521] loop1: detected capacity change from 0 to 1024 [ 60.023231][ T6456] hsr_slave_0: left promiscuous mode [ 60.036553][ T6456] hsr_slave_1: left promiscuous mode [ 60.123828][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.154664][ T6521] fuse: Unknown parameter 'd' [ 60.236462][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.532456][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.879963][ T6566] fuse: Bad value for 'fd' [ 60.916929][ T6566] loop4: detected capacity change from 0 to 512 [ 60.922127][ T6566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.935289][ T6566] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 61.503535][ T6596] loop5: detected capacity change from 0 to 512 [ 61.528560][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.528605][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.528651][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.528889][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.528917][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.528941][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.528960][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.528979][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.528996][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529012][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529028][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529044][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529059][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529075][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529090][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529105][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529120][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529135][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529150][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529164][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529179][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529194][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529208][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529223][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529238][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529254][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529268][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529283][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529298][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529313][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529328][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529343][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.529359][ T6600] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 61.702730][ T4808] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 61.830438][ T6609] loop7: detected capacity change from 0 to 2048 [ 62.036743][ T6621] loop4: detected capacity change from 0 to 128 [ 62.049061][ T6621] EXT4-fs (loop4): Test dummy encryption mode enabled [ 62.052484][ T6621] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.058955][ T6623] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 62.136614][ T6615] fido_id[6615]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 62.166652][ T6609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.222985][ T4713] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.441349][ T6645] loop6: detected capacity change from 0 to 512 [ 62.446592][ T6645] EXT4-fs: Ignoring removed oldalloc option [ 62.448743][ T6645] EXT4-fs: Ignoring removed nobh option [ 62.452974][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.475774][ T6645] EXT4-fs warning (device loop6): ext4_xattr_inode_get:546: inode #11: comm syz.6.350: ea_inode file size=7 entry size=6 [ 62.476000][ T6645] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.350: iget: bad extra_isize 90 (inode size 256) [ 62.476036][ T6645] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 62.479766][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 62.479787][ C0] EXT4-fs (loop6): initial error at time 62: ext4_xattr_inode_iget:441: inode 11 [ 62.479804][ C0] EXT4-fs (loop6): last error at time 62: ext4_xattr_inode_iget:441: inode 11 [ 62.508026][ T6645] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.350: error while reading EA inode 11 err=-117 [ 62.508073][ T6645] loop6: lost filesystem error report for type 5 error -117 [ 62.518818][ T6645] EXT4-fs (loop6): 1 orphan inode deleted [ 62.519357][ T6645] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.540788][ T6645] __nla_validate_parse: 65 callbacks suppressed [ 62.542100][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.6.350'. [ 62.549413][ T6645] netlink: 165 bytes leftover after parsing attributes in process `syz.6.350'. [ 62.560221][ T6645] EXT4-fs error (device loop6): __ext4_iget:5533: inode #14: block 1886221359: comm syz.6.350: invalid block [ 62.619236][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.5.348'. [ 62.631458][ T30] audit: type=1326 audit(62.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6648 comm="syz.5.348" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffad9792a8 code=0x0 [ 62.647069][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.816939][ T6664] loop4: detected capacity change from 0 to 1024 [ 62.823513][ T6664] EXT4-fs: inline encryption not supported [ 62.827159][ T6664] EXT4-fs: Ignoring removed bh option [ 62.837010][ T6664] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 62.897285][ T6664] gre1: entered promiscuous mode [ 62.904824][ T1580] ieee802154 phy0 wpan0: encryption failed: -22 [ 62.904899][ T1580] ieee802154 phy1 wpan1: encryption failed: -22 [ 62.913838][ T4808] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 62.925376][ T4808] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 63.114027][ T6675] loop7: detected capacity change from 0 to 256 [ 63.422171][ T6686] loop6: detected capacity change from 0 to 4096 [ 63.425110][ T6686] EXT4-fs (loop6): Test dummy encryption mode enabled [ 63.444820][ T6675] loop7: detected capacity change from 0 to 256 [ 63.492311][ T6690] loop5: detected capacity change from 0 to 1024 [ 63.531716][ T6690] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 16: comm syz.5.359: path /54/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 63.542145][ T6690] EXT4-fs (loop5): Remounting filesystem read-only [ 63.580859][ T6690] netlink: 56 bytes leftover after parsing attributes in process `syz.5.359'. [ 63.826395][ T6702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.828231][ T6701] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.363: inode has both inline data and extents flags [ 63.828278][ T6701] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.836475][ T6701] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.363: couldn't read orphan inode 15 (err -117) [ 63.836526][ T6701] loop6: lost filesystem error report for type 5 error -117 [ 63.838727][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 63.838747][ C0] EXT4-fs (loop6): initial error at time 63: ext4_orphan_get:1399: inode 15 [ 63.838771][ C0] EXT4-fs (loop6): last error at time 63: ext4_orphan_get:1404 [ 63.851775][ T6702] EXT4-fs: inline encryption not supported [ 63.857668][ T6702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.031579][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.361'. [ 64.031629][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.361'. [ 64.031657][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.361'. [ 64.031675][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.361'. [ 64.031692][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.361'. [ 64.031708][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.361'. [ 64.094010][ T6712] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.361: bg 0: block 3: invalid block bitmap [ 64.099069][ T6712] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 64.099112][ T6712] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.099112][ T6712] [ 64.355467][ T6719] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.416508][ T6719] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 64.503025][ T1091] cfg80211: failed to load regulatory.db [ 64.572140][ T6735] nvme_fabrics: missing parameter 'traddr=%s' [ 64.701845][ T3995] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 64.701899][ T3995] EXT4-fs (loop5): This should not happen!! Data will be lost [ 64.701899][ T3995] [ 64.701924][ T3995] EXT4-fs (loop5): Total free blocks count 0 [ 64.701936][ T3995] EXT4-fs (loop5): Free/Dirty block details [ 64.701948][ T3995] EXT4-fs (loop5): free_blocks=0 [ 64.701960][ T3995] EXT4-fs (loop5): dirty_blocks=64 [ 64.701991][ T3995] EXT4-fs (loop5): Block reservation details [ 64.702086][ T3995] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 64.721260][ T5108] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 64.724501][ T6733] nvme_fabrics: missing parameter 'traddr=%s' [ 64.724867][ T5108] EXT4-fs unmount: 9 callbacks suppressed [ 64.758388][ T6727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.933299][ T6755] tipc: Enabling of bearer rejected, failed to enable media [ 65.164973][ T6774] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.520004][ T6782] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 65.520048][ T6782] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (64851!=55237) [ 65.524545][ T6782] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz.5.375: Invalid inode table block 0 in block_group 0 [ 65.524590][ T6782] loop5: lost filesystem error report for type 5 error -117 [ 65.527321][ T6782] EXT4-fs (loop5): get root inode failed [ 65.527347][ T6782] EXT4-fs (loop5): mount failed [ 65.529188][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 65.529207][ C0] EXT4-fs (loop5): initial error at time 65: __ext4_get_inode_loc:4886 [ 65.529224][ C0] EXT4-fs (loop5): last error at time 65: __ext4_get_inode_loc:4886 [ 66.280559][ T6822] set_capacity_and_notify: 10 callbacks suppressed [ 66.307979][ T6822] loop7: detected capacity change from 0 to 1024 [ 66.308494][ T6822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.308519][ T6822] EXT4-fs: inline encryption not supported [ 66.308535][ T6822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.372094][ T6829] autofs: Bad value for 'fd' [ 66.478587][ T6835] overlayfs: workdir and upperdir must be separate subtrees [ 66.595594][ T4808] IPVS: starting estimator thread 0... [ 66.611323][ T6822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.650964][ T6838] overlay: Unknown parameter 'obj_user' [ 66.750100][ T6844] IPVS: using max 61 ests per chain, 146400 per kthread [ 66.784663][ T6847] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.380: bg 0: block 112: padding at end of block bitmap is not set [ 66.792215][ T6847] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 66.792258][ T6847] EXT4-fs (loop7): This should not happen!! Data will be lost [ 66.792258][ T6847] [ 66.792282][ T6847] EXT4-fs (loop7): Total free blocks count 0 [ 66.792297][ T6847] EXT4-fs (loop7): Free/Dirty block details [ 66.792311][ T6847] EXT4-fs (loop7): free_blocks=0 [ 66.792326][ T6847] EXT4-fs (loop7): dirty_blocks=64 [ 66.792338][ T6847] EXT4-fs (loop7): Block reservation details [ 66.792350][ T6847] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 67.026788][ T6854] loop1: detected capacity change from 0 to 1024 [ 67.069006][ T6854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.069042][ T6854] EXT4-fs: inline encryption not supported [ 67.069065][ T6854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.112728][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.316415][ T1171] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 67.332168][ T5587] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 67.416184][ T30] audit: type=1400 audit(67.380:5): lsm=SMACK fn=smack_file_ioctl action=denied subject="_" object="l" requested=w pid=6865 comm="syz.5.390" path="/63/file1" dev="tmpfs" ino=355 [ 67.825221][ T6896] netlink: 'syz.4.393': attribute type 4 has an invalid length. [ 67.884329][ T6899] netlink: 'syz.4.393': attribute type 4 has an invalid length. [ 68.116580][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 68.580642][ T6914] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 68.755561][ T6921] loop6: detected capacity change from 0 to 1024 [ 68.759927][ T6921] EXT4-fs: Ignoring removed i_version option [ 68.786364][ T6921] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 68.806854][ T6921] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.399: corrupted xattr block 128: overlapping e_value [ 68.824088][ T6921] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.399: corrupted xattr block 128: overlapping e_value [ 68.830120][ T6921] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.399: corrupted xattr block 128: overlapping e_value [ 68.834533][ T6921] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.399: corrupted xattr block 128: overlapping e_value [ 68.895249][ T6798] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm kworker/u8:19: lblock 0 mapped to illegal pblock 0 (length 1) [ 68.905845][ T6798] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 68.913133][ T6798] EXT4-fs (loop6): This should not happen!! Data will be lost [ 68.913133][ T6798] [ 68.917264][ T5353] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 68.921379][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.130451][ T6933] loop6: detected capacity change from 0 to 1024 [ 69.132623][ T6933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.135046][ T6933] EXT4-fs: inline encryption not supported [ 69.137372][ T6933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.169593][ T6933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.379613][ T6946] __nla_validate_parse: 99 callbacks suppressed [ 70.379675][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.379702][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.379725][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.379745][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.379767][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.379789][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.379808][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.379825][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.379842][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.379858][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.401'. [ 70.418383][ T6946] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.401: bg 0: block 112: padding at end of block bitmap is not set [ 70.423977][ T6946] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 70.424025][ T6946] EXT4-fs (loop6): This should not happen!! Data will be lost [ 70.424025][ T6946] [ 70.424041][ T6946] EXT4-fs (loop6): Total free blocks count 0 [ 70.424056][ T6946] EXT4-fs (loop6): Free/Dirty block details [ 70.424071][ T6946] EXT4-fs (loop6): free_blocks=0 [ 70.424087][ T6946] EXT4-fs (loop6): dirty_blocks=64 [ 70.424100][ T6946] EXT4-fs (loop6): Block reservation details [ 70.424111][ T6946] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 70.467270][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.467323][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.525295][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.532451][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.789675][ T3929] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 70.794275][ T5353] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 71.521558][ T6986] binder: 6983:6986 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 71.524980][ T6986] binder: 6986 RLIMIT_NICE not set [ 71.571714][ T6992] binder: 6983:6992 BC_REQUEST_FREEZE_NOTIFICATION already set [ 71.571765][ T6992] binder: 6983:6992 ioctl c0306201 20000640 returned -22 [ 71.678288][ T6992] autofs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 71.678288][ T6992] ÄUúeâ[¦ÓÎ%#s' [ 71.709994][ T6998] loop5: detected capacity change from 0 to 1024 [ 71.715311][ T6998] EXT4-fs: Ignoring removed bh option [ 71.735952][ T6998] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.906108][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.199572][ T7017] loop7: detected capacity change from 0 to 256 [ 72.212574][ T7017] vfat: Unknown parameter 'uni_late' [ 72.539299][ T30] audit: type=1326 audit(72.500:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.6.427" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x0 [ 72.686453][ T7045] loop5: detected capacity change from 0 to 1024 [ 72.694034][ T7045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.695534][ T7045] EXT4-fs: inline encryption not supported [ 72.696853][ T7045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.711089][ T7045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.104887][ T7052] FAULT_INJECTION: forcing a failure. [ 73.104887][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 73.104943][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.7.429 Tainted: G L syzkaller #0 PREEMPT [ 73.104965][ T7052] Tainted: [L]=SOFTLOCKUP [ 73.104970][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 73.104976][ T7052] Call trace: [ 73.104980][ T7052] show_stack+0x2c/0x3c (C) [ 73.105003][ T7052] __dump_stack+0x30/0x40 [ 73.105016][ T7052] dump_stack_lvl+0xd8/0x12c [ 73.105028][ T7052] dump_stack+0x1c/0x28 [ 73.105040][ T7052] should_fail_ex+0x41c/0x590 [ 73.105049][ T7052] should_failslab+0xc4/0x120 [ 73.105059][ T7052] __kmalloc_cache_noprof+0x94/0x5ec [ 73.105071][ T7052] xfrm_policy_inexact_alloc_bin+0x7a4/0x1354 [ 73.105085][ T7052] xfrm_policy_inexact_insert+0x34/0x190 [ 73.105097][ T7052] xfrm_policy_insert+0xf8/0x6c0 [ 73.105108][ T7052] xfrm_add_policy+0x20c/0x58c [ 73.105120][ T7052] xfrm_user_rcv_msg+0x4e0/0x950 [ 73.105131][ T7052] netlink_rcv_skb+0x238/0x414 [ 73.105143][ T7052] xfrm_netlink_rcv+0x80/0x9c [ 73.105154][ T7052] netlink_unicast+0x600/0x7f8 [ 73.105164][ T7052] netlink_sendmsg+0x648/0x948 [ 73.105175][ T7052] __sock_sendmsg+0xc8/0x17c [ 73.105186][ T7052] ____sys_sendmsg+0x3d0/0x6c8 [ 73.105198][ T7052] ___sys_sendmsg+0x198/0x224 [ 73.105209][ T7052] __sys_sendmsg+0x158/0x204 [ 73.105220][ T7052] __arm64_sys_sendmsg+0x88/0x9c [ 73.105231][ T7052] invoke_syscall+0x98/0x244 [ 73.105244][ T7052] el0_svc_common+0xec/0x23c [ 73.105256][ T7052] do_el0_svc+0x4c/0x5c [ 73.105268][ T7052] el0_svc+0x64/0x260 [ 73.105279][ T7052] el0t_64_sync_handler+0x44/0x104 [ 73.105290][ T7052] el0t_64_sync+0x198/0x19c [ 73.219094][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.929140][ T7094] loop1: detected capacity change from 0 to 8192 [ 73.937485][ T7094] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.003189][ T7094] 9p: Bad value for 'rfdno' [ 74.443957][ T7111] »»»»»»: renamed from vlan0 (while UP) [ 74.500595][ T7113] loop7: detected capacity change from 0 to 2048 [ 74.527085][ T7113] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.569709][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.609949][ T7117] mmap: syz.5.447 (7117): VmData 37625856 exceed data ulimit 65536. Update limits or use boot option ignore_rlimit_data. [ 74.660121][ T7123] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 74.676427][ T7123] loop7: detected capacity change from 0 to 512 [ 74.691618][ T7123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.701364][ T7123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.715937][ T7123] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.448: invalid fast symlink length 10 [ 74.719830][ T7123] EXT4-fs (loop7): Remounting filesystem read-only [ 74.767772][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.772932][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.984278][ T7138] netlink: 'syz.5.453': attribute type 39 has an invalid length. [ 75.072850][ T7144] loop1: detected capacity change from 0 to 2048 [ 75.083078][ T7144] loop1: p1 < > p4 [ 75.083078][ T7144] p4: [ 75.091384][ T7144] loop1: p4 size 722688 extends beyond EOD, truncated [ 75.096613][ T7144] loop1: p6 start 262464109 is beyond EOD, truncated [ 75.099201][ T7144] loop1: p7 size 2304 extends beyond EOD, truncated [ 75.130225][ T4347] loop1: p1 < > p4 [ 75.130225][ T4347] p4: [ 75.141598][ T4347] loop1: p4 size 722688 extends beyond EOD, truncated [ 75.160321][ T4347] loop1: p6 start 262464109 is beyond EOD, truncated [ 75.160376][ T4347] loop1: p7 size 2304 extends beyond EOD, truncated [ 75.279454][ T5386] udevd[5386]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 75.287751][ T5152] udevd[5152]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 75.297581][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 75.329843][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 75.399966][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.413856][ T5152] udevd[5152]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 75.426326][ T5386] udevd[5386]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 75.471078][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 75.514221][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 75.531786][ T7166] loop7: detected capacity change from 0 to 1024 [ 75.591967][ T7166] EXT4-fs (loop7): bad geometry: first data block 0 is beyond end of filesystem (0) [ 75.593168][ T7166] capability: warning: `syz.7.464' uses 32-bit capabilities (legacy support in use) [ 76.261554][ T7193] futex_wake_op: syz.7.469 tries to shift op by 144; fix this program [ 76.508724][ T7227] __nla_validate_parse: 116 callbacks suppressed [ 76.524156][ T7227] netlink: 236 bytes leftover after parsing attributes in process `syz.5.472'. [ 76.541395][ T7228] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776 [ 76.544054][ T7228] PKCS7: Only support pkcs7_signedData type [ 76.551314][ T7227] 9pnet_fd: p9_fd_create_tcp (7227): problem connecting socket to 127.0.0.1 [ 76.561773][ T7228] loop1: detected capacity change from 0 to 512 [ 76.563946][ T7228] EXT4-fs: Ignoring removed nobh option [ 76.575532][ T7228] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 76.579608][ T7228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 76.579739][ T7228] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.601532][ T7228] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.473: attempt to clear invalid blocks 1024 len 1 [ 76.606203][ T7228] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.607903][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 76.607941][ C0] EXT4-fs (loop1): initial error at time 76: ext4_clear_blocks:876: inode 11 [ 76.607978][ C0] EXT4-fs (loop1): last error at time 76: ext4_clear_blocks:876: inode 11 [ 76.641947][ T7228] EXT4-fs (loop1): Remounting filesystem read-only [ 76.654951][ T7228] EXT4-fs (loop1): 1 truncate cleaned up [ 76.656049][ T7228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 76.731550][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 76.772192][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 76.774194][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.477'. [ 76.816121][ T7233] syzkaller0: entered promiscuous mode [ 76.942271][ T7243] loop7: detected capacity change from 0 to 512 [ 76.952065][ T7233] syzkaller0: entered allmulticast mode [ 76.990077][ T7243] EXT4-fs: Ignoring removed bh option [ 77.014910][ T7243] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 77.017656][ T7243] EXT4-fs (loop7): 1 truncate cleaned up [ 77.020728][ T7243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.069625][ T7247] bridge2: entered promiscuous mode [ 77.069657][ T7247] bridge2: entered allmulticast mode [ 78.203698][ T7116] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 78.319411][ T7250] loop1: detected capacity change from 0 to 512 [ 78.319877][ T7250] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.344993][ T7252] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 78.349108][ T7250] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.482: corrupted in-inode xattr: invalid ea_ino [ 78.349147][ T7250] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.352167][ T7250] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.482: couldn't read orphan inode 15 (err -117) [ 78.352207][ T7250] loop1: lost filesystem error report for type 5 error -117 [ 78.357164][ T7250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.365754][ T7252] Cannot find map_set index 2 as target [ 78.392261][ T7252] loop6: detected capacity change from 0 to 128 [ 78.403998][ T7252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 78.404072][ T7252] System zones: 1-3, 19-19, 35-36 [ 78.407818][ T7252] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.419288][ T7252] netlink: 'syz.6.483': attribute type 2 has an invalid length. [ 78.476828][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.526745][ T5353] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.729854][ T7264] x_tables: duplicate underflow at hook 1 [ 80.466231][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.552998][ T7290] loop5: detected capacity change from 0 to 512 [ 80.569025][ T7290] EXT4-fs (loop5): 1 truncate cleaned up [ 80.570863][ T7290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.969386][ T7309] netlink: 'syz.6.499': attribute type 1 has an invalid length. [ 80.969472][ T7309] netlink: 'syz.6.499': attribute type 1 has an invalid length. [ 80.988980][ T7314] netlink: 64 bytes leftover after parsing attributes in process `syz.1.501'. [ 81.110889][ T7320] loop7: detected capacity change from 0 to 512 [ 81.126610][ T7320] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.503: corrupted in-inode xattr: invalid ea_ino [ 81.126664][ T7320] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.129351][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 81.129373][ C0] EXT4-fs (loop7): initial error at time 81: ext4_iget_extra_inode:5180: inode 15 [ 81.129396][ C0] EXT4-fs (loop7): last error at time 81: ext4_iget_extra_inode:5180: inode 15 [ 81.141906][ T7320] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.503: couldn't read orphan inode 15 (err -117) [ 81.141958][ T7320] loop7: lost filesystem error report for type 5 error -117 [ 81.150238][ T7320] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.171563][ T7320] syz.7.503 (pid 7320) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 81.184993][ T7320] overlayfs: missing 'workdir' [ 81.206986][ T7320] overlayfs: missing 'lowerdir' [ 81.240496][ T30] audit: type=1326 audit(81.210:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7323 comm="syz.6.505" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x0 [ 81.249841][ T7324] overlayfs: missing 'workdir' [ 81.269725][ T7331] overlayfs: missing 'lowerdir' [ 81.315506][ T7333] netlink: 316 bytes leftover after parsing attributes in process `syz.1.506'. [ 81.322308][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.353598][ T7336] gretap0: entered promiscuous mode [ 81.370935][ T7336] macvlan2: entered promiscuous mode [ 81.383169][ T7336] gretap0: left promiscuous mode [ 81.581138][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.762305][ T7353] sctp: [Deprecated]: syz.4.512 (pid 7353) Use of int in max_burst socket option deprecated. [ 81.762305][ T7353] Use struct sctp_assoc_value instead [ 82.029218][ T7371] loop5: detected capacity change from 0 to 1024 [ 82.134374][ T7377] binder: 7375:7377 got reply transaction with no transaction stack [ 82.136446][ T7377] binder: 7375:7377 transaction reply to 0:0 failed 8/29201/-71, code 0 size 0-0 line 3155 [ 82.140910][ T7377] binder: 7375:7377 ioctl c0306201 20000040 returned -14 [ 82.447477][ T7393] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 82.449344][ T7393] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 82.453728][ T7393] CUSE: unknown device info "Ýÿÿÿ" [ 82.453769][ T7393] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 82.453785][ T7393] CUSE: DEVNAME unspecified [ 82.529348][ T7395] netlink: 64 bytes leftover after parsing attributes in process `syz.6.524'. [ 82.540538][ T7395] netlink: 64 bytes leftover after parsing attributes in process `syz.6.524'. [ 82.814506][ T7415] loop7: detected capacity change from 0 to 256 [ 82.818837][ T7413] binder: 7412:7413 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER [ 83.071779][ T7423] loop5: detected capacity change from 0 to 2048 [ 83.104204][ T7423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.144355][ T7423] EXT4-fs error (device loop5): empty_inline_dir:1778: inode #12: block 9: comm syz.5.534: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=65556, size=60 fake=0 [ 83.160480][ T7423] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 83.205855][ T7431] nvmet: adding nsid 1 to subsystem testsubsys [ 83.252613][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.527751][ T7454] team0: Port device syz_tun removed [ 83.547425][ T7454] bridge_slave_0: left allmulticast mode [ 83.554402][ T7454] bridge_slave_0: left promiscuous mode [ 83.554569][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.576736][ T7454] bridge_slave_1: left allmulticast mode [ 83.576784][ T7454] bridge_slave_1: left promiscuous mode [ 83.576874][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.601748][ T7455] loop5: detected capacity change from 0 to 8192 [ 83.604639][ T7454] bond0: (slave bond_slave_0): Releasing backup interface [ 83.632541][ T7455] loop5: AHDI p1 p2 p3 p4 [ 83.637170][ T7455] loop5: p3 start 1638400 is beyond EOD, truncated [ 83.640910][ T7455] loop5: p4 size 1073741824 extends beyond EOD, truncated [ 83.644822][ T7454] bond0: (slave bond_slave_1): Releasing backup interface [ 83.680673][ T7454] team0: Port device team_slave_0 removed [ 83.703794][ T7454] team0: Port device team_slave_1 removed [ 83.719121][ T7454] net_ratelimit: 56 callbacks suppressed [ 83.721758][ T7454] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.931693][ T7471] netlink: 'syz.7.547': attribute type 46 has an invalid length. [ 83.931735][ T7471] netlink: 'syz.7.547': attribute type 19 has an invalid length. [ 83.949740][ T7468] vlan3: entered allmulticast mode [ 83.952109][ T7468] macsec0: entered allmulticast mode [ 83.954470][ T7468] veth1_macvtap: entered allmulticast mode [ 83.954761][ T7468] bridge0: port 1(vlan3) entered blocking state [ 83.954805][ T7468] bridge0: port 1(vlan3) entered disabled state [ 83.966811][ T7468] vlan3: entered promiscuous mode [ 83.969393][ T7468] macsec0: entered promiscuous mode [ 83.976870][ T7472] sch_fq: defrate 0 ignored. [ 84.106475][ T7478] mmap: syz.1.550 (7478) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.496486][ T7491] netlink: 'syz.5.553': attribute type 1 has an invalid length. [ 84.506364][ T7491] netlink: 'syz.5.553': attribute type 2 has an invalid length. [ 84.506416][ T7491] netlink: 'syz.5.553': attribute type 3 has an invalid length. [ 84.506432][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.553'. [ 84.724374][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 84.727730][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.6.557'. [ 84.730646][ T5386] udevd[5386]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 84.735172][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 84.775636][ T7501] netlink: 'syz.6.557': attribute type 3 has an invalid length. [ 84.779414][ T7501] netlink: 'syz.6.557': attribute type 1 has an invalid length. [ 84.782521][ T7501] netlink: 224 bytes leftover after parsing attributes in process `syz.6.557'. [ 84.852973][ T7512] netlink: 52 bytes leftover after parsing attributes in process `syz.4.560'. [ 84.891177][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 84.897579][ T5386] udevd[5386]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 84.908507][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 84.978949][ T7517] binder: 7516:7517 ioctl c0306201 9999999999999999 returned -14 [ 85.046964][ T7525] Bluetooth: MGMT ver 1.23 [ 85.060193][ T7525] Bluetooth: hci0: unsupported parameter 5135 [ 85.061743][ T7525] Bluetooth: hci0: unsupported parameter 8192 [ 85.063338][ T7525] Bluetooth: hci0: unsupported parameter 5135 [ 85.063381][ T7525] Bluetooth: hci0: unsupported parameter 8192 [ 85.227257][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 85.279028][ T7534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.290510][ T7535] tipc: Started in network mode [ 85.292720][ T7535] tipc: Node identity 86239a4cf16e, cluster identity 4711 [ 85.294915][ T7535] tipc: Enabled bearer , priority 0 [ 85.335075][ T7534] ipvlan2: entered allmulticast mode [ 85.336898][ T7534] bond1: entered allmulticast mode [ 85.352692][ T7534] bond1: (slave ipip0): refused to change device type [ 85.380216][ T7540] syzkaller0: entered promiscuous mode [ 85.380260][ T7540] syzkaller0: entered allmulticast mode [ 85.873916][ T7558] lo: entered allmulticast mode [ 86.057391][ T7533] tipc: Resetting bearer [ 86.077028][ T7533] tipc: Disabling bearer [ 86.141229][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.6.573'. [ 86.141344][ T7566] netlink: 32 bytes leftover after parsing attributes in process `syz.6.573'. [ 86.161861][ T7570] netlink: 'syz.4.578': attribute type 7 has an invalid length. [ 86.161907][ T7570] netlink: 'syz.4.578': attribute type 8 has an invalid length. [ 86.161938][ T7570] netlink: 'syz.4.578': attribute type 13 has an invalid length. [ 86.202462][ T7570] io-wq is not configured for unbound workers [ 86.220696][ T7556] lo: left allmulticast mode [ 86.375896][ T7577] FAULT_INJECTION: forcing a failure. [ 86.375896][ T7577] name failslab, interval 1, probability 0, space 0, times 0 [ 86.379315][ T7577] CPU: 0 UID: 0 PID: 7577 Comm: syz.7.581 Tainted: G L syzkaller #0 PREEMPT [ 86.379348][ T7577] Tainted: [L]=SOFTLOCKUP [ 86.379352][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 86.379360][ T7577] Call trace: [ 86.379364][ T7577] show_stack+0x2c/0x3c (C) [ 86.379391][ T7577] __dump_stack+0x30/0x40 [ 86.379405][ T7577] dump_stack_lvl+0xd8/0x12c [ 86.379418][ T7577] dump_stack+0x1c/0x28 [ 86.379430][ T7577] should_fail_ex+0x41c/0x590 [ 86.379439][ T7577] should_failslab+0xc4/0x120 [ 86.379449][ T7577] __kmalloc_cache_noprof+0x94/0x5ec [ 86.379461][ T7577] fsnotify_alloc_group+0x80/0x284 [ 86.379471][ T7577] __arm64_sys_fanotify_init+0x314/0x89c [ 86.379483][ T7577] invoke_syscall+0x98/0x244 [ 86.379496][ T7577] el0_svc_common+0xec/0x23c [ 86.379508][ T7577] do_el0_svc+0x4c/0x5c [ 86.379520][ T7577] el0_svc+0x64/0x260 [ 86.379531][ T7577] el0t_64_sync_handler+0x44/0x104 [ 86.379541][ T7577] el0t_64_sync+0x198/0x19c [ 86.566865][ T7580] loop7: detected capacity change from 0 to 256 [ 86.595248][ T7577] overlay: filesystem on ./file0 not supported [ 86.622747][ T7582] netlink: 'syz.6.583': attribute type 38 has an invalid length. [ 86.643547][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.583'. [ 86.755916][ T7588] loop5: detected capacity change from 0 to 512 [ 86.768523][ T7584] TCP: TCP_TX_DELAY enabled [ 86.788454][ T7588] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.586: corrupted in-inode xattr: invalid ea_ino [ 86.788509][ T7588] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.795416][ T7588] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.586: couldn't read orphan inode 15 (err -117) [ 86.795468][ T7588] loop5: lost filesystem error report for type 5 error -117 [ 86.797915][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 86.797932][ C0] EXT4-fs (loop5): initial error at time 86: ext4_iget_extra_inode:5180: inode 15 [ 86.797951][ C0] EXT4-fs (loop5): last error at time 86: ext4_orphan_get:1404 [ 86.807528][ T7588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.816656][ T7586] syzkaller0: entered promiscuous mode [ 86.819285][ T7586] syzkaller0: entered allmulticast mode [ 86.859612][ T7586] loop7: detected capacity change from 0 to 512 [ 86.867451][ T7586] EXT4-fs: Ignoring removed bh option [ 86.874154][ T7586] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 86.880585][ T7586] EXT4-fs (loop7): 1 truncate cleaned up [ 86.884590][ T7586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.824518][ T7612] fuse: Bad value for 'fd' [ 88.016109][ T7616] sctp: [Deprecated]: syz.4.595 (pid 7616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.016109][ T7616] Use struct sctp_sack_info instead [ 88.166779][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.498079][ T7592] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 88.699975][ T7624] netlink: 'syz.5.596': attribute type 4 has an invalid length. [ 88.791535][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.841033][ T7629] __nla_validate_parse: 1 callbacks suppressed [ 88.841081][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.6.597'. [ 89.025008][ T7656] fuse: Bad value for 'fd' [ 89.040727][ T7656] netlink: 68 bytes leftover after parsing attributes in process `syz.4.603'. [ 89.052161][ T7656] netlink: 236 bytes leftover after parsing attributes in process `syz.4.603'. [ 89.465801][ T7672] FAULT_INJECTION: forcing a failure. [ 89.465801][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 89.465856][ T7672] CPU: 0 UID: 0 PID: 7672 Comm: syz.7.606 Tainted: G L syzkaller #0 PREEMPT [ 89.465875][ T7672] Tainted: [L]=SOFTLOCKUP [ 89.465880][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 89.465891][ T7672] Call trace: [ 89.465894][ T7672] show_stack+0x2c/0x3c (C) [ 89.465920][ T7672] __dump_stack+0x30/0x40 [ 89.465934][ T7672] dump_stack_lvl+0xd8/0x12c [ 89.465946][ T7672] dump_stack+0x1c/0x28 [ 89.465958][ T7672] should_fail_ex+0x41c/0x590 [ 89.465968][ T7672] should_failslab+0xc4/0x120 [ 89.465978][ T7672] __kmalloc_cache_noprof+0x94/0x5ec [ 89.465990][ T7672] xfrm_policy_inexact_alloc_bin+0x7a4/0x1354 [ 89.466004][ T7672] xfrm_policy_inexact_insert+0x34/0x190 [ 89.466016][ T7672] xfrm_policy_insert+0xf8/0x6c0 [ 89.466026][ T7672] xfrm_add_policy+0x20c/0x58c [ 89.466039][ T7672] xfrm_user_rcv_msg+0x4e0/0x950 [ 89.466050][ T7672] netlink_rcv_skb+0x238/0x414 [ 89.466062][ T7672] xfrm_netlink_rcv+0x80/0x9c [ 89.466073][ T7672] netlink_unicast+0x600/0x7f8 [ 89.466084][ T7672] netlink_sendmsg+0x648/0x948 [ 89.466094][ T7672] __sock_sendmsg+0xc8/0x17c [ 89.466106][ T7672] ____sys_sendmsg+0x3d0/0x6c8 [ 89.466117][ T7672] ___sys_sendmsg+0x198/0x224 [ 89.466129][ T7672] __sys_sendmsg+0x158/0x204 [ 89.466140][ T7672] __arm64_sys_sendmsg+0x88/0x9c [ 89.466151][ T7672] invoke_syscall+0x98/0x244 [ 89.466164][ T7672] el0_svc_common+0xec/0x23c [ 89.466176][ T7672] do_el0_svc+0x4c/0x5c [ 89.466188][ T7672] el0_svc+0x64/0x260 [ 89.466200][ T7672] el0t_64_sync_handler+0x44/0x104 [ 89.466210][ T7672] el0t_64_sync+0x198/0x19c [ 89.651314][ T7679] loop7: detected capacity change from 0 to 1024 [ 89.698182][ T7679] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.723703][ T7679] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 89.760850][ T7679] overlayfs: failed to resolve './bus': -2 [ 89.985484][ T7701] loop5: detected capacity change from 0 to 8 [ 89.989947][ T7697] loop6: detected capacity change from 0 to 512 [ 90.020133][ T7697] EXT4-fs: Ignoring removed bh option [ 90.028230][ T7701] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 90.028268][ T7701] unable to read xattr id index table [ 90.049197][ T7701] squashfs image failed sanity check [ 90.051258][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.082946][ T7701] vhci_hcd vhci_hcd.3: default hub control req: c001 v2000 i0000 l0 [ 90.095758][ T7697] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 90.100295][ T7697] EXT4-fs (loop6): 1 truncate cleaned up [ 90.100816][ T7697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.211477][ T7719] loop5: detected capacity change from 0 to 512 [ 90.246189][ T7719] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 90.253191][ T7719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e01c, mo2=0102] [ 90.253328][ T7719] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.258474][ T7719] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.617: attempt to clear invalid blocks 1024 len 1 [ 90.258516][ T7719] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.262005][ T7719] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.617: bg 0: block 361: padding at end of block bitmap is not set [ 90.262052][ T7719] loop5: lost filesystem error report for type 5 error -117 [ 90.267877][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 90.267929][ C0] EXT4-fs (loop5): initial error at time 90: ext4_clear_blocks:876: inode 11 [ 90.267975][ C0] EXT4-fs (loop5): last error at time 90: ext4_validate_block_bitmap:441 [ 90.269807][ T7719] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 90.269844][ T7719] loop5: lost filesystem error report for type 5 error -117 [ 90.272982][ T7719] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.617: invalid indirect mapped block 1811939328 (level 0) [ 90.273014][ T7719] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.288533][ T7719] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.617: invalid indirect mapped block 2185560079 (level 1) [ 90.288591][ T7719] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 90.296314][ T7719] EXT4-fs (loop5): 1 truncate cleaned up [ 90.351089][ T7719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 90.375405][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.466816][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 90.579503][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.621'. [ 90.579549][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.621'. [ 90.593968][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.621'. [ 90.602975][ T7746] dlm: non-version read from control device 25 [ 90.654440][ T7751] tipc: Enabling of bearer rejected, failed to enable media [ 90.894137][ C0] vcan0: j1939_tp_rxtimer: 0x000000002c2b597c: rx timeout, send abort [ 91.015545][ T7771] loop6: detected capacity change from 0 to 512 [ 91.069354][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.628'. [ 91.075414][ T7771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.099621][ T7771] sit0: entered promiscuous mode [ 91.129217][ T7771] netlink: 'syz.6.627': attribute type 1 has an invalid length. [ 91.129264][ T7771] netlink: 1 bytes leftover after parsing attributes in process `syz.6.627'. [ 91.142189][ T7771] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 91.211104][ T7781] gretap0: entered promiscuous mode [ 91.232635][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.242633][ T7781] netlink: 284 bytes leftover after parsing attributes in process `syz.5.630'. [ 91.350144][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 91.772633][ T7805] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 91.772633][ T7805] Please contact the netfilter-devel mailing list or update your nftables rules. [ 91.876352][ T7809] loop7: detected capacity change from 0 to 1024 [ 91.942207][ T7813] loop6: detected capacity change from 0 to 4096 [ 91.945427][ T7813] EXT4-fs: Ignoring removed orlov option [ 91.948098][ T7813] EXT4-fs: Ignoring removed nobh option [ 91.949541][ T7813] EXT4-fs: inline encryption not supported [ 91.958526][ T7813] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.964435][ T7813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.028733][ T30] audit: type=1326 audit(91.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7818 comm="syz.7.642" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffac9792a8 code=0x0 [ 92.053822][ T7815] vlan4: entered promiscuous mode [ 92.057316][ T7815] bridge0: entered promiscuous mode [ 92.315529][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.340619][ T7832] ip_tables: iptables: counters copy to user failed while replacing table [ 92.426317][ T7836] netlink: 'syz.6.646': attribute type 2 has an invalid length. [ 92.507299][ T7839] 0·: renamed from hsr0 (while UP) [ 92.517708][ T7839] 0·: entered allmulticast mode [ 92.517750][ T7839] hsr_slave_0: entered allmulticast mode [ 92.517778][ T7839] hsr_slave_1: entered allmulticast mode [ 92.519538][ T7839] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 92.554828][ T7845] fuse: Bad value for 'fd' [ 92.558465][ T30] audit: type=1326 audit(92.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.6.652" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x7ffc0000 [ 92.558509][ T30] audit: type=1326 audit(92.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.6.652" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x7ffc0000 [ 92.558533][ T30] audit: type=1326 audit(92.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.6.652" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x7ffc0000 [ 92.558555][ T30] audit: type=1326 audit(92.520:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.6.652" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x7ffc0000 [ 92.558575][ T30] audit: type=1326 audit(92.520:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.6.652" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb8f792a8 code=0x7ffc0000 [ 92.558594][ T30] audit: type=1326 audit(92.520:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.6.652" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x7ffc0000 [ 92.558613][ T30] audit: type=1326 audit(92.520:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.6.652" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x7ffc0000 [ 92.558632][ T30] audit: type=1326 audit(92.520:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.6.652" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x7ffc0000 [ 92.558651][ T30] audit: type=1326 audit(92.520:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.6.652" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8f792a8 code=0x7ffc0000 [ 92.769742][ T7830] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.976555][ T7862] loop5: detected capacity change from 0 to 128 [ 92.999186][ T7862] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.056952][ T7858] syzkaller0: entered promiscuous mode [ 93.056997][ T7858] syzkaller0: entered allmulticast mode [ 93.162692][ T7862] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 93.212953][ T5108] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.628786][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.639351][ T7883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.653547][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.796570][ T7899] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 93.867621][ T7909] overlayfs: missing 'lowerdir' [ 93.950255][ T7915] Bluetooth: MGMT ver 1.23 [ 93.951466][ T7915] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 93.957449][ T7913] loop1: detected capacity change from 0 to 512 [ 93.961773][ T7913] EXT4-fs: inline encryption not supported [ 93.987374][ T7913] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 94.094557][ T10] hid-generic 0007:0001:0002.0003: item fetching failed at offset 2/3 [ 94.097566][ T10] hid-generic 0007:0001:0002.0003: probe with driver hid-generic failed with error -22 [ 94.219218][ T7923] __nla_validate_parse: 3 callbacks suppressed [ 94.221260][ T7923] netlink: 364 bytes leftover after parsing attributes in process `syz.1.673'. [ 94.223606][ T7923] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 94.280223][ T7928] loop7: detected capacity change from 0 to 512 [ 94.290624][ T7928] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 94.302969][ T7928] EXT4-fs (loop7): 1 truncate cleaned up [ 94.303494][ T7928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.322475][ T7928] EXT4-fs (loop7): shut down requested (2) [ 94.376008][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.826343][ T7953] FAULT_INJECTION: forcing a failure. [ 94.826343][ T7953] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 94.826392][ T7953] CPU: 0 UID: 0 PID: 7953 Comm: syz.6.680 Tainted: G L syzkaller #0 PREEMPT [ 94.826408][ T7953] Tainted: [L]=SOFTLOCKUP [ 94.826412][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.826417][ T7953] Call trace: [ 94.826420][ T7953] show_stack+0x2c/0x3c (C) [ 94.826444][ T7953] __dump_stack+0x30/0x40 [ 94.826459][ T7953] dump_stack_lvl+0xd8/0x12c [ 94.826471][ T7953] dump_stack+0x1c/0x28 [ 94.826482][ T7953] should_fail_ex+0x41c/0x590 [ 94.826493][ T7953] should_fail_alloc_page+0xec/0x10c [ 94.826504][ T7953] prepare_alloc_pages+0x194/0x4a4 [ 94.826515][ T7953] __alloc_frozen_pages_noprof+0x134/0x320 [ 94.826526][ T7953] alloc_pages_mpol+0x1ec/0x3c0 [ 94.826538][ T7953] alloc_frozen_pages_noprof+0xc4/0x10c [ 94.826550][ T7953] ___kmalloc_large_node+0x70/0x154 [ 94.826561][ T7953] __kmalloc_large_noprof+0x28/0x84 [ 94.826571][ T7953] vhost_dev_set_owner+0x1a8/0x6c0 [ 94.826581][ T7953] vhost_dev_ioctl+0xe4/0xcbc [ 94.826590][ T7953] vhost_vsock_dev_ioctl+0x220/0xad4 [ 94.826603][ T7953] __arm64_sys_ioctl+0x154/0x1cc [ 94.826618][ T7953] invoke_syscall+0x98/0x244 [ 94.826632][ T7953] el0_svc_common+0xec/0x23c [ 94.826644][ T7953] do_el0_svc+0x4c/0x5c [ 94.826655][ T7953] el0_svc+0x64/0x260 [ 94.826667][ T7953] el0t_64_sync_handler+0x44/0x104 [ 94.826677][ T7953] el0t_64_sync+0x198/0x19c [ 96.868315][ T7961] netlink: 16 bytes leftover after parsing attributes in process `syz.6.682'. [ 97.743325][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.5.683'. [ 97.811595][ T7971] loop7: detected capacity change from 0 to 8192 [ 97.855159][ T7964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.302041][ T7983] syzkaller0: entered promiscuous mode [ 98.308674][ T7983] syzkaller0: entered allmulticast mode [ 98.356206][ T7981] Injecting memory failure for pfn 0x16c001 at process virtual address 0x20001000 [ 98.377671][ T7981] Memory failure: 0x16c001: recovery action for dirty LRU page: Recovered [ 100.082220][ T8026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.082433][ T8026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.118458][ T8023] syzkaller0: entered promiscuous mode [ 100.118500][ T8023] syzkaller0: entered allmulticast mode [ 100.227617][ T8031] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 100.631678][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 100.631722][ T30] audit: type=1326 audit(100.600:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 100.639178][ T30] audit: type=1326 audit(100.610:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 100.647806][ T30] audit: type=1326 audit(100.610:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 100.652860][ T30] audit: type=1326 audit(100.610:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 100.652915][ T30] audit: type=1326 audit(100.610:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 100.700985][ T30] audit: type=1326 audit(100.670:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 100.701044][ T30] audit: type=1326 audit(100.670:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8ef78fa0 code=0x7ffc0000 [ 100.701078][ T30] audit: type=1326 audit(100.670:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff8ef7900c code=0x7ffc0000 [ 100.701099][ T30] audit: type=1326 audit(100.670:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff8ef57fb8 code=0x7ffc0000 [ 100.701118][ T30] audit: type=1326 audit(100.670:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8048 comm="syz.4.705" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffff8ef7a2a8 code=0x7ffc0000 [ 102.041330][ T8080] fuse: Bad value for 'rootmode' [ 102.051265][ T8080] netlink: 236 bytes leftover after parsing attributes in process `syz.7.710'. [ 102.682707][ T8091] loop5: detected capacity change from 0 to 512 [ 102.684789][ T8091] ext2: Bad value for 'debug_want_extra_isize' [ 102.691321][ T8092] fuse: Bad value for 'fd' [ 102.752844][ T8097] netlink: 'syz.7.717': attribute type 22 has an invalid length. [ 102.756256][ T8096] netlink: 'syz.7.717': attribute type 22 has an invalid length. [ 102.756293][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.717'. [ 102.765071][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.7.717'. [ 102.799630][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.799696][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.799741][ T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.808349][ T8096] netlink: 'syz.7.717': attribute type 22 has an invalid length. [ 102.808385][ T8096] netlink: 4 bytes leftover after parsing attributes in process `syz.7.717'. [ 102.808513][ T8097] netlink: 'syz.7.717': attribute type 22 has an invalid length. [ 102.808528][ T8097] netlink: 4 bytes leftover after parsing attributes in process `syz.7.717'. [ 103.354358][ T8112] ªªªªªª: renamed from vlan0 [ 103.405515][ T8113] loop1: detected capacity change from 0 to 1024 [ 103.435527][ T8113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.640151][ T8126] loop7: detected capacity change from 0 to 512 [ 103.642527][ T8126] ext4: Unknown parameter 'euid<00000000000000000000' [ 103.734717][ T8127] overlay: ./file0 is not a directory [ 103.913715][ T8136] loop5: detected capacity change from 0 to 512 [ 103.920371][ T8136] EXT4-fs: Ignoring removed oldalloc option [ 104.133015][ T8136] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.728: Parent and EA inode have the same ino 15 [ 104.137180][ T8136] loop5: lost filesystem error report for type 5 error -117 [ 104.137881][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 104.137925][ C0] EXT4-fs (loop5): initial error at time 104: ext4_xattr_inode_iget:437 [ 104.137962][ C0] EXT4-fs (loop5): last error at time 104: ext4_xattr_inode_iget:437 [ 104.148747][ T8136] EXT4-fs (loop5): Remounting filesystem read-only [ 104.148845][ T8136] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -30) [ 104.148921][ T8136] EXT4-fs (loop5): 1 orphan inode deleted [ 104.156713][ T8136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.173073][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.284028][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.570427][ T4403] veth0_vlan: left promiscuous mode [ 104.631819][ T4891] veth0_vlan: entered promiscuous mode [ 104.720241][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.6.735'. [ 104.720294][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.6.735'. [ 104.800083][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.737'. [ 104.847036][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.6.735'. [ 104.847100][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.6.735'. [ 105.150009][ T8187] loop7: detected capacity change from 0 to 4096 [ 105.171121][ T8187] EXT4-fs (loop7): Test dummy encryption mode enabled [ 105.187156][ T8187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.379358][ T4726] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 105.379420][ T4726] Bluetooth: hci4: Injecting HCI hardware error event [ 105.382894][ T50] Bluetooth: hci4: hardware error 0x00 [ 105.685663][ T8220] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.707712][ T8225] loop1: detected capacity change from 0 to 128 [ 105.730245][ T8225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 105.730307][ T8225] System zones: 1-3, 19-19, 35-36 [ 105.731092][ T8225] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 105.855587][ T4714] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.048802][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.048802][ T8233] [ 106.048850][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.048850][ T8233] [ 106.048887][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.048887][ T8233] [ 106.048916][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.048916][ T8233] [ 106.048956][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.048956][ T8233] [ 106.048975][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.048975][ T8233] [ 106.048994][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.048994][ T8233] [ 106.049015][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049015][ T8233] [ 106.049032][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049032][ T8233] [ 106.049051][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049051][ T8233] [ 106.049068][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049068][ T8233] [ 106.049084][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049084][ T8233] [ 106.049101][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049101][ T8233] [ 106.049118][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049118][ T8233] [ 106.049135][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049135][ T8233] [ 106.049151][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049151][ T8233] [ 106.049167][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049167][ T8233] [ 106.049183][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049183][ T8233] [ 106.049208][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049208][ T8233] [ 106.049225][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049225][ T8233] [ 106.049242][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049242][ T8233] [ 106.049258][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049258][ T8233] [ 106.049275][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049275][ T8233] [ 106.049291][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049291][ T8233] [ 106.049307][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049307][ T8233] [ 106.049346][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049346][ T8233] [ 106.049363][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049363][ T8233] [ 106.049384][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049384][ T8233] [ 106.049402][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049402][ T8233] [ 106.049419][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049419][ T8233] [ 106.049436][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049436][ T8233] [ 106.049451][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.049451][ T8233] [ 106.129114][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129114][ T8233] [ 106.129593][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129593][ T8233] [ 106.129615][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129615][ T8233] [ 106.129634][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129634][ T8233] [ 106.129650][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129650][ T8233] [ 106.129664][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129664][ T8233] [ 106.129679][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129679][ T8233] [ 106.129693][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129693][ T8233] [ 106.129708][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129708][ T8233] [ 106.129721][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129721][ T8233] [ 106.129734][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129734][ T8233] [ 106.129748][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129748][ T8233] [ 106.129769][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129769][ T8233] [ 106.129783][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129783][ T8233] [ 106.129795][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129795][ T8233] [ 106.129808][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129808][ T8233] [ 106.129821][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129821][ T8233] [ 106.129834][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129834][ T8233] [ 106.129846][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129846][ T8233] [ 106.129860][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129860][ T8233] [ 106.129874][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129874][ T8233] [ 106.129894][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129894][ T8233] [ 106.129909][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129909][ T8233] [ 106.129923][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129923][ T8233] [ 106.129936][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129936][ T8233] [ 106.129949][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129949][ T8233] [ 106.129969][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129969][ T8233] [ 106.129981][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.129981][ T8233] [ 106.183889][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.224287][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.224287][ T8233] [ 106.224337][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.224337][ T8233] [ 106.224363][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.224363][ T8233] [ 106.224388][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.224388][ T8233] [ 106.224413][ T8233] dlm: Unknown command passed to DLM device : 0 [ 106.224413][ T8233] [ 106.351650][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 106.351697][ T30] audit: type=1326 audit(106.320:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.359945][ T30] audit: type=1326 audit(106.330:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.365960][ T30] audit: type=1326 audit(106.330:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.374881][ T30] audit: type=1326 audit(106.340:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.374942][ T30] audit: type=1326 audit(106.340:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.386099][ T30] audit: type=1326 audit(106.350:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.386169][ T30] audit: type=1326 audit(106.350:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.386214][ T30] audit: type=1326 audit(106.350:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.404164][ T30] audit: type=1326 audit(106.370:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=0 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.409460][ T30] audit: type=1326 audit(106.380:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8239 comm="syz.4.755" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ef792a8 code=0x7ffc0000 [ 106.533179][ T8256] loop6: detected capacity change from 0 to 256 [ 106.695605][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.050319][ T8282] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 107.051818][ T8282] netlink: 'syz.6.763': attribute type 10 has an invalid length. [ 107.052248][ T8283] netlink: 'syz.6.763': attribute type 10 has an invalid length. [ 107.063267][ T8282] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 107.123068][ T8286] 9p: Bad value for 'wfdno' [ 107.337273][ T8294] loop5: detected capacity change from 0 to 8192 [ 107.364074][ T8294] loop5: p1 p2 p3 p4[EZD] [ 107.364108][ T8294] loop5: partition table partially beyond EOD, truncated [ 107.364226][ T8294] loop5: p1 start 16384 is beyond EOD, truncated [ 107.364249][ T8294] loop5: p2 size 150994944 extends beyond EOD, truncated [ 107.372170][ T8294] loop5: p3 start 67108864 is beyond EOD, truncated [ 107.374867][ T8294] loop5: p4 size 33555584 extends beyond EOD, truncated [ 107.458098][ T50] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 107.535289][ T8303] __nla_validate_parse: 6 callbacks suppressed [ 107.538286][ T8303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.772'. [ 107.685324][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 107.688260][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 107.840171][ T8312] loop5: detected capacity change from 0 to 512 [ 107.883569][ T8312] EXT4-fs error (device loop5): __ext4_iget:5533: inode #11: block 1: comm syz.5.775: invalid block [ 107.883614][ T8312] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 107.883816][ T8312] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.775: couldn't read orphan inode 11 (err -117) [ 107.883840][ T8312] loop5: lost filesystem error report for type 5 error -117 [ 107.888417][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 107.888438][ C0] EXT4-fs (loop5): initial error at time 107: __ext4_iget:5533: inode 11: block 1 [ 107.888478][ C0] EXT4-fs (loop5): last error at time 107: ext4_orphan_get:1404 [ 107.898415][ T8312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.991514][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.201531][ T8334] loop5: detected capacity change from 0 to 512 [ 108.229158][ T8334] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.239718][ T8334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.310709][ T8337] loop7: detected capacity change from 0 to 512 [ 108.321858][ T8337] EXT4-fs (loop7): Test dummy encryption mode enabled [ 108.342289][ T8337] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.781: inode has both inline data and extents flags [ 108.342344][ T8337] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.347898][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 108.347945][ C0] EXT4-fs (loop7): initial error at time 108: ext4_orphan_get:1399: inode 15 [ 108.347985][ C0] EXT4-fs (loop7): last error at time 108: ext4_orphan_get:1399: inode 15 [ 108.354826][ T8337] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.781: couldn't read orphan inode 15 (err -117) [ 108.354872][ T8337] loop7: lost filesystem error report for type 5 error -117 [ 108.359595][ T8337] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.449745][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.622793][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.035870][ T8375] fuse: Bad value for 'fd' [ 109.380638][ T8387] loop1: detected capacity change from 0 to 512 [ 109.390178][ T8387] EXT4-fs: Ignoring removed oldalloc option [ 109.423355][ T8387] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.442358][ T8387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.492192][ T8387] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #12: comm syz.1.797: Directory block failed checksum [ 109.526488][ T8394] netlink: 380 bytes leftover after parsing attributes in process `syz.5.798'. [ 109.551013][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.571770][ T8394] loop5: detected capacity change from 0 to 1024 [ 109.692399][ T8403] loop1: detected capacity change from 0 to 512 [ 109.692998][ T8403] EXT4-fs: Ignoring removed bh option [ 109.700354][ T8403] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 109.703332][ T8403] EXT4-fs (loop1): 1 truncate cleaned up [ 109.705377][ T8403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.809225][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.932801][ T8410] [U] ÿ [ 113.411245][ T8434] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.430135][ T8437] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.449990][ T8434] saa7115 0-0020: probe with driver saa7115 failed with error -5 [ 113.471639][ T8434] i2c i2c-0: new_device: Instantiated device saa7115_auto at 0x20 [ 113.534440][ T8439] team0: No ports can be present during mode change [ 113.669247][ T8443] loop1: detected capacity change from 0 to 1024 [ 113.798477][ T8443] loop1: detected capacity change from 0 to 1024 [ 114.012209][ T8443] loop1: detected capacity change from 0 to 1024 [ 114.278314][ T8458] input: syz0 as /devices/virtual/input/input4 [ 114.292711][ T8443] loop1: detected capacity change from 0 to 1024 [ 114.381955][ T8443] loop1: detected capacity change from 0 to 1024 [ 114.504047][ T8470] binder: 8469:8470 tried to acquire reference to desc 0, got 1 instead [ 114.513427][ T8470] binder: 8469:8470 got transaction with invalid data ptr [ 114.515115][ T8470] binder: 8469:8470 transaction call to 8469:0 failed 13/29201/-14, code 0 size 120-3976 line 3511 [ 114.553362][ T8470] overlayfs: failed lookup in lower (newroot/131, name='file0', err=-40): overlapping layers [ 114.563394][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 114.743607][ T8481] netlink: 'syz.1.826': attribute type 3 has an invalid length. [ 114.829688][ T8490] loop7: detected capacity change from 0 to 256 [ 114.831711][ T8490] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.835329][ T8490] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.841512][ T8483] loop6: detected capacity change from 0 to 512 [ 114.890230][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 114.937367][ T8483] EXT4-fs (loop6): 1 orphan inode deleted [ 114.938004][ T8483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.943026][ T8491] overlayfs: refusing to follow metacopy origin for (/file1) [ 115.004351][ T8499] tipc: Enabling of bearer rejected, failed to enable media [ 115.017035][ T8501] loop5: detected capacity change from 0 to 128 [ 115.096528][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.119384][ T8510] loop1: detected capacity change from 0 to 256 [ 115.165715][ T8510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.832'. [ 115.928018][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 116.742518][ T8539] loop7: detected capacity change from 0 to 512 [ 116.749389][ T8539] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.771360][ T8539] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.841: Allocating blocks 41-42 which overlap fs metadata [ 116.777493][ T8541] loop6: detected capacity change from 0 to 512 [ 116.778987][ T8539] loop7: lost filesystem error report for type 5 error -117 [ 116.787897][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 116.787938][ C0] EXT4-fs (loop7): initial error at time 116: ext4_mb_mark_diskspace_used:4222 [ 116.787962][ C0] EXT4-fs (loop7): last error at time 116: ext4_mb_mark_diskspace_used:4222 [ 116.795183][ T8541] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 116.798553][ T8539] EXT4-fs (loop7): Remounting filesystem read-only [ 116.798729][ T8539] __quota_error: 6 callbacks suppressed [ 116.798746][ T8539] Quota error (device loop7): write_blk: dquota write failed [ 116.798763][ T8539] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 116.798849][ T8539] Quota error (device loop7): write_blk: dquota write failed [ 116.798905][ T8539] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 116.798979][ T8539] EXT4-fs (loop7): 1 truncate cleaned up [ 116.799461][ T8539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.796013][ T8541] EXT4-fs (loop6): 1 truncate cleaned up [ 117.796542][ T8541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.794898][ T8495] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 4: invalid block bitmap [ 118.808614][ T8495] EXT4-fs (loop6): Remounting filesystem read-only [ 119.811729][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.908435][ T8555] FAULT_INJECTION: forcing a failure. [ 119.908435][ T8555] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.908495][ T8555] CPU: 0 UID: 0 PID: 8555 Comm: syz.1.844 Tainted: G L syzkaller #0 PREEMPT [ 119.908514][ T8555] Tainted: [L]=SOFTLOCKUP [ 119.908519][ T8555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 119.908526][ T8555] Call trace: [ 119.908530][ T8555] show_stack+0x2c/0x3c (C) [ 119.908552][ T8555] __dump_stack+0x30/0x40 [ 119.908564][ T8555] dump_stack_lvl+0xd8/0x12c [ 119.908573][ T8555] dump_stack+0x1c/0x28 [ 119.908583][ T8555] should_fail_ex+0x41c/0x590 [ 119.908592][ T8555] should_fail+0x14/0x24 [ 119.908598][ T8555] should_fail_usercopy+0x20/0x30 [ 119.908605][ T8555] _inline_copy_from_user+0x3c/0x174 [ 119.908614][ T8555] __sys_bpf+0x1b4/0x82c [ 119.908621][ T8555] __arm64_sys_bpf+0xd0/0xec [ 119.908628][ T8555] invoke_syscall+0x98/0x244 [ 119.908638][ T8555] el0_svc_common+0xec/0x23c [ 119.908648][ T8555] do_el0_svc+0x4c/0x5c [ 119.908657][ T8555] el0_svc+0x64/0x260 [ 119.908667][ T8555] el0t_64_sync_handler+0x44/0x104 [ 119.908676][ T8555] el0t_64_sync+0x198/0x19c [ 119.975601][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.100333][ T8562] bridge1: entered promiscuous mode [ 120.275835][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.7.847'. [ 120.393853][ T8586] netlink: 8 bytes leftover after parsing attributes in process `syz.6.853'. [ 120.526441][ T8593] loop7: detected capacity change from 0 to 512 [ 120.526865][ T8593] EXT4-fs: Ignoring removed bh option [ 120.544091][ T8593] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 120.550460][ T8593] EXT4-fs (loop7): 1 truncate cleaned up [ 120.550970][ T8593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.665003][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.704910][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.856'. [ 120.957663][ T8626] loop1: detected capacity change from 0 to 512 [ 121.007732][ T8626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.110233][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.368134][ T8649] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 121.583406][ T8664] loop5: detected capacity change from 0 to 1024 [ 121.585179][ T8664] EXT4-fs: Ignoring removed bh option [ 121.593061][ T8664] EXT4-fs: Ignoring removed bh option [ 121.597250][ T8664] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 121.646329][ T8664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.737337][ T8680] netlink: 36 bytes leftover after parsing attributes in process `syz.7.873'. [ 121.743095][ T8653] loop1: detected capacity change from 0 to 774 [ 121.744562][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.7.873'. [ 121.755032][ T8664] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 121.775461][ T8653] loop1: detected capacity change from 0 to 774 [ 121.837451][ T8686] netlink: 68 bytes leftover after parsing attributes in process `syz.6.874'. [ 121.851222][ T8686] netlink: 68 bytes leftover after parsing attributes in process `syz.6.874'. [ 122.144781][ T5108] EXT4-fs error (device loop5): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /168/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 122.168356][ T5108] EXT4-fs (loop5): Remounting filesystem read-only [ 122.232900][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.423414][ T8702] syzkaller0: entered promiscuous mode [ 122.423459][ T8702] syzkaller0: entered allmulticast mode [ 122.723039][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 122.743940][ T8722] macvtap1: entered allmulticast mode [ 122.748009][ T8722] dummy0: entered allmulticast mode [ 122.750654][ T8722] dummy0: entered promiscuous mode [ 122.770240][ T8722] dummy0: left allmulticast mode [ 122.822683][ T4808] dummy0: left promiscuous mode [ 122.893615][ T8729] syzkaller1: entered promiscuous mode [ 122.894949][ T8729] syzkaller1: entered allmulticast mode [ 123.046998][ T8737] loop1: detected capacity change from 0 to 512 [ 123.091835][ T8738] loop1: detected capacity change from 0 to 512 [ 123.264847][ T8751] ip_tables: iptables: counters copy to user failed while replacing table [ 123.610813][ T8764] loop5: detected capacity change from 0 to 1024 [ 123.623629][ T8764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.759227][ T8767] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 123.759351][ T8767] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 123.759369][ T8767] EXT4-fs (loop5): This should not happen!! Data will be lost [ 123.759369][ T8767] [ 123.759381][ T8767] EXT4-fs (loop5): Total free blocks count 0 [ 123.759392][ T8767] EXT4-fs (loop5): Free/Dirty block details [ 123.759404][ T8767] EXT4-fs (loop5): free_blocks=68451041280 [ 123.759417][ T8767] EXT4-fs (loop5): dirty_blocks=64 [ 123.759427][ T8767] EXT4-fs (loop5): Block reservation details [ 123.759437][ T8767] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 123.915288][ T8772] loop7: detected capacity change from 0 to 256 [ 124.106456][ T8774] loop6: detected capacity change from 0 to 512 [ 124.141897][ T8774] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.899: Unrecognised inode hash code 255 [ 124.141950][ T8774] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.899: Corrupt directory, running e2fsck is recommended [ 124.196647][ T8774] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 124.201047][ T8774] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.899: corrupted in-inode xattr: invalid ea_ino [ 124.204032][ T8774] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.205243][ T8774] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.899: couldn't read orphan inode 15 (err -117) [ 124.209563][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 124.209590][ C0] EXT4-fs (loop6): initial error at time 124: ext4_iget_extra_inode:5180: inode 15 [ 124.209615][ C0] EXT4-fs (loop6): last error at time 124: ext4_iget_extra_inode:5180: inode 15 [ 124.214727][ T8774] loop6: lost filesystem error report for type 5 error -117 [ 124.218641][ T8774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.307160][ T8774] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.899: Unrecognised inode hash code 255 [ 124.312704][ T8774] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.899: Corrupt directory, running e2fsck is recommended [ 124.361858][ T8774] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.899: Unrecognised inode hash code 255 [ 124.369187][ T8774] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.899: Corrupt directory, running e2fsck is recommended [ 124.369288][ T8774] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 4: comm syz.6.899: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 124.490286][ T5108] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 124.491119][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.498021][ T8671] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 124.581051][ T5353] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.661421][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.906'. [ 124.836063][ T8800] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.905'. [ 124.919571][ T8805] sit0: left promiscuous mode [ 124.949253][ T8805] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 124.951002][ T8805] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 124.951719][ T8805] gretap1: left allmulticast mode [ 124.952906][ T8805] bridge1: left promiscuous mode [ 125.028106][ T5836] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.028161][ T5836] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.028199][ T5836] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.028227][ T5836] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 125.067305][ T8810] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.089228][ T8811] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 125.098469][ T8809] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 125.098490][ T8809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.109427][ T8809] vhci_hcd vhci_hcd.0: Device attached [ 126.179584][ T1580] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.179647][ T1580] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.255607][ T8816] set_capacity_and_notify: 1 callbacks suppressed [ 126.255663][ T8816] loop7: detected capacity change from 0 to 1024 [ 126.352521][ T8810] loop5: detected capacity change from 0 to 8192 [ 126.364181][ T10] usb 16-1: new low-speed USB device number 2 using vhci_hcd [ 126.402593][ T8816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.512289][ T8812] vhci_hcd: connection reset by peer [ 126.528251][ T12] vhci_hcd vhci_hcd.7: stop threads [ 126.529224][ T12] vhci_hcd vhci_hcd.7: release socket [ 126.554983][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 126.607188][ T8833] fuse: Bad value for 'fd' [ 126.636565][ T8837] loop5: detected capacity change from 0 to 1024 [ 126.648011][ T8839] netlink: 'syz.1.917': attribute type 2 has an invalid length. [ 126.677856][ T8837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.679934][ T8837] /dev/loop5: Can't open blockdev [ 127.143077][ T8834] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.143299][ T8834] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.245526][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.407485][ T8834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.419790][ T8834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.505921][ T3656] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.505968][ T3656] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.506008][ T3656] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.506025][ T3656] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.506048][ T3656] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.506062][ T3656] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.506082][ T3656] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.506096][ T3656] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.753764][ T8866] FAULT_INJECTION: forcing a failure. [ 127.753764][ T8866] name failslab, interval 1, probability 0, space 0, times 0 [ 127.753820][ T8866] CPU: 0 UID: 0 PID: 8866 Comm: syz.6.924 Tainted: G L syzkaller #0 PREEMPT [ 127.753839][ T8866] Tainted: [L]=SOFTLOCKUP [ 127.753843][ T8866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 127.753852][ T8866] Call trace: [ 127.753856][ T8866] show_stack+0x2c/0x3c (C) [ 127.753888][ T8866] __dump_stack+0x30/0x40 [ 127.753903][ T8866] dump_stack_lvl+0xd8/0x12c [ 127.753916][ T8866] dump_stack+0x1c/0x28 [ 127.753929][ T8866] should_fail_ex+0x41c/0x590 [ 127.753940][ T8866] should_failslab+0xc4/0x120 [ 127.753950][ T8866] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 127.753962][ T8866] __alloc_skb+0x1f0/0x610 [ 127.753974][ T8866] pfkey_send_policy_notify+0x11c/0x7c0 [ 127.753986][ T8866] km_policy_notify+0x130/0x228 [ 127.753996][ T8866] xfrm_add_policy+0x34c/0x58c [ 127.754008][ T8866] xfrm_user_rcv_msg+0x4e0/0x950 [ 127.754020][ T8866] netlink_rcv_skb+0x238/0x414 [ 127.754032][ T8866] xfrm_netlink_rcv+0x80/0x9c [ 127.754043][ T8866] netlink_unicast+0x600/0x7f8 [ 127.754053][ T8866] netlink_sendmsg+0x648/0x948 [ 127.754065][ T8866] __sock_sendmsg+0xc8/0x17c [ 127.754075][ T8866] ____sys_sendmsg+0x3d0/0x6c8 [ 127.754087][ T8866] ___sys_sendmsg+0x198/0x224 [ 127.754098][ T8866] __sys_sendmsg+0x158/0x204 [ 127.754109][ T8866] __arm64_sys_sendmsg+0x88/0x9c [ 127.754121][ T8866] invoke_syscall+0x98/0x244 [ 127.754134][ T8866] el0_svc_common+0xec/0x23c [ 127.754146][ T8866] do_el0_svc+0x4c/0x5c [ 127.754158][ T8866] el0_svc+0x64/0x260 [ 127.754170][ T8866] el0t_64_sync_handler+0x44/0x104 [ 127.754180][ T8866] el0t_64_sync+0x198/0x19c [ 127.980988][ T8861] netlink: 'syz.4.923': attribute type 16 has an invalid length. [ 127.981031][ T8861] netlink: 'syz.4.923': attribute type 3 has an invalid length. [ 127.981056][ T8861] __nla_validate_parse: 2 callbacks suppressed [ 127.981068][ T8861] netlink: 38090 bytes leftover after parsing attributes in process `syz.4.923'. [ 128.239835][ T8879] netlink: 'syz.6.929': attribute type 6 has an invalid length. [ 128.325163][ T50] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 128.325556][ T50] Bluetooth: hci0: unexpected event for opcode 0x203e [ 128.466498][ T8891] loop7: detected capacity change from 0 to 512 [ 128.469875][ T8891] ext4: Unknown parameter 'appraise_type' [ 128.570559][ T8893] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 128.574106][ T8893] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 128.698743][ T8899] loop1: detected capacity change from 0 to 2048 [ 129.160397][ T8899] EXT4-fs: Ignoring removed i_version option [ 129.160441][ T8899] EXT4-fs: Ignoring removed i_version option [ 129.181701][ T8899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.334189][ T8912] input: syz1 as /devices/virtual/input/input5 [ 129.420213][ T8915] netlink: 16 bytes leftover after parsing attributes in process `syz.5.941'. [ 129.464483][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'. [ 129.503641][ T8915] loop5: detected capacity change from 0 to 2048 [ 129.531474][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.539757][ T8915] loop5: p1 < > p4 [ 129.539757][ T8915] p4: [ 129.542390][ T8915] loop5: p4 size 722688 extends beyond EOD, truncated [ 129.547830][ T8915] loop5: p6 start 262464109 is beyond EOD, truncated [ 129.547892][ T8915] loop5: p7 size 2304 extends beyond EOD, truncated [ 129.664542][ T8928] netlink: 72 bytes leftover after parsing attributes in process `syz.6.939'. [ 129.664949][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.6.939'. [ 129.765733][ T8933] 9pnet_fd: Insufficient options for proto=fd [ 129.779286][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 129.827027][ T5386] udevd[5386]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 129.839273][ T5152] udevd[5152]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 129.845969][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 130.143416][ T8949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.950'. [ 130.147414][ T8949] block nbd0: Unsupported socket: should be TCP or UNIX. [ 130.621745][ T8971] netlink: 132 bytes leftover after parsing attributes in process `syz.6.958'. [ 130.652140][ T8975] netlink: 20 bytes leftover after parsing attributes in process `syz.5.960'. [ 130.682646][ T8975] bond0: (slave bond_slave_0): Releasing backup interface [ 130.836231][ T8979] loop5: detected capacity change from 0 to 8192 [ 130.878368][ T8975] bond_slave_0: entered promiscuous mode [ 130.882782][ T8975] bond_slave_0: entered allmulticast mode [ 130.887545][ T8979] loop5: AHDI p1 p4 [ 130.909057][ T8986] syzkaller1: entered promiscuous mode [ 130.909103][ T8986] syzkaller1: entered allmulticast mode [ 131.010679][ T8998] overlay: Bad value for 'upperdir' [ 131.397753][ T9006] loop6: detected capacity change from 0 to 8192 [ 131.497934][ T9006] netlink: 12 bytes leftover after parsing attributes in process `syz.6.968'. [ 131.521876][ T10] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 131.526666][ T9006] bridge0: entered allmulticast mode [ 131.624370][ T9023] sctp: [Deprecated]: syz.1.971 (pid 9023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.624370][ T9023] Use struct sctp_sack_info instead [ 131.684869][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 131.695815][ T9023] loop1: detected capacity change from 0 to 512 [ 131.698192][ T9023] EXT4-fs: Ignoring removed i_version option [ 131.701749][ T9023] ext4: Unknown parameter 'noacl' [ 131.710560][ T9031] loop5: detected capacity change from 0 to 512 [ 131.715221][ T9031] EXT4-fs: Ignoring removed nobh option [ 131.725839][ T9031] EXT4-fs (loop5): orphan cleanup on readonly fs [ 131.745156][ T9031] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.972: EA inode hash validation failed [ 131.745408][ T9031] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.745643][ T9031] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.972: corrupted inode contents [ 131.745664][ T9031] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.749301][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 131.749322][ C0] EXT4-fs (loop5): initial error at time 131: ext4_do_update_inode:5742: inode 15 [ 131.749343][ C0] EXT4-fs (loop5): last error at time 131: ext4_do_update_inode:5742: inode 15 [ 131.785121][ T9031] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.972: mark_inode_dirty error [ 131.785201][ T9031] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.789615][ T9031] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #15: comm syz.5.972: corrupted inode contents [ 131.789663][ T9031] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.795471][ T9031] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.972: mark_inode_dirty error [ 131.795522][ T9031] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.802741][ T9031] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.972: mark inode dirty (error -117) [ 131.802792][ T9031] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.808334][ T9031] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 131.808453][ T9031] EXT4-fs (loop5): 1 orphan inode deleted [ 131.808931][ T9031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 131.906269][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.999283][ T9041] netlink: 11 bytes leftover after parsing attributes in process `syz.5.974'. [ 132.100533][ T4944] udevd[4944]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 132.529444][ T50] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 132.532173][ T50] Bluetooth: hci0: Injecting HCI hardware error event [ 132.534614][ T50] Bluetooth: hci0: hardware error 0x00 [ 133.664631][ T9088] Cannot find del_set index 2 as target [ 134.172000][ T9085] loop7: detected capacity change from 0 to 512 [ 134.179613][ T9085] EXT4-fs: Invalid want_extra_isize 4 [ 135.203484][ T9088] loop1: detected capacity change from 0 to 512 [ 135.203959][ T9088] ext2: Unknown parameter 'dont_appraise' [ 135.208385][ T4726] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 135.208451][ T4726] Bluetooth: hci2: Injecting HCI hardware error event [ 135.209980][ T4726] Bluetooth: hci2: hardware error 0x00 [ 135.214426][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 136.040363][ T9088] loop1: detected capacity change from 0 to 512 [ 137.314842][ T9102] loop7: detected capacity change from 0 to 1024 [ 137.342687][ T9106] loop5: detected capacity change from 0 to 256 [ 137.459786][ T9106] netlink: 'syz.5.990': attribute type 12 has an invalid length. [ 137.459828][ T9106] netlink: 'syz.5.990': attribute type 29 has an invalid length. [ 137.459852][ T9106] __nla_validate_parse: 2 callbacks suppressed [ 137.459863][ T9106] netlink: 148 bytes leftover after parsing attributes in process `syz.5.990'. [ 137.459879][ T9106] netlink: 'syz.5.990': attribute type 1 has an invalid length. [ 137.459896][ T9106] netlink: 'syz.5.990': attribute type 2 has an invalid length. [ 137.459908][ T9106] netlink: 11 bytes leftover after parsing attributes in process `syz.5.990'. [ 137.615959][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.7.994'. [ 137.644633][ T9125] random: crng reseeded on system resumption [ 137.801797][ T9131] FAULT_INJECTION: forcing a failure. [ 137.801797][ T9131] name failslab, interval 1, probability 0, space 0, times 0 [ 137.805377][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.5.999 Tainted: G L syzkaller #0 PREEMPT [ 137.805406][ T9131] Tainted: [L]=SOFTLOCKUP [ 137.805411][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 137.805417][ T9131] Call trace: [ 137.805421][ T9131] show_stack+0x2c/0x3c (C) [ 137.805448][ T9131] __dump_stack+0x30/0x40 [ 137.805461][ T9131] dump_stack_lvl+0xd8/0x12c [ 137.805471][ T9131] dump_stack+0x1c/0x28 [ 137.805481][ T9131] should_fail_ex+0x41c/0x590 [ 137.805490][ T9131] should_failslab+0xc4/0x120 [ 137.805499][ T9131] kmem_cache_alloc_noprof+0x94/0x5d8 [ 137.805508][ T9131] vm_area_dup+0x34/0x508 [ 137.805518][ T9131] __split_vma+0x1a8/0x884 [ 137.805525][ T9131] vms_gather_munmap_vmas+0x3d0/0x101c [ 137.805536][ T9131] mmap_region+0x710/0x1c38 [ 137.805543][ T9131] do_mmap+0xa50/0xf0c [ 137.805551][ T9131] vm_mmap_pgoff+0x298/0x46c [ 137.805561][ T9131] ksys_mmap_pgoff+0xd0/0x5b4 [ 137.805570][ T9131] __arm64_sys_mmap+0x110/0x12c [ 137.805580][ T9131] invoke_syscall+0x98/0x244 [ 137.805590][ T9131] el0_svc_common+0xec/0x23c [ 137.805599][ T9131] do_el0_svc+0x4c/0x5c [ 137.805609][ T9131] el0_svc+0x64/0x260 [ 137.805619][ T9131] el0t_64_sync_handler+0x44/0x104 [ 137.805628][ T9131] el0t_64_sync+0x198/0x19c [ 137.836607][ T9131] 9p: Bad value for 'rfdno' [ 137.894560][ T9144] binder: 9138:9144 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 137.908282][ T9144] binder: 9138:9144 BC_ACQUIRE_DONE u0000000000000001 no match [ 137.908385][ T9144] binder: 9138:9144 BC_ACQUIRE_DONE u0000000000000001 no match [ 137.970455][ T9149] ip_tables: iptables: counters copy to user failed while replacing table [ 138.154361][ T9158] loop5: detected capacity change from 0 to 512 [ 138.173567][ T9158] loop5: detected capacity change from 0 to 512 [ 138.181526][ T9167] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1008'. [ 138.219433][ T9169] loop1: detected capacity change from 0 to 128 [ 138.225525][ T9169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 138.227086][ T9169] System zones: 1-3, 19-19, 35-36 [ 138.230655][ T9169] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.300308][ T9172] loop6: detected capacity change from 0 to 1024 [ 138.437658][ T4726] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 138.538792][ T9176] loop7: detected capacity change from 0 to 8192 [ 138.550084][ T9158] loop5: detected capacity change from 0 to 512 [ 138.579091][ T9158] loop5: detected capacity change from 0 to 512 [ 138.616416][ T9158] loop5: detected capacity change from 0 to 512 [ 138.781165][ T9187] syzkaller0: entered promiscuous mode [ 138.781210][ T9187] syzkaller0: entered allmulticast mode [ 139.114498][ T4714] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.148493][ T9195] binder: 9194:9195 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 139.148758][ T9195] netlink: 'syz.6.1016': attribute type 10 has an invalid length. [ 139.248937][ T9196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1016'. [ 139.252504][ T9203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1016'. [ 140.140064][ T9195] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.303959][ T9213] tipc: Started in network mode [ 140.304015][ T9213] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 140.304059][ T9213] tipc: Enabling of bearer rejected, failed to enable media [ 140.352737][ T9216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.461297][ T9212] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 140.495348][ T9225] netlink: 'syz.4.1021': attribute type 21 has an invalid length. [ 140.497222][ T9225] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.499080][ T9225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.499129][ T9225] IPv6: NLM_F_CREATE should be set when creating new route [ 140.499156][ T9225] IPv6: NLM_F_CREATE should be set when creating new route [ 140.499208][ T9225] IPv6: NLM_F_CREATE should be set when creating new route [ 140.529261][ T9228] netlink: 'syz.4.1021': attribute type 21 has an invalid length. [ 140.529331][ T9228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.543141][ T9226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.608123][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.684302][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 140.722815][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 140.728311][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 140.733656][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1024'. [ 140.823083][ T9245] [ 140.823655][ T9245] ====================================================== [ 140.825112][ T9245] WARNING: possible circular locking dependency detected [ 140.826376][ T9245] syzkaller #0 Tainted: G L [ 140.827520][ T9245] ------------------------------------------------------ [ 140.828720][ T9245] syz.7.1026/9245 is trying to acquire lock: [ 140.829861][ T9245] ffff000110328c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 140.831801][ T9245] [ 140.831801][ T9245] but task is already holding lock: [ 140.833196][ T9245] ffff0000f2a4a640 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 140.835122][ T9245] [ 140.835122][ T9245] which lock already depends on the new lock. [ 140.835122][ T9245] [ 140.836921][ T9245] [ 140.836921][ T9245] the existing dependency chain (in reverse order) is: [ 140.838551][ T9245] [ 140.838551][ T9245] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 140.839980][ T9245] down_write+0x50/0xc0 [ 140.840881][ T9245] ext4_destroy_inline_data+0x30/0x114 [ 140.842000][ T9245] ext4_do_writepages+0x3e4/0x3bc0 [ 140.843087][ T9245] ext4_writepages+0x198/0x2dc [ 140.844072][ T9245] do_writepages+0x284/0x47c [ 140.845054][ T9245] filemap_writeback+0x230/0x2bc [ 140.846024][ T9245] file_write_and_wait_range+0xb0/0x138 [ 140.847133][ T9245] mmb_fsync_noflush+0x80/0x1bc [ 140.848118][ T9245] ext4_sync_file+0x37c/0xf20 [ 140.849036][ T9245] vfs_fsync_range+0x120/0x140 [ 140.850005][ T9245] ext4_buffered_write_iter+0x24c/0x2ec [ 140.851121][ T9245] ext4_file_write_iter+0x1dc/0x134c [ 140.852162][ T9245] vfs_write+0x51c/0xa0c [ 140.853052][ T9245] ksys_pwrite64+0x118/0x1ac [ 140.853965][ T9245] __arm64_sys_pwrite64+0xa8/0xc0 [ 140.854981][ T9245] invoke_syscall+0x98/0x244 [ 140.855864][ T9245] el0_svc_common+0xec/0x23c [ 140.856758][ T9245] do_el0_svc+0x4c/0x5c [ 140.857588][ T9245] el0_svc+0x64/0x260 [ 140.858397][ T9245] el0t_64_sync_handler+0x44/0x104 [ 140.859404][ T9245] el0t_64_sync+0x198/0x19c [ 140.860315][ T9245] [ 140.860315][ T9245] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 140.861925][ T9245] __lock_acquire+0x17c0/0x2ebc [ 140.862963][ T9245] lock_acquire+0x140/0x364 [ 140.863873][ T9245] percpu_down_read_internal+0x5c/0x294 [ 140.865010][ T9245] ext4_writepages+0x170/0x2dc [ 140.865986][ T9245] do_writepages+0x284/0x47c [ 140.866892][ T9245] __writeback_single_inode+0x140/0x1880 [ 140.867975][ T9245] writeback_single_inode+0x400/0xb20 [ 140.869051][ T9245] write_inode_now+0x170/0x208 [ 140.870009][ T9245] iput+0x7cc/0xc2c [ 140.870837][ T9245] ext4_xattr_block_set+0x1460/0x21e8 [ 140.871938][ T9245] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 140.873117][ T9245] __ext4_expand_extra_isize+0x2a4/0x378 [ 140.874223][ T9245] __ext4_mark_inode_dirty+0x394/0x828 [ 140.875278][ T9245] ext4_evict_inode+0x798/0xfb8 [ 140.876271][ T9245] evict+0x4c0/0x74c [ 140.877077][ T9245] iput+0x8f0/0xc2c [ 140.877848][ T9245] ext4_process_orphan+0x24c/0x2c0 [ 140.878906][ T9245] ext4_orphan_cleanup+0x7d4/0xd20 [ 140.879966][ T9245] ext4_fill_super+0x4628/0x4e14 [ 140.880927][ T9245] get_tree_bdev_flags+0x388/0x43c [ 140.881915][ T9245] get_tree_bdev+0x2c/0x3c [ 140.882783][ T9245] ext4_get_tree+0x28/0x38 [ 140.883684][ T9245] vfs_get_tree+0x90/0x28c [ 140.884539][ T9245] fc_mount+0x24/0xac [ 140.885334][ T9245] do_new_mount+0x2a4/0x538 [ 140.886215][ T9245] path_mount+0x5f0/0xa88 [ 140.887100][ T9245] do_mount+0xe8/0x148 [ 140.887907][ T9245] __arm64_sys_mount+0x33c/0x388 [ 140.888873][ T9245] invoke_syscall+0x98/0x244 [ 140.889759][ T9245] el0_svc_common+0xec/0x23c [ 140.890670][ T9245] do_el0_svc+0x4c/0x5c [ 140.891493][ T9245] el0_svc+0x64/0x260 [ 140.892285][ T9245] el0t_64_sync_handler+0x44/0x104 [ 140.893313][ T9245] el0t_64_sync+0x198/0x19c [ 140.894189][ T9245] [ 140.894189][ T9245] other info that might help us debug this: [ 140.894189][ T9245] [ 140.896056][ T9245] Possible unsafe locking scenario: [ 140.896056][ T9245] [ 140.897444][ T9245] CPU0 CPU1 [ 140.898430][ T9245] ---- ---- [ 140.899422][ T9245] lock(&ei->xattr_sem); [ 140.900347][ T9245] lock(&sbi->s_writepages_rwsem); [ 140.901852][ T9245] lock(&ei->xattr_sem); [ 140.903074][ T9245] rlock(&sbi->s_writepages_rwsem); [ 140.904046][ T9245] [ 140.904046][ T9245] *** DEADLOCK *** [ 140.904046][ T9245] [ 140.905553][ T9245] 3 locks held by syz.7.1026/9245: [ 140.906524][ T9245] #0: ffff00011032a0d8 (&type->s_umount_key#27/1){+.+.}-{4:4}, at: sget_fc+0x788/0x13e8 [ 140.908411][ T9245] #1: ffff00011032a640 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x360/0xfb8 [ 140.910100][ T9245] #2: ffff0000f2a4a640 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x32c/0x828 [ 140.912038][ T9245] [ 140.912038][ T9245] stack backtrace: [ 140.913140][ T9245] CPU: 0 UID: 0 PID: 9245 Comm: syz.7.1026 Tainted: G L syzkaller #0 PREEMPT [ 140.915082][ T9245] Tainted: [L]=SOFTLOCKUP [ 140.915890][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 140.917749][ T9245] Call trace: [ 140.918362][ T9245] show_stack+0x2c/0x3c (C) [ 140.919202][ T9245] __dump_stack+0x30/0x40 [ 140.919953][ T9245] dump_stack_lvl+0xd8/0x12c [ 140.920791][ T9245] dump_stack+0x1c/0x28 [ 140.921540][ T9245] print_circular_bug+0x328/0x330 [ 140.922436][ T9245] check_noncircular+0x158/0x174 [ 140.923314][ T9245] __lock_acquire+0x17c0/0x2ebc [ 140.924208][ T9245] lock_acquire+0x140/0x364 [ 140.925009][ T9245] percpu_down_read_internal+0x5c/0x294 [ 140.926054][ T9245] ext4_writepages+0x170/0x2dc [ 140.926929][ T9245] do_writepages+0x284/0x47c [ 140.927765][ T9245] __writeback_single_inode+0x140/0x1880 [ 140.928912][ T9245] writeback_single_inode+0x400/0xb20 [ 140.929936][ T9245] write_inode_now+0x170/0x208 [ 140.930863][ T9245] iput+0x7cc/0xc2c [ 140.931555][ T9245] ext4_xattr_block_set+0x1460/0x21e8 [ 140.932540][ T9245] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 140.933597][ T9245] __ext4_expand_extra_isize+0x2a4/0x378 [ 140.934663][ T9245] __ext4_mark_inode_dirty+0x394/0x828 [ 140.935610][ T9245] ext4_evict_inode+0x798/0xfb8 [ 140.936535][ T9245] evict+0x4c0/0x74c [ 140.937244][ T9245] iput+0x8f0/0xc2c [ 140.937934][ T9245] ext4_process_orphan+0x24c/0x2c0 [ 140.938906][ T9245] ext4_orphan_cleanup+0x7d4/0xd20 [ 140.939861][ T9245] ext4_fill_super+0x4628/0x4e14 [ 140.940747][ T9245] get_tree_bdev_flags+0x388/0x43c [ 140.941697][ T9245] get_tree_bdev+0x2c/0x3c [ 140.942493][ T9245] ext4_get_tree+0x28/0x38 [ 140.943277][ T9245] vfs_get_tree+0x90/0x28c [ 140.944081][ T9245] fc_mount+0x24/0xac [ 140.944861][ T9245] do_new_mount+0x2a4/0x538 [ 140.945738][ T9245] path_mount+0x5f0/0xa88 [ 140.946599][ T9245] do_mount+0xe8/0x148 [ 140.947385][ T9245] __arm64_sys_mount+0x33c/0x388 [ 140.948326][ T9245] invoke_syscall+0x98/0x244 [ 140.949163][ T9245] el0_svc_common+0xec/0x23c [ 140.950059][ T9245] do_el0_svc+0x4c/0x5c [ 140.950828][ T9245] el0_svc+0x64/0x260 [ 140.951560][ T9245] el0t_64_sync_handler+0x44/0x104 [ 140.952549][ T9245] el0t_64_sync+0x198/0x19c [ 141.063881][ T9245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1026: iget: bad extra_isize 90 (inode size 256) [ 141.066788][ T9245] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 141.067221][ T9245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1026: error while reading EA inode 11 err=-117 [ 141.072058][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 141.072083][ C0] EXT4-fs (loop7): initial error at time 140: ext4_xattr_inode_iget:441: inode 11 [ 141.072107][ C0] EXT4-fs (loop7): last error at time 140: ext4_xattr_inode_iget:441: inode 11 [ 141.078944][ T9245] loop7: lost filesystem error report for type 5 error -117 [ 141.079249][ T9245] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 141.084445][ T9245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1026: iget: bad extra_isize 90 (inode size 256) [ 141.087614][ T9245] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 141.087911][ T9245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1026: error while reading EA inode 11 err=-117 [ 141.092786][ T9245] loop7: lost filesystem error report for type 5 error -117 [ 141.093117][ T9245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.1026: iget: bad extra_isize 90 (inode size 256) [ 141.098137][ T9245] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 141.098428][ T9245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1026: error while reading EA inode 18 err=-117 [ 141.103273][ T9245] loop7: lost filesystem error report for type 5 error -117 [ 141.103757][ T9245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.1026: iget: bad extra_isize 90 (inode size 256) [ 141.109401][ T9245] loop7: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 141.109707][ T9245] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1026: error while reading EA inode 18 err=-117 [ 141.114660][ T9245] loop7: lost filesystem error report for type 5 error -117 [ 141.114997][ T9245] EXT4-fs (loop7): 1 orphan inode deleted [ 141.119404][ T9245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.150064][ T5587] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.