last executing test programs: 3m2.971616982s ago: executing program 2 (id=76): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}}, 0x20004080) 3m1.292861536s ago: executing program 2 (id=85): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c00040600001f0000bf852c8986626691b01b2d44e4ce28712d2d5f2c2828"], 0xe0}], 0x1, 0x0, 0x0, 0x40000}, 0x40040) 3m1.157910664s ago: executing program 2 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000302000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3m1.099123529s ago: executing program 2 (id=91): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x9, '\x00', @p_u32=&(0x7f0000000200)=0x77bd4698}}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000a40)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.*-)\x9e:{\\'}}], 0x2c}) syz_clone(0x0, &(0x7f0000000180)="428ad0a815598f919986d912f898f060b904197b00240c5cec7abf5ab0c41009bae2a9b4821ee6e6ac08b67446", 0x2d, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)="05f5b7c164e4b5be80d7eadd1fee5de976312b311a1281cbb20754d48ccfd94057f4f4d4fa1c61ea3bd2b1a16c9703b923c02dc05489d9ac66274d4174fa14848a7e2eac3d1c85db3f782da60651b7259a11bf62b0fec3d73fdae5bd00cbd8f782466c478cea3fa9055bca5d9f2457b0cb08692b175640f94559027a37308069e95f6591b5c1e6e7181318e53f8f63c1e67cdb74f5e17f2334f92d3ba3244b9ac022cf9ce78f23349491") chdir(&(0x7f0000000140)='./file0\x00') r1 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2700000000000000010000000c"], 0x30}, 0x4c001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) 3m0.817938794s ago: executing program 2 (id=93): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000007000200000a20000000000a01030000000000000000020000000900010073797a300000000064000000090a010400000000000000000200fffc08000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094200009801c0002800c00018008000140000000040c0001800800014000000004780100000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000004c01038048"], 0x224}}, 0x0) 3m0.42585516s ago: executing program 2 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x600, 0xc8ab}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m0.401849121s ago: executing program 32 (id=95): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x600, 0xc8ab}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m23.199905212s ago: executing program 5 (id=1588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x68, r1, 0x5, 0x80300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @random="b92e35ac622e"}, 0x0, @default, 0xb, @void, @void, @val={0x3, 0x1, 0x95}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3ff}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m23.118727711s ago: executing program 5 (id=1590): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000028c0)={0x0, 0xd00, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r1, 0xf01, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0xa00000000000000) 1m23.045065336s ago: executing program 5 (id=1594): r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x7df483, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xf, &(0x7f0000000180)={0x7, 0x81}, 0x0) (async) prlimit64(0x0, 0xf, &(0x7f0000000180)={0x7, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xb635773f05ebbee2, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x34, 0x6, 0x6, 0xa4a21428e8f67019, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001044}, 0x10) setuid(0xee01) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000a04fcff", 0x58}], 0x1) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) lseek(0xffffffffffffffff, 0xd48a, 0x1) (async) lseek(0xffffffffffffffff, 0xd48a, 0x1) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x99\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) write$binfmt_script(r6, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000001c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000080)=0x2) (async) ioctl$vim2m_VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @start={0xde39, 0x1}}) ioctl$VIDIOC_DECODER_CMD(r8, 0xc0485660, &(0x7f0000000380)={0x3, 0x2, @start={0x1}}) (async) ioctl$VIDIOC_DECODER_CMD(r8, 0xc0485660, &(0x7f0000000380)={0x3, 0x2, @start={0x1}}) 1m23.014102672s ago: executing program 5 (id=1596): mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000e40)={[{@rodir}, {@numtail}, {@numtail}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@numtail}, {@numtail}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@fat=@check_strict}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv-cbc-aes-sha256-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b27", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="f80ae5e8c2f45d628afd54d3e853ce7ad1ba164960d73f196ad1435e962731f4", 0x20}], 0x1, &(0x7f0000000840)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x440d4) recvmmsg(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f00000006c0)=""/227, 0xe3}], 0x2}, 0x2a45}], 0x1, 0x40000043, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x40400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180200137000f80100000001000000edaf5e0ab247e29cfaf3"], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r3}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="000210e7e4da03ff466100"], 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000003feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000620a00fe000000007133000000000000b5030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 1m22.707288733s ago: executing program 5 (id=1600): request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10ruSt\xe3c*sgrVdn:Dd', 0xfffffffffffffffe) 1m21.520261192s ago: executing program 5 (id=1608): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0xa0000, &(0x7f0000000140)={@align=0xffffffff, {0xffff, 0x7, 0x80000001, 0xfef}}, 0x2, &(0x7f0000000200), &(0x7f0000000340)=0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x12, &(0x7f0000000400)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x6f}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f6964bd517dd4688905a8a07e4d7a5cad04e93b0a4552c745aadb17fdabe18c53f48de7ce5c1c3c4e7fe478e4d62a94d8d3711b170285fa689b3f05b7851d06475e016fdadde1064ab95b1ce0f254f87c00b47480e1228895c60b76c35c6d4f6ac2d7f5a93a1945de3ca6b8e523f346143665ccfa90bdcf34fd9df350d62390a200ab2c8306ba3e3ec7faeadef6175b3120be034caec317b2b0eda713c7b7dc1982595ed4c53b6a73f7147db5afa9f878cd1a", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0xa, @private1, 0x8}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xe, @empty, 0x3}}, [0xb, 0x6ec, 0xc4e7, 0x8000008000000007, 0x8, 0x42, 0xffffffffffff363b, 0x1, 0x704e, 0x10001, 0xfffffffffffffffd, 0x4, 0x814, 0xfffd, 0x76]}, &(0x7f0000000180)=0x100) statx(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x800, 0x800, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0xfffffffa, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m21.519423378s ago: executing program 33 (id=1608): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x1}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0xa0000, &(0x7f0000000140)={@align=0xffffffff, {0xffff, 0x7, 0x80000001, 0xfef}}, 0x2, &(0x7f0000000200), &(0x7f0000000340)=0x3}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x12, &(0x7f0000000400)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x6f}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f6964bd517dd4688905a8a07e4d7a5cad04e93b0a4552c745aadb17fdabe18c53f48de7ce5c1c3c4e7fe478e4d62a94d8d3711b170285fa689b3f05b7851d06475e016fdadde1064ab95b1ce0f254f87c00b47480e1228895c60b76c35c6d4f6ac2d7f5a93a1945de3ca6b8e523f346143665ccfa90bdcf34fd9df350d62390a200ab2c8306ba3e3ec7faeadef6175b3120be034caec317b2b0eda713c7b7dc1982595ed4c53b6a73f7147db5afa9f878cd1a", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0xa, @private1, 0x8}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x84, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xe, @empty, 0x3}}, [0xb, 0x6ec, 0xc4e7, 0x8000008000000007, 0x8, 0x42, 0xffffffffffff363b, 0x1, 0x704e, 0x10001, 0xfffffffffffffffd, 0x4, 0x814, 0xfffd, 0x76]}, &(0x7f0000000180)=0x100) statx(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x800, 0x800, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000600), 0xfffffffa, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m13.532450285s ago: executing program 1 (id=1735): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', @random="0610002000"}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7773}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1m12.742677608s ago: executing program 1 (id=1748): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0xfe}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x10000}) 1m12.694416057s ago: executing program 1 (id=1749): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r2, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000010000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) 1m11.819170749s ago: executing program 1 (id=1752): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000009c0)='x!', 0x2}, {0x0}], 0x2) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000480)={0x1, 0x5e, 0x62, &(0x7f0000000300)="5298ac343c3c6dbc2dd6e89ccef555968664db9e2de4289648ea2634225f086fc8d108f71b8096bc36bf9fa41193279e7477126ee89991543ebf2468b17d1abd824c2e9f2fb9ef3f5ba516eaba0f4fe4ab0dbf87fa29eeae7c8fd1d23941", &(0x7f0000000400)="7272ad64bce405682aa5b1dcd3099b1a93c994243802884733d504b362cc049b58a1bd41b4ac98a453703b621981e2dbf8133c9c1c22ff4424aee3606d93d18937503879eb311d545c712cb7cea14a6bcf16a5a5fb420048c36498a19b1cbe1dcb5e"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a1400000011fb0962ddf2213c343900010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r4, 0x400000000000003a, 0x1, 0x0, 0x0) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m11.568132039s ago: executing program 1 (id=1760): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf773, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='vcan0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) preadv2(r7, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/165, 0xa5}], 0x1, 0xeb82, 0x7, 0xad2b7d316b9231cb) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r7, 0x0, &(0x7f00000002c0)={{r8, r9+10000000}, {0x0, 0x989680}}, &(0x7f0000000300)) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000200)=0x9, 0x4) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x20, 0x8, 0x11, r1, 0x0, 0x0, 0x6}]) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000080)='R\x10rd\xa9\xb3\x00\x00\x00\x00\x00\x00\x00\xef\xff\xff\xfd\x00\xb1U\xc9\x151\xf1us\xe7\xb8\x0e\xd2>\x89\xc2\xda=\x88I\xd2x\x8dt\xcc2@^sU\xf4#(\x92\x1b\xa2t\xb4\xbe4\x06~\xbe\xe7GhF\x03\x1c\x01\x96\xfc\xd7\xe2\x9f\x84E\xdc\x14g\xaa4\xeda\xd6\\d\x7f\xf8\"\xf7\xb9\xcd{\xe4.\xd1\x14q\xe4\xc4T\\`\xecs\xd2\"\xb5\x9a\xe9\x0e[ m\x80$\x9c\xbf\xf8\x1c\xcd\x9c\xb2h\xd4\xc4\x87\xf5\r4fj\xc5\xca\xd0\xf41\x05\xa3\xcf\\N\x8b-\xf3\xbd\xc8\xd6\xd0\"\x9cA\x90\x01F\xd0\x887\xa5\xfbg\xf9\xb5}AhV\xe9*&\xa3\x9d\xaf\x95-V[\xc60\xf6\xc5 \x82\x8a;e\xa6\xdfv\x94\xd6i\xb0l\x04\x00\x00\x00:\xe1\xdc/ w%\xf3:\x14Qn*x\x8aH\x86K\xdb\xb0>\x81\x02\xa2cj\xcf\x06E\xe0\x87,\xa1\t&\xff@th\xe3\x9ae\a\xa3@\xa9\xaaKJ\xd2 \x0e\x00\x00\x00\x00\x00\x00\x00\xf2\xed\x80\xaf:g|\x03)\x9ek\x17W\x0fvh\xe2\tY\x91;\xbf\nP\xcc,\xcb{?\xdc\x81\x9fpR\t~l)4B\x84\x100\xc2\x9d&\xe4\xc7(\x87\xc2;=\xeet\x19\xfa\xbd\'\x12\x18&\x1fa\x92\xf3\x95\xabP\x0e\x17\xa43NM\xc3:C\x94\xe4', 0xfffffffffffffffe) 1m11.075765233s ago: executing program 1 (id=1763): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa0000d7ff000079ba08000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) 1m11.023544193s ago: executing program 34 (id=1763): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa0000d7ff000079ba08000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000}, 0x94) 4.260919926s ago: executing program 3 (id=2515): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x5, 0x6, 0x2832d002fddab76c, 0x20, 0x0, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000861}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) sendmmsg$inet6(r1, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x4040) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="180000001200050100000002000000e304001900ff0000"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) 3.209901639s ago: executing program 0 (id=2517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x10a, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.209693898s ago: executing program 3 (id=2518): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@bridge_newneigh={0x28, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x2, 0x7e, 0x5}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 3.030328378s ago: executing program 3 (id=2523): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000d9ffffff0000000200000a20000000000a01080000000000000000020000000900010073797a300000020064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002140000001100010000"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.885794903s ago: executing program 3 (id=2526): mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004540)="fef05e511ff17f1bc7e9e09a6a97aac399c5e2cd51bda3d3c9b50d69bba25b81ff375d0b99513a0107a75e8ce838a19750e31f1aeff05559d0954f2809e7951ebc26c7e994e4073281d3895c25f31b9e1452dfcce8da3c7609bedaf65923bcf8c359cf83eca751f84482a5a39ff0433869285354c00985ef3039307d7e9e9dfd3106413e82b77b39ce60c6205cc8cc14602689d39fd8e2fc5f3be3b7633ada7b4be33704bcb80d5d0960ab7f92933164d716a6022381bac227985bf214c87fe44443bfa583feda753a2bee486e3f6cc436f3004fdc355af15086f9a65bcf6e4525dbf8d4b1b80a10179a54fab5c7574646ceda0d43ebda88d8b38b086464fc31d14b912a02073ad57a928f6596c3b375a15f30c8046d22409d326565bfa1bfd99880be712d3460abd16073824d42cc0688e2ebd0c49f26b245950242460121b5b215e56fd2733c4ceddf03ee9f9cf73db0e798a456a4d285ad49846e91bc077ce5e319f56dc53cfe5b3441a8ea042aa1bc9be5628f9b43155f78e84fa52fdea253e65904c4519a9f053d648047b2be9e83a1f745a3ecf1fd55ce1559f9e78471f71ab1f9b4aace4a60a49afdacba7f6f1837902c0c2ff6ecee586ba6e61b42c9b54d79f98983837897a60151e1421654dda3db1e0cb24e4b1cef0691b3587c0d8e70aa9f0ac7c42513ed25a7c012419704aed4f5a947fb34ab59da7f858126ee2a17ac1b7fd24b6052f483d5326ab42ed8cb2420d4323d5191a8b7a6e974de4007fb4dd35aed70aa4853ba9bb603a7d2c23e8fd8c0b2c8c867da0cab15cee74b0bea8c5eb929688ad7596fdd26b369355e59ae18729aac0c1a96050382a6f9f62e0e38b896d5c09a6f8ee3ee063c7fa041c7b06ab3119906b4689dfd4b45862ad91aa67eb4ca9c4abcbe05d08747c62e85730049f419ab6b3455656e67dcd07bc54a8b8c2aab1e73d1de2a3b4d158699c3d7e79ad4f020d7083a9bf32068b242c8e7ba7cd45e273b6e94fb0b962a54abf208a239030f73b3b1c72480ef7f40485b1ee25dd588eb1dabe310625a7f6cdd3418444a78edc42460f6a488e29a8e8c7a3cb390adb7a4049457d86c13b6e5fd05d11acf9d3a9572f8ade7989db24ff8719770a81faea7777d80f026e555391433074a2908b5dec13142fa166b2448ccadba124091cbc3e063bbd4c1736d142d19e6f8d04993b1403e6362d34222e43b81ef83b01fac6f279eaafb9cc6361b9a565ed73d26b8165dccd4f3a290c5161820ff38de9f13bd6a6627ebeb3f174c0f0cc4ea6a1eda7ce2e0bf004cd1a8fc78446be2d2bc3165994a3843050b5e1a81625defe130fc30ccbd564dbcf854916b7cdccd555f10ee7b0c4ae385f84b0a6fddad4a4a17177387b456e3a13a75cda7914b0d668b9eae79f016486b32ae1dc3e952648549c78640ebc13c094adef163f8e511f8f4463725c9fbf450426109a6c40b68c0c0a4a3935cfffdbf8855809a4a7ecba35320b22c19f9fec9dab4072c9c4db67d5a6df9c4678311a37e6263c784dea755f1cddaf2ae56e9ba28acbc4c7b82afbc888cff6f393d3b5942995b3e44c60277a395f30335c238953ef650bc06a51057e35dfe01cf5650e410a4762395a331322a97625fb08770aaa63898d856afd8f99168dc244472d301b9266258fa9822a3938665543c4f9d27ff3ade5ad2f283546d683d802f4f3bc6ac0455498f9b1685b7f196a05aa04453f977f5d2332d478067f916a3e4aa472ecb7e75e389842cfe14b4612f45ba276be800a4521a919402803609e2ce5684b048032ae30e74de8f30683a571f16fc891ed078b43bdf7fe5e9151e3f6064ee15b9f5a4d28e7f873c1ee8e01227570a93eadd0072a3ecb8ceb2c7d364f43d79ee481bfc624b7eab8b06468ba5a778e66b23ea3f98dfc9281f42b5f13be953dfcb55b73937892f135d732c9093c612aa4e102796610f5f969fb23807ecb11c5ad6478eefc254764e2f068bd47c81c07c353a4ab8aa2ae0cc3ae7095893a1aa9ddccfee05469268f06ac4554840df1833466ecd547c3ef2686c3645c6a4b79e23df49e3755f4a56a3a300dd90dc2a2aeb01fcc89faba766d93c3dcd4e63744e43d5190f9015d26b0ce69424647ccbd0958746178d81a773ee4ad9919642ee4606f814e479e8bdfd645133e6cf531b125c8f0f63848c41fd560f8b6135f8ad6cd3f5deb03bf5900835dff5d8912a8a43eae760c4658180d9c99f53916f94690bf94509b78491beb053436d6040c47b3ca9ac9d66dee6b4af04f5528c867766e481304a144e377df0c11c6679daba36dda4222d5e5dfd42f1efd30116c0ec93c3d133a390c1e1dfdb02e9bf656520e5b0e5358a4eba8b0f0af4a99d00503cff9364fa989d113d88d135bd07c2fc07ea8b65c6898b3b80c9422578f6c4c4827d1a7276e0ca0c9943416a0b012a49fc66f03361d69a9f7c055aad8700ffde5f327a0efca673eb344ed89804d3a02dfeeae5f8e90db1e7e6c5ab659d4f7048a8ee9ed24eaea96f871aca1782d03fe5d2918c6d0533f23f4cdb4051d1ba7066fea356d8099464ac142857830d0022019099f2c0cc6cd3836f22d7899cd80b7b76d4d172b565d6a7ee06acd7de53b5c1b54e9076e146ad099f2353b2d37976430f1b00ecf2afc749ed5b933e355d8de3a58d636ea000c2c98917fdd6aa3184b93b1f25f35e17d131eb7cca2d0ebbe229e7449e57bc10a40365ce97aab4b193ca595d5f9f2e5087b0060abb95faef29a5f7b4e6ff88e4d736f106b0f17872f9fde55bca56ba7ec2c3c4afdc9f98a587578b942869829d772b1cf8d9e01c440916fa18c0c67bf0c65cf3f3538ab412d57b6020aeb048465e1d16151a13800e2c34cea988c2c8d812f87a4fb6152af298b027c122e5401c0225ae7983374ec797e39c71b46bb7e9a95189a27ee452af4a4c90298f58d5d1330f547a0193c1db4f8676dedcc7d9dbfde956db2fbe1dc03d8846466a58b8cdf2584f62f4f6b16feaf7b0fb54898bc5bf95c79c87a4e5b949ca5e21778ffb5534548aebb1a3ca969385901261584c503cb75a924cddcb82c3af437f0a0c53227c52b1c44669819f2b7692f23de360739535c21521da1715f1574596060b3c942f6d65b60eb0e78676a00bdc36164a9d330fb3e2c8cd57f24db434c3ffec8418dbc005b59fb0a1af6573eb4e665b0c135f580bf7fbc3a081a929fcabfef551caab516cfde7fd28b462117bf484a948e6589ca6e84bd71b420a331f590e4f4b541393c1bc742e0ceeb71a2e423499c60b289c68efe48e397911934a8ca4164251892556e45005e4518eaa7f0b388bfe49bd675d2c13066762084e705cd7c6d58bc3e3af0140cc0d8d08e577e518b807613d7a721a7976c7f154bd893c695abd7d040c7108ee595f5620476eb5fa80246002487ce16ebfa4ed98231e83d22dc520d4abda321be8b6d7fd398315f1c0722ac96b585e9c24bd3760e0c522691f290e7d345916c7f4548e5801724583f8bb03de1cc8f9f5430e756a1c2e6e4ad7170d66bd26b1b872ffdbab89d45ab65d04554ac73cd0e3ad6c83d84cb889a6226cb017c426a3a1b074334b03875c4a2c45d87ab15b2793e2ed51595ac661f30c8e201c4aa356d9c34a1440ef8ee9b0c8cd0d17d7439d5c0dd3934642af56abb7373d37449441d000d3438f0cac0a53200708ae7d18aa6f0418b9cdeeca2dbc81d25d67d37d774093149396d7f7f91e9f9fe8833d3365176abfa53e30a79acb59d50987ecf4f552c73e5ed5f12f3ea7204366cf8eaef0ec4009a9a2b171fd0ed052576f56c37e75309af3730f02fb4aac09c2092a8609f038a8f360447fee6eaa8d658219cd4d544e94a82f11dc19acf4e4e9a445d1e1bbadae9d58b722ead57f4eef576807799cc0daa1fafb2e8fc6972854c4c04f728e84f5c28aef08de670a7f81a7fb8c8339654d97fa6a3ff66d069601e6d9da487db8c5668b91998e6886c17545e06769d87b6963f26536fc783daac130d02c6b2431b598c975b28ed534e1a9ce1d8de24efdbc3907319116b2b8ca9696433b900571827c6c8cb7ab00a4eab2591b7a00a897b87bca48e24ed604672bf90dbcc84f5bd61ec7b630064869f3b27b44faa893245976c06c73dc339165fda6efdbd8848b404ff21f7dd355ea71cc8c2673fef6d092975321bca9890d1a0fbfcc83d684dd92a341e46cd9c22037cca6b82cc7d6fec6b1d9d72998a7750bcbdff53347c41c40e866b84d45746972e9f5154dbf3b1a03cfe4c76c1d6bf9df5137d44a763840ad72c5197e01bc8bb7fc009ff26b5b445bf3fb0e04f99eda3449ec005929a8f79cad78bf8da915971413363ff0a23dd1461e67fed61c87238a9f910dd95dace6f0d37f20d381d38f4a107e5682e4dd230d61219dcf68ecda892b700bed708fba819585c0bb37381f68e25bbde6dd4079a4cd80f4e802d8467c6563b5430ee295e912d591aad65b642584759d64958c9a70160d569fe1ce16770b8abee256b567b79fb96fc31e936acf9d413a31acd857cfd05c9f2ad0f35cf22049a4d1e2020e8a60851d4f782a5c6a81e33c44c36a9971297a39dd8b786108ba09d91d433196a405e28171f5f27c7f93b7d4ea850f037b15da95f6f565b8cf4178a4053a0044c3a68056c47aedbe504ea8fa52c0a6d3342082c714c9adc64ec02687a9e3a40438bb377bfd73a32c3fb663ba4eae773c9fcbbf54d9399efa80b9580820ab4feb6e9fd589e8ac9cd612e1089987761d8687ebcfaeaf9a18fce40fd1cdc91168d2e698502a7b37726c5b3127fc8e27d5dc527bffc5b6293ecf214fbc3605639505df305e1a82518899bbc245cb1f1b894cf8db770c8d221405265555a10888c74133398bc0e57516b0bf452817a1305472a0bed14a8676d65e0165e07dcb371d5ad43b5d134a2a75de0e4c3bc4a4797abb8954a8686c267d9287648f9f05941f40b738dfab3f26f46c1484ff0482b1678a0d6472555da5865879258393ac6f1150536d3557694cdfd7845b68eca2fb0b93db16c83dff4e8708cd0f1b2bd1d79d38767605eea0d7e9e492f479524e7fe26ab611936114a4e8aff71fab960112cbb72505840c994da210e476cea6c85cc553ba536641a754a57b274ab5530fc0b7caf94d044daf6c26cff8e4afc3392556c4c6e2a755231a11a7b547328126361e728acb3b8d6eccc053e2578facd84235dc23462e3537097413394dcf1f29cc01792078fb4a8e61b25f16a4acd886e6acd4a355d65b29d150a0dc3050168831ebd607267f8d81bf953f405d22c65a0bb0c228552f46162271f14372027ed2870e64cd5fe6523fc88ba217fc01f335912e8f57c58f7f8c0e3d6c779f43e15a38191f2ac6d43574f00f55f5bb60b53f85c7e020af0c5f285da8d2f7ce0039cfa50a95f3613418b529aaf289b14c5fef3b700f62f0afe3791938f29f9cce9796801586709892055607206843aff3961c101646cdff9b7a01ff0572525c1ad3e0c8a088f93ba92bbc9512f6c9cf450813b693ebeb7c1419165c3274901e6b58a7dd298e80fd5da4c9c746505e180281309d72be3d4a1f14c60dc7410c3a60b057282ea47cf9d016e2d3df87f441e7579546538965ef26abe5a65d976ee77275e9efb9926cf47f52939b3dabd2032cdf3d5e0e3e5107ec35b6c08eb68ffd932829f01190f2876fb2979fbb2cb3883e219a5cd4063f446b737553ceb1f86d9e097bfcd362c9e38574f5a3bffcb2a0b6e412afaabadefb115aab4b4e10bbd5392bec5de09c1c7ec3578a9d3bb71e3393a5b24a6094ea9cc9a13e33bb3156185051f30f7c2848419bef0a6e864d769fa05049fe0b22eae2eeefaadc5f9a8dc642a0052e6069b4025704c6e1d68acdbb49bdcfeb5c7b9fc278a879449ddf06e5fb16e0b1ef0961f06bb5f00041c5690a71b9d88948df9f135e7248b2773e7009af0394fb5597c4c156b962681eabb7dae0280c1c7be9f7e33a776b884e07d1aa94f7174c114dd6693cd6180b76567b1eabab9a3fb37f74134aa26ca442f3f3048452155cd099098d945b027613700e1ea96c6b5fcc34d721bda6bc0bb2f57a83a867ed9cd6f47e3b8ff9d528b2e456a44524ef28d076b7a03fae4645439b2c03b63f15fd85b1e05d899319418a8f6edd9b94369d1f09f14cc4d979fb8f7e2920b2662dc1ae2ef3d0ef096acad6d22e580c86e2229ed4edd7c128fd47dbfdecb981fb88621d35e9bf1862e0b9325455ee7b8125cd0f8118c1627f616fb3ce59cef41862da804fdcd4da2ed2233626915344ea5251c051fa11d4e5ce29f2e16137a1073aed0fb8783218b479691abaed64a0cc13aa4123975f3c58b868db7008d2aec1f1aca47525a10ef70c7d7e18d617b3a8adab38fcc9eb8353334a800775e7765288c4ce347cd2b7136ab2f5a00cf586b4f0881b0ee328a15a68c9b81fab6ece00949a03492ea8389f799b93a63661da3dad41253be4a5e775a033bf21ccc8192f14a8ba3d6a36f2d24a83f0169e59e2f49d243bd7b9cc933f53a7f7198c0106c484472d129060fe5b783528430767424cc201c7ee725f44645c387cce3fcc628882b68468b8734cb6cbbc448d9ea39e93aa331cfb31fa1ac4ad2fcaed298e1968de06692cffdc18ed1d9c26d102ed73a762c36e6beba67618628e558d3fe2a438f9cf7909939500de53557669810288eb054510fa9a6621c391d903a7802f04a6fb7413f626ee6303398ff3a92c518f7eac4d2744379d4a883baa5d85fdd12d935a9db59aed34a07354740fe911e6a14edcd0a36d47db4500c5e1f166aabcf81aaf461fe0d039e204c386746ffa8c96da1d1083fb2c691fa327c8a36551cb58f28abe8efca4207bff8017893a3f7774b46ec7282f50b4d95f778d77e31b23acf7516ebd44644d2895b666180538366d7123517c04334e07ba672a2aa2c6afcf30e898f646290259198d0f1dd27385f152b0532c3b08f72293fb0f58719054e2b3912fe5fd59ba8d340538be38cbc4225005fe0f5a78c4b592e9ad1b50f2b453a16810f1623bdaafe0e3386083e54c68875a98a467e054befd252f53622202fd104d237bf9bab3c8027cc42d5895fcb12a730af52cb7896ec473ed5d4c772169f2582d9c041812cb1dac72d1eed842bc80e51aeeafabc1196f9c46567120b3eedb3cec891ca06090bf69df9bdeca4b880cc4f169b73f0d929a6c9ef77d42a84d8786c285a89c3b602c20a6e0797c0474069dc3bb57e72774ae4a001eff22b6cafd783dfba40108c844126d2e83d9a1d89d806c7ca06d06a7905f6e86c3730636020b279aabac6bee8156fbd16104a1ed7d710ed3daeb1177fa4d4c31e99b8db405fb6a919672fbca6c17ec25f6ca73497fd7cd069ecaecfae0dbfc524b3ad189a7983210a0bb77202ec712f022b8340016a230fe64c17f3f0c185f07a05047d4eb3dde015cda2d0a89ba69bcf105c095a7446a1facf3d477763147b157e7af649031dd36f408d0778c6199bf603aebc8cbb6c69888aa8e2b2eab01ff11d07d7ab64f5f238245aba06dc413afd773a89ef4204ce62482c12321986c871c0dcef18380d7e890a5a311cc2a5f4723ced227fad5ae06bd46e7c39cd67d2bde4baa98cea3525da98c879bc8235ae930e5c305a6cd1cab437f46088d2503d3d93fd1bb88e3a04c4dda4f0a6b17d4de804f0ae054128f22c614cc0e1549f960232c5c93783c000a78fb6710f811d78771610f4123cd2399e24b4c5a41f98ed0401a776b9aed95116aebf282b147f3018a81a843adf8153744efc3328759f1b5b6d28764e9af987628661b99cc1b36317a26429a843f6a190954fcc1069912da4d46e87427d72968786780087caef0807c1b0aff6a8e4038afb9be6260397ceab1148d8c31dca728d4635a6f0e660c85e55d3905d44ff4c604d603a9c59c1776d2d970b9ec179c46a1d74bc3a0e5c5c51d18bef9658e75049f19136884b988acbe4438c57f2772b21fd01204700ea86b0420082a7ee99102096ba6f6380f7acb0ae4d49e419356384ba40f06726dc1e19d24c8de7f7a4d578c5a6dea76090e5121299c9267169838be0274f92ebc2a73dd28a062313bf857f2a06f165af930d6a9272b0cba60c9c79bea13906caf2811a9e1f214eb076a357f709382e220cdb77590b8ab4ed493c0e4afdd4489832a52b957bf04d6f78373623ade15e7184c1fcd07da4795efd0018c041e69d8f2be09a5c08f674cf4ddc732656261e478013cbb4ea4b2989d9fe1f426d9ec2973299ea2e615a42f61db0cea54a266876d6eadd62d312443b25050a132e18d632f59087c936f18fd57364939754ec1f5e8971caccd7d4e2a42c46a0c70909fc91e78e8e6aa0d047b46c0fa5daefb40af710db93c819abf7add0d1347b40b13ba4bbf513eb382c8bf8e797abb0cc7319edef5ddee6c164b5e5762ddfc2f6b3914d6513220f3509667161c567ea6c511d0ace709bf87c06f058399a1e47a3c3839b4e360bc6c2dd2dad70b0c47e2f3a1b56f8201517b9d7af88b54b810cf7bfe99b6ff4d067f710cbdddf65ad4b1bef28e82e34e7f16eb3740d602fc6eca4ad626bea0bd81dd49fe15b889b24cd85f606366c2ff241d2c2955e10648b225e813a8d87a8bbd649152aaadd4e3d0b75961451b28df702a4bfe54c8d8047205ed6f82be9fe8d318c7b663adcc5aa49ef3e826760aa74e640896ef27bfafb1ba7ecb70e5681438b7cde7dd6b7a7423cad2f1d946082afc74363ee0236f945eb81d09a7bbf7f21675866f0f6fa412ea4a5ed1b0d2c2922bae6d6fdf5bd41b5206d0681764a313f6ad667bd9d45b02f71097f0f39c82107658b8d0bed9c83c2691aa351f7818ec2ac7b23f589785a20d8a717448b380ed44900b6f65310f56b056e8650f7651202519591cf445e2e0127dbaf107a8082077a311d9235616b55c49aaecafb9f6c07620781c73382ef49ddee0a5cf569549e5acea045ede7f249d6068cc0f8b776ce016311731c01785b945a8ca34758fef1c760fe0263d6db993adfce2e4706de137302e21f6d73b3b3e511ad588cfdd6df0ad605ca534ae585fc207cbdae480b068ddcc548acceef214131b624471212462dd6965847c4c6e9bfcb6fc6402e5aa11111965a0bb2f59e8001fa5771568ce1f479aca225fbf4544ccd7c2010ada3e259bc76ac616a50e90a0c7c550ae8150e074fc90be9e3e687287b0610e6c8468ba845c34167ed426ea21d159a72c31546dc4872d1c65abcd57199e2cc00805bea0c759cbfddfacca63788887440454408d3b64b8745723df0f7eb6cec758da2813c73a79ef40ac945b215a7b9996c2b548378f7ea00dda126fd917195ab2b651b6137fc5db6aebc70790021e3b928cc8e77d912aa3857827553443418133c3966f8d83cdbd1c97426a51a08a65c7beecf823686ff7f9d3a90588284194288d5f4a3aab76142ee6fb31be236a329de4a4cd940722369015a117fc27c33bbefddf88f42f141359601c26f45dfc178de256d55c106d2d79c0a25fd670a16316fe3be7e7fdfd77eeba63e338b4fe380bb129a22e32b69286c556c80f6b38abb8c2b908ae5cdafc39126232457889a7169781ddf0c33c57861332de082a78159f1f47caf434969cc0779518b5eb4ffe829a316d0e363827d2fbfed134e09febe8184bedf3b73e8cd0591af0a76faa6b4a685181cc98f852b87cd325055779f3b183ec7dfa76e71626afe89de04e60cddaa0fbe2c182e5f6ebc09c1ef0f611948db2b1e2419a867085658ba40f264bea8a533a3a8166a623d4d1f48b153e4f445b88340c7140dca826ed7088e52ef8972972730b343e0a549453835c998b32f6a909c5bbfeab39e24d16cee7bfc75b39cbae195697d455528013f3ca22d6416d856f1986047d074469b4fef37aacf8714183eee94843a33126471a26eb048ee3b9bb19076e82bd838078da69e472afaaccdd25977213e15648a8ad5fe941dd8c8dc1a893f65664f886e0fc33feada18e7d6d3f8f64be56f65b06bc62f077ec59d8c0c0cd3479fd4fcce18c9e99fa304d6c39f9bfea8475ddcb38cba2a0097d16f0b323d6dd01af7727de67f4f75fffa62506f0b10528924cc2f307023c0c0e68d39941c23b8d80c5a2b62414a6773b16e9cd3fed46f90fdd9365750a5bdeeea4c5b2670274fa56e7d0682c15e691d7e60611d06b9befe0e983395d4a9fff88aa4e7b28868bfa19743f5b5b145eb7c6c48272f1434c294fbe5b746b032b01488ffc611ea7d9659172eac37d446aad3c092c71673def7375001812ba861bbb4021fea0ce2995be58d2182178d84a56362cc75d88ad0e90b84e98228fd791a8ad6ea7ac6519c686263ab765cea2bde6596a6ee39604a46384ddb8283fd3a49f11b88cb955268d623645b0bfeaf416eeb0f70a0262eeffea0b831522aa9b0ad1a5e9102642a71bc480aef02d6b111b2ab194ad729013991a58358b5abd6f1f70749ec66dd0e5e59bc553c4570cbced8b0b910305064ff974b453c0a18758f44662232e34ba33a48585df37ae551d79054a380d1634349b6d4d0e63a48e326d5f858869f38fcbe2830607996bd63d98ffcd634b495eea0971f00435db7a4b0a704c5477345532ddd399d424e7197b2977ebd2e2379c9f0e80896644de4e9383baf19792617ed87dcb1c9bee899b9fb51352699371ac0267a012ed269c7e12647c4ce0358c1887594873066466094e9eece1791dc002fded1cd9a74dab2ff179fe53ded9876a9a82aba8ed92b61cb97f9c10523c7ba39d6a31935c8ccae6d5f9a4d169b32409d171bc6d8cfbf08b8e0dba7b72c635bdb4bafc1bc8579e8d5552f8b63e555505876afd13df15878ebb1dc1fef20c06fc34a43c91215980b9fc34d9e5e452c4d23bc8f7c480344c4020522593cf5d27f3a5b71a6251180250f626f71c3aeb30ec11354ae574eccb9986916c06aa8e5aa494f474cfc8fba06d134aa668a1fc8c0c9977893693ba59f020c246863521b7219b2bedb12c3a99f17559171bb0854a3a109964675ace70f435245aa1f8a962cd1ac85eb59fd54bd33b9f3ebea1e4bbf838fc8114524981b0dcc92b41ce5326cf65b0a806ce7ad06a354fe77cdddb3b68dc627f8fc36acbf09a9eb508805040c5590ef7abc1ff4c3d3775bfbd0ff20aa4395bc203ac7e05a3302c2fd199c73cd218612a0a06ae8ac71d36bb29231e2b4e843be137d22e25404a3cac622422ec5aa9ebeedbcc07555a325b2e7a8aab612d8a96da8142e04375d0eae4d1f0e6b5b3d126d37ad9a2dee84af1f80ea4f59fcf0f6937c9527f84136b21d78bcaac7c44862c8d7f70ceaa3ab9f6050acd175e408a2fb9c79320075d5b9f55386ba603dc060e2bdcf73442b2e5662569b56adceac621b1cde8db90b76b7ba44f29c7b97ed57ee672cbfe5da36194a9e30aeb382eaf9dce664e0bab896b3a6ca10aeb43a501a9ed864a2ec3cdbb4c167fb903a859ad394a7d2ab5944b93ac3aba5e1577da765dece5d3a2b95f7355904d9ae1cf1842252a939a4a9becf34bc72850819f0d0bd96eb02948", 0x2000, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x143) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="70000000ffffffffffffaa0900000000000000dc637a7b1426aa192213d4239c019d9c1e00220066000029329078ac1414aaac14898eaeb6aee2973bbef36f19807b9de5951c676fde0fc35a789ed5fdf2b77dbbbc316e226fc6488308ebf4ac11f4b03b45d5b1483aed9107d4b54a1198775616fd16cfa3289e"], 0x34) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./cgroup.cpu/memory.force_empty\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r6, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000800) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x1000007}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000000)='4', 0x1) fcntl$addseals(r5, 0x409, 0xb) 2.399732611s ago: executing program 7 (id=2536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) chdir(&(0x7f0000000040)='./proc/sys/kernel/sem/file0\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mq_open(&(0x7f0000000340)='\'\xae\xb8d\xe7N\x17b]\xab\xc0\xcb\x9b%\xe4a!\x17G.+I\'u;DB\xe3<\x94>i\t\xfd\xb1:\xbbz*5*K\xdd\x03\xe3\xae\xb9\xc2\xdd\xc4\b\x7f\'\xec3\xb9\x1dB\xcb\xe3o\xb6\x96g\xc5\xda\xab\xcd\xb50\xb0:\xb6\xbf\xc5A\x0e9\xc9\x85\xf2c)\xb4\x89\xbb\xb0T\x7f\x16\xa0k,\x99\xe6\xd4\xb9\x85#}E\xf9!\n\x8b\xafc\x03\xe9|nJ\xadKV\xb2\x13\xa7\xf0\x1b\x11\x86 \xc0\xa8\xb3\xbc}\x11\xf8\xd8unq(\x86)\x91\x83f\xf3y\x1a\x84e\xf6z\x93\x12>o\x99\x1b\xbdG,5\xf6\xa5\xcb\xbd\xb7\xf1\xfd\x1c\xd0F\"\\\xb8\x15%\xd6*\xa2s\x04)\x17\x94\x93\xc4}T\xc7\xc2H\xb8\xdc%\xb87\xae\xda\r\x05J-\xef\xca\xe48)\x83y\x92w\x06x\xa1\xcd\x89\xd4\xf0\xde\x04\xe3\xec\xda\xfb\a\v\xa3\xf8\xe8\xc6\xce\xd2\x8dv\x03D9\xd8\f\xd7\xc0(\xef\xa0\xf4\xea\x04@\x89\xb4;;\x88\xa2\x1f\xe1\xca\x92\xcd7WJ\x10<\xc1\xd1\xc30x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x7, 0x7, 0x7, 0x5, 0x6, 0x7, 0x1, 0xb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4c000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@delchain={0x1a0, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0x6, 0xd}, {0xfff2, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x114, 0x2, [@TCA_BPF_NAME={0xa, 0x7, './bus\x00'}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_BPF_ACT={0xdc, 0x1, [@m_gact={0xd8, 0x17, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x8d7, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x7, 0x4, 0x8, 0x10}}]}, {0x87, 0x6, "32c097a9d0ed600e8b6d737d1c48b086400e358f4851d5189d7f6bd5e32f9aca4cffd71d39f9db9fe2aec11f73399fb4bfd1e0a9bae99a1fddd88e14e81c732b961f433ae47f2b95b5b54a47f6812fe6891948255e49b934f6af346ded46cd0a85ab0e5c2522801d4f20426ba9a1b54a288b22bcc482a3443af60d2298b1ba49b2407e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0xf3}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc0}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffff001}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x4, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x9287}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40000b0}, 0x48d0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$XFS_IOC_GETBMAPX(r5, 0xc0205838, &(0x7f0000000080)={0x6, 0x9, 0x9, 0x3c, 0x2, 0x20, 0x8}) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002300)="81", 0x5dc}], 0x1}, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r10, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYBLOB='H'], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x0) 2.359528646s ago: executing program 0 (id=2538): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0xd, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0xffff, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.101858678s ago: executing program 0 (id=2539): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_change_rule(r0, &(0x7f0000000080)={'!#%!]Y+-\x8e.-[%]#!&', 0x20, '{\xd8-', 0x20, 'rxat', 0x20, 'rtb'}, 0x1f) setns(0xc9, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xffffffff}]}}}]}, 0x44}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$can_raw(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r6}, 0x10, &(0x7f0000000240)={&(0x7f0000000200)=@can={{0x2, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "9cdad001420ab3e9"}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000094) (async) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x805}, @void, @arp=@generic={0x204, 0x88a2, 0x6, 0x0, 0x3, @random="c96bb99a660d", "", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}, 0x18) (async) bind$xdp(r2, &(0x7f0000000000)={0x2c, 0x3, r6, 0x3d, r2}, 0x10) 2.021377919s ago: executing program 7 (id=2541): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)='T', 0x1, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 1.273960921s ago: executing program 4 (id=2543): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xca000, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES64, @ANYRESOCT], 0x1, 0x277, &(0x7f0000000400)="$eJzs3cFqE10UB/CTNm3zdZPA50pcDLhxFZq+wSAVxIAQyaKuGmwL0oTCFAK6sN35Lj6Oj+ETRBAizQSTqaMgto4mvx8Mc8jNH+5kkXsX5yZHD0Znx+cXp4f/f4pGI4l6xFV8jojYiM0oqs2u7cJrVwEA/Gt6vUFa9Ry4W1mWDrYiYue7kf6HSiYEAAAAAAAAAADAbyvt/59EtJb6/2vz+4b+fwBYCfr/V1+WpYPd+f6tSP8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUJ3JdNqc/uSqen4AwO2z/gPA+rH+A8D6mRTW+lpY/wFg9b04fPks7XYPeknSiBi9H/fH/fyej6en8TqGcRJ70Ywvcb0/mMvrJ0+7B3vJTCuORpfz/OW4v1nMd6IZrfJ8J88nxfxW7C7n96MZ98rz+6X57Xj0cCnfjmZ8fBXnMYzjuM4u8u86SfL4efdGfmf2PgAAAAAAAAAAAAAAAAAAAPgT2sk3pef32+0fjef5X/h9gBvn6+txv17tswMAAAAAAAAAAAAAAAAAAMDf4uLN27PBcHiSKW6h+M+nqliRouIvJgAAAAAAAAAAAAAAAAAAWEOLQ79VzwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqrP4//+7K6p+RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGA9fA0AAP//C4boJw==") r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1) 1.119343041s ago: executing program 0 (id=2545): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x4040000) 1.053823417s ago: executing program 7 (id=2546): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x52}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) (async, rerun: 32) r1 = syz_io_uring_setup(0xcb4, &(0x7f0000000540)={0x0, 0x69eb, 0x800, 0x2, 0x10}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000380)=@in6={0xa, 0x4e20, 0x4, @loopback, 0x5}}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0xffffffffffffffff, {}, 0xfd}, 0x18) sendmmsg(r5, &(0x7f00000066c0)=[{{&(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x80, 0x0}}], 0x1, 0x200480f1) (async) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 1.053613491s ago: executing program 6 (id=2547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f3132000800034000000007200004"], 0xcd0}, 0x1, 0x4000000}, 0x0) 1.053142174s ago: executing program 3 (id=2548): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001000)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x44, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) recvmmsg$unix(r6, &(0x7f000000d800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10104, 0x0) 1.021590405s ago: executing program 0 (id=2549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 987.899509ms ago: executing program 6 (id=2550): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r2, r3, 0x6, 0xb82, 0x2, 0x1, {0x0, 0xd, 0x7, 0x3, 0x6, 0x8, 0x5, 0x61, 0x43, 0x1, 0x2f, 0x4, 0xe97, 0x7, "9d3e4be5c23d042a15df301256b795bbf31227a87e6a0ac57f4da00993500f1f"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r2, r3, 0x6, 0xb82, 0x2, 0x1, {0x0, 0xd, 0x7, 0x3, 0x6, 0x8, 0x5, 0x61, 0x43, 0x1, 0x2f, 0x4, 0xe97, 0x7, "9d3e4be5c23d042a15df301256b795bbf31227a87e6a0ac57f4da00993500f1f"}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 533.983855ms ago: executing program 6 (id=2551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x24008855) recvfrom$x25(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0xe000}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x3, @empty, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add41c323b472545b45602117fe809000000ff0000063bc71002000000ffffffffffffffffffe7ee00000000000000000200"/75, 0x4b}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18e9073115eb00000003000000000000000000000008560c0002000000950000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) 521.437372ms ago: executing program 6 (id=2552): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x6, 0x1, 0x3, 0x8, 0x2, 0x89}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/keep_addr_on_down\x00', 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000002c0)={'raw\x00', 0x0, [0x1, 0x5, 0x2, 0x7, 0x38b]}, &(0x7f0000000340)=0x54) write(r0, &(0x7f0000000280)='1\n\x00', 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x40}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) 456.543132ms ago: executing program 6 (id=2553): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x2, 0x4000001}) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x80, 0x0) (rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310) ioctl(r4, 0xc138fd12, &(0x7f0000000100)="04") (async) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r6, 0x3, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xf, 0xfff2}, {0xffff, 0xffff}, {0xf, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 373.953886ms ago: executing program 4 (id=2554): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000207910900000000000790040000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 338.330995ms ago: executing program 4 (id=2555): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ab}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x201}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 298.129123ms ago: executing program 7 (id=2556): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e, 0x0, 0xe}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffff"], 0x30}}, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x94}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd3ee}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="540000001200010000000000000014000000000000000000", 0x18) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x0, 0x8}) 225.725683ms ago: executing program 6 (id=2557): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x0, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x2d, 0x301, 0x270bd20, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000140)={[{@nodioread_nolock}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@data_err_ignore}]}, 0x1, 0x54e, &(0x7f0000000880)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000083c0)='./file2\x00', 0x0, 0x100) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x9, {0xfffffffffffffffe, 0x8001, 0x0, {0x3, 0x50a0, 0xfffffffff4b022ac, 0x797d2915, 0x7f, 0x7653, 0x5, 0x7, 0xe000, 0x4000, 0xcd35, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)={0x28, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x3ffe, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r2}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), &(0x7f00000003c0)=@v2={0x2000000, [{0x3c, 0x4}, {0x9, 0x4}]}, 0x14, 0x2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c040}, 0x2000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x9e7c) listen(r3, 0x0) accept4$nfc_llcp(r3, 0x0, 0x0, 0x0) 223.234862ms ago: executing program 4 (id=2558): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x1, 0x0) write(r1, &(0x7f0000000940)='1', 0x1) ioctl$KDSKBLED(r1, 0x4b65, 0x7fffffffffffffff) 185.417972ms ago: executing program 7 (id=2559): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x4040000) 164.011251ms ago: executing program 4 (id=2560): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000100ac14144100000000000000001400020002000000e0000002000000000000"], 0x54}}, 0x0) 77.719847ms ago: executing program 3 (id=2561): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7f7ffffffffffffff0000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe65c, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0xfffffffc, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x6, 0x7ffe, 0x10, 0xfffffff3, 0x129432e7, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x100, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf37, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x5], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf243f, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x4) syz_emit_ethernet(0x69, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff0000ffffaaaaaaaaaa0008004503005b00680000009866340d4c983c0da9022f907800000000e00000012480810000010003009a7f10000800000086dd0800c8be2000000010000000010000000000000008"], 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) 31.186292ms ago: executing program 7 (id=2562): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000540)=@framed={{}, [@alu={0x7, 0x0, 0x5, 0x0, 0x0, 0x1, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1}}], 0x1, 0x34000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 22.180976ms ago: executing program 0 (id=2563): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x6, 0x1, 0x3, 0x8, 0x2, 0x89}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/all/keep_addr_on_down\x00', 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000002c0)={'raw\x00', 0x0, [0x1, 0x5, 0x2, 0x7, 0x38b]}, &(0x7f0000000340)=0x54) write(r0, &(0x7f0000000280)='1\n\x00', 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x40}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'lo\x00', 0x1}) 0s ago: executing program 4 (id=2564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x37}, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b4804000300640094272d7008070000000000005800008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) kernel console output (not intermixed with test programs): 61084][T10234] tipc: Resetting bearer [ 145.172601][T10234] tipc: Disabling bearer [ 145.329953][T10248] loop0: detected capacity change from 0 to 4096 [ 145.332845][T10248] EXT4-fs: inline encryption not supported [ 145.333465][T10248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.333485][T10248] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.335910][T10248] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 145.335945][T10248] System zones: 0-5 [ 145.338326][T10248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.476287][T10252] loop4: detected capacity change from 0 to 512 [ 145.479266][T10252] ext4: Bad value for 'journal' [ 145.609359][T10253] loop3: detected capacity change from 0 to 8192 [ 145.629406][T10253] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.726760][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.354226][ T8136] wlan1: Creating new IBSS network, BSSID 3a:da:74:99:51:72 [ 146.507058][ T50] Bluetooth: hci3: command tx timeout [ 146.549646][T10270] loop0: detected capacity change from 0 to 512 [ 146.563270][T10270] EXT4-fs: Ignoring removed i_version option [ 146.563319][T10270] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.567663][T10270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.589957][T10270] Quota error (device loop0): v2_read_file_info: Free block number 4294508544 out of range (1, 6). [ 146.590133][T10270] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 146.590294][T10270] EXT4-fs (loop0): mount failed [ 146.618336][T10275] loop0: detected capacity change from 0 to 512 [ 146.858571][T10297] EXT4-fs: inline encryption not supported [ 146.860496][T10297] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 146.862829][T10297] EXT4-fs (loop0): Test dummy encryption mode enabled [ 146.867996][T10297] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 146.868046][T10297] System zones: 0-5 [ 146.871881][T10297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.200963][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.315876][T10306] syzkaller0: entered promiscuous mode [ 147.315918][T10306] syzkaller0: entered allmulticast mode [ 147.325834][T10306] tipc: Enabled bearer , priority 0 [ 147.342302][T10304] tipc: Resetting bearer [ 147.360407][T10317] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1745'. [ 147.366537][T10304] tipc: Disabling bearer [ 148.253685][T10315] loop4: p1 p3 [ 148.253685][T10315] p1: [ 148.253779][T10315] loop4: p1 size 16779263 extends beyond EOD, truncated [ 148.257227][T10315] loop4: p3 start 3036741376 is beyond EOD, truncated [ 148.257263][T10315] loop4: p5 size 16777216 extends beyond EOD, truncated [ 148.326049][ T5727] udevd[5727]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 148.330655][ T5840] udevd[5840]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 148.342505][T10332] set_capacity_and_notify: 2 callbacks suppressed [ 148.342547][T10332] loop1: detected capacity change from 0 to 512 [ 148.343317][T10332] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.356439][T10332] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1752: bad orphan inode 131083 [ 148.356476][T10332] loop1: lost filesystem error report for type 5 error -117 [ 148.357186][T10332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.411323][T10332] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.1752: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=56 fake=0 [ 148.461824][T10343] loop6: detected capacity change from 0 to 8192 [ 148.503361][ T4710] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 148.817194][ C1] net_ratelimit: 86 callbacks suppressed [ 148.817232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.817330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.817415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.817503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.817589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.817670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.817749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.817827][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.817909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.817986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.899910][T10356] netlink: 'syz.6.1756': attribute type 3 has an invalid length. [ 148.901996][T10356] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1756'. [ 148.956656][T10360] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1762'. [ 148.983902][ T6787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.026790][ T8156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.029415][ T8156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.036462][T10361] pimreg0: tun_chr_ioctl cmd 1074025675 [ 149.036499][T10361] pimreg0: persist disabled [ 149.084505][ T4723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.087795][ T4723] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.089806][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.092998][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.095179][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.115939][ T8156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.115978][ T8156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.176857][ T8156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.181300][ T8156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.244639][ T8156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.244684][ T8156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.254088][T10374] binder: BINDER_SET_CONTEXT_MGR already set [ 149.255855][T10374] binder: 10373:10374 ioctl 4018620d 20004a80 returned -16 [ 149.292437][T10374] binder: 10373:10374 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 149.292470][T10374] binder: 10374 RLIMIT_NICE not set [ 149.315683][T10364] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.315772][T10364] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.315881][T10364] bridge_slave_0: entered allmulticast mode [ 149.316353][T10364] bridge_slave_0: entered promiscuous mode [ 149.318439][T10364] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.318489][T10364] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.318543][T10364] bridge_slave_1: entered allmulticast mode [ 149.318984][T10364] bridge_slave_1: entered promiscuous mode [ 149.343146][T10364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.346006][T10364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.357256][T10364] team0: Port device team_slave_0 added [ 149.359419][T10364] team0: Port device team_slave_1 added [ 149.362546][T10380] binder: 10373:10380 got transaction to invalid handle, 3 [ 149.364033][T10380] binder: 10373:10380 cannot find target node [ 149.365509][T10380] binder: 10373:10380 transaction call to 0:0 failed 61/29201/-22, code 0 size 0-0 line 3252 [ 149.369220][T10380] binder: 10373:10380 got transaction to invalid handle, 1 [ 149.370827][T10380] binder: 10373:10380 cannot find target node [ 149.372134][T10380] binder: 10373:10380 transaction call to 0:0 failed 62/29201/-22, code 0 size 0-0 line 3252 [ 149.400151][T10364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.400179][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.400197][T10364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.402067][T10364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.402092][T10364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.402120][T10364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.406665][T10384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1767'. [ 149.427749][T10364] hsr_slave_0: entered promiscuous mode [ 149.429773][T10364] hsr_slave_1: entered promiscuous mode [ 149.431716][T10364] debugfs: 'hsr0' already exists in 'hsr' [ 149.431745][T10364] Cannot create hsr debugfs directory [ 149.472954][T10387] loop3: detected capacity change from 0 to 128 [ 149.480779][T10387] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.529472][T10387] input: syz0 as /devices/virtual/input/input19 [ 149.759819][ T8157] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.759916][ T8157] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.764143][ T8156] team0: left allmulticast mode [ 149.764183][ T8156] team_slave_0: left allmulticast mode [ 149.764200][ T8156] team_slave_1: left allmulticast mode [ 149.767398][ T8156] team0: left promiscuous mode [ 149.767410][ T8156] team_slave_0: left promiscuous mode [ 149.767490][ T8156] team_slave_1: left promiscuous mode [ 149.767665][ T8156] bridge0: port 3(team0) entered disabled state [ 149.770604][ T8156] bridge_slave_1: left allmulticast mode [ 149.770618][ T8156] bridge_slave_1: left promiscuous mode [ 149.770687][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.781315][ T8156] bridge_slave_0: left allmulticast mode [ 149.781343][ T8156] bridge_slave_0: left promiscuous mode [ 149.781563][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.795020][ T8156] tipc: Resetting bearer [ 149.848868][ T8156] tipc: Disabling bearer [ 149.868604][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.892934][ T8156] team0: Port device bridge1 removed [ 149.900050][ T8156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.920782][ T8156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.954143][ T8156] bond0 (unregistering): Released all slaves [ 149.957641][ T8156] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 149.987953][ T8156] bond1 (unregistering): Released all slaves [ 149.992306][ T8156] bond2 (unregistering): Released all slaves [ 150.062731][T10364] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 150.076322][T10364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 150.078614][T10364] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 150.083328][T10364] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 150.087014][ T4811] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.096704][ T8156] tipc: Left network mode [ 150.097401][ T8147] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.097606][ T8147] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.102077][T10364] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 150.112210][ T1093] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.115577][T10364] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 150.115912][T10364] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 150.122075][T10364] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 150.131027][ T8156] IPVS: stopping backup sync thread 9828 ... [ 150.141999][T10407] netlink: 'syz.0.1773': attribute type 10 has an invalid length. [ 150.244995][ T4399] 8021q: adding VLAN 0 to HW filter on device eth4 [ 150.257046][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 150.284157][T10428] loop0: detected capacity change from 0 to 2049 [ 150.319441][T10430] syzkaller0: entered promiscuous mode [ 150.320558][T10430] syzkaller0: entered allmulticast mode [ 150.322053][T10428] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 150.322081][T10428] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 150.322102][T10428] loop0: [ 150.332012][T10430] tipc: Enabled bearer , priority 0 [ 150.334583][T10429] tipc: Resetting bearer [ 150.369742][T10429] tipc: Disabling bearer [ 150.439011][T10364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.519398][T10364] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.541098][ T8156] hsr_slave_0: left promiscuous mode [ 150.542837][ T8156] hsr_slave_1: left promiscuous mode [ 150.564945][ T8156] dummy0: left allmulticast mode [ 150.565069][ T8156] veth1_macvtap: left promiscuous mode [ 150.565090][ T8156] veth0_macvtap: left promiscuous mode [ 150.565155][ T8156] veth1_vlan: left promiscuous mode [ 150.565191][ T8156] veth0_vlan: left promiscuous mode [ 150.792343][T10474] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1787'. [ 150.792451][T10474] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1787'. [ 150.800638][ T8156] team0 (unregistering): Port device team_slave_1 removed [ 150.805845][ T8156] team0 (unregistering): Port device team_slave_0 removed [ 150.891936][ T4399] 8021q: adding VLAN 0 to HW filter on device eth5 [ 150.898312][ T8159] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.898358][ T8159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.922395][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.922442][ T8157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.981375][T10491] macvtap1: entered promiscuous mode [ 150.981410][T10491] dummy0: entered promiscuous mode [ 150.981462][T10491] macvtap1: entered allmulticast mode [ 150.981470][T10491] dummy0: entered allmulticast mode [ 151.033655][ T30] audit: type=1326 audit(151.000:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10470 comm="syz.6.1786" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd792a8 code=0x0 [ 151.034827][T10500] loop0: detected capacity change from 0 to 128 [ 151.050960][T10496] macvtap2: entered promiscuous mode [ 151.051033][T10496] macvtap2: entered allmulticast mode [ 151.100510][T10500] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.118014][T10364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.137009][ T50] Bluetooth: hci1: command tx timeout [ 151.142719][T10500] input: syz0 as /devices/virtual/input/input20 [ 151.210220][ T4399] 8021q: adding VLAN 0 to HW filter on device eth6 [ 151.216523][T10364] veth0_vlan: entered promiscuous mode [ 151.224152][T10364] veth1_vlan: entered promiscuous mode [ 151.253637][T10364] veth0_macvtap: entered promiscuous mode [ 151.256148][T10364] veth1_macvtap: entered promiscuous mode [ 151.260930][T10364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.263524][T10364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.290080][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 151.307944][ T4715] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.322855][ T8149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.322910][ T8149] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.322928][ T8149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.322945][ T8149] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.332247][ T8159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.332275][ T8159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.568486][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1794'. [ 151.580120][ T8156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.580155][ T8156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.623619][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1798'. [ 151.637651][T10537] loop0: detected capacity change from 0 to 128 [ 151.749311][T10546] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1799'. [ 151.907939][T10568] netlink: 'syz.7.1807': attribute type 10 has an invalid length. [ 151.909663][T10568] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 152.016559][T10576] loop7: detected capacity change from 0 to 512 [ 152.346024][ T4399] 8021q: adding VLAN 0 to HW filter on device eth7 [ 152.371387][T10576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.452181][T10588] loop4: detected capacity change from 0 to 512 [ 152.483298][T10588] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.491313][ T4711] Bluetooth: hci4: unexpected cc 0x2005 length: 5 > 1 [ 152.491342][ T4711] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 152.506341][T10364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.513354][ T4711] Bluetooth: hci4: unexpected cc 0x2005 length: 5 > 1 [ 152.513390][ T4711] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 152.542615][ T4718] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 152.953620][T10610] veth1_macvtap: entered promiscuous mode [ 152.953673][T10610] veth1_macvtap: entered allmulticast mode [ 152.954078][T10610] macsec0: left promiscuous mode [ 152.954425][T10610] macsec0: left allmulticast mode [ 152.954458][T10610] veth1_macvtap: left allmulticast mode [ 152.960152][T10610] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 152.970810][T10610] 8021q: adding VLAN 0 to HW filter on device eth0 [ 152.972825][T10610] bond1: left promiscuous mode [ 152.972861][T10610] bridge1: left promiscuous mode [ 152.972996][T10610] bond1: left allmulticast mode [ 152.973007][T10610] bridge1: left allmulticast mode [ 153.041161][T10614] loop0: detected capacity change from 0 to 2049 [ 153.058114][T10615] binder: 10612:10615 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 153.059049][T10615] binder: 10612:10615 got transaction to invalid handle, 1 [ 153.059080][T10615] binder: 10612:10615 cannot find target node [ 153.059100][T10615] binder: 10612:10615 transaction call to 0:0 failed 65/29201/-22, code 0 size 72-24 line 3252 [ 153.059206][T10615] binder: 10612:10615 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 153.059223][T10615] binder: 10615 RLIMIT_NICE not set [ 153.089707][T10614] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 153.089741][T10614] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 153.089777][T10614] loop0: [ 153.110336][T10616] binder: 10612:10616 got transaction to invalid handle, 3 [ 153.110367][T10616] binder: 10612:10616 cannot find target node [ 153.110395][T10616] binder: 10612:10616 transaction call to 0:0 failed 66/29201/-22, code 0 size 0-0 line 3252 [ 153.110565][T10616] binder: 10612:10616 got transaction to invalid handle, 1 [ 153.216972][ T4711] Bluetooth: hci1: command tx timeout [ 153.271255][T10627] syz.6.1819 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 153.271295][T10627] CPU: 0 UID: 0 PID: 10627 Comm: syz.6.1819 Tainted: G L syzkaller #0 PREEMPT [ 153.271307][T10627] Tainted: [L]=SOFTLOCKUP [ 153.271311][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 153.271317][T10627] Call trace: [ 153.271319][T10627] show_stack+0x2c/0x3c (C) [ 153.271341][T10627] __dump_stack+0x30/0x40 [ 153.271354][T10627] dump_stack_lvl+0xd8/0x12c [ 153.271367][T10627] dump_stack+0x1c/0x28 [ 153.271378][T10627] dump_header+0xbc/0x3f0 [ 153.271386][T10627] oom_kill_process+0x248/0x8a0 [ 153.271398][T10627] out_of_memory+0xd24/0x1064 [ 153.271407][T10627] mem_cgroup_out_of_memory+0xe8/0x170 [ 153.271418][T10627] try_charge_memcg+0x8ec/0xc64 [ 153.271427][T10627] obj_cgroup_charge_pages+0x30/0xb0 [ 153.271435][T10627] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 153.271444][T10627] kmem_cache_alloc_lru_noprof+0x32c/0x5dc [ 153.271454][T10627] sock_alloc_inode+0x30/0x180 [ 153.271468][T10627] alloc_inode+0x68/0x198 [ 153.271479][T10627] sock_alloc+0x4c/0x204 [ 153.271488][T10627] __sock_create+0x108/0x670 [ 153.271499][T10627] __sys_socket_create+0xc0/0x11c [ 153.271509][T10627] __sys_socket+0x44/0xec [ 153.271519][T10627] __arm64_sys_socket+0x84/0x9c [ 153.271530][T10627] invoke_syscall+0x98/0x244 [ 153.271542][T10627] el0_svc_common+0xec/0x23c [ 153.271554][T10627] do_el0_svc+0x4c/0x5c [ 153.271566][T10627] el0_svc+0x64/0x260 [ 153.271577][T10627] el0t_64_sync_handler+0x44/0x104 [ 153.271587][T10627] el0t_64_sync+0x198/0x19c [ 153.271597][T10627] memory: usage 0kB, limit 0kB, failcnt 19 [ 153.271603][T10627] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 153.271609][T10627] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 153.271615][T10627] Memory cgroup stats for /syz6/test: [ 153.271692][T10627] cache 0 [ 153.271696][T10627] rss 0 [ 153.271700][T10627] rss_huge 0 [ 153.271703][T10627] shmem 0 [ 153.271706][T10627] mapped_file 0 [ 153.271710][T10627] dirty 0 [ 153.271713][T10627] writeback 0 [ 153.271717][T10627] workingset_refault_anon 0 [ 153.271721][T10627] workingset_refault_file 0 [ 153.271724][T10627] swap 0 [ 153.271727][T10627] swapcached 0 [ 153.271731][T10627] pgpgin 0 [ 153.271734][T10627] pgpgout 0 [ 153.271737][T10627] pgfault 0 [ 153.271741][T10627] pgmajfault 0 [ 153.271744][T10627] inactive_anon 0 [ 153.271748][T10627] active_anon 0 [ 153.271751][T10627] inactive_file 0 [ 153.271755][T10627] active_file 0 [ 153.271758][T10627] unevictable 0 [ 153.271761][T10627] hierarchical_memory_limit 0 [ 153.271765][T10627] hierarchical_memsw_limit 9223372036854771712 [ 153.271769][T10627] total_cache 0 [ 153.271773][T10627] total_rss 0 [ 153.271776][T10627] total_rss_huge 0 [ 153.271780][T10627] total_shmem 0 [ 153.271783][T10627] total_mapped_file 0 [ 153.271786][T10627] total_dirty 0 [ 153.271790][T10627] total_writeback 0 [ 153.271793][T10627] total_workingset_refault_anon 0 [ 153.271797][T10627] total_workingset_refault_file 0 [ 153.271801][T10627] total_swap 0 [ 153.271805][T10627] total_swapcached 0 [ 153.271808][T10627] total_pgpgin 0 [ 153.271812][T10627] total_pgpgout 0 [ 153.271815][T10627] total_pgfault 0 [ 153.271818][T10627] total_pgmajfault 0 [ 153.271822][T10627] total_inactive_anon 0 [ 153.271825][T10627] total_active_anon 0 [ 153.271829][T10627] total_inactive_file 0 [ 153.271833][T10627] total_active_file 0 [ 153.271836][T10627] total_unevictable 0 [ 153.271840][T10627] anon_cost 0 [ 153.271843][T10627] file_cost 0 [ 153.271847][T10627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.1819,pid=10619,uid=0 [ 153.273049][T10627] Memory cgroup out of memory: Killed process 10619 (syz.6.1819) total-vm:102572kB, anon-rss:1392kB, file-rss:22736kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 153.435295][T10610] Process accounting resumed [ 153.493104][T10643] macvtap2: entered promiscuous mode [ 153.493198][T10643] macvtap2: entered allmulticast mode [ 153.498030][T10651] __nla_validate_parse: 2 callbacks suppressed [ 153.498057][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 153.499818][T10651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 153.501725][T10649] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1830'. [ 153.501839][T10649] 0·: renamed from hsr0 (while UP) [ 153.507962][T10649] 0·: entered allmulticast mode [ 153.508000][T10649] hsr_slave_0: entered allmulticast mode [ 153.508013][T10649] hsr_slave_1: entered allmulticast mode [ 153.633815][ T4711] Bluetooth: hci0: command 0x0406 tx timeout [ 153.633861][ T4711] Bluetooth: hci2: command 0x0406 tx timeout [ 153.938242][ T4890] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 153.944123][T10675] netlink: 'syz.7.1839': attribute type 5 has an invalid length. [ 154.090304][ T4890] usb 1-1: unable to get BOS descriptor or descriptor too short [ 154.090351][ T4890] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.091963][ T4890] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 154.091981][ T4890] usb 1-1: can't read configurations, error -71 [ 154.115715][T10693] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1845'. [ 154.115745][T10693] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1845'. [ 154.260139][T10701] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1849'. [ 154.260910][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1849'. [ 154.334857][T10704] loop4: detected capacity change from 0 to 128 [ 154.344875][T10704] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.364640][ T4718] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.861351][T10725] Cannot find del_set index 4 as target [ 155.276133][T10742] loop4: detected capacity change from 0 to 4096 [ 155.277461][T10742] EXT4-fs: inline encryption not supported [ 155.280238][T10742] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.282035][T10742] EXT4-fs (loop4): Test dummy encryption mode enabled [ 155.285083][T10742] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 155.286752][T10742] System zones: 0-5 [ 155.292477][T10742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.298856][ T50] Bluetooth: hci1: command tx timeout [ 155.311704][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.365930][T10748] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1865'. [ 155.366120][T10748] veth1_macvtap: left promiscuous mode [ 155.512880][T10763] tipc: Enabled bearer , priority 1 [ 155.514901][T10762] tipc: Resetting bearer [ 155.523803][T10762] tipc: Disabling bearer [ 155.691538][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1877'. [ 155.693379][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1877'. [ 155.695591][T10782] netlink: 'syz.6.1877': attribute type 11 has an invalid length. [ 155.705395][T10782] netlink: 'syz.6.1877': attribute type 11 has an invalid length. [ 155.711527][T10782] netlink: 'syz.6.1877': attribute type 11 has an invalid length. [ 155.716787][T10782] netlink: 'syz.6.1877': attribute type 11 has an invalid length. [ 155.717046][T10782] netlink: 'syz.6.1877': attribute type 11 has an invalid length. [ 155.717205][T10782] netlink: 'syz.6.1877': attribute type 11 has an invalid length. [ 155.717370][T10782] netlink: 'syz.6.1877': attribute type 11 has an invalid length. [ 155.726276][T10782] netlink: 'syz.6.1877': attribute type 11 has an invalid length. [ 155.726489][T10782] netlink: 'syz.6.1877': attribute type 11 has an invalid length. [ 155.849349][T10791] Injecting memory failure for pfn 0x151c01 at process virtual address 0x20001000 [ 155.858490][T10791] Memory failure: 0x151c01: recovery action for dirty LRU page: Recovered [ 156.180253][T10806] ip6erspan0: entered allmulticast mode [ 156.223373][T10814] loop3: detected capacity change from 0 to 512 [ 156.225246][T10814] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 156.230202][T10814] EXT4-fs (loop3): 1 truncate cleaned up [ 156.230668][T10814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.252026][T10814] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 156.253684][T10814] macvlan5: entered promiscuous mode [ 156.254808][T10814] macvlan5: entered allmulticast mode [ 156.256219][T10814] team0: Port device macvlan5 added [ 156.294728][ T4890] net_ratelimit: 47 callbacks suppressed [ 156.294767][ T4890] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: 3a:f5:db:fe:3d:06 [ 156.461301][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.507103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.507226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.507319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.507403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.507484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.507560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.507642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.507724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.507808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.517878][T10845] macvtap1: entered promiscuous mode [ 156.517890][T10845] dummy0: entered promiscuous mode [ 156.517942][T10845] macvtap1: entered allmulticast mode [ 156.517950][T10845] dummy0: entered allmulticast mode [ 156.584133][T10856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.584339][T10856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.729511][T10865] loop4: detected capacity change from 0 to 512 [ 156.733716][T10865] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1903: corrupted in-inode xattr: invalid ea_ino [ 156.733751][T10865] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 156.737320][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 156.737347][ C0] EXT4-fs (loop4): initial error at time 156: ext4_iget_extra_inode:5180: inode 15 [ 156.737391][ C0] EXT4-fs (loop4): last error at time 156: ext4_iget_extra_inode:5180: inode 15 [ 156.744828][T10865] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1903: couldn't read orphan inode 15 (err -117) [ 156.745493][T10865] loop4: lost filesystem error report for type 5 error -117 [ 156.748447][T10865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.766296][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.822311][T10873] loop4: detected capacity change from 0 to 4096 [ 156.823012][T10873] EXT4-fs: inline encryption not supported [ 156.830002][T10873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.830035][T10873] EXT4-fs (loop4): Test dummy encryption mode enabled [ 156.831749][T10873] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 156.831797][T10873] System zones: 0-5 [ 156.833967][T10873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.844385][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.376987][ T50] Bluetooth: hci1: command tx timeout [ 158.708777][T10913] loop4: detected capacity change from 0 to 512 [ 158.714128][T10913] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 158.716803][T10913] EXT4-fs (loop4): 1 truncate cleaned up [ 158.719721][T10913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.726057][T10913] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 158.729653][T10913] team0: Port device macvlan7 added [ 158.764833][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.783377][T10917] loop4: detected capacity change from 0 to 512 [ 158.785671][T10917] EXT4-fs (loop4): orphan cleanup on readonly fs [ 158.794583][T10917] EXT4-fs (loop4): 1 orphan inode deleted [ 158.795058][T10917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.818814][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.342123][T10822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.429256][T10932] __nla_validate_parse: 63 callbacks suppressed [ 159.429300][T10932] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1923'. [ 159.433851][T10932] loop0: detected capacity change from 0 to 256 [ 159.446527][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.446566][T10932] FAT-fs (loop0): Filesystem has been set read-only [ 159.446627][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.446641][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.451196][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.451216][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.451248][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.451263][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.451287][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.451300][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.451321][T10932] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 159.468300][T10937] overlayfs: failed lookup in lower (newroot/380, name='file0', err=-40): overlapping layers [ 159.469964][T10938] overlayfs: failed lookup in lower (newroot/380, name='file0', err=-40): overlapping layers [ 159.471983][T10936] overlayfs: failed lookup in lower (newroot/380, name='bus', err=-40): overlapping layers [ 159.475373][T10930] overlayfs: failed lookup in lower (newroot/380, name='file0', err=-40): overlapping layers [ 159.526535][T10948] Cannot find del_set index 4 as target [ 159.745255][T10955] tmpfs: Bad value for 'mpol' [ 159.840672][T10965] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1934'. [ 159.840709][T10965] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1934'. [ 160.131855][T10971] loop4: detected capacity change from 0 to 1024 [ 160.132374][T10971] EXT4-fs: Ignoring removed orlov option [ 160.134003][T10971] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.135053][T10971] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 160.135105][T10971] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 160.135282][T10971] EXT4-fs (loop4): mount failed [ 160.153035][T10971] syzkaller0: entered promiscuous mode [ 160.153072][T10971] syzkaller0: entered allmulticast mode [ 160.294693][T10979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1940'. [ 160.329645][T10985] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1944'. [ 160.344682][T10987] gre0: entered promiscuous mode [ 160.349744][T10985] loop3: detected capacity change from 0 to 2048 [ 160.350637][T10980] macvtap1: entered promiscuous mode [ 160.350654][T10980] dummy0: entered promiscuous mode [ 160.350719][T10980] macvtap1: entered allmulticast mode [ 160.350729][T10980] dummy0: entered allmulticast mode [ 160.379017][T10985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.414847][T10994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1945'. [ 160.447317][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.503294][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 160.503333][T11000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1947'. [ 160.516581][T10997] loop6: detected capacity change from 0 to 4096 [ 160.518866][T10997] EXT4-fs: inline encryption not supported [ 160.521150][T11001] syzkaller0: entered promiscuous mode [ 160.521164][T11001] syzkaller0: entered allmulticast mode [ 160.527937][T10997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.527971][T10997] EXT4-fs (loop6): Test dummy encryption mode enabled [ 160.530121][T10997] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 160.530171][T10997] System zones: 0-5 [ 160.533199][T10997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.540145][T11001] tipc: Enabled bearer , priority 0 [ 160.557158][T10999] tipc: Resetting bearer [ 160.566538][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.580698][T11004] loop3: detected capacity change from 0 to 4096 [ 160.591815][T10999] tipc: Disabling bearer [ 160.595983][T11004] EXT4-fs: inline encryption not supported [ 160.649829][T11004] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.649859][T11004] EXT4-fs (loop3): Test dummy encryption mode enabled [ 160.663102][T11004] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 160.663172][T11004] System zones: 0-5 [ 160.666383][T11010] macvtap1: entered promiscuous mode [ 160.666416][T11010] dummy0: entered promiscuous mode [ 160.666561][T11010] macvtap1: entered allmulticast mode [ 160.666573][T11010] dummy0: entered allmulticast mode [ 160.677837][T11004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.831314][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1957'. [ 160.947341][T11033] binder: 11032:11033 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 160.952201][T11033] binder: 11032:11033 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 160.952251][T11033] binder: 11033 RLIMIT_NICE not set [ 161.004120][T11034] binder: 11032:11034 got transaction to invalid handle, 3 [ 161.004160][T11034] binder_debug: 5 callbacks suppressed [ 161.004183][T11034] binder: 11032:11034 cannot find target node [ 161.004198][T11034] binder: 11032:11034 transaction call to 0:0 failed 69/29201/-22, code 0 size 0-0 line 3252 [ 161.312745][T11045] tipc: Started in network mode [ 161.312785][T11045] tipc: Node identity 3e9c78556f9, cluster identity 4711 [ 161.312830][T11045] tipc: Enabled bearer , priority 1 [ 161.661237][T11044] tipc: Resetting bearer [ 161.668911][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.699300][T11044] tipc: Disabling bearer [ 161.832807][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.865595][T11055] loop3: detected capacity change from 0 to 512 [ 162.227415][T11077] loop6: detected capacity change from 0 to 512 [ 162.232948][T11077] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1976: iget: bad i_size value: 38620345925642 [ 162.232990][T11077] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 162.235536][T11077] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1976: couldn't read orphan inode 15 (err -117) [ 162.235563][T11077] loop6: lost filesystem error report for type 5 error -117 [ 162.237244][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 162.237254][ C0] EXT4-fs (loop6): initial error at time 162: ext4_orphan_get:1399: inode 15 [ 162.237269][ C0] EXT4-fs (loop6): last error at time 162: ext4_orphan_get:1404 [ 162.246535][T11077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.263355][T11077] overlay: ./file2 is not a directory [ 162.295296][ T50] Bluetooth: hci3: unexpected subevent 0x10 length: 30 > 2 [ 162.359161][T11086] binder: 11085:11086 ioctl 4018620d 0 returned -22 [ 162.360821][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.364850][T11086] binder: 11085:11086 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 162.373696][T11086] binder: 11085:11086 got transaction to invalid handle, 1 [ 162.375455][T11086] binder: 11085:11086 cannot find target node [ 162.385868][T11086] binder: 11085:11086 transaction call to 0:0 failed 72/29201/-22, code 0 size 72-24 line 3252 [ 162.387837][T11084] loop3: detected capacity change from 0 to 32768 [ 162.400205][T11086] binder: 11085:11086 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 162.400228][T11086] binder: 11086 RLIMIT_NICE not set [ 162.451569][T11094] binder: 11085:11094 got transaction to invalid handle, 3 [ 162.451601][T11094] binder: 11085:11094 cannot find target node [ 162.451629][T11094] binder: 11085:11094 transaction call to 0:0 failed 73/29201/-22, code 0 size 0-0 line 3252 [ 162.456751][T11094] binder: 11085:11094 got transaction to invalid handle, 1 [ 162.461685][T11094] binder: 11085:11094 cannot find target node [ 162.463872][T11094] binder: 11085:11094 transaction call to 0:0 failed 74/29201/-22, code 0 size 0-0 line 3252 [ 162.466733][T11084] loop3: p1 p3 < p5 p6 > [ 162.650140][T11101] loop6: detected capacity change from 0 to 512 [ 162.652574][T11101] ext4: Bad value for 'journal' [ 162.741726][T11102] tipc: Failed to remove unknown binding: 66,1,1/568098583:200652460/200652462 [ 162.759028][T11107] loop7: detected capacity change from 0 to 512 [ 162.761542][T11107] EXT4-fs (loop7): bad geometry: first data block is 0 with a 1k block and cluster size [ 162.870372][T11114] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1984'. [ 163.041700][T11139] validate_nla: 26 callbacks suppressed [ 163.041974][T11139] netlink: 'syz.7.1988': attribute type 10 has an invalid length. [ 163.042057][T11139] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 163.186275][ T4832] binder: undelivered TRANSACTION_ERROR: 29201 [ 163.273699][ T4832] IPVS: starting estimator thread 0... [ 163.340962][T11158] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 163.367100][T11150] IPVS: using max 61 ests per chain, 146400 per kthread [ 163.370632][T11158] EXT4-fs (loop6): 1 truncate cleaned up [ 163.371112][T11158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.398416][T11158] batadv0: entered promiscuous mode [ 163.398891][T11158] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 163.399623][T11158] team0: Port device macvlan2 added [ 163.435622][T11154] EXT4-fs: inline encryption not supported [ 163.443409][T11154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.443448][T11154] EXT4-fs (loop4): Test dummy encryption mode enabled [ 163.456048][T11154] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 163.456129][T11154] System zones: 0-5 [ 163.457119][T11154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.460949][T11155] overlayfs: failed to resolve './bus': -2 [ 163.474641][T11165] xt_TCPMSS: Only works on TCP SYN packets [ 163.481731][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.489862][T11154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.145975][T11216] Cannot find del_set index 4 as target [ 165.456504][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.456596][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.456650][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.456711][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.456758][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.456801][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.456844][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.456931][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.456980][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.457024][T11225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2007'. [ 165.638675][T11241] set_capacity_and_notify: 3 callbacks suppressed [ 165.638715][T11241] loop0: detected capacity change from 0 to 512 [ 165.665348][T11241] EXT4-fs (loop0): #clusters per group too big: 32774 [ 165.804349][T11256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.804561][T11256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.257352][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 166.928397][T11281] binder: 11280:11281 tried to acquire reference to desc 0, got 1 instead [ 166.930459][T11281] binder: 11280:11281 got transaction with invalid offset (48, min 48 max 64) or object. [ 166.932873][T11281] binder_debug: 2 callbacks suppressed [ 166.934149][T11281] binder: 11280:11281 transaction call to 11280:0 failed 79/29201/-22, code 0 size 64-24 line 3524 [ 166.938781][T11281] loop7: detected capacity change from 0 to 512 [ 166.940781][T11281] EXT4-fs: Ignoring removed bh option [ 166.943091][T11281] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.955306][T11281] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 166.959821][T11281] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 166.959925][T11281] EXT4-fs (loop7): orphan cleanup on readonly fs [ 166.963212][T11281] Quota error (device loop7): do_insert_tree: Free block already used in tree: block 4 [ 166.963262][T11281] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 166.963300][T11281] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2021: Failed to acquire dquot type 1 [ 166.963316][T11281] loop7: lost filesystem error report for type 5 error -5 [ 166.968745][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 166.968758][ C1] EXT4-fs (loop7): last error at time 166: ext4_acquire_dquot:7041 [ 166.975726][T11281] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2021: Invalid block bitmap block 0 in block_group 0 [ 166.975767][T11281] loop7: lost filesystem error report for type 5 error -117 [ 167.497037][T11281] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2021: Invalid block bitmap block 0 in block_group 0 [ 167.504428][T11281] loop7: lost filesystem error report for type 5 error -117 [ 167.543580][T11281] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2021: Invalid block bitmap block 0 in block_group 0 [ 167.543628][T11281] loop7: lost filesystem error report for type 5 error -117 [ 167.560381][T11281] Quota error (device loop7): write_blk: dquota write failed [ 167.560437][T11281] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 167.560467][T11281] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2021: Failed to acquire dquot type 1 [ 167.560486][T11281] loop7: lost filesystem error report for type 5 error -28 [ 167.566555][T11281] Quota error (device loop7): write_blk: dquota write failed [ 167.566593][T11281] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 167.566607][T11281] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.2021: Failed to acquire dquot type 1 [ 167.566618][T11281] loop7: lost filesystem error report for type 5 error -28 [ 167.582004][T11281] EXT4-fs (loop7): 1 orphan inode deleted [ 167.587884][T11281] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.592691][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 167.888451][ T50] Bluetooth: hci3: command tx timeout [ 167.890842][T10364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.974516][T11304] loop0: detected capacity change from 0 to 2049 [ 167.980202][T11307] netlink: 'syz.0.2028': attribute type 3 has an invalid length. [ 168.014628][T11304] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 168.014661][T11304] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 168.014700][T11304] loop0: [ 168.339549][ T22] process 11314 (syz.7.2032) no longer affine to cpu1 [ 169.129609][T11317] loop6: detected capacity change from 0 to 4096 [ 169.134326][T11317] EXT4-fs: inline encryption not supported [ 169.141673][T11317] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.141701][T11317] EXT4-fs (loop6): Test dummy encryption mode enabled [ 169.227162][T11317] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 169.227242][T11317] System zones: 0-5 [ 169.246657][T11317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.484615][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.572337][T11318] psci: CPU1 killed (polled 0 ms) [ 170.352061][T11364] syzkaller0: entered promiscuous mode [ 170.355476][T11364] syzkaller0: entered allmulticast mode [ 170.370712][T11364] tipc: Enabled bearer , priority 0 [ 170.380780][T11363] tipc: Resetting bearer [ 170.418116][T11363] tipc: Disabling bearer [ 170.687219][T11383] syzkaller0: entered promiscuous mode [ 170.694308][T11383] syzkaller0: entered allmulticast mode [ 170.917210][T11392] loop4: detected capacity change from 0 to 512 [ 170.917598][T11392] ext4: Bad value for 'journal' [ 171.020458][T11396] netlink: 'syz.7.2061': attribute type 108 has an invalid length. [ 171.031116][T11396] __nla_validate_parse: 15 callbacks suppressed [ 171.034853][T11396] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2061'. [ 171.111143][T11403] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2064'. [ 171.111177][T11403] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2064'. [ 171.234328][T11406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.242711][T11406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.332648][T11417] tipc: Started in network mode [ 171.334392][T11417] tipc: Node identity c2d91e7d079c, cluster identity 4711 [ 171.334475][T11417] tipc: Enabled bearer , priority 1 [ 171.341460][T11416] tipc: Resetting bearer [ 171.358546][T11416] tipc: Disabling bearer [ 171.413130][T11421] Cannot find del_set index 4 as target [ 171.570831][T11430] netlink: 'syz.4.2075': attribute type 5 has an invalid length. [ 171.570863][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2075'. [ 171.621849][T11434] loop7: detected capacity change from 0 to 512 [ 171.628624][T11434] EXT4-fs: Ignoring removed nobh option [ 171.645481][T11434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.721067][T10364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.354307][T11463] netlink: 'syz.0.2087': attribute type 2 has an invalid length. [ 172.374615][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2087'. [ 173.074668][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'. [ 173.099654][T11485] macvtap3: entered allmulticast mode [ 173.213040][T11480] loop3: detected capacity change from 0 to 512 [ 173.213420][T11480] ext4: Unknown parameter '€' [ 173.313997][T11497] loop6: detected capacity change from 0 to 512 [ 173.322909][T11497] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 173.330250][T11497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 173.330313][T11497] System zones: 1-12 [ 173.330434][T11497] EXT4-fs (loop6): orphan cleanup on readonly fs [ 173.335557][T11497] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2094: invalid indirect mapped block 12 (level 1) [ 173.335589][T11497] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 173.339142][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 173.339159][ C0] EXT4-fs (loop6): initial error at time 173: ext4_free_branches:1023: inode 11 [ 173.339176][ C0] EXT4-fs (loop6): last error at time 173: ext4_free_branches:1023: inode 11 [ 173.349886][T11497] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2094: invalid indirect mapped block 2 (level 2) [ 173.349925][T11497] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 173.407186][T11497] EXT4-fs (loop6): 1 truncate cleaned up [ 173.407679][T11497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 173.515374][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 173.675304][T11515] Cannot find del_set index 2 as target [ 173.679410][T11515] loop0: detected capacity change from 0 to 512 [ 173.679723][T11515] ext2: Unknown parameter 'dont_appraise' [ 173.684240][T11515] loop0: detected capacity change from 0 to 512 [ 173.905792][T11528] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2102'. [ 173.910113][T11529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2102'. [ 173.912450][T11530] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2102'. [ 173.992667][T11529] net_ratelimit: 46 callbacks suppressed [ 173.994078][T11529] ip_tables: iptables: counters copy to user failed while replacing table [ 173.997912][T11529] ip_tables: iptables: counters copy to user failed while replacing table [ 174.052472][T11535] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 174.210535][T11546] loop4: detected capacity change from 0 to 1024 [ 174.219060][T11546] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 174.221088][T11546] EXT4-fs (loop4): group descriptors corrupted! [ 174.337148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.337273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.337364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.637101][T11567] binder: 11564:11567 ioctl c0306201 0 returned -14 [ 174.637853][T11567] binder: BINDER_SET_CONTEXT_MGR already set [ 174.637875][T11567] binder: 11564:11567 ioctl 4018620d 20004a80 returned -16 [ 174.638070][T11567] binder: 11564:11567 got transaction to invalid handle, 1 [ 174.638086][T11567] binder: 11564:11567 cannot find target node [ 174.638106][T11567] binder: 11564:11567 transaction call to 0:0 failed 84/29201/-22, code 0 size 72-24 line 3252 [ 174.649127][T11567] binder: 11564:11567 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 174.649158][T11567] binder: 11567 RLIMIT_NICE not set [ 174.668122][T11566] loop4: detected capacity change from 0 to 512 [ 174.676412][T11566] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 174.690463][T11572] binder: 11564:11572 got transaction to invalid handle, 3 [ 174.690492][T11572] binder: 11564:11572 cannot find target node [ 174.690516][T11572] binder: 11564:11572 transaction call to 0:0 failed 85/29201/-22, code 0 size 0-0 line 3252 [ 174.690661][T11572] binder: 11564:11572 got transaction to invalid handle, 1 [ 174.690674][T11572] binder: 11564:11572 cannot find target node [ 174.690690][T11572] binder: 11564:11572 transaction call to 0:0 failed 86/29201/-22, code 0 size 0-0 line 3252 [ 174.710386][T11566] EXT4-fs (loop4): 1 truncate cleaned up [ 174.710845][T11566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.720324][T11566] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 174.734151][T11566] team0: Port device macvlan8 added [ 174.743190][T11571] syzkaller0: entered promiscuous mode [ 174.744985][T11571] syzkaller0: entered allmulticast mode [ 174.788000][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.873483][T11574] tipc: Enabled bearer , priority 0 [ 174.894420][T11576] syzkaller0: entered promiscuous mode [ 174.895537][T11576] syzkaller0: entered allmulticast mode [ 174.905021][T11570] tipc: Resetting bearer [ 174.949041][T11570] tipc: Disabling bearer [ 174.976683][T11576] tipc: Enabled bearer , priority 0 [ 174.981331][T11575] tipc: Resetting bearer [ 174.989893][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2118'. [ 175.024436][T11575] tipc: Disabling bearer [ 175.084311][T11587] loop4: detected capacity change from 0 to 512 [ 175.098422][T11588] loop0: detected capacity change from 0 to 2049 [ 175.105667][T11587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 175.105726][T11587] System zones: 1-12 [ 175.109635][T11587] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2121: missing EA_INODE flag [ 175.112378][T11587] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 175.116919][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 175.116950][ C0] EXT4-fs (loop4): initial error at time 175: ext4_xattr_inode_iget:441: inode 12 [ 175.116996][ C0] EXT4-fs (loop4): last error at time 175: ext4_xattr_inode_iget:441: inode 12 [ 175.135780][T11587] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2121: error while reading EA inode 12 err=-117 [ 175.135819][T11587] loop4: lost filesystem error report for type 5 error -117 [ 175.142113][T11588] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 175.142145][T11588] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 175.142182][T11588] loop0: [ 175.149784][T11587] EXT4-fs (loop4): 1 orphan inode deleted [ 175.150292][T11587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.160937][T11587] fscrypt (loop4, inode 15): Unsupported log2_data_unit_size in encryption policy: 133 [ 175.246155][ T4344] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 175.248952][ T4344] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 175.250517][ T4344] loop0: [ 175.270341][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.452746][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.452790][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.491574][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.617747][ T10] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: fa:2d:86:c6:83:69 [ 175.621856][ T4943] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: fa:2d:86:c6:83:69 [ 175.628273][T11606] xt_hashlimit: size too large, truncated to 1048576 [ 176.089349][T11618] macvtap2: entered promiscuous mode [ 176.091664][T11618] macvtap2: entered allmulticast mode [ 176.492412][ T8139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 176.657360][ T8139] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: fa:2d:86:c6:83:69 [ 176.712002][T11636] binder: 11634:11636 ioctl c0306201 0 returned -14 [ 176.716217][T11636] binder: 11634:11636 got transaction to invalid handle, 1 [ 176.719864][T11636] binder: 11634:11636 cannot find target node [ 176.723903][T11636] binder: 11634:11636 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 176.723941][T11636] binder: 11636 RLIMIT_NICE not set [ 176.753296][T11643] __nla_validate_parse: 1 callbacks suppressed [ 176.755855][T11643] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2140'. [ 176.759953][T11643] netlink: 292 bytes leftover after parsing attributes in process `syz.7.2140'. [ 176.773398][T11644] binder: 11634:11644 got transaction to invalid handle, 3 [ 176.776050][T11644] binder: 11634:11644 got transaction to invalid handle, 1 [ 176.867476][ T4472] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: fa:2d:86:c6:83:69 [ 176.884157][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.909113][T11648] netlink: 'syz.6.2142': attribute type 4 has an invalid length. [ 176.913658][T11654] loop3: detected capacity change from 0 to 512 [ 177.014321][T11656] tipc: Enabled bearer , priority 1 [ 177.022738][T11655] tipc: Resetting bearer [ 177.060867][T11655] tipc: Disabling bearer [ 177.196790][T11671] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2151'. [ 177.221409][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2150'. [ 177.336181][T11678] loop7: detected capacity change from 0 to 512 [ 177.339540][T11678] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 177.349430][T11678] EXT4-fs (loop7): 1 truncate cleaned up [ 177.349904][T11678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.387702][T11678] batadv0: entered promiscuous mode [ 177.390656][T11678] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.396736][T11678] team0: Port device macvlan2 added [ 177.400401][T11681] IPVS: length: 131 != 8 [ 177.779450][T11688] tipc: Enabled bearer , priority 10 [ 178.121080][T11695] syzkaller0: entered promiscuous mode [ 178.121116][T11695] syzkaller0: entered allmulticast mode [ 178.128873][T11695] tipc: Enabled bearer , priority 0 [ 178.156785][T11694] tipc: Resetting bearer [ 178.216486][T11697] loop0: detected capacity change from 0 to 2049 [ 178.219001][T10364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.249362][T11694] tipc: Disabling bearer [ 178.262010][T11697] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 178.262040][T11697] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 178.262072][T11697] loop0: [ 178.386158][T11706] Cannot find del_set index 4 as target [ 178.535106][T11721] loop4: detected capacity change from 0 to 1024 [ 178.545731][T11721] EXT4-fs: Mount option(s) incompatible with ext3 [ 178.558681][T11721] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 178.590552][T11724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.597612][T11724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.600491][T11724] loop6: detected capacity change from 0 to 128 [ 178.623969][T11724] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.637698][T11724] fscrypt (loop6, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 178.907649][T11735] Soft offlining pfn 0x139253 at process virtual address 0x20631000 [ 178.931869][T11735] Soft offlining pfn 0x139252 at process virtual address 0x20632000 [ 179.107823][T11755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.109675][T11755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.177563][ T4472] tipc: Node number set to 3343565566 [ 179.201282][ T9913] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.295027][T11766] loop6: detected capacity change from 0 to 512 [ 179.305690][T11766] vfat: Unknown parameter '' [ 179.496607][T11773] tipc: Enabled bearer , priority 1 [ 179.520569][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 179.522505][T11778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2189'. [ 179.531986][T11770] tipc: Resetting bearer [ 179.560693][T11770] tipc: Disabling bearer [ 180.354435][T11808] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2200'. [ 180.356542][T11808] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2200'. [ 180.523643][T11815] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2204'. [ 180.653780][T11820] loop0: detected capacity change from 0 to 1024 [ 180.659772][T11818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.659981][T11818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.771017][T11828] loop3: detected capacity change from 0 to 128 [ 180.790450][T11828] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.861229][T11833] loop0: detected capacity change from 0 to 512 [ 180.885810][T11833] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 180.899308][T11833] EXT4-fs (loop0): 1 truncate cleaned up [ 180.899814][T11833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.920154][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2207'. [ 180.946668][T11833] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 180.954035][T11833] team0: Port device macvlan4 added [ 181.028386][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.083397][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.481063][T11860] binder: 11858:11860 tried to acquire reference to desc 0, got 1 instead [ 181.484460][T11860] binder: 11858:11860 BC_FREE_BUFFER matched unreturned or currently freeing buffer at offset 0 [ 181.503488][T11860] binder: 11858:11860 ioctl 4b37 0 returned -22 [ 181.524767][T11860] macvtap3: entered promiscuous mode [ 181.525943][T11860] macvtap3: entered allmulticast mode [ 181.594376][ T4472] binder_debug: 8 callbacks suppressed [ 181.594419][ T4472] binder: undelivered TRANSACTION_COMPLETE [ 181.600092][T11827] overlayfs: missing 'lowerdir' [ 181.649998][ T9] binder: undelivered transaction 97, process died. [ 182.011446][T11880] loop3: detected capacity change from 0 to 512 [ 182.011953][T11880] ext4: Bad value for 'journal' [ 182.055823][T11884] loop0: detected capacity change from 0 to 1024 [ 182.093583][T11884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.122601][T11890] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 182.123514][T11890] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 182.123537][T11890] EXT4-fs (loop0): This should not happen!! Data will be lost [ 182.123537][T11890] [ 182.123549][T11890] EXT4-fs (loop0): Total free blocks count 0 [ 182.123559][T11890] EXT4-fs (loop0): Free/Dirty block details [ 182.123570][T11890] EXT4-fs (loop0): free_blocks=68451041280 [ 182.123581][T11890] EXT4-fs (loop0): dirty_blocks=64 [ 182.123591][T11890] EXT4-fs (loop0): Block reservation details [ 182.123600][T11890] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 183.146197][ T4723] Bluetooth: hci0: command 0x0406 tx timeout [ 183.147747][ T50] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 183.325756][T11903] netlink: 'syz.6.2229': attribute type 10 has an invalid length. [ 183.325829][T11903] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 183.384267][ T4715] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 183.385059][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.457568][T11795] Process accounting paused [ 183.605264][T11918] tipc: Enabled bearer , priority 1 [ 183.612543][T11921] loop7: detected capacity change from 0 to 1024 [ 183.624349][T11916] tipc: Resetting bearer [ 183.640309][T11921] EXT4-fs: Ignoring removed orlov option [ 183.675766][T11921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.683937][T11916] tipc: Disabling bearer [ 183.697054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.697169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.697267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.697343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.697419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.697499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.697578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.697662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.697745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.697830][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.756116][T11926] syzkaller0: entered promiscuous mode [ 183.756152][T11926] syzkaller0: entered allmulticast mode [ 183.938162][T11921] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #15: comm syz.7.2237: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3844(4), depth 0(0) [ 183.961735][T11921] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #15: comm syz.7.2237: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 3844(4), depth 0(0) [ 184.268421][T11943] loop4: detected capacity change from 0 to 8 [ 184.313017][T11947] loop6: detected capacity change from 0 to 1024 [ 184.320416][T11947] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 184.326641][T11947] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.2245: lblock 2 mapped to illegal pblock 2 (length 1) [ 184.326684][T11947] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 184.327344][ C0] EXT4-fs (loop6): initial error at time 184: ext4_map_blocks:791: inode 3: block 2 [ 184.327395][ C0] EXT4-fs (loop6): last error at time 184: ext4_map_blocks:791: inode 3: block 2 [ 184.336178][T11947] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 184.339452][T11947] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.2245: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.339508][T11947] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 184.345724][T11947] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 184.345761][T11947] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2245: Failed to acquire dquot type 0 [ 184.345788][T11947] loop6: lost filesystem error report for type 5 error -117 [ 184.350749][T11947] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 184.350770][T11947] loop6: lost filesystem error report for type 5 error -117 [ 184.359786][T11947] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.2245: mark_inode_dirty error [ 184.359823][T11947] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.364480][T11947] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 184.364867][T11947] EXT4-fs (loop6): 1 orphan inode deleted [ 184.365308][T11947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.378246][ T8148] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.392406][ T8148] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 184.398235][ T8148] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:24: Failed to release dquot type 0 [ 184.431713][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.434490][ T8139] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.434522][ T8139] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 184.442806][ T8139] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 184.442852][ T8139] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:17: Failed to release dquot type 0 [ 184.442876][ T8139] loop6: lost filesystem error report for type 5 error -117 [ 184.451665][ T9913] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 184.456387][ T9913] loop6: lost filesystem error report for type 5 error -117 [ 184.461926][ T9913] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 184.465570][ T9913] loop6: lost filesystem error report for type 5 error -117 [ 184.468167][ T9913] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 184.468218][ T9913] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 184.659754][T11958] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2248'. [ 184.703070][T11961] binder: 11960:11961 unknown command 0 [ 184.703095][T11961] binder: 11960:11961 ioctl c0306201 20000080 returned -22 [ 184.733624][T10364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.084757][T11982] loop7: detected capacity change from 0 to 4096 [ 185.101983][T11982] ext4: Unknown parameter 'nouser_xattr' [ 185.210901][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 185.235324][T11996] FAULT_INJECTION: forcing a failure. [ 185.235324][T11996] name failslab, interval 1, probability 0, space 0, times 0 [ 185.240009][T11996] CPU: 0 UID: 0 PID: 11996 Comm: syz.3.2262 Tainted: G L syzkaller #0 PREEMPT [ 185.240032][T11996] Tainted: [L]=SOFTLOCKUP [ 185.240036][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 185.240042][T11996] Call trace: [ 185.240045][T11996] show_stack+0x2c/0x3c (C) [ 185.240067][T11996] __dump_stack+0x30/0x40 [ 185.240079][T11996] dump_stack_lvl+0xd8/0x12c [ 185.240089][T11996] dump_stack+0x1c/0x28 [ 185.240099][T11996] should_fail_ex+0x41c/0x590 [ 185.240107][T11996] should_failslab+0xc4/0x120 [ 185.240115][T11996] __kmalloc_noprof+0x108/0x6b8 [ 185.240124][T11996] kernfs_fop_write_iter+0x144/0x3b8 [ 185.240134][T11996] vfs_write+0x51c/0xa0c [ 185.240141][T11996] ksys_write+0x12c/0x228 [ 185.240148][T11996] __arm64_sys_write+0x84/0x98 [ 185.240155][T11996] invoke_syscall+0x98/0x244 [ 185.240165][T11996] el0_svc_common+0xec/0x23c [ 185.240175][T11996] do_el0_svc+0x4c/0x5c [ 185.240184][T11996] el0_svc+0x64/0x260 [ 185.240193][T11996] el0t_64_sync_handler+0x44/0x104 [ 185.240202][T11996] el0t_64_sync+0x198/0x19c [ 185.543821][T12001] loop6: detected capacity change from 0 to 1024 [ 185.549922][T12001] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 185.573001][T12001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.596515][T12000] loop7: detected capacity change from 0 to 2048 [ 185.723027][T12006] 9pnet_fd: Insufficient options for proto=fd [ 185.775510][T12010] loop0: detected capacity change from 0 to 256 [ 185.785384][T12010] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.811734][T12010] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 185.814280][T12010] FAT-fs (loop0): Filesystem has been set read-only [ 186.120728][ T1597] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.122629][ T1597] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.132863][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.310732][ T50] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 186.693045][T12047] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2282'. [ 186.696000][T12047] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2282'. [ 186.700683][T12048] netlink: 'syz.7.2281': attribute type 10 has an invalid length. [ 186.700739][T12048] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 186.865001][T12063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.867717][T12063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.961062][T12068] netlink: 798 bytes leftover after parsing attributes in process `syz.7.2287'. [ 187.273535][T12068] loop7: detected capacity change from 0 to 512 [ 187.288860][T12068] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.291166][T12068] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.294034][T12068] EXT4-fs: journaled quota format not specified [ 188.376284][T12107] loop4: detected capacity change from 0 to 512 [ 188.381870][T12107] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 188.383955][T12107] EXT4-fs (loop4): failed to open journal device unknown-block(129,0) -ENXIO [ 188.477173][T12108] loop0: detected capacity change from 0 to 2049 [ 188.649847][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2300'. [ 188.675400][T12108] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 188.675431][T12108] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 188.675467][T12108] loop0: [ 188.767843][T12118] netlink: 'syz.7.2303': attribute type 12 has an invalid length. [ 188.770570][T12118] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2303'. [ 188.813479][T12120] netlink: 'syz.7.2303': attribute type 12 has an invalid length. [ 188.815079][T12120] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2303'. [ 188.854531][T12130] loop3: detected capacity change from 0 to 128 [ 188.872121][T12130] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.023800][T12130] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 189.756664][T12159] FAULT_INJECTION: forcing a failure. [ 189.756664][T12159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.759699][T12159] CPU: 0 UID: 0 PID: 12159 Comm: syz.7.2315 Tainted: G L syzkaller #0 PREEMPT [ 189.759717][T12159] Tainted: [L]=SOFTLOCKUP [ 189.759721][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 189.759727][T12159] Call trace: [ 189.759730][T12159] show_stack+0x2c/0x3c (C) [ 189.759755][T12159] __dump_stack+0x30/0x40 [ 189.759767][T12159] dump_stack_lvl+0xd8/0x12c [ 189.759777][T12159] dump_stack+0x1c/0x28 [ 189.759787][T12159] should_fail_ex+0x41c/0x590 [ 189.759795][T12159] should_fail+0x14/0x24 [ 189.759802][T12159] should_fail_usercopy+0x20/0x30 [ 189.759809][T12159] _copy_from_iter+0x188/0x1064 [ 189.759817][T12159] kernfs_fop_write_iter+0x17c/0x3b8 [ 189.759827][T12159] vfs_write+0x51c/0xa0c [ 189.759835][T12159] ksys_write+0x12c/0x228 [ 189.759841][T12159] __arm64_sys_write+0x84/0x98 [ 189.759848][T12159] invoke_syscall+0x98/0x244 [ 189.759859][T12159] el0_svc_common+0xec/0x23c [ 189.759868][T12159] do_el0_svc+0x4c/0x5c [ 189.759878][T12159] el0_svc+0x64/0x260 [ 189.759888][T12159] el0t_64_sync_handler+0x44/0x104 [ 189.759896][T12159] el0t_64_sync+0x198/0x19c [ 189.797420][T12158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2316'. [ 189.819562][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.103689][T12176] netlink: 'syz.0.2320': attribute type 8 has an invalid length. [ 190.103720][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2320'. [ 190.122083][T12176] netlink: 'syz.0.2320': attribute type 8 has an invalid length. [ 190.126042][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2320'. [ 190.129299][ T8148] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.137240][ T8139] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.140021][ T8157] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.140248][ T8157] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.603496][ T50] Bluetooth: hci4: SCO packet for unknown connection handle 768 [ 191.168799][T12213] tmpfs: Bad value for 'mpol' [ 191.188484][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2330'. [ 191.236222][T12221] netlink: 'syz.6.2334': attribute type 10 has an invalid length. [ 191.238166][T12221] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 191.457027][ C0] net_ratelimit: 37 callbacks suppressed [ 191.457069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.457167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.457252][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.457330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.457418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.457497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.457575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.457654][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.457733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.457809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.673935][T12233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.678218][T12233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.091956][T12236] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2335'. [ 192.091991][T12236] netlink: 292 bytes leftover after parsing attributes in process `syz.3.2335'. [ 193.441656][T12250] batman_adv: batadv0: Adding interface: dummy0 [ 193.445962][T12250] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.446018][T12250] batman_adv: batadv0: Interface activated: dummy0 [ 193.933093][T12260] tipc: Enabled bearer , priority 1 [ 193.960012][T12252] tipc: Resetting bearer [ 194.003667][T12252] tipc: Disabling bearer [ 194.031601][T12274] loop6: detected capacity change from 0 to 1024 [ 194.037416][T12274] EXT4-fs: Ignoring removed bh option [ 194.040959][T12274] EXT4-fs: Ignoring removed bh option [ 194.048640][T12274] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 194.061675][T12274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.091049][T12279] FAULT_INJECTION: forcing a failure. [ 194.091049][T12279] name fail_futex, interval 1, probability 0, space 0, times 1 [ 194.091086][T12279] CPU: 0 UID: 0 PID: 12279 Comm: syz.4.2354 Tainted: G L syzkaller #0 PREEMPT [ 194.091102][T12279] Tainted: [L]=SOFTLOCKUP [ 194.091106][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 194.091112][T12279] Call trace: [ 194.091115][T12279] show_stack+0x2c/0x3c (C) [ 194.091135][T12279] __dump_stack+0x30/0x40 [ 194.091147][T12279] dump_stack_lvl+0xd8/0x12c [ 194.091159][T12279] dump_stack+0x1c/0x28 [ 194.091171][T12279] should_fail_ex+0x41c/0x590 [ 194.091180][T12279] should_fail+0x14/0x24 [ 194.091187][T12279] get_futex_key+0x1ec/0x12b0 [ 194.091197][T12279] futex_wait_setup+0x58/0x674 [ 194.091208][T12279] __futex_wait+0x108/0x25c [ 194.091223][T12279] futex_wait+0x108/0x2c0 [ 194.091234][T12279] do_futex+0x320/0x378 [ 194.091243][T12279] __arm64_sys_futex+0x2e4/0x418 [ 194.091253][T12279] invoke_syscall+0x98/0x244 [ 194.091266][T12279] el0_svc_common+0xec/0x23c [ 194.091278][T12279] do_el0_svc+0x4c/0x5c [ 194.091289][T12279] el0_svc+0x64/0x260 [ 194.091301][T12279] el0t_64_sync_handler+0x44/0x104 [ 194.091311][T12279] el0t_64_sync+0x198/0x19c [ 194.121219][T12279] Can't find a SQUASHFS superblock on nullb0 [ 194.166233][T12274] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 194.258335][ T9913] EXT4-fs error (device loop6): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /162/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 194.262879][ T9913] EXT4-fs (loop6): Remounting filesystem read-only [ 194.300424][T12275] macvtap2: entered promiscuous mode [ 194.301548][T12275] macvtap2: entered allmulticast mode [ 194.356041][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.720565][T12304] loop3: detected capacity change from 0 to 4096 [ 194.747209][T12304] EXT4-fs: inline encryption not supported [ 194.759874][T12304] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 194.759901][T12304] EXT4-fs (loop3): Test dummy encryption mode enabled [ 194.767589][T12304] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 194.767640][T12304] System zones: 0-5 [ 194.773505][T12309] bridge_slave_1: default FDB implementation only supports local addresses [ 194.775861][T12304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.849923][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.916252][T12301] FAULT_INJECTION: forcing a failure. [ 194.916252][T12301] name failslab, interval 1, probability 0, space 0, times 0 [ 194.920953][T12301] CPU: 0 UID: 0 PID: 12301 Comm: syz.6.2357 Tainted: G L syzkaller #0 PREEMPT [ 194.920973][T12301] Tainted: [L]=SOFTLOCKUP [ 194.920977][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 194.920982][T12301] Call trace: [ 194.920987][T12301] show_stack+0x2c/0x3c (C) [ 194.921013][T12301] __dump_stack+0x30/0x40 [ 194.921025][T12301] dump_stack_lvl+0xd8/0x12c [ 194.921035][T12301] dump_stack+0x1c/0x28 [ 194.921044][T12301] should_fail_ex+0x41c/0x590 [ 194.921053][T12301] should_failslab+0xc4/0x120 [ 194.921062][T12301] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 194.921071][T12301] zswap_store+0x784/0x1cd8 [ 194.921081][T12301] swap_writeout+0x774/0x1468 [ 194.921088][T12301] shrink_folio_list+0x2748/0x4328 [ 194.921097][T12301] shrink_lruvec+0xfe8/0x1fec [ 194.921106][T12301] shrink_node+0xa88/0x1cfc [ 194.921116][T12301] do_try_to_free_pages+0x5c4/0x12dc [ 194.921125][T12301] try_to_free_mem_cgroup_pages+0x2ac/0xba8 [ 194.921135][T12301] mem_cgroup_resize_max+0x178/0x234 [ 194.921145][T12301] mem_cgroup_write+0x22c/0x28c [ 194.921153][T12301] cgroup_file_write+0x23c/0x6e4 [ 194.921164][T12301] kernfs_fop_write_iter+0x260/0x3b8 [ 194.921174][T12301] vfs_write+0x51c/0xa0c [ 194.921182][T12301] ksys_write+0x12c/0x228 [ 194.921189][T12301] __arm64_sys_write+0x84/0x98 [ 194.921196][T12301] invoke_syscall+0x98/0x244 [ 194.921206][T12301] el0_svc_common+0xec/0x23c [ 194.921219][T12301] do_el0_svc+0x4c/0x5c [ 194.921229][T12301] el0_svc+0x64/0x260 [ 194.921239][T12301] el0t_64_sync_handler+0x44/0x104 [ 194.921247][T12301] el0t_64_sync+0x198/0x19c [ 196.052958][T12337] loop3: detected capacity change from 0 to 512 [ 196.062990][T12337] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 196.069026][T12337] EXT4-fs (loop3): 1 truncate cleaned up [ 196.070711][T12337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.104866][T12337] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 196.117013][T12337] macvlan6: entered promiscuous mode [ 196.117145][T12337] macvlan6: entered allmulticast mode [ 196.117626][T12337] team0: Port device macvlan6 added [ 196.126957][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2373'. [ 196.244509][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 196.548096][T12350] binder: 12349:12350 ioctl 4018620d 0 returned -22 [ 196.550326][T12350] binder: tried to use weak ref as strong ref [ 196.551760][T12350] binder: 12349:12350 Acquire 1 refcount change on invalid ref 0 ret -22 [ 196.553644][T12350] binder: 12349:12350 got transaction to invalid handle, 1 [ 196.555131][T12350] binder: 12349:12350 cannot find target node [ 196.556249][T12350] binder: 12349:12350 transaction call to 0:0 failed 101/29201/-22, code 0 size 72-24 line 3252 [ 196.560176][T12350] binder: 12349:12350 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 196.562969][T12350] binder: 12350 RLIMIT_NICE not set [ 196.611696][T12351] binder: 12349:12351 got transaction to invalid handle, 3 [ 196.611726][T12351] binder: 12349:12351 cannot find target node [ 196.611753][T12351] binder: 12349:12351 transaction call to 0:0 failed 102/29201/-22, code 0 size 0-0 line 3252 [ 196.616361][T12351] binder: 12349:12351 got transaction to invalid handle, 1 [ 196.618059][T12351] binder: 12349:12351 cannot find target node [ 196.619217][T12351] binder: 12349:12351 transaction call to 0:0 failed 103/29201/-22, code 0 size 0-0 line 3252 [ 196.748114][ T9] net_ratelimit: 60 callbacks suppressed [ 196.748155][ T9] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: de:c5:f6:62:81:c5 [ 196.977144][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 197.012373][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.099412][T12353] syzkaller0: entered promiscuous mode [ 197.099450][T12353] syzkaller0: entered allmulticast mode [ 197.116337][T12356] loop3: detected capacity change from 0 to 1024 [ 197.124616][T12353] tipc: Enabled bearer , priority 0 [ 197.132495][T12352] tipc: Resetting bearer [ 197.207625][T12356] EXT4-fs: Ignoring removed bh option [ 197.212453][T12356] /dev/loop3: Can't open blockdev [ 197.229639][T12361] tracefs: Bad value for 'mode' [ 197.231719][T12361] loop7: detected capacity change from 0 to 512 [ 197.241554][T12361] EXT4-fs: Ignoring removed oldalloc option [ 197.405333][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.405398][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.405417][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 197.422655][T12361] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.425353][T12361] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a846c01c, mo2=0002] [ 197.425401][T12361] System zones: 0-2, 18-18, 34-34 [ 197.425778][T12361] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 197.425797][T12361] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 197.425810][T12361] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.2380: bad orphan inode 20829 [ 197.425827][T12361] loop7: lost filesystem error report for type 5 error -117 [ 197.427416][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 197.427427][ C0] EXT4-fs (loop7): initial error at time 197: ext4_orphan_get:1425 [ 197.427438][ C0] EXT4-fs (loop7): last error at time 197: ext4_orphan_get:1425 [ 197.441486][T12361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.448917][T12352] tipc: Disabling bearer [ 197.452337][T12368] loop4: detected capacity change from 0 to 512 [ 197.452701][T12368] ext4: Bad value for 'journal' [ 197.490360][ T8157] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: de:c5:f6:62:81:c5 [ 198.044052][T12361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 198.256587][T10364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.049633][ T8155] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: de:c5:f6:62:81:c5 [ 199.135149][ T4832] batman_adv: batadv0: Local translation table size (148) exceeds maximum packet size (-320); Ignoring new local tt entry: de:c5:f6:62:81:c5 [ 199.212897][T12406] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2387'. [ 199.228440][T12405] binder: 12404:12405 ioctl 4018620d 0 returned -22 [ 199.229864][T12405] binder: tried to use weak ref as strong ref [ 199.231114][T12405] binder: 12404:12405 Acquire 1 refcount change on invalid ref 0 ret -22 [ 199.232760][T12405] binder: 12404:12405 got transaction to invalid handle, 1 [ 199.237324][T12405] binder: 12404:12405 cannot find target node [ 199.305557][T12412] overlayfs: failed to resolve './file1': -2 [ 199.310672][T12411] loop0: detected capacity change from 0 to 4096 [ 199.315743][T12411] EXT4-fs: inline encryption not supported [ 199.321734][T12406] loop7: detected capacity change from 0 to 256 [ 199.323513][T12411] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 199.323536][T12411] EXT4-fs (loop0): Test dummy encryption mode enabled [ 199.335756][T12411] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 199.335839][T12411] System zones: 0-5 [ 199.344089][T12411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.392745][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.554297][T12429] syzkaller0: entered promiscuous mode [ 199.555458][T12429] syzkaller0: entered allmulticast mode [ 199.575495][T12429] tipc: Enabled bearer , priority 0 [ 199.579948][T12428] tipc: Resetting bearer [ 199.608295][T12428] tipc: Disabling bearer [ 199.625183][T12433] loop4: detected capacity change from 0 to 512 [ 199.633917][T12433] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 199.644557][T12433] EXT4-fs (loop4): 1 truncate cleaned up [ 199.645054][T12433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.686635][T12433] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 199.709893][T12433] team0: Port device macvlan9 added [ 199.723030][T12438] loop0: detected capacity change from 0 to 8 [ 199.725767][T12438] squashfs: Unknown parameter '0xffffffffffffffff00000000000000000000000' [ 199.738004][ T4832] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:a7:06:46:17:5a [ 199.765436][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.823228][T12441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.827867][T12441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.836447][T12446] Cannot find del_set index 4 as target [ 199.842543][T12441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.842747][T12441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.893196][T12447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.893401][T12447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.940724][T12452] loop0: detected capacity change from 0 to 512 [ 199.950443][T12452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 199.950506][T12452] System zones: 1-12 [ 199.955012][T12452] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2407: error while reading EA inode 32 err=-116 [ 199.958515][T12452] loop0: lost filesystem error report for type 5 error -117 [ 199.961822][T12452] EXT4-fs (loop0): Remounting filesystem read-only [ 199.961881][T12452] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 199.961948][T12452] EXT4-fs (loop0): 1 orphan inode deleted [ 199.962440][T12452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.970989][ T8155] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:a7:06:46:17:5a [ 200.035051][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.114051][T12459] ip_tables: iptables: counters copy to user failed while replacing table [ 200.184833][ T4472] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:a7:06:46:17:5a [ 200.209240][T12462] loop7: detected capacity change from 0 to 512 [ 200.226744][T12462] EXT4-fs (loop7): Test dummy encryption mode enabled [ 200.236525][T12462] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2411: inode has both inline data and extents flags [ 200.236555][T12462] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 200.239027][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 200.239042][ C0] EXT4-fs (loop7): initial error at time 200: ext4_orphan_get:1399: inode 15 [ 200.239065][ C0] EXT4-fs (loop7): last error at time 200: ext4_orphan_get:1399: inode 15 [ 200.248961][T12462] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2411: couldn't read orphan inode 15 (err -117) [ 200.248995][T12462] loop7: lost filesystem error report for type 5 error -117 [ 200.253946][T12462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.268713][T12462] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2411'. [ 201.360383][ T8157] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:a7:06:46:17:5a [ 201.369533][ T4472] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:a7:06:46:17:5a [ 202.334126][ T4472] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:a7:06:46:17:5a [ 202.334478][ T4832] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:a7:06:46:17:5a [ 203.489502][T10364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.579499][T12483] bridge0: port 3(syz_tun) entered blocking state [ 203.579546][T12483] bridge0: port 3(syz_tun) entered disabled state [ 203.579716][T12483] syz_tun: entered allmulticast mode [ 203.580314][T12483] syz_tun: entered promiscuous mode [ 203.580510][T12483] bridge0: port 3(syz_tun) entered blocking state [ 203.580539][T12483] bridge0: port 3(syz_tun) entered forwarding state [ 203.713500][T12483] bridge0: port 3(syz_tun) entered learning state [ 203.962184][T12493] loop3: detected capacity change from 0 to 512 [ 203.962611][T12493] ext4: Bad value for 'journal' [ 204.255850][T12505] bridge_slave_1: default FDB implementation only supports local addresses [ 204.264300][ T50] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 204.647763][T12513] loop3: detected capacity change from 0 to 256 [ 204.650718][T12513] vfat: Unknown parameter 'utf8R1' [ 205.229371][T12517] netlink: 'syz.3.2425': attribute type 25 has an invalid length. [ 205.263915][ T30] audit: type=1326 audit(205.230:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12533 comm="syz.0.2430" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9bb792a8 code=0x0 [ 205.592191][T12543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2432'. [ 206.074343][T12535] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 206.082964][T12546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 206.100463][T12546] batman_adv: batadv0: Adding interface: gretap1 [ 206.100492][T12546] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.100516][T12546] batman_adv: batadv0: Interface activated: gretap1 [ 206.100533][T12546] batadv0: mtu less than device minimum [ 206.102446][T12546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.104122][T12546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.105765][T12546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.107430][T12546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.109058][T12546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.110695][T12546] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 206.304983][T12555] loop4: detected capacity change from 0 to 2048 [ 206.377076][T12558] binder: BINDER_SET_CONTEXT_MGR already set [ 206.395994][T12564] binder: 12556:12564 ioctl c0306201 0 returned -14 [ 206.396061][T12558] binder: 12556:12558 ioctl 4018620d 20004a80 returned -16 [ 206.396301][T12558] binder_user_error: 4 callbacks suppressed [ 206.396314][T12558] binder: 12556:12558 got transaction to invalid handle, 1 [ 206.396329][T12558] binder_debug: 8 callbacks suppressed [ 206.396341][T12558] binder: 12556:12558 cannot find target node [ 206.396360][T12558] binder: 12556:12558 transaction call to 0:0 failed 111/29201/-22, code 0 size 72-24 line 3252 [ 206.396481][T12558] binder: 12556:12558 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 206.396496][T12558] binder: 12558 RLIMIT_NICE not set [ 207.193637][T12564] binder: 12556:12564 got transaction to invalid handle, 3 [ 207.193671][T12564] binder: 12556:12564 cannot find target node [ 207.193705][T12564] binder: 12556:12564 transaction call to 0:0 failed 112/29201/-22, code 0 size 0-0 line 3252 [ 207.193856][T12564] binder: 12556:12564 got transaction to invalid handle, 1 [ 207.193873][T12564] binder: 12556:12564 cannot find target node [ 207.193894][T12564] binder: 12556:12564 transaction call to 0:0 failed 113/29201/-22, code 0 size 0-0 line 3252 [ 207.194856][T12555] EXT4-fs warning (device loop4): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop4. [ 207.308788][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.308828][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.363992][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.433020][T12578] loop3: detected capacity change from 0 to 2048 [ 207.452261][T12570] loop7: detected capacity change from 0 to 8192 [ 207.490945][T12578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 207.516061][T12578] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.2445: inline data xattr refers to an external xattr inode [ 207.527760][T12578] EXT4-fs (loop3): Remounting filesystem read-only [ 207.578927][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 207.614092][T12590] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2450'. [ 207.615831][T12590] netlink: 292 bytes leftover after parsing attributes in process `syz.6.2450'. [ 207.645566][T12593] loop0: detected capacity change from 0 to 2049 [ 207.660114][T12595] FAULT_INJECTION: forcing a failure. [ 207.660114][T12595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.663496][T12595] CPU: 0 UID: 0 PID: 12595 Comm: syz.0.2452 Tainted: G L syzkaller #0 PREEMPT [ 207.663523][T12595] Tainted: [L]=SOFTLOCKUP [ 207.663530][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 207.663538][T12595] Call trace: [ 207.663541][T12595] show_stack+0x2c/0x3c (C) [ 207.663562][T12595] __dump_stack+0x30/0x40 [ 207.663573][T12595] dump_stack_lvl+0xd8/0x12c [ 207.663583][T12595] dump_stack+0x1c/0x28 [ 207.663593][T12595] should_fail_ex+0x41c/0x590 [ 207.663601][T12595] should_fail+0x14/0x24 [ 207.663607][T12595] should_fail_usercopy+0x20/0x30 [ 207.663615][T12595] simple_read_from_buffer+0xc4/0x238 [ 207.663625][T12595] proc_fail_nth_read+0x1a8/0x248 [ 207.663634][T12595] vfs_read+0x230/0x8c8 [ 207.663641][T12595] ksys_read+0x12c/0x228 [ 207.663648][T12595] __arm64_sys_read+0x84/0x98 [ 207.663655][T12595] invoke_syscall+0x98/0x244 [ 207.663665][T12595] el0_svc_common+0xec/0x23c [ 207.663675][T12595] do_el0_svc+0x4c/0x5c [ 207.663684][T12595] el0_svc+0x64/0x260 [ 207.663694][T12595] el0t_64_sync_handler+0x44/0x104 [ 207.663702][T12595] el0t_64_sync+0x198/0x19c [ 207.693349][T12593] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 207.693379][T12593] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 207.693417][T12593] loop0: [ 207.723287][ T4344] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 207.723316][ T4344] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 207.723352][ T4344] loop0: [ 207.746536][T12598] Option 'dnserror' to dns_resolver key: bad/missing value [ 207.779541][ T30] audit: type=1326 audit(207.740:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12597 comm="syz.6.2453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd792a8 code=0x7ffc0000 [ 207.779590][ T30] audit: type=1326 audit(207.740:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12597 comm="syz.6.2453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd792a8 code=0x7ffc0000 [ 207.779619][ T30] audit: type=1326 audit(207.740:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12597 comm="syz.6.2453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd792a8 code=0x7ffc0000 [ 207.779639][ T30] audit: type=1326 audit(207.740:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12597 comm="syz.6.2453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd792a8 code=0x7ffc0000 [ 207.779658][ T30] audit: type=1326 audit(207.740:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12597 comm="syz.6.2453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff8dd792a8 code=0x7ffc0000 [ 207.779676][ T30] audit: type=1326 audit(207.740:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12597 comm="syz.6.2453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd792a8 code=0x7ffc0000 [ 207.779695][ T30] audit: type=1326 audit(207.740:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12597 comm="syz.6.2453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd792a8 code=0x7ffc0000 [ 207.779712][ T30] audit: type=1326 audit(207.740:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12597 comm="syz.6.2453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd792a8 code=0x7ffc0000 [ 207.779729][ T30] audit: type=1326 audit(207.740:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12597 comm="syz.6.2453" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd792a8 code=0x7ffc0000 [ 207.836586][T12599] bridge3: entered promiscuous mode [ 207.836636][T12599] bridge3: entered allmulticast mode [ 207.868601][T12599] 9p: Bad value for 'wfdno' [ 208.016618][T12616] net_ratelimit: 13 callbacks suppressed [ 208.016665][T12616] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 208.056415][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 208.056454][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 208.058715][ T50] Bluetooth: hci3: hardware error 0x00 [ 208.071126][T12613] loop3: detected capacity change from 0 to 1024 [ 208.096162][T12613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.206874][ T4943] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 208.212189][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.984558][T12629] macvtap4: entered promiscuous mode [ 208.985946][T12629] macvtap4: entered allmulticast mode [ 209.362053][T12647] loop7: detected capacity change from 0 to 256 [ 209.378082][T12647] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.459610][T12653] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 209.459644][T12653] FAT-fs (loop7): Filesystem has been set read-only [ 209.459681][T12653] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 209.459720][T12653] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 209.459739][T12653] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 210.644824][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 212.236434][T12647] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 212.260776][T12647] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 212.261255][T12647] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 212.261284][T12647] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 212.261305][T12647] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 212.261327][T12647] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 212.261344][T12647] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 212.331335][T12673] syzkaller0: entered promiscuous mode [ 212.332603][T12673] syzkaller0: entered allmulticast mode [ 212.364946][T12673] tipc: Enabled bearer , priority 0 [ 212.401629][T12672] tipc: Resetting bearer [ 212.444851][T12672] tipc: Disabling bearer [ 212.493989][T12677] netlink: 'syz.7.2483': attribute type 10 has an invalid length. [ 212.494044][T12677] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 212.574518][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2484'. [ 213.074449][T12698] macvtap3: entered promiscuous mode [ 213.075687][T12698] macvtap3: entered allmulticast mode [ 213.120178][T12700] netlink: 13 bytes leftover after parsing attributes in process `syz.6.2493'. [ 213.141766][T12702] binder: 12701:12702 got transaction to invalid handle, 1 [ 213.141798][T12702] binder: 12701:12702 cannot find target node [ 213.141826][T12702] binder: 12701:12702 transaction call to 0:0 failed 117/29201/-22, code 0 size 72-24 line 3252 [ 213.147979][T12702] binder: 12701:12702 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 213.150666][T12702] binder: 12702 RLIMIT_NICE not set [ 213.200536][T12706] binder: 12701:12706 got transaction to invalid handle, 3 [ 213.200566][T12706] binder: 12701:12706 cannot find target node [ 213.208201][T12706] binder: 12701:12706 transaction call to 0:0 failed 118/29201/-22, code 0 size 0-0 line 3252 [ 213.212765][T12706] binder: 12701:12706 got transaction to invalid handle, 1 [ 213.212797][T12706] binder: 12701:12706 cannot find target node [ 213.212816][T12706] binder: 12701:12706 transaction call to 0:0 failed 119/29201/-22, code 0 size 0-0 line 3252 [ 213.968775][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.968817][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.994803][ T4472] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.061946][T12712] loop6: detected capacity change from 0 to 512 [ 214.063780][T12712] EXT4-fs: Ignoring removed i_version option [ 214.066709][T12712] EXT4-fs: Ignoring removed nobh option [ 214.070945][T12712] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 214.076513][T12704] Process accounting resumed [ 214.089588][T12712] EXT4-fs (loop6): 1 truncate cleaned up [ 214.091221][T12712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.134334][T12720] 9p: Bad value for 'rfdno' [ 214.134445][T12720] 9p: Bad value for 'rfdno' [ 214.134534][T12720] 9p: Bad value for 'rfdno' [ 214.134620][T12720] 9p: Bad value for 'rfdno' [ 214.134696][T12720] 9p: Bad value for 'rfdno' [ 214.134770][T12720] 9p: Bad value for 'rfdno' [ 214.134842][T12720] 9p: Bad value for 'rfdno' [ 214.134913][T12720] 9p: Bad value for 'rfdno' [ 214.134989][T12720] 9p: Bad value for 'rfdno' [ 214.135097][T12720] 9p: Bad value for 'rfdno' [ 214.135181][T12720] 9p: Bad value for 'rfdno' [ 214.135264][T12720] 9p: Bad value for 'rfdno' [ 214.135343][T12720] 9p: Bad value for 'rfdno' [ 214.135422][T12720] 9p: Bad value for 'rfdno' [ 214.135501][T12720] 9p: Bad value for 'rfdno' [ 214.135571][T12720] 9p: Bad value for 'rfdno' [ 214.135643][T12720] 9p: Bad value for 'rfdno' [ 214.135721][T12720] 9p: Bad value for 'rfdno' [ 214.135808][T12720] 9p: Bad value for 'rfdno' [ 214.135878][T12720] 9p: Bad value for 'rfdno' [ 214.135958][T12720] 9p: Bad value for 'rfdno' [ 214.136027][T12720] 9p: Bad value for 'rfdno' [ 214.136100][T12720] 9p: Bad value for 'rfdno' [ 214.136170][T12720] 9p: Bad value for 'rfdno' [ 214.136678][T12720] 9p: Bad value for 'rfdno' [ 214.136755][T12720] 9p: Bad value for 'rfdno' [ 214.136827][T12720] 9p: Bad value for 'rfdno' [ 214.214591][T12720] 9p: Bad value for 'rfdno' [ 214.214747][T12720] 9p: Bad value for 'rfdno' [ 214.214849][T12720] 9p: Bad value for 'rfdno' [ 214.214932][T12720] 9p: Bad value for 'rfdno' [ 214.215553][T12720] 9p: Bad value for 'rfdno' [ 214.215638][T12720] 9p: Bad value for 'rfdno' [ 214.215711][T12720] 9p: Bad value for 'rfdno' [ 214.215793][T12720] 9p: Bad value for 'rfdno' [ 214.215865][T12720] 9p: Bad value for 'rfdno' [ 214.215938][T12720] 9p: Bad value for 'rfdno' [ 214.216016][T12720] 9p: Bad value for 'rfdno' [ 214.216090][T12720] 9p: Bad value for 'rfdno' [ 214.216168][T12720] 9p: Bad value for 'rfdno' [ 214.216245][T12720] 9p: Bad value for 'rfdno' [ 214.235754][T12720] 9p: Bad value for 'rfdno' [ 214.235905][T12720] 9p: Bad value for 'rfdno' [ 214.236003][T12720] 9p: Bad value for 'rfdno' [ 214.236095][T12720] 9p: Bad value for 'rfdno' [ 214.236174][T12720] 9p: Bad value for 'rfdno' [ 214.236263][T12720] 9p: Bad value for 'rfdno' [ 214.236349][T12720] 9p: Bad value for 'rfdno' [ 214.236437][T12720] 9p: Bad value for 'rfdno' [ 214.236519][T12720] 9p: Bad value for 'rfdno' [ 214.236598][T12720] 9p: Bad value for 'rfdno' [ 214.236669][T12720] 9p: Bad value for 'rfdno' [ 214.236750][T12720] 9p: Bad value for 'rfdno' [ 214.236821][T12720] 9p: Bad value for 'rfdno' [ 214.268156][T12720] 9p: Bad value for 'rfdno' [ 214.268393][T12720] 9p: Bad value for 'rfdno' [ 214.268493][T12720] 9p: Bad value for 'rfdno' [ 214.268665][T12720] 9p: Bad value for 'rfdno' [ 214.268757][T12720] 9p: Bad value for 'rfdno' [ 214.268921][T12720] 9p: Bad value for 'rfdno' [ 214.269007][T12720] 9p: Bad value for 'rfdno' [ 214.269283][T12720] 9p: Bad value for 'rfdno' [ 214.269539][T12720] 9p: Bad value for 'rfdno' [ 214.269744][T12720] 9p: Bad value for 'rfdno' [ 214.269880][T12720] 9p: Bad value for 'rfdno' [ 215.229550][T12726] loop7: detected capacity change from 0 to 8192 [ 215.279990][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.365674][T12738] loop3: detected capacity change from 0 to 4096 [ 215.390282][T12738] EXT4-fs: inline encryption not supported [ 215.391864][T12738] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 215.393472][T12738] EXT4-fs (loop3): Test dummy encryption mode enabled [ 215.410122][T12738] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 215.410193][T12738] System zones: 0-5 [ 215.426695][T12741] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2507'. [ 215.431042][T12743] loop4: detected capacity change from 0 to 512 [ 215.437086][T12743] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 215.454946][T12743] EXT4-fs (loop4): 1 truncate cleaned up [ 215.456622][T12743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.464094][T12738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.527806][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2508'. [ 215.528532][T12746] bridge0: port 3(syz_tun) entered disabled state [ 215.528637][T12746] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.529586][T12746] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.596338][T12743] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 215.612450][T12743] team0: Port device macvlan10 added [ 215.637152][ T10] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:64:30:54:46:50 [ 215.649055][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.828627][T12758] netlink: 'syz.3.2515': attribute type 25 has an invalid length. [ 215.832429][T12757] syzkaller0: entered promiscuous mode [ 215.833584][T12757] syzkaller0: entered allmulticast mode [ 216.735513][ T10] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:64:30:54:46:50 [ 216.760241][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.826487][T12761] tipc: Enabled bearer , priority 0 [ 216.865230][T12756] tipc: Resetting bearer [ 216.876193][T12768] binder: 12764:12768 got transaction to invalid handle, 1 [ 216.878596][T12768] binder: 12764:12768 cannot find target node [ 216.882409][T12768] binder: 12764:12768 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 216.888729][T12768] binder: 12768 RLIMIT_NICE not set [ 216.941024][T12778] binder: 12764:12778 got transaction to invalid handle, 3 [ 216.941245][T12778] binder: 12764:12778 got transaction to invalid handle, 1 [ 216.968118][T12756] tipc: Disabling bearer [ 217.001510][ T8157] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:64:30:54:46:50 [ 217.032308][ T10] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:64:30:54:46:50 [ 217.048273][T12783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2522'. [ 217.217127][ T10] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:64:30:54:46:50 [ 217.263904][T12794] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 217.433288][T12808] loop6: detected capacity change from 0 to 1024 [ 217.435005][T12808] EXT4-fs: Ignoring removed orlov option [ 217.437040][T12808] EXT4-fs: Ignoring removed bh option [ 217.443102][T12808] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 217.610992][T12813] loop7: detected capacity change from 0 to 256 [ 217.828402][T12825] overlayfs: invalid origin (0000007900abcdb530b03ab6bfc5410e39c985f26329b489bbb0547f16a06b2c99e6d4b985237d45f9210a8baf6303e97c6e4aad4b56b213a7f01b118620c0a8) [ 217.939885][T12825] netlink: 532 bytes leftover after parsing attributes in process `syz.7.2536'. [ 218.792578][T12843] loop4: detected capacity change from 0 to 512 [ 218.835043][ T8157] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:64:30:54:46:50 [ 218.910977][T12846] loop0: detected capacity change from 0 to 2049 [ 218.926840][T12848] Bluetooth: hci0: unsupported parameter 5135 [ 218.929253][T12846] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 218.929267][T12846] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 218.929287][T12846] loop0: [ 218.937081][ T9] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 42:64:30:54:46:50 [ 218.941292][T12848] Bluetooth: hci0: unsupported parameter 8192 [ 218.941328][T12848] Bluetooth: hci0: unsupported parameter 5135 [ 218.941348][T12848] Bluetooth: hci0: unsupported parameter 8192 [ 219.039539][T12856] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2547'. [ 219.264379][T12862] binder: BINDER_SET_CONTEXT_MGR already set [ 219.264404][T12862] binder: 12859:12862 ioctl 4018620d 20004a80 returned -16 [ 219.269037][T12862] binder: tried to use weak ref as strong ref [ 219.270326][T12862] binder: 12859:12862 Acquire 1 refcount change on invalid ref 0 ret -22 [ 219.279141][T12862] binder: 12859:12862 ioctl c0306201 0 returned -14 [ 219.279300][T12862] binder: 12859:12862 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 219.279327][T12862] binder: 12862 RLIMIT_NICE not set [ 219.460175][T12868] binder: 12859:12868 got transaction to invalid handle, 3 [ 219.460209][T12868] binder_debug: 8 callbacks suppressed [ 219.460236][T12868] binder: 12859:12868 cannot find target node [ 219.460257][T12868] binder: 12859:12868 transaction call to 0:0 failed 128/29201/-22, code 0 size 0-0 line 3252 [ 219.460402][T12868] binder: 12859:12868 got transaction to invalid handle, 1 [ 219.460419][T12868] binder: 12859:12868 cannot find target node [ 219.460437][T12868] binder: 12859:12868 transaction call to 0:0 failed 129/29201/-22, code 0 size 0-0 line 3252 [ 219.595673][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2552'. [ 219.708235][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2553'. [ 219.834870][T12882] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2556'. [ 219.958262][T12887] loop6: detected capacity change from 0 to 512 [ 219.977658][T12887] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 219.977684][T12887] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 219.977800][T12887] EXT4-fs (loop6): orphan cleanup on readonly fs [ 219.986421][T12887] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2557: bg 0: block 15: invalid block bitmap [ 219.986458][T12887] loop6: lost filesystem error report for type 5 error -117 [ 219.988904][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 219.988919][ C0] EXT4-fs (loop6): initial error at time 219: ext4_validate_block_bitmap:432 [ 219.988931][ C0] EXT4-fs (loop6): last error at time 219: ext4_validate_block_bitmap:432 [ 219.997648][ T4832] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.998934][T12887] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 220.001795][T12887] loop6: lost filesystem error report for type 5 error -117 [ 220.008414][T12887] EXT4-fs (loop6): 1 truncate cleaned up [ 220.008901][T12887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 220.024921][T12887] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.2557: bad symlink. [ 220.031143][T12892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2560'. [ 220.046339][ T4832] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.173308][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2563'. [ 220.193523][ T8149] IPv6: BUG: Address 2001::1 on device lo is missing its host route. [ 221.406171][T12909] loop3: detected capacity change from 0 to 512 [ 221.406603][T12909] ext4: Bad value for 'journal' [ 221.482510][ T9913] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.522763][ T8156] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.580633][ T8156] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.622943][ T8156] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.660741][ T8156] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.723897][ T8156] BUG: MAX_LOCKDEP_CHAINS too low! [ 221.724814][ T8156] turning off the locking correctness validator. [ 221.725928][ T8156] CPU: 0 UID: 0 PID: 8156 Comm: kworker/u8:30 Tainted: G L syzkaller #0 PREEMPT [ 221.727839][ T8156] Tainted: [L]=SOFTLOCKUP [ 221.728610][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 221.730373][ T8156] Workqueue: netns cleanup_net [ 221.731202][ T8156] Call trace: [ 221.731776][ T8156] show_stack+0x2c/0x3c (C) [ 221.732516][ T8156] __dump_stack+0x30/0x40 [ 221.733232][ T8156] dump_stack_lvl+0xd8/0x12c [ 221.734022][ T8156] dump_stack+0x1c/0x28 [ 221.734868][ T8156] __lock_acquire+0xfdc/0x2ebc [ 221.735828][ T8156] lock_acquire+0x140/0x364 [ 221.736571][ T8156] _raw_spin_lock_irqsave+0x5c/0x7c [ 221.737384][ T8156] try_to_wake_up+0x68/0xdc4 [ 221.738150][ T8156] wake_up_q+0x84/0x114 [ 221.738840][ T8156] rwsem_wake+0xe8/0x138 [ 221.739564][ T8156] up_write+0x5d0/0x5d4 [ 221.740332][ T8156] kernfs_add_one+0x24c/0x398 [ 221.741074][ T8156] __kernfs_create_file+0x224/0x2e0 [ 221.741914][ T8156] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 221.742810][ T8156] sysfs_merge_group+0x164/0x2ac [ 221.743657][ T8156] dpm_sysfs_add+0xc8/0x258 [ 221.744435][ T8156] device_add+0x468/0x9e0 [ 221.745152][ T8156] netdev_register_kobject+0x184/0x328 [ 221.746043][ T8156] register_netdevice+0xd74/0x14c0 [ 221.746889][ T8156] nsim_create+0x944/0xcf4 [ 221.747629][ T8156] __nsim_dev_port_add+0x59c/0x95c [ 221.748469][ T8156] nsim_dev_port_add_all+0x50/0x114 [ 221.749343][ T8156] nsim_dev_reload_up+0x3cc/0x5b4 [ 221.750166][ T8156] devlink_reload+0x3b0/0x64c [ 221.750950][ T8156] devlink_pernet_pre_exit+0x1ac/0x30c [ 221.751853][ T8156] ops_undo_list+0x158/0x81c [ 221.752667][ T8156] cleanup_net+0x474/0x6c4 [ 221.753386][ T8156] process_scheduled_works+0x788/0x10b8 [ 221.754260][ T8156] worker_thread+0x798/0xbd0 [ 221.755002][ T8156] kthread+0x304/0x3d4 [ 221.755635][ T8156] ret_from_fork+0x10/0x20 [ 221.807124][ T12] netdevsim netdevsim6 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.833778][ T8156] bridge_slave_1: left allmulticast mode [ 221.834958][ T8156] bridge_slave_1: left promiscuous mode [ 221.836303][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.839400][ T8156] bridge_slave_0: left allmulticast mode [ 221.841648][ T8156] bridge_slave_0: left promiscuous mode [ 221.842975][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.858445][ T8156] batman_adv: batadv0: Interface deactivated: gretap1 [ 222.015878][ T8156] batman_adv: batadv0: Removing interface: gretap1 [ 222.078437][ T8156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.081188][ T8156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.083711][ T8156] bond0 (unregistering): Released all slaves [ 222.087711][ T8149] netdevsim netdevsim6 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.093192][ T8156] tipc: Left network mode [ 222.100128][ T5174] netdevsim netdevsim6 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.100196][ T5174] netdevsim netdevsim6 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.192871][ T8156] hsr_slave_0: left promiscuous mode [ 222.194145][ T8156] hsr_slave_1: left promiscuous mode [ 222.195510][ T8156] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.199898][ T8156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.202000][ T8156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.202025][ T8156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.206566][ T8156] batadv0: left promiscuous mode [ 222.207966][ T8156] dummy0: left allmulticast mode [ 222.208031][ T8156] veth1_macvtap: left promiscuous mode [ 222.217073][ T8156] veth0_macvtap: left promiscuous mode [ 222.217126][ T8156] veth1_vlan: left promiscuous mode [ 222.217166][ T8156] veth0_vlan: left promiscuous mode [ 222.273921][ T8156] team0 (unregistering): Port device macvlan2 removed [ 222.357365][ T8156] team0 (unregistering): Port device team_slave_1 removed [ 222.369644][ T8156] team0 (unregistering): Port device team_slave_0 removed [ 222.438995][ T4399] 8021q: adding VLAN 0 to HW filter on device eth8 [ 222.707987][ T4399] 8021q: adding VLAN 0 to HW filter on device eth9 [ 222.918006][ T4399] 8021q: adding VLAN 0 to HW filter on device eth10 [ 223.127983][ T4399] 8021q: adding VLAN 0 to HW filter on device eth11