last executing test programs: 3m30.163766928s ago: executing program 4 (id=549): openat(0xffffffffffffff9c, 0x0, 0xb88c0, 0x104) 3m30.139285458s ago: executing program 4 (id=550): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x200040c5) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x200, 0x70bd27, 0x7, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40090}, 0xc0c0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x54, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x2a, 0x1, "19c7971770453973daa3f1be86fd7774cf50144f04d841499739e56763d64f459c903b50e237"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}, {0x14, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x10, 0x1, "619ffe9a856b28ce7187be3a"}}]}]}, 0x74}}, 0x8804) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xcd1269749459b010}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x374, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x99, 0x3, "881ee9df6db5d677c9e75deb34c4f8fa74e0eaa22026fdb0a7f7cc0cb4828afdd0d0f4f7789e222684d7a3b50bc52aab0b3555bbe0714aca0543902d8c021bc1d719334b7a99663381edceeff86c2c306ed124c9dd809643d16d2575ee892578d6aa7441058205c99c78ed80d8c62713785b334960f1c5b0bb084fb81db860953b56819478761c62e0d4b53c4575768ee462443fad"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "ac5855459bb909385bd87b4e51b0edd4882d08830255f7af5c"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x319}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x35}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbb8d}]}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @private0, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x800, @remote, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x374}, 0x1, 0x0, 0x0, 0x44}, 0x4000080) (async) nanosleep(&(0x7f0000000800)={0x77359400}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup/syz0\x00', 0x1ff) sysinfo(&(0x7f00000008c0)=""/250) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) rt_sigtimedwait(&(0x7f0000000a00)={[0x404000000000]}, &(0x7f0000000a40), &(0x7f0000000ac0)={0x0, 0x3938700}, 0x8) rt_sigprocmask(0x0, &(0x7f0000000b00)={[0x4]}, &(0x7f0000000b40), 0x8) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20810080}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x89}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf7}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r4 = mq_open(&(0x7f0000000d00)='syz0\x00', 0x1, 0x8, &(0x7f0000000d40)={0x8, 0xf, 0x0, 0x101}) mq_timedreceive(r4, &(0x7f0000000d80)=""/84, 0x54, 0x4, &(0x7f0000000e00)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e40)={'vlan0\x00', 0x100}) (async) sysinfo(&(0x7f0000000e80)=""/173) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000f40)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000f80)={r5, 0x2}) r6 = syz_clone(0x390200, &(0x7f0000000fc0)="4bfe8d2fea52167576209c5777eac82ca9de7f36ee65206af493f5a6858f3c16e7ca7e59b7c875c00b7148d1ae6411327571fd6197ca224717158b08fbb9bfb209a1a222917fb1fa97f590b787311811adc1cb92954e68173dac591a803dc3e54c1f28feca3a752cbe89c6013b19d4537743a9c2865bbd12625ff13bfcd616597246fb47854f9e390c31856ed41314e4843e9d03e601de60c595f982a07c3a2e31ac6e161b8007949b3df6567ea1b6b3d243a19a", 0xb4, &(0x7f0000001080), &(0x7f00000010c0), &(0x7f0000001100)="6f08797660dc4b459db2845e3d010d9d541e20f22b387077f68fe02ea29ab2092b586ccb906583f035fa7eb2339f11fc52a686c62af48225fa3ea0813e96f9be5967f1") ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x8, &(0x7f0000001180)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x80000, 0x110) mkdirat(r7, &(0x7f0000001200)='./file0\x00', 0x14) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001240)={0x0, 0x40, 0x6f55, 0x0, 0x2, 0x401, 0xa3a, 0x5, {0x0, @in6={{0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x42}, 0x9}}, 0x101, 0x40, 0x6, 0x2, 0x1}}, &(0x7f0000001300)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000001340)={r9, 0x5, 0x4, [0x8, 0xf1, 0x2, 0x200]}, &(0x7f0000001380)=0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001780)=@newtfilter={0x590, 0x2c, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xfff3}, {0x5, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x48, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xffe0}}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xfff3}}, @TCA_FW_MASK={0x8, 0x5, 0x9}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x8}}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x8}}, @TCA_FW_CLASSID={0x8, 0x1, {0x6}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x50c, 0x2, [@TCA_BPF_ACT={0xb0, 0x1, [@m_simple={0xac, 0x15, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, 'udp:syz2\x00'}]}, {0x6d, 0x6, "ebfbb7657923a464109ff72bed5b300d782a9186101d2dffbcd6dec01d29cd863fa6c817d00834af8a1d1db3fde19cfc0d892a46e6afa85d60878a04ad5e1057c247370019025d6ccd006283e8e3024a22d0e51b0caee582c53157b8d4be9e3e973d7e81b8377d6c31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x1000, 0x9, 0x6, 0xb662, 0x4, 0x7, 0x0, 0x9, 0x5, 0x7, 0x81, 0x7ab, 0x5, 0xffffff35, 0x99, 0x0, 0x40, 0x6, 0x1000, 0x3, 0xfffffff9, 0x71, 0x101, 0xa1, 0x3, 0x2b1a8f4d, 0xffffffff, 0x1, 0x8000, 0x5, 0x80000000, 0x1000, 0x77ea, 0x0, 0x4, 0x5, 0x6, 0x2, 0x6, 0x10, 0x100, 0x6, 0x8, 0xf, 0x1, 0x55f, 0x2, 0x5, 0x11, 0x7ff, 0x40, 0x2, 0x80, 0x6, 0xfffffff7, 0x4, 0xc00000, 0xa1, 0x0, 0x6, 0x4, 0x7ff, 0x8001, 0x9, 0x800, 0x48, 0x401, 0x1, 0x3, 0x3, 0x3, 0x43, 0x10000, 0x7, 0x0, 0xf95b, 0xc9, 0x9, 0x8, 0xc, 0x10000, 0x4, 0xffffffff, 0x5, 0x5, 0x2, 0x94fa, 0x8, 0x9, 0x3, 0xfffffffd, 0x101, 0x3b, 0x1, 0x3ff, 0x7, 0x400, 0xf, 0x2, 0x9, 0xfffffffc, 0x8001, 0x7, 0xfff, 0x4, 0x3ff, 0x9, 0xffff, 0x1, 0xc, 0x7fff, 0xa7, 0x101, 0x0, 0xfd1, 0x7fff, 0x6, 0x2, 0x386261d7, 0x7, 0x7fff, 0xb2, 0x5, 0x6, 0x6, 0x5, 0xe66, 0x4, 0xa, 0x4, 0x0, 0x2, 0x8, 0x2, 0x8, 0x7, 0xd5, 0x0, 0x2, 0x8, 0x1, 0x6, 0x800, 0x9, 0x0, 0x80, 0xffffffff, 0x5, 0x1, 0x1, 0x7, 0x8000, 0x5, 0x4, 0xfaf, 0xe2, 0x0, 0xffff, 0x5, 0x100, 0x124, 0x7, 0x10001, 0x6a349756, 0x6, 0xb, 0x4, 0x6, 0xf, 0x9, 0x100, 0xb, 0x8000, 0x5, 0x1b, 0x100, 0x3f58, 0xa, 0x2a68974a, 0x8000, 0x1, 0xa00, 0x6f9, 0xb50, 0x1, 0x9b1, 0x6, 0x7, 0x40, 0xdb, 0x5, 0xf, 0x2, 0x200, 0x6, 0x1, 0x4, 0x1, 0x2, 0xd, 0x2, 0x6, 0xf6, 0xd61, 0x2, 0xe92b, 0x3, 0x1, 0x800, 0x7, 0x400000, 0x2470, 0x2, 0x7fffffff, 0x3, 0x8, 0x0, 0x5, 0x7, 0x80000001, 0x6, 0x0, 0x8000, 0x885, 0x3, 0x8, 0x5, 0x0, 0x5, 0xa8c, 0x60d, 0x0, 0x4, 0xc74, 0x81, 0x5, 0x463a, 0x8, 0x8, 0x200, 0x1, 0xffffffff, 0xa, 0xf3, 0xa, 0x7, 0xac, 0x7, 0x613944cf, 0x7, 0xe, 0x3, 0xa75f, 0x6]}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x2, 0x10, 0x45, 0xfffffffc}, {0x87, 0x3, 0x5, 0x81}, {0xb6, 0x1, 0xb0, 0x4}, {0x3, 0x7, 0x3, 0xc2}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x590}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 3m30.040967419s ago: executing program 4 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 3m29.05822964s ago: executing program 4 (id=574): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) (async) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m28.816028607s ago: executing program 4 (id=578): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) r4 = fsmount(r1, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 3m28.565670289s ago: executing program 4 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 3m28.522793514s ago: executing program 32 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) 1m51.025665407s ago: executing program 3 (id=1285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$unix(0x1, 0x2, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x400002, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000040)=0x80000000, 0x4) sendto$unix(r1, 0x0, 0x0, 0x4000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/mcfilter\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x1000000000000010, 0x4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@deltaction={0x38, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20048840) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='bpf\x00', 0x1214040, 0x0) 1m49.815316742s ago: executing program 3 (id=1289): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000003c0)={{0x6, 0x2}, 0x100, './file2\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), 0x0}, 0x20) r3 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x2) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x6}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1m48.522058989s ago: executing program 3 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10f) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0x20642, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000100), 0x12) listen(r4, 0x1) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="00f307050000010b665f3671d27798d458f54bd3b584fd982e3345d50cdaa3fb93fbec2a2720dd78df2cc7f8e15784e4f3c7d79737d0c7da4898acc449d9b82a7acc2236c306f76964c06fc76a892011f7ad360f41d16b36b7ebcf3e0df793acb30066dcf6bb5135562a300c714fc3305b3d723f0d61a758797b7c157391c6", @ANYRESOCT=r1], 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0xffffffffffffffdf, 0x408c841) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) 1m45.97766825s ago: executing program 3 (id=1304): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) chdir(&(0x7f0000000380)='./file0\x00') chdir(&(0x7f0000000280)='./file1\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) r2 = fsmount(r0, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 1m45.865612827s ago: executing program 3 (id=1307): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x4, &(0x7f0000000180)=[{0xfffb, 0xe, 0x0, 0xf801}, {0x9, 0x6, 0xf4}, {0x8, 0x21, 0x17, 0xbfffffff}, {0x5, 0x2, 0xf8, 0x8000}]}) lsm_list_modules(0x0, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf250100060b050002000a00000a06000a004e220000140009"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x10, 0x3a, '\\:\x00'/12, 0x3a, '^%-\xd6}[)#[)\x95[', 0x3a, './file0'}, 0x3f) r4 = socket(0x2, 0x1, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x7ff, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000001000000073119f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) 1m45.357643654s ago: executing program 3 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f020000697200"], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x80000, &(0x7f0000004840)={[{@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@journal_dev={'journal_dev', 0x3d, 0xffffffff}}, {@nojournal_checksum}, {@sb={'sb', 0x3d, 0xfff}}, {@data_err_abort}, {@dax}, {@auto_da_alloc}], [{@appraise}, {@fowner_gt={'fowner>', r3}}]}, 0x1, 0x27b, &(0x7f0000000bc0)="$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") syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r4, 0x8000000) listns(&(0x7f0000000b80)={0x20, 0x0, 0xffffffffffffffff, 0x20000}, 0x0, 0xa00, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r5, 0x403, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) 1m45.276490462s ago: executing program 33 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001c00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f020000697200"], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x80000, &(0x7f0000004840)={[{@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@journal_dev={'journal_dev', 0x3d, 0xffffffff}}, {@nojournal_checksum}, {@sb={'sb', 0x3d, 0xfff}}, {@data_err_abort}, {@dax}, {@auto_da_alloc}], [{@appraise}, {@fowner_gt={'fowner>', r3}}]}, 0x1, 0x27b, &(0x7f0000000bc0)="$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") syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r4, 0x8000000) listns(&(0x7f0000000b80)={0x20, 0x0, 0xffffffffffffffff, 0x20000}, 0x0, 0xa00, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) fcntl$setlease(r5, 0x403, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) 1m36.593584579s ago: executing program 1 (id=1401): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400f0ff1c00010028bd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="8000260b0a00020001000000000000000c000e8007000100"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 1m36.44170664s ago: executing program 1 (id=1403): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010002191b45238000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020000000000000000000071180f000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m36.441476434s ago: executing program 1 (id=1404): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7, 0x3ba0}}, './file0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000440)={&(0x7f0000000240)=""/236, 0xec, 0x0, &(0x7f0000000340)=""/195, 0xc3}}, 0x10) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800c62a9d5a"], 0x1c}], 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x16}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x440c0) 1m36.405405852s ago: executing program 1 (id=1405): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000b40)={0xffff, {{0x2, 0x4e24, @broadcast}}}, 0xfffffffffffffea3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='te', 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0x6, 0x9, 0xfffffff0, 0x9}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1', 0x1) sendmsg$NFT_BATCH(r4, 0x0, 0x4014) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r6, 0xff, 0xfff, &(0x7f0000000640)="5cb80adb", 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x42040, 0x0) 1m36.156226047s ago: executing program 1 (id=1414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r3 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) writev(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, 0x0, 0x4c000) 1m34.21762966s ago: executing program 1 (id=1425): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2800000, &(0x7f00000007c0)={[{@debug}, {@dioread_nolock}, {@nombcache}, {@test_dummy_encryption}, {@nobarrier}, {}, {@delalloc}, {@jqfmt_vfsv0}, {@block_validity}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aGQXAMW8soIrX8gKTiSBVkl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDkqVd/bBWGln+fOBp3ps3M+/71Ug778HuBvDMGsh+pBFHI+JSElGo708jorta642o1I5bmJ8d+WF+diSJxcXnvk0iiYhH87MjjWsl9e2heqM3Ij77dxK/fXXtuJPTM+PD5XJpot4+OXX1xsnJ6Zm/jV0dvlK6Urp26sw/hk4PnRk8O9S2XH/86vzd7//0368rP7338+3v3ngnifPRV+9bmUc9620biIGl38lKnREx3Ibr7wUd9XxW5pl0bnBSusNBAQDQUrpiDvf7KERHLE/eCvHx57kGBwAAALTFYkfEIgAAALDPJdb/AAAAsM813gfwaH52pFHyfUfC7np4ISL6a/kv1EutpzMq1W1vdEXEwUdJrPxYa1I7bdsGIuLBl2c/zEo0+RzyTqvMRcQfmt3/pJp/f/2T0KvzTyNisA3jD6xqP035n2/D+HnnD8Cz6d6F2oNs7fMvXZr/RJPnX2eTZ9eTyPv515j/LayZ/y3n39Fi/vf/TY5x6923brbqy/L/593/fNAo2fjZdltJbcHDuYg/djbLP1nKP2mR/6UNrp1E7RKFX26WWh2Td/6Lb0ccj+b5NyTrfz/RydGxcmmw9rPpGHOfDr3favy888/u/8EW+a9z/3uzfTceu1LrL/V54eLFO636Ns4//aY7eb5a667veWl4amriVER38r+1+0+vn2/jmMY10rmIE39e//+/2d9/9ppQqf9tZJnP1bdZ+5VVY/7r9q2P1ss/W/vlef8vb/3+V/e9tskx/vLJ6yda9a1c/2YlG/9BUlsLN3F404kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsK+kEdEXSVqMiKRaT9NiMeJQRPwuDqbl65NTfx29/uK1y1lfRH90paNj5dJgRBRq7SRrn6rWl9unV7X/HhFHIuLNwoFquzhyvXw57+QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYcigi+iJJixGRRsRCIU2LxbyjAgAAANquP+8AAAAAgB1n/Q8AAAD7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zIsXv3k4ionDtQLZnuel9XrpEBOy3NOwAgNx15BwDkpjPvAIDcbHGNb7oA+1CyQX9vy56etscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN51/Oi9+0lEVM4dqJZMd72vq+kZx3YxOmAnpXkHAOSmY73Ozt2LA9h9T/wvfri9cQC7r/kaH3iWJBv09y4fU3m8p2ftwesuKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mvVVS5IWIyKt1tO0WIw4HBH90ZWMjpVLgxHxm4j4otDVk7V78g4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtpucnhkfLpdLE09SSbZ3erNKJdp8QZWnsvLy3ghjdyvJ3gijVsn7lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDxMTs+MD5fLpYnJvCMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jY5PTM+XC6XJjZRubOVg1dU8s4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BoAAP//YD0Mhw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r0, 0x10, 0x2000, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='d', 0x1}], 0x1, 0x25405, 0x0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d3942, 0x9) io_setup(0x20fe, &(0x7f0000000540)=0x0) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) io_submit(r3, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x1f00, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)='p', 0x8200, 0x600}]) 1m34.079400697s ago: executing program 34 (id=1425): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2800000, &(0x7f00000007c0)={[{@debug}, {@dioread_nolock}, {@nombcache}, {@test_dummy_encryption}, {@nobarrier}, {}, {@delalloc}, {@jqfmt_vfsv0}, {@block_validity}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r0, 0x10, 0x2000, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='d', 0x1}], 0x1, 0x25405, 0x0, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1d3942, 0x9) io_setup(0x20fe, &(0x7f0000000540)=0x0) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) io_submit(r3, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x1f00, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)='p', 0x8200, 0x600}]) 1m20.889073729s ago: executing program 0 (id=1542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, 0x0}, 0x0) 1m20.697205708s ago: executing program 0 (id=1546): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = getpid() syz_clone3(&(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r1, r1], 0x2}, 0x58) 1m20.629988137s ago: executing program 0 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)={0x68, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x50, 0x1, 0x0, 0x1, [@nested={0x4c, 0x10, 0x0, 0x1, [@nested={0x48, 0x13c, 0x0, 0x1, [@nested={0x4, 0x16a}, @nested={0x40, 0x136, 0x0, 0x1, [@generic="25cf096befb35c472c4fd6b2ed6a5d0788222f96ed08192e5eb3d8ff8150bd9bfb116e6f66bb52a2c60e4deba815cc331b4665af0d5c6dee", @nested={0x4, 0xc3}]}]}]}]}]}, 0x68}, 0x1, 0xfc, 0x0, 0x4084085}, 0x4008094) 1m20.573588045s ago: executing program 0 (id=1550): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) r3 = fsmount(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000001}}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000080)={0x14, 0x17, 0x2, {0xb, './bus/file0'}}, 0x14) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 1m20.371061089s ago: executing program 0 (id=1554): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000b40)={0x1ff, {{0x2, 0x4e24, @private=0xa010101}}}, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000), 0x4800, &(0x7f0000000380)={[{@size={'size', 0x3d, [0x36, 0x32, 0x45]}}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000100001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1a5000001240400140003006e657464657673696d300000000000001e0016061200018018000c80140001004000000083080000000000008100000008000d0023000008"], 0x5c}}, 0x4000844) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x1060, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec00000021000100fefffffffedbdf25fc020000000000000000000000000005ac14141d00000000000000000000000000000000000000000a0000002e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bd6b6e00000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000001fc0000000000000000000000000000013c040000013500000a0002000a0101010000000000000000000000007f000001000000000000000000000000ac141438000000000000000000000000000000000000000000000000000000013c0400000135"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) write(r1, &(0x7f0000000100)='te', 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0x3) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) 1m19.657635245s ago: executing program 0 (id=1562): socket$key(0xf, 0x3, 0x2) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 1m19.575223044s ago: executing program 35 (id=1562): socket$key(0xf, 0x3, 0x2) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 4.941667519s ago: executing program 6 (id=1882): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000711806000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.941506446s ago: executing program 6 (id=1883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c", 0x29}, {&(0x7f0000000380)='\vu!', 0x3}], 0x2}, 0x30008b08) 4.883411424s ago: executing program 6 (id=1889): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) epoll_create1(0x0) memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6e2) 4.82987482s ago: executing program 6 (id=1891): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 4.769436692s ago: executing program 6 (id=1895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 3.04131134s ago: executing program 6 (id=1921): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0xa, 0x8}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.024394632s ago: executing program 36 (id=1921): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x4, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0xa, 0x8}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.133638593s ago: executing program 7 (id=1965): r0 = socket$inet6(0xa, 0x3, 0x100) connect$inet6(r0, &(0x7f0000000980)={0xa, 0x2, 0x6, @mcast2, 0x6}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.080474531s ago: executing program 7 (id=1967): io_setup(0x9, &(0x7f0000000000)) 1.013509802s ago: executing program 2 (id=1970): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {0xd, 0x8, 0x5, 0x2}, 0x3b, [0x4, 0x6, 0x8, 0x6, 0x7, 0x1, 0x6, 0x10000, 0x726, 0x4, 0x8, 0x5, 0x8d, 0x6, 0x8000, 0x200, 0x7ff, 0x9, 0x5, 0x7, 0xab47, 0x81, 0x2e, 0x3, 0x7, 0x6, 0x4, 0x1000, 0x9, 0x5, 0x83, 0xde, 0x5, 0x74, 0x3ff, 0x1, 0xd, 0x0, 0x1741, 0x800, 0x0, 0x80000000, 0x3ff, 0x5, 0x3932, 0x63, 0x2, 0x5, 0x1, 0x24, 0xfff, 0x8, 0xffff, 0x2, 0xc80, 0x5, 0x0, 0x5, 0x4, 0x5b1, 0xffffffff, 0x2, 0x2, 0x10], [0xcd, 0xffffffff, 0x0, 0x8ed, 0xffffff70, 0x401, 0x3, 0x0, 0xa, 0x9, 0xe08d, 0x743, 0x5, 0x5, 0x3, 0x2, 0xf5, 0x3, 0x7, 0x2, 0x0, 0x4, 0x1, 0x4, 0x6, 0x2, 0x16, 0x546b433e, 0x9, 0x6, 0xe, 0x8, 0xe, 0x6, 0x2, 0x9, 0x1, 0x5, 0x5, 0xf, 0x6, 0x2, 0x40, 0x0, 0x3b50, 0xc89b, 0xd, 0xfffffff7, 0x8, 0x1, 0x5, 0x2, 0x7, 0x89, 0x2, 0xfffffffd, 0x0, 0xfbf, 0x5, 0xfffffffd, 0x2, 0x7fffffff, 0x8add, 0x8], [0xd8a, 0x8, 0x1000, 0x2, 0xf06, 0x5, 0x1, 0xfffffffd, 0xe, 0xdbc5, 0x4, 0x3, 0xb, 0xffff, 0x6, 0x3, 0xffffbeef, 0x2, 0x5, 0x7, 0x7f, 0x6, 0x3, 0x3, 0x8, 0xc2c, 0x3, 0xb, 0x0, 0x6, 0x80, 0x800, 0x3c80, 0x68, 0x8, 0x6, 0x1, 0x9, 0x10, 0xc, 0x3, 0x1, 0x3, 0x400, 0x7, 0x20, 0x1, 0x8, 0x3, 0x8000, 0x9, 0x7, 0x2, 0x3, 0x80000000, 0x2, 0x40000, 0x4, 0xfff, 0x5, 0x10, 0x0, 0x7, 0x9], [0x6, 0x7, 0x1, 0x5, 0x0, 0x0, 0x29b, 0x4, 0x7f, 0x6, 0x704e, 0x3, 0x9, 0x5, 0xffffffff, 0x9, 0x77, 0x8001, 0x5, 0xcb0, 0x9, 0x0, 0x6, 0x5, 0x81, 0x8, 0x2, 0x5, 0xbcb, 0xfffeffff, 0xffff0001, 0xffff, 0x5, 0x9, 0x741, 0x6, 0xe4c5, 0xfffffff7, 0x9, 0x4, 0x0, 0x1000, 0x1ba3, 0x4, 0x0, 0x0, 0x7, 0x7fff, 0x7f, 0x4, 0x80, 0x8, 0xffff, 0x7, 0x8, 0x0, 0x4e, 0x7fffffff, 0xffff3c69, 0x7fffffff, 0x19, 0x6, 0x5, 0x8]}, 0x45c) 925.954408ms ago: executing program 7 (id=1972): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 925.653016ms ago: executing program 2 (id=1973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8080, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x5, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x6, 0x1001, 0xf8, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x100004, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x6, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0xb, 0x196, 0x7ff, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0xb, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0xc, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x7, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xffdffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "6699b5420526c2b529551b7300f32470fdaa4202a9cb5ba3886655871959310f380b6d35a9fd2f86d1efc53088b52a1b9c21d32f66ea6b2d242dea4fe5dc911b5950c094f10b91ea9208e09d67c338889fba0729c7164814dd0d360c3114a5167c4b82c081e0e03b1a0b6b791b9672dc03be41a15835fe63768530566f97d34dfc85b3cb68ea368327f996c66dcc07d8b238d24b45ee16400c8e7c83f936ce3081a11ff0e414a764e95eb33e3c6f86757aa03de173915ba0961a8b21931f84bc43e54f6c371b31a7a25e96c5af49dd307cea7828d8c497158ad2319a3a2db561f65658cb1f916ad84e04d7a8436e2a9a378b6924447e34baf5970edf572109a3"}, @TCA_GRED_DPS={0x10, 0x3, {0xc, 0xf, 0x0, 0x8}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 803.832575ms ago: executing program 2 (id=1977): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 757.49752ms ago: executing program 2 (id=1979): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x400000, 0x30, 0x9, 0x0, 0x3, 0xa8, 0x1, 0x2, 0x5, [0x1, 0xe8, 0x4, 0x30, 0xdb4, 0x9, 0xe4f8, 0x76d], [0xd]}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000180)=0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) 678.348829ms ago: executing program 2 (id=1982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000018000504010000000000000002180000fe03000100000000080001000a141e00160012000a00fe80000000000000000000000000000100000800040002"], 0x44}}, 0x0) 629.664257ms ago: executing program 2 (id=1984): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0xd, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x24040004) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)) 629.3648ms ago: executing program 8 (id=1985): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x6000) 537.603445ms ago: executing program 5 (id=1986): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x808400, &(0x7f00000000c0)={[{@nouid32}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@acl}]}, 0x1, 0x46a, &(0x7f0000000900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 537.472361ms ago: executing program 8 (id=1987): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) unshare(0x20000400) fcntl$lock(r0, 0x5, 0x0) 239.878979ms ago: executing program 9 (id=1930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001180)={0x18, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) 228.430587ms ago: executing program 7 (id=1988): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1488"], 0x18, 0x40044}}], 0x1, 0x4014) 161.856688ms ago: executing program 7 (id=1989): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008000, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 161.724253ms ago: executing program 5 (id=1990): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000140)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@nodelalloc}]}, 0x1, 0xbde, &(0x7f0000001c00)="$eJzs3M1rHOcZAPBnRqsvW67kUkzdi1VKsaF0LbvI1KZQu7j00kOhvRYs5JURWn8gqbiSBVkl/0BI8g/kkkNiEnyIz74kkGsuiXONySFggmIlEEKiMPshydKuZFm7GkX+/eDVvl877/NopJ15YXcDeGENZz/SiOMRcSWJGKz3pxHRU631RVRq85aXFsa/XVoYT2Jl5d9fJZFExJOlhfHGsZL64+F6oy8iPv5bEr98ZfO6M3PzU2Plcmm63j49e/3W6Zm5+T9OXh+7VrpWunHm3J9Hz46eGzk/2rZcv/v84v1vfvuPLyrfv/3D3a9ffyuJizFQH1ufRz3rXRuO4dXfyXqFiBhrw/H3g656PuvzTArbPCntcFAAALSUrruHOxaD0RVrN2+D8cEnuQYHAAAAtMVKV8QKAAAAcMAl9v8AAABwwDXeB/BkaWG8UfJ9R8LeenwpIoZq+S/XS22kEJXqY190R8ShJ0ms/1hrUnvarg1HxKPPzr+XlWjyOeROqyxGxK+bnf+kmv9Q/ZPQG/NPI2KkDesPb2j/nPK/2Ib1884fgBfTg0u1C9nm61+6ev8TTa5/hSbXrueR9/Wvcf+3vOn+by3/rhb3f/96xjXuFOJ2q7Es/7/c//u7jZKtnz3uKqkdeLwY8ZtCs/yT1fyTFvlf2ebYSdQOMfjj7VKrOXnnv/JmxMlonn9DsvX3E52emCyXRmo/m66x+NHoO63Wzzv/7PwfapH/Fue/L+u79dSRWn+pz38vX763qbM+ffv80y97kv9Uaz31nv+Pzc5On4noSf65uf/s1vk25jSOkeV/6ndb//83+/vPXhMq9b+NLJXF+mPWfrk649jq3L/evfN+q3ga+788z//VnZ//at+rz7jG7z987dTGvsb3a63f/2YlW/9RUtsLAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBDGhEDkaTFiEiq9TQtFiMOR8Sv4lBavjkz+4eJm/+7cTUbixiK7nRislwaidV2krXPVOtr7bMb2n+KiKMR8cZgf7VdHL9Zvpp38gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw6HBEDkaTFiEgjYnkwTYvFvKMCAAAA2m4o7wAAAACAjrP/BwAAgIPP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAOO3riwcMkIioX+qsl01Mf6841MqDT0rwDAHLTlXcAQG4KeQcA5GaHe3y3C3AAJduM9zXtzV49ejsSDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD708njDx4mEVG50F8tmZ76WHfTZ5zYw+iATkrzDgDITddWg4W9iwPYe8/9L36kvXEAe6/5Hh94kSTbjPetzak8PdLbqPR3Ii4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9peBaknSYkSk1XqaFosRRyJiKLqTiclyaSQifhERnw5292bt3ryDBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoO1m5uanxsrl0vTzVJLdPV1FpVXlpf0Rxt5WkmqlL+8wapW8X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjDzNz81Fi5XJqeyTsSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG8zc/NTY+VyafoZKvd2MnldJe8cAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIz08BAAD//wV/DFI=") r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='/dev/null\x00', &(0x7f0000000080)='/dev/null\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000014c0)=""/157, 0x9d}], 0x1) 161.561764ms ago: executing program 8 (id=1991): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x20040005) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 161.485583ms ago: executing program 9 (id=1992): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x400000, 0x30, 0x9, 0x0, 0x3, 0xa8, 0x1, 0x2, 0x5, [0x1, 0xe8, 0x4, 0x30, 0xdb4, 0x9, 0xe4f8, 0x76d], [0xd]}}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r3}) 161.372974ms ago: executing program 7 (id=1993): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000180)={0x8000, 0x8, 0xe, 0xc, 0xf, "3200a603716de512"}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4840, 0x1f6) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$uac2(0x3, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x9c, &(0x7f0000000b00)=@string={0x9c, 0x3, "bf1b059c8a85912f0cc997806c3dd51bf385ee8cb566c244ac5fe1b7d22fabad07d5b081122459b33ce4b5c0b3df211a953b2f6ecaed3faed2b3910303f4dea0d2135ad12e9a69e8129e9c33ae19e7a7e40766e41361b9868f9a1f0c8e89bd0879c288a31d70459d257eca0d05c273b308a222f0aac843cca29b63f929604362d5b604aab7735590e145431d6b1b2874be4ba49e0c8baf1a5e3e"}}]}) syz_usb_control_io(r2, 0x0, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) read$FUSE(r1, &(0x7f0000000c00)={0x2020}, 0x2020) timer_create(0x6, 0x0, 0x0) 137.7891ms ago: executing program 5 (id=1994): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x1, 0x0, &(0x7f0000000500)="0e"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 119.407132ms ago: executing program 5 (id=1995): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1, 0x0, 0x0, 0x4, 0x1, 0x4}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000000c0)=""/138, 0x28, 0x8a, 0x1}, 0x28) 112.739518ms ago: executing program 8 (id=1996): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x4, 0x7fff0002}]}) set_tid_address(0x0) 85.006106ms ago: executing program 9 (id=1997): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0xe, 0xfff1}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 37.657116ms ago: executing program 5 (id=1998): timer_create(0x8, &(0x7f00000002c0)={0x0, 0x4, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000440)=0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 37.539602ms ago: executing program 8 (id=1999): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 25.11926ms ago: executing program 5 (id=2000): r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x2001000400, 0x40c00) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2860c40, &(0x7f0000000140)={[], [{@fowner_lt}, {@seclabel}, {@hash}, {@flag='silent'}, {@uid_lt}]}, 0xfe, 0x23f, &(0x7f0000000540)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x24040805) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) 6.233339ms ago: executing program 8 (id=2001): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x8, 0x100) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000300)=0x3) 0s ago: executing program 9 (id=2002): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") kernel console output (not intermixed with test programs): data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 166.293287][ T8860] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11c, mo2=0102] [ 166.293536][ T8860] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 166.294156][ T8860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.309449][ T30] audit: type=1800 audit(166.280:912): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 166.353204][ T30] audit: type=1800 audit(166.320:913): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 166.359620][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.390379][ T8866] fuse: fd is not a fuse device [ 166.431011][ T8873] (NULL device *): [drm] The number of CRTCs must be between 1 and 31 [ 166.456671][ T30] audit: type=1800 audit(166.400:914): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1122" name="type" dev="configfs" ino=27443 res=0 errno=0 [ 166.456712][ T30] audit: type=1800 audit(166.400:915): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1122" name="enabled" dev="configfs" ino=27444 res=0 errno=0 [ 166.599959][ T8874] loop2: detected capacity change from 0 to 4096 [ 166.600362][ T8874] EXT4-fs: inline encryption not supported [ 166.632024][ T8874] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 166.632085][ T8874] EXT4-fs (loop2): Test dummy encryption mode enabled [ 166.658791][ T8874] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 166.658991][ T8874] System zones: 0-5 [ 166.672335][ T8874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.775136][ T30] audit: type=1400 audit(166.740:916): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="lo" requested=rw pid=8864 comm="syz.2.1119" name="file1" dev="overlay" ino=15 [ 167.210850][ T30] audit: type=1800 audit(167.170:917): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 167.239085][ T8877] loop0: detected capacity change from 0 to 1024 [ 167.321976][ T8877] EXT4-fs: Ignoring removed bh option [ 167.326516][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.331087][ T8877] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 167.339236][ T8877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.787777][ T30] audit: type=1800 audit(167.740:918): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 167.978630][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.238104][ T8903] loop2: detected capacity change from 0 to 4096 [ 168.238531][ T8903] EXT4-fs: inline encryption not supported [ 168.245738][ T8903] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.245820][ T8903] EXT4-fs (loop2): Test dummy encryption mode enabled [ 168.263394][ T8903] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 168.263571][ T8903] System zones: 0-5 [ 168.265725][ T8903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.007250][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.217282][ T8919] (NULL device *): [drm] The number of CRTCs must be between 1 and 31 [ 169.260488][ T8921] xt_hashlimit: size too large, truncated to 1048576 [ 169.260526][ T8921] xt_hashlimit: max too large, truncated to 1048576 [ 169.313106][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.406857][ T8935] netlink: set zone limit has 4 unknown bytes [ 169.451174][ T8940] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1144'. [ 169.515726][ T8946] (NULL device *): [drm] The number of CRTCs must be between 1 and 31 [ 169.642174][ T8956] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1145'. [ 169.643078][ T8956] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1145'. [ 169.769549][ T8958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'. [ 169.770971][ T8958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1148'. [ 169.949723][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1154'. [ 170.029332][ T8977] syzkaller0: entered promiscuous mode [ 170.030584][ T8977] syzkaller0: entered allmulticast mode [ 170.465628][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1159'. [ 170.470592][ T8982] loop1: detected capacity change from 0 to 128 [ 170.477489][ T8982] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.673240][ T8995] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1161'. [ 170.713359][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.101153][ T9009] loop1: detected capacity change from 0 to 4096 [ 171.101552][ T9009] EXT4-fs: inline encryption not supported [ 171.128198][ T9009] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 171.128263][ T9009] EXT4-fs (loop1): Test dummy encryption mode enabled [ 171.152022][ T9009] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 171.152120][ T9009] System zones: 0-5 [ 171.161971][ T9009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.663520][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 171.663566][ T30] audit: type=1800 audit(171.620:960): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 171.700070][ T9014] loop3: detected capacity change from 0 to 1024 [ 171.761334][ T30] audit: type=1800 audit(171.730:961): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 171.777670][ T9014] EXT4-fs: Ignoring removed bh option [ 171.779697][ T9014] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 171.786107][ T30] audit: type=1800 audit(171.750:962): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 171.797730][ T9014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.861818][ T9023] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1169'. [ 172.079952][ T9015] loop2: detected capacity change from 0 to 4096 [ 172.083717][ T9019] loop0: detected capacity change from 0 to 512 [ 172.086790][ T9019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.091102][ T30] audit: type=1800 audit(172.040:963): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 172.091150][ T30] audit: type=1800 audit(172.040:964): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 172.103293][ T9015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.107541][ T9019] EXT4-fs (loop0): 1 truncate cleaned up [ 172.108009][ T9019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.205745][ T30] audit: type=1800 audit(172.170:965): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 172.213570][ T30] audit: type=1800 audit(172.180:966): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 172.607832][ T9015] netlink: 'syz.2.1170': attribute type 5 has an invalid length. [ 173.073203][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.088053][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.088544][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.093412][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.125526][ T9036] loop2: detected capacity change from 0 to 1024 [ 173.129046][ T30] audit: type=1800 audit(173.100:967): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 173.132718][ T30] audit: type=1800 audit(173.100:968): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 173.147782][ T9036] EXT4-fs: Ignoring removed bh option [ 173.152647][ T30] audit: type=1800 audit(173.120:969): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 173.207024][ T9036] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 173.480476][ T9036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.560080][ T9051] fuse: fd is not a fuse device [ 173.582391][ T9054] loop3: detected capacity change from 0 to 1024 [ 173.584520][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 173.586094][ T9041] loop1: detected capacity change from 0 to 128 [ 173.596130][ T9054] EXT4-fs: Ignoring removed bh option [ 173.597344][ T9054] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 173.602672][ T9041] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.888098][ T9054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.899799][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.107210][ T9068] FAT-fs (nullb0): bogus number of reserved sectors [ 174.107513][ T9068] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 174.305469][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.340563][ T9071] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 174.460971][ T9075] loop1: detected capacity change from 0 to 4096 [ 174.461384][ T9075] EXT4-fs: inline encryption not supported [ 175.317053][ T9075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.317135][ T9075] EXT4-fs (loop1): Test dummy encryption mode enabled [ 175.331104][ T9075] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 175.331286][ T9075] System zones: 0-5 [ 175.339054][ T9075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.405684][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.438138][ T9079] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 175.447743][ T9081] netlink: 'syz.3.1186': attribute type 2 has an invalid length. [ 175.447776][ T9081] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 175.447797][ T9081] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1186'. [ 175.448570][ T9071] md: could not open device unknown-block(1,3). [ 175.449372][ T9081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1186'. [ 175.608692][ T9091] loop0: detected capacity change from 0 to 128 [ 175.620545][ T9091] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 175.620720][ T9079] md: could not open device unknown-block(1,0). [ 176.008800][ T9079] md: could not open device unknown-block(1,3). [ 176.092583][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.191805][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 176.226084][ T9109] loop1: detected capacity change from 0 to 2048 [ 176.533570][ T9109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.615949][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.844852][ T9129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1200'. [ 176.949740][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 176.949789][ T30] audit: type=1800 audit(176.920:1003): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 176.979020][ T9133] netlink: set zone limit has 4 unknown bytes [ 176.997476][ T30] audit: type=1800 audit(176.970:1004): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 177.020074][ T9139] loop2: detected capacity change from 0 to 512 [ 177.050992][ T9139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 177.098638][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 177.114738][ T30] audit: type=1800 audit(177.080:1005): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 177.405213][ T30] audit: type=1326 audit(177.370:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9149 comm="syz.2.1209" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff935781a8 code=0x0 [ 177.472714][ T30] audit: type=1800 audit(177.440:1007): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 177.498021][ T30] audit: type=1800 audit(177.470:1008): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 177.561843][ T30] audit: type=1800 audit(177.510:1009): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 177.608130][ T30] audit: type=1800 audit(177.580:1010): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 177.634089][ T30] audit: type=1800 audit(177.600:1011): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 177.635196][ T30] audit: type=1800 audit(177.600:1012): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=124816 res=0 errno=0 [ 177.656899][ T9170] loop3: detected capacity change from 0 to 1024 [ 177.658746][ T9170] EXT4-fs: Ignoring removed bh option [ 177.660221][ T9170] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 177.681201][ T9170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.780087][ T9179] loop2: detected capacity change from 0 to 4096 [ 177.784195][ T9179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.790963][ T9179] netlink: 'syz.2.1219': attribute type 5 has an invalid length. [ 178.219911][ T9187] loop0: detected capacity change from 0 to 1024 [ 178.226999][ T9187] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 178.241969][ T9187] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.1220: lblock 2 mapped to illegal pblock 2 (length 1) [ 178.242008][ T9187] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.245620][ T9187] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 48: comm syz.0.1220: lblock 0 mapped to illegal pblock 48 (length 1) [ 178.245666][ T9187] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.247459][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 178.247476][ C0] EXT4-fs (loop0): initial error at time 178: ext4_map_blocks:791: inode 3: block 2 [ 178.247496][ C0] EXT4-fs (loop0): last error at time 178: ext4_map_blocks:791: inode 3: block 48 [ 178.264413][ T9187] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1220: Failed to acquire dquot type 0 [ 178.264468][ T9187] loop0: lost filesystem error report for type 5 error -117 [ 178.269586][ T9187] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 178.269620][ T9187] loop0: lost filesystem error report for type 5 error -117 [ 178.302561][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.305516][ T9187] EXT4-fs error (device loop0): ext4_evict_inode:267: inode #11: comm syz.0.1220: mark_inode_dirty error [ 178.305797][ T9187] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 178.308642][ T9187] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 178.308726][ T9187] EXT4-fs (loop0): 1 orphan inode deleted [ 178.309190][ T9187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.377611][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.379590][ T5072] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 178.379629][ T5072] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.381594][ T5072] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:14: Failed to release dquot type 0 [ 178.381609][ T5072] loop0: lost filesystem error report for type 5 error -117 [ 178.394058][ T5795] EXT4-fs error (device loop0): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 178.394555][ T5795] loop0: lost filesystem error report for type 5 error -117 [ 178.405056][ T5795] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 178.405075][ T5795] loop0: lost filesystem error report for type 5 error -117 [ 178.436352][ T9195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1223'. [ 178.436696][ T9195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1223'. [ 178.610454][ T5795] EXT4-fs error (device loop0): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 178.610478][ T5795] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 178.620749][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.672623][ T9201] FAULT_INJECTION: forcing a failure. [ 178.672623][ T9201] name failslab, interval 1, probability 0, space 0, times 0 [ 178.672665][ T9201] CPU: 1 UID: 0 PID: 9201 Comm: syz.0.1224 Tainted: G L syzkaller #0 PREEMPT [ 178.672683][ T9201] Tainted: [L]=SOFTLOCKUP [ 178.672687][ T9201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 178.672695][ T9201] Call trace: [ 178.672699][ T9201] show_stack+0x2c/0x3c (C) [ 178.672721][ T9201] __dump_stack+0x30/0x40 [ 178.672736][ T9201] dump_stack_lvl+0xd8/0x12c [ 178.672746][ T9201] dump_stack+0x1c/0x28 [ 178.672756][ T9201] should_fail_ex+0x41c/0x590 [ 178.672769][ T9201] should_failslab+0xc4/0x120 [ 178.672779][ T9201] kmem_cache_alloc_noprof+0x94/0x5d8 [ 178.672794][ T9201] dst_alloc+0xf4/0x15c [ 178.672804][ T9201] rt_dst_alloc+0x4c/0x240 [ 178.672814][ T9201] ip_route_output_key_hash_rcu+0x108c/0x1c20 [ 178.672825][ T9201] ip_route_output_key_hash+0x180/0x2a0 [ 178.672835][ T9201] ip_route_output_flow+0x3c/0x158 [ 178.672844][ T9201] ip_tunnel_xmit+0x550/0x1c6c [ 178.672854][ T9201] __gre_xmit+0x110/0x1b8 [ 178.672863][ T9201] ipgre_xmit+0x5cc/0x8b0 [ 178.672872][ T9201] dev_hard_start_xmit+0x1dc/0x9d4 [ 178.672880][ T9201] __dev_queue_xmit+0xed4/0x2bc0 [ 178.672888][ T9201] __bpf_tx_skb+0x1b0/0x2d8 [ 178.672897][ T9201] __bpf_redirect+0x5ac/0xb78 [ 178.672906][ T9201] bpf_clone_redirect+0x274/0x3f4 [ 178.672915][ T9201] bpf_prog_cfa4bf6e1e03aea2+0x84/0xb0 [ 178.672924][ T9201] bpf_test_run+0x2d0/0x7f0 [ 178.672934][ T9201] bpf_prog_test_run_skb+0xcd0/0x1ed0 [ 178.672944][ T9201] bpf_prog_test_run+0x1e0/0x250 [ 178.672953][ T9201] __sys_bpf+0x730/0x8c8 [ 178.672959][ T9201] __arm64_sys_bpf+0xd0/0xec [ 178.672966][ T9201] invoke_syscall+0x98/0x244 [ 178.672976][ T9201] el0_svc_common+0xec/0x23c [ 178.672986][ T9201] do_el0_svc+0x4c/0x5c [ 178.672995][ T9201] el0_svc+0x64/0x260 [ 178.673006][ T9201] el0t_64_sync_handler+0x48/0x148 [ 178.673015][ T9201] el0t_64_sync+0x198/0x19c [ 178.897397][ T9208] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 179.202089][ T4716] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 179.515594][ T9224] netlink: 'syz.5.1233': attribute type 5 has an invalid length. [ 179.648152][ T9227] overlayfs: conflicting options: userxattr,redirect_dir=on [ 179.742421][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.742652][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.746429][ T9232] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 179.813925][ T9236] loop3: detected capacity change from 0 to 4096 [ 179.814365][ T9236] EXT4-fs: inline encryption not supported [ 179.860160][ T9236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.860223][ T9236] EXT4-fs (loop3): Test dummy encryption mode enabled [ 180.023246][ T9236] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 180.023517][ T9236] System zones: 0-5 [ 180.031838][ T9236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.760398][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.430055][ T9265] FAULT_INJECTION: forcing a failure. [ 181.430055][ T9265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.430142][ T9265] CPU: 1 UID: 0 PID: 9265 Comm: syz.1.1246 Tainted: G L syzkaller #0 PREEMPT [ 181.430157][ T9265] Tainted: [L]=SOFTLOCKUP [ 181.430161][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 181.430167][ T9265] Call trace: [ 181.430171][ T9265] show_stack+0x2c/0x3c (C) [ 181.430196][ T9265] __dump_stack+0x30/0x40 [ 181.430207][ T9265] dump_stack_lvl+0xd8/0x12c [ 181.430217][ T9265] dump_stack+0x1c/0x28 [ 181.430226][ T9265] should_fail_ex+0x41c/0x590 [ 181.430238][ T9265] should_fail+0x14/0x24 [ 181.430247][ T9265] should_fail_usercopy+0x20/0x30 [ 181.430258][ T9265] _inline_copy_from_user+0x3c/0x174 [ 181.430267][ T9265] do_ip6t_set_ctl+0x664/0xc38 [ 181.430274][ T9265] nf_setsockopt+0xa0/0xe4 [ 181.430284][ T9265] ipv6_setsockopt+0x130/0x16c [ 181.430294][ T9265] rawv6_setsockopt+0x204/0x4c4 [ 181.430302][ T9265] sock_common_setsockopt+0xb0/0xcc [ 181.430311][ T9265] do_sock_setsockopt+0x1f0/0x330 [ 181.430320][ T9265] __sys_setsockopt+0x104/0x170 [ 181.430329][ T9265] __arm64_sys_setsockopt+0xc8/0xe4 [ 181.430338][ T9265] invoke_syscall+0x98/0x244 [ 181.430348][ T9265] el0_svc_common+0xec/0x23c [ 181.430357][ T9265] do_el0_svc+0x4c/0x5c [ 181.430367][ T9265] el0_svc+0x64/0x260 [ 181.430377][ T9265] el0t_64_sync_handler+0x48/0x148 [ 181.430387][ T9265] el0t_64_sync+0x198/0x19c [ 181.956124][ T9268] loop2: detected capacity change from 0 to 1024 [ 181.999452][ T9268] EXT4-fs: Ignoring removed bh option [ 181.999879][ T9268] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 182.008336][ T9268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.030512][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 182.030545][ T30] audit: type=1800 audit(181.970:1036): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 182.062721][ T30] audit: type=1800 audit(182.030:1037): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 182.101831][ T30] audit: type=1800 audit(182.070:1038): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1252" name="bmControls" dev="configfs" ino=33305 res=0 errno=0 [ 182.107067][ T30] audit: type=1800 audit(182.080:1039): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 182.840094][ T9285] loop1: detected capacity change from 0 to 4096 [ 182.840508][ T9285] EXT4-fs: inline encryption not supported [ 183.081610][ T30] audit: type=1800 audit(183.050:1040): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 183.088468][ T30] audit: type=1800 audit(183.050:1041): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 183.104649][ T30] audit: type=1800 audit(183.070:1042): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 183.110013][ T9287] fuse: Unknown parameter '' [ 183.399001][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.096646][ T30] audit: type=1800 audit(184.060:1043): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 184.176661][ T30] audit: type=1800 audit(184.120:1044): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 184.176802][ T9285] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 184.176832][ T9285] EXT4-fs (loop1): Test dummy encryption mode enabled [ 185.383501][ T9285] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 185.383594][ T9285] System zones: 0-5 [ 185.383766][ T9285] EXT4-fs: error -4 creating inode table initialization thread [ 185.383960][ T9285] EXT4-fs (loop1): mount failed [ 185.426746][ T30] audit: type=1800 audit(185.390:1045): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 186.879611][ T9316] loop0: detected capacity change from 0 to 4096 [ 186.924167][ T9316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.962867][ T9316] netlink: 'syz.0.1264': attribute type 5 has an invalid length. [ 187.197602][ T9334] loop2: detected capacity change from 0 to 4096 [ 187.198009][ T9334] EXT4-fs: inline encryption not supported [ 187.251406][ T9334] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.251489][ T9334] EXT4-fs (loop2): Test dummy encryption mode enabled [ 187.277328][ T9334] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 187.277589][ T9334] System zones: 0-5 [ 187.287564][ T9334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.381948][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 187.383495][ T30] audit: type=1400 audit(187.340:1057): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="lo" requested=rw pid=9326 comm="syz.2.1268" name="file1" dev="overlay" ino=15 [ 187.389878][ T1587] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.391318][ T1587] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.391850][ T1587] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 187.852068][ T30] audit: type=1800 audit(187.820:1058): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 187.859109][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.881018][ T30] audit: type=1800 audit(187.850:1059): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 188.096616][ T9344] loop3: detected capacity change from 0 to 4096 [ 188.097049][ T9344] EXT4-fs: inline encryption not supported [ 188.127089][ T9344] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 188.127176][ T9344] EXT4-fs (loop3): Test dummy encryption mode enabled [ 188.162242][ T9344] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 188.162319][ T9344] System zones: 0-5 [ 188.165108][ T30] audit: type=1800 audit(188.130:1060): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 188.178642][ T9344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.184035][ T30] audit: type=1800 audit(188.150:1061): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 189.306853][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.607304][ T30] audit: type=1400 audit(189.290:1062): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="lo" requested=rw pid=9332 comm="syz.3.1271" name="file1" dev="overlay" ino=15 [ 190.302381][ T30] audit: type=1800 audit(190.270:1063): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 190.363288][ T30] audit: type=1800 audit(190.330:1064): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 190.398670][ T9359] loop2: detected capacity change from 0 to 4096 [ 190.410609][ T30] audit: type=1804 audit(190.380:1065): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="udevd" name="/sys/devices/virtual/block/loop2/uevent" dev="sysfs" ino=16039 res=1 errno=0 [ 190.414985][ T9359] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 190.415025][ T9359] EXT4-fs (loop2): Test dummy encryption mode enabled [ 190.434160][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.439117][ T9359] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c019, mo2=0003] [ 190.439182][ T9359] System zones: 0-5 [ 190.446480][ T9359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.458013][ T30] audit: type=1804 audit(190.430:1066): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="udevd" name="/sys/devices/virtual/block/loop2/uevent" dev="sysfs" ino=16039 res=1 errno=0 [ 190.528072][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.196680][ T9387] loop2: detected capacity change from 0 to 4096 [ 191.198138][ T9387] EXT4-fs: inline encryption not supported [ 191.219032][ T9387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 191.219094][ T9387] EXT4-fs (loop2): Test dummy encryption mode enabled [ 191.267451][ T9387] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 191.267610][ T9387] System zones: 0-5 [ 191.276891][ T9387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.659379][ T9394] loop0: detected capacity change from 0 to 512 [ 191.779429][ T9394] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 191.830797][ T9399] loop3: detected capacity change from 0 to 1024 [ 191.831199][ T9399] EXT4-fs: Ignoring removed bh option [ 191.835232][ T9399] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 191.953137][ T9403] loop0: detected capacity change from 0 to 1024 [ 191.961244][ T9403] EXT4-fs: Ignoring removed bh option [ 191.965204][ T9403] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 191.978468][ T9403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.658935][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'. [ 192.754650][ T9413] bridge0: port 1(batadv1) entered blocking state [ 192.754706][ T9413] bridge0: port 1(batadv1) entered disabled state [ 192.754771][ T9413] batadv1: entered allmulticast mode [ 192.755234][ T9413] batadv1: entered promiscuous mode [ 192.757130][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 192.757149][ T30] audit: type=1800 audit(192.730:1078): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 192.793900][ T9399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.890546][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.906355][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.913544][ T30] audit: type=1804 audit(192.880:1079): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="udevd" name="/sys/devices/virtual/block/loop0/uevent" dev="sysfs" ino=15805 res=1 errno=0 [ 192.919660][ T30] audit: type=1800 audit(192.890:1080): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 193.372519][ T5078] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 193.372552][ T5078] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 193.858705][ T4718] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.899066][ T30] audit: type=1800 audit(193.870:1081): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 194.076682][ T30] audit: type=1800 audit(194.020:1082): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 194.076723][ T30] audit: type=1800 audit(194.020:1083): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16156 res=0 errno=0 [ 194.076750][ T30] audit: type=1800 audit(194.030:1084): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 194.807434][ T9430] syzkaller0: entered promiscuous mode [ 194.808951][ T9430] syzkaller0: entered allmulticast mode [ 194.816180][ T30] audit: type=1800 audit(194.780:1085): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=125955 res=0 errno=0 [ 194.829836][ T9430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 194.833744][ T30] audit: type=1800 audit(194.800:1086): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1297" name="new_array" dev="sysfs" ino=48101 res=0 errno=0 [ 194.935013][ T30] audit: type=1800 audit(194.810:1087): pid=9430 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1297" name="level" dev="sysfs" ino=108439 res=0 errno=0 [ 195.151388][ T9447] loop2: detected capacity change from 0 to 4096 [ 195.452924][ T9447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.480769][ T9447] netlink: 'syz.2.1302': attribute type 5 has an invalid length. [ 195.605523][ T9465] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.645020][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1303'. [ 195.721607][ T4718] overlayfs: failed lookup in lower (newroot/269, name='file0', err=-40): overlapping layers [ 195.721716][ T4718] overlayfs: failed lookup in lower (newroot/269, name='file0', err=-40): overlapping layers [ 195.743197][ T9480] loop1: detected capacity change from 0 to 1024 [ 195.743660][ T9480] EXT4-fs: Ignoring removed bh option [ 195.750964][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.751165][ T9480] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 195.759727][ T9480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.886221][ T9490] loop2: detected capacity change from 0 to 4096 [ 195.890286][ T9490] EXT4-fs: Invalid want_extra_isize 3 [ 195.892412][ T9490] fuse: Unknown parameter 'd' [ 196.290432][ T5070] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.417055][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'. [ 197.142766][ T5070] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.193911][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.278868][ T9516] netlink: 'syz.5.1317': attribute type 5 has an invalid length. [ 197.312277][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.317601][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.320120][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.325514][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.328332][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.388003][ T9532] loop1: detected capacity change from 0 to 128 [ 197.391673][ T9532] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.414952][ T9532] sctp: [Deprecated]: syz.1.1316 (pid 9532) Use of int in maxseg socket option. [ 197.414952][ T9532] Use struct sctp_assoc_value instead [ 197.442094][ T5070] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.454808][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.820927][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 197.820965][ T30] audit: type=1800 audit(197.790:1108): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 197.854388][ T5070] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.907727][ T30] audit: type=1800 audit(197.880:1109): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 197.921714][ T9564] loop1: detected capacity change from 0 to 1024 [ 197.923705][ T9564] EXT4-fs: Ignoring removed bh option [ 197.926498][ T9564] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 197.963760][ T9564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.978405][ T30] audit: type=1800 audit(197.950:1110): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126534 res=0 errno=0 [ 197.979868][ T30] audit: type=1800 audit(197.950:1111): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=126539 res=0 errno=0 [ 197.981492][ T30] audit: type=1800 audit(197.950:1112): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=126543 res=0 errno=0 [ 197.983970][ T30] audit: type=1800 audit(197.950:1113): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=126542 res=0 errno=0 [ 197.987686][ T30] audit: type=1800 audit(197.960:1114): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=126545 res=0 errno=0 [ 198.071764][ T30] audit: type=1800 audit(198.040:1115): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=126694 res=0 errno=0 [ 198.073154][ T30] audit: type=1800 audit(198.040:1116): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=126699 res=0 errno=0 [ 198.078297][ T30] audit: type=1800 audit(198.050:1117): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=126703 res=0 errno=0 [ 198.136723][ T5070] batadv1: left allmulticast mode [ 198.137971][ T5070] batadv1: left promiscuous mode [ 198.138095][ T5070] bridge0: port 3(batadv1) entered disabled state [ 198.142777][ T5070] bridge_slave_1: left allmulticast mode [ 198.142811][ T5070] bridge_slave_1: left promiscuous mode [ 198.142905][ T5070] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.148599][ T5070] bridge_slave_0: left allmulticast mode [ 198.148629][ T5070] bridge_slave_0: left promiscuous mode [ 198.148694][ T5070] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.247109][ T5070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.299436][ T5070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.549385][ T5070] bond0 (unregistering): Released all slaves [ 198.596674][ T5070] tipc: Left network mode [ 198.680845][ T5070] IPVS: stopping master sync thread 5190 ... [ 198.712273][ T9519] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.715153][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.717976][ T9519] bridge_slave_0: entered allmulticast mode [ 198.721746][ T9519] bridge_slave_0: entered promiscuous mode [ 198.725828][ T9519] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.727549][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.727691][ T9519] bridge_slave_1: entered allmulticast mode [ 198.728198][ T9519] bridge_slave_1: entered promiscuous mode [ 198.823248][ T9519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.832630][ T9519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.856302][ T9519] team0: Port device team_slave_0 added [ 198.859465][ T9519] team0: Port device team_slave_1 added [ 198.871563][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.873259][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.878901][ T9519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.882901][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.884494][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.890515][ T9519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.914219][ T9519] hsr_slave_0: entered promiscuous mode [ 198.917014][ T9519] hsr_slave_1: entered promiscuous mode [ 198.918869][ T9519] debugfs: 'hsr0' already exists in 'hsr' [ 198.920075][ T9519] Cannot create hsr debugfs directory [ 198.942654][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.386806][ T4725] Bluetooth: hci4: command tx timeout [ 199.588401][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 199.691200][ T9631] loop2: detected capacity change from 0 to 4096 [ 199.702661][ T9631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.763964][ T9631] netlink: 'syz.2.1333': attribute type 5 has an invalid length. [ 199.869073][ T9649] FAULT_INJECTION: forcing a failure. [ 199.869073][ T9649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.869140][ T9649] CPU: 1 UID: 0 PID: 9649 Comm: syz.0.1336 Tainted: G L syzkaller #0 PREEMPT [ 199.869159][ T9649] Tainted: [L]=SOFTLOCKUP [ 199.869163][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 199.869170][ T9649] Call trace: [ 199.869173][ T9649] show_stack+0x2c/0x3c (C) [ 199.869192][ T9649] __dump_stack+0x30/0x40 [ 199.869203][ T9649] dump_stack_lvl+0xd8/0x12c [ 199.869213][ T9649] dump_stack+0x1c/0x28 [ 199.869222][ T9649] should_fail_ex+0x41c/0x590 [ 199.869234][ T9649] should_fail+0x14/0x24 [ 199.869243][ T9649] should_fail_usercopy+0x20/0x30 [ 199.869253][ T9649] _inline_copy_from_user+0x3c/0x174 [ 199.869262][ T9649] copy_from_sockptr_offset+0x7c/0xc0 [ 199.869269][ T9649] do_ip6t_set_ctl+0x874/0xc38 [ 199.869277][ T9649] nf_setsockopt+0xa0/0xe4 [ 199.869288][ T9649] ipv6_setsockopt+0x130/0x16c [ 199.869297][ T9649] rawv6_setsockopt+0x204/0x4c4 [ 199.869305][ T9649] sock_common_setsockopt+0xb0/0xcc [ 199.869314][ T9649] do_sock_setsockopt+0x1f0/0x330 [ 199.869324][ T9649] __sys_setsockopt+0x104/0x170 [ 199.869332][ T9649] __arm64_sys_setsockopt+0xc8/0xe4 [ 199.869341][ T9649] invoke_syscall+0x98/0x244 [ 199.869351][ T9649] el0_svc_common+0xec/0x23c [ 199.869361][ T9649] do_el0_svc+0x4c/0x5c [ 199.869371][ T9649] el0_svc+0x64/0x260 [ 199.869381][ T9649] el0t_64_sync_handler+0x48/0x148 [ 199.869391][ T9649] el0t_64_sync+0x198/0x19c [ 200.144224][ T9653] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 200.155429][ T5070] hsr_slave_0: left promiscuous mode [ 200.158041][ T5070] hsr_slave_1: left promiscuous mode [ 200.158348][ T5070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.158362][ T5070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.162462][ T5070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.162495][ T5070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.174496][ T5070] veth1_vlan: left promiscuous mode [ 200.174571][ T5070] veth0_vlan: left promiscuous mode [ 200.301153][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.637135][ T9667] loop0: detected capacity change from 0 to 2048 [ 200.655151][ T9667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.661697][ T5070] team0 (unregistering): Port device team_slave_1 removed [ 200.665764][ T5070] team0 (unregistering): Port device team_slave_0 removed [ 200.716496][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 200.734847][ T9670] syzkaller1: entered promiscuous mode [ 200.736326][ T9670] syzkaller1: entered allmulticast mode [ 200.759846][ T9519] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.764350][ T9519] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.768407][ T9519] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.777577][ T9519] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.780486][ T9519] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.786179][ T9519] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.791507][ T9519] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.805713][ T9519] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.845252][ T9678] syzkaller0: entered promiscuous mode [ 200.845293][ T9678] syzkaller0: entered allmulticast mode [ 200.887839][ T9519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.897665][ T9519] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.903141][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.903201][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.910993][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.911055][ T5079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.956400][ T9689] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 200.956491][ T5070] IPVS: stop unused estimator thread 0... [ 200.959603][ T9689] overlayfs: failed to set xattr on upper [ 200.959644][ T9689] overlayfs: ...falling back to redirect_dir=nofollow. [ 200.959659][ T9689] overlayfs: ...falling back to uuid=null. [ 200.971853][ T9689] overlayfs: cleanup of 'bus/work' failed (-13) [ 200.974644][ T9689] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 200.974750][ T9689] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 201.103348][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 201.466838][ T4725] Bluetooth: hci4: command tx timeout [ 201.573769][ T9519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.805532][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 201.810002][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.895237][ T9745] FAULT_INJECTION: forcing a failure. [ 201.895237][ T9745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.895278][ T9745] CPU: 1 UID: 0 PID: 9745 Comm: syz.0.1349 Tainted: G L syzkaller #0 PREEMPT [ 201.895295][ T9745] Tainted: [L]=SOFTLOCKUP [ 201.895299][ T9745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 201.895306][ T9745] Call trace: [ 201.895310][ T9745] show_stack+0x2c/0x3c (C) [ 201.895330][ T9745] __dump_stack+0x30/0x40 [ 201.895341][ T9745] dump_stack_lvl+0xd8/0x12c [ 201.895351][ T9745] dump_stack+0x1c/0x28 [ 201.895361][ T9745] should_fail_ex+0x41c/0x590 [ 201.895372][ T9745] should_fail+0x14/0x24 [ 201.895381][ T9745] should_fail_usercopy+0x20/0x30 [ 201.895392][ T9745] strncpy_from_user+0x48/0x388 [ 201.895401][ T9745] do_getname+0x84/0x234 [ 201.895408][ T9745] getname_flags+0x2c/0x3c [ 201.895415][ T9745] do_sys_openat2+0xd0/0x1e8 [ 201.895428][ T9745] do_sys_open+0xb0/0xe0 [ 201.895437][ T9745] __arm64_sys_openat+0xa8/0xc4 [ 201.895448][ T9745] invoke_syscall+0x98/0x244 [ 201.895459][ T9745] el0_svc_common+0xec/0x23c [ 201.895468][ T9745] do_el0_svc+0x4c/0x5c [ 201.895478][ T9745] el0_svc+0x64/0x260 [ 201.895488][ T9745] el0t_64_sync_handler+0x48/0x148 [ 201.895498][ T9745] el0t_64_sync+0x198/0x19c [ 201.902405][ T9519] veth0_vlan: entered promiscuous mode [ 201.904669][ T9519] veth1_vlan: entered promiscuous mode [ 201.912769][ T9519] veth0_macvtap: entered promiscuous mode [ 201.914099][ T9519] veth1_macvtap: entered promiscuous mode [ 201.918267][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.922779][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.925053][ T5074] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.925131][ T5074] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.925146][ T5074] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.925160][ T5074] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.030292][ T1910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.030332][ T1910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.040962][ T5078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.042938][ T5078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.440567][ T9771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 202.907105][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 202.907144][ T30] audit: type=1800 audit(202.880:1158): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 202.918276][ T30] audit: type=1800 audit(202.890:1159): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 202.994796][ T30] audit: type=1800 audit(202.960:1160): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 203.025707][ T30] audit: type=1800 audit(202.990:1161): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 203.042066][ T30] audit: type=1800 audit(203.010:1162): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 203.049667][ T30] audit: type=1800 audit(203.020:1163): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 203.059325][ T30] audit: type=1800 audit(203.030:1164): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 203.086465][ T9789] netlink: set zone limit has 4 unknown bytes [ 203.112623][ T9788] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1362'. [ 203.114394][ T26] bond_slave_0: entered promiscuous mode [ 203.114433][ T26] bond_slave_1: entered promiscuous mode [ 203.115828][ T9788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1362'. [ 203.143920][ T30] audit: type=1800 audit(203.100:1165): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15922 res=0 errno=0 [ 203.155435][ T9794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.164118][ T30] audit: type=1800 audit(203.130:1166): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 203.179343][ T30] audit: type=1800 audit(203.150:1167): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 203.209806][ T9793] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1364'. [ 203.617862][ T4725] Bluetooth: hci4: command tx timeout [ 204.192324][ T9839] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.218916][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1379'. [ 204.296795][ T9839] md: could not open device unknown-block(1,0). [ 204.336808][ T9839] md: could not open device unknown-block(1,3). [ 204.342215][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1381'. [ 204.344196][ T9843] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1381'. [ 204.397330][ T9851] loop2: detected capacity change from 0 to 4096 [ 204.465055][ T9851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.488061][ T9851] netlink: 'syz.2.1385': attribute type 5 has an invalid length. [ 204.636427][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.088289][ T9902] loop2: detected capacity change from 0 to 4096 [ 205.152183][ T9902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.164073][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'. [ 205.172058][ T9902] netlink: 'syz.2.1400': attribute type 5 has an invalid length. [ 205.256540][ T9915] loop1: detected capacity change from 0 to 128 [ 205.257075][ T9915] EXT4-fs: inline encryption not supported [ 205.259366][ T9915] EXT4-fs (loop1): Test dummy encryption mode enabled [ 205.276299][ T9915] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.284137][ T9915] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 25 (only 1 groups) [ 205.288410][ T9917] loop6: detected capacity change from 0 to 256 [ 205.320831][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.399004][ T9924] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1410'. [ 205.473903][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /284/mnt/lost+found: directory fails checksum at offset 6144 [ 205.484364][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 205.491275][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /284/mnt/lost+found: directory fails checksum at offset 6144 [ 205.491662][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 205.491943][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /284/mnt/lost+found: directory fails checksum at offset 6144 [ 205.492273][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 205.492532][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /284/mnt/lost+found: directory fails checksum at offset 6144 [ 205.492743][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 205.493011][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /284/mnt/lost+found: directory fails checksum at offset 6144 [ 205.493346][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3114: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 205.792669][ T9940] loop6: detected capacity change from 0 to 128 [ 205.793369][ T4725] Bluetooth: hci4: command tx timeout [ 205.804592][ T9940] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 207.124453][ T4980] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.254328][ T9966] loop6: detected capacity change from 0 to 4096 [ 207.268638][ T9966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.299363][ T9966] netlink: 'syz.6.1424': attribute type 5 has an invalid length. [ 207.480828][ T9519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.508253][ T1910] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.603587][ T1910] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.644637][ T9979] syzkaller0: entered promiscuous mode [ 207.644676][ T9979] syzkaller0: entered allmulticast mode [ 207.664920][ T4716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.671395][ T4716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.675637][ T4716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.677733][ T4716] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.679337][ T4716] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.725753][ T1910] team0: Port device netdevsim1 removed [ 207.735899][ T1910] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.765430][ T5079] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.766658][ T5074] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.766696][ T5074] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.766714][ T5074] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.832111][ T1910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.836663][ T9994] FAULT_INJECTION: forcing a failure. [ 207.836663][ T9994] name failslab, interval 1, probability 0, space 0, times 0 [ 207.839268][ T9994] CPU: 1 UID: 0 PID: 9994 Comm: syz.2.1432 Tainted: G L syzkaller #0 PREEMPT [ 207.839287][ T9994] Tainted: [L]=SOFTLOCKUP [ 207.839291][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 207.839297][ T9994] Call trace: [ 207.839301][ T9994] show_stack+0x2c/0x3c (C) [ 207.839325][ T9994] __dump_stack+0x30/0x40 [ 207.839336][ T9994] dump_stack_lvl+0xd8/0x12c [ 207.839347][ T9994] dump_stack+0x1c/0x28 [ 207.839357][ T9994] should_fail_ex+0x41c/0x590 [ 207.839368][ T9994] should_failslab+0xc4/0x120 [ 207.839376][ T9994] kmem_cache_alloc_noprof+0x94/0x5d8 [ 207.839385][ T9994] security_file_alloc+0x3c/0x300 [ 207.839393][ T9994] init_file+0x90/0x28c [ 207.839400][ T9994] alloc_empty_file+0x80/0x1cc [ 207.839408][ T9994] path_openat+0x7c/0x2a60 [ 207.839416][ T9994] do_file_open+0x1c8/0x2e8 [ 207.839425][ T9994] do_sys_openat2+0x114/0x1e8 [ 207.839434][ T9994] do_sys_open+0xb0/0xe0 [ 207.839443][ T9994] __arm64_sys_openat+0xa8/0xc4 [ 207.839453][ T9994] invoke_syscall+0x98/0x244 [ 207.839463][ T9994] el0_svc_common+0xec/0x23c [ 207.839473][ T9994] do_el0_svc+0x4c/0x5c [ 207.839482][ T9994] el0_svc+0x64/0x260 [ 207.839493][ T9994] el0t_64_sync_handler+0x48/0x148 [ 207.839502][ T9994] el0t_64_sync+0x198/0x19c [ 207.974446][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 207.974489][ T30] audit: type=1800 audit(207.900:1235): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133634 res=0 errno=0 [ 207.974519][ T30] audit: type=1800 audit(207.910:1236): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=133639 res=0 errno=0 [ 207.974544][ T30] audit: type=1800 audit(207.910:1237): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=133643 res=0 errno=0 [ 207.974563][ T30] audit: type=1800 audit(207.910:1238): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=133642 res=0 errno=0 [ 207.974583][ T30] audit: type=1800 audit(207.910:1239): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=133645 res=0 errno=0 [ 207.974602][ T30] audit: type=1800 audit(207.910:1240): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=133720 res=0 errno=0 [ 207.974621][ T30] audit: type=1800 audit(207.910:1241): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=133725 res=0 errno=0 [ 207.974638][ T30] audit: type=1800 audit(207.910:1242): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=133729 res=0 errno=0 [ 207.974656][ T30] audit: type=1800 audit(207.910:1243): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=133728 res=0 errno=0 [ 207.974673][ T30] audit: type=1800 audit(207.920:1244): pid=4705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=133731 res=0 errno=0 [ 208.005364][T10010] loop2: detected capacity change from 0 to 2048 [ 208.031398][ T1910] batadv1: left allmulticast mode [ 208.032408][ T1910] batadv1: left promiscuous mode [ 208.033500][ T1910] bridge0: port 1(batadv1) entered disabled state [ 208.039915][T10010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.090733][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.206964][T10017] loop2: detected capacity change from 0 to 2048 [ 208.244484][T10017] loop2: AHDI p2 p3 [ 208.244618][T10017] loop2: p2 size 4076863487 extends beyond EOD, truncated [ 208.510278][ T1910] bond0 (unregistering): Released all slaves [ 208.587810][ T1910] bond1 (unregistering): Released all slaves [ 208.601355][ T1910] bond2 (unregistering): Released all slaves [ 208.658636][T10025] loop2: detected capacity change from 0 to 1024 [ 208.668451][T10025] EXT4-fs: Ignoring removed bh option [ 208.675301][T10025] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 208.699992][T10025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.803641][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 209.571119][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.702288][T10060] netlink: 'syz.2.1445': attribute type 21 has an invalid length. [ 209.706646][ T4725] Bluetooth: hci1: command tx timeout [ 209.867457][T10071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1450'. [ 209.867930][T10071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1450'. [ 209.900802][ T1910] hsr_slave_0: left promiscuous mode [ 209.901158][ T1910] hsr_slave_1: left promiscuous mode [ 209.909538][ T1910] veth1_macvtap: left promiscuous mode [ 209.910687][ T1910] veth0_macvtap: left promiscuous mode [ 209.912149][ T1910] veth1_vlan: left promiscuous mode [ 209.913248][ T1910] veth0_vlan: left promiscuous mode [ 210.456286][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 210.608514][ T9982] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.609372][ T9982] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.609499][ T9982] bridge_slave_0: entered allmulticast mode [ 210.612344][ T9982] bridge_slave_0: entered promiscuous mode [ 210.616301][ T9982] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.616354][ T9982] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.617013][ T9982] bridge_slave_1: entered allmulticast mode [ 210.619735][ T9982] bridge_slave_1: entered promiscuous mode [ 210.684758][ T9982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.709541][ T9982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.743726][T10092] loop6: detected capacity change from 0 to 4096 [ 210.751889][ T9982] team0: Port device team_slave_0 added [ 210.752675][ T9982] team0: Port device team_slave_1 added [ 210.763387][T10086] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 210.803093][T10092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.831454][T10092] netlink: 'syz.6.1452': attribute type 5 has an invalid length. [ 210.837902][ T9982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.837931][ T9982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.838951][ T9982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.849777][ T9982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.849789][ T9982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.849806][ T9982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.916530][ T9982] hsr_slave_0: entered promiscuous mode [ 210.968337][ T9982] hsr_slave_1: entered promiscuous mode [ 210.981523][T10104] loop0: detected capacity change from 0 to 1024 [ 211.000839][T10104] EXT4-fs: Ignoring removed bh option [ 211.002606][T10104] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 211.010570][ T9519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.019681][T10104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.155055][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 211.242578][ T9982] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 211.273763][ T9982] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 211.279600][ T9982] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 211.283647][ T9982] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 211.285708][ T9982] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 211.300515][ T9982] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 211.300974][ T9982] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 211.304490][ T9982] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 211.342471][T10135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.399155][ T9982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.414041][ T9982] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.426522][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.426614][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.432277][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.432340][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.615596][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 211.647983][ T9982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.789915][ T4725] Bluetooth: hci1: command tx timeout [ 211.842110][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.905772][ T9982] veth0_vlan: entered promiscuous mode [ 211.920081][ T9982] veth1_vlan: entered promiscuous mode [ 212.200282][ T9982] veth0_macvtap: entered promiscuous mode [ 212.212820][ T9982] veth1_macvtap: entered promiscuous mode [ 212.228798][T10198] loop2: detected capacity change from 0 to 128 [ 212.229214][T10198] vfat: Unknown parameter 'sys_immutË/—xable' [ 212.231812][ T9982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.241462][ T9982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.251883][ T5074] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.251932][ T5074] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.251970][ T5074] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.251997][ T5074] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.372165][ T1944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.374066][ T1944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.386806][ T1944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.388663][ T1944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.459752][T10206] loop2: detected capacity change from 0 to 128 [ 212.727711][T10206] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 212.771379][T10206] Injecting memory failure for pfn 0x134d34 at process virtual address 0x20001000 [ 212.825303][T10206] Memory failure: 0x134d34: Sending SIGBUS to syz.2.1466:10206 due to hardware memory corruption [ 212.825413][T10206] Memory failure: 0x134d34: recovery action for dirty LRU page: Recovered [ 212.825446][T10206] Injecting memory failure for pfn 0x134d35 at process virtual address 0x20002000 [ 212.836335][T10206] Memory failure: 0x134d35: Sending SIGBUS to syz.2.1466:10206 due to hardware memory corruption [ 212.836897][T10206] Memory failure: 0x134d35: recovery action for dirty LRU page: Recovered [ 212.836953][T10206] Injecting memory failure for pfn 0x134d36 at process virtual address 0x20003000 [ 213.089012][T10206] Memory failure: 0x134d36: recovery action for dirty LRU page: Recovered [ 213.106160][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 213.136359][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 213.136399][ T30] audit: type=1800 audit(213.100:1288): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 213.164324][ T30] audit: type=1800 audit(213.130:1289): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 213.176897][ T30] audit: type=1800 audit(213.150:1290): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 213.266155][ T30] audit: type=1800 audit(213.230:1291): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 213.620746][ T4704] udevd[4704]: incorrect ext4 checksum on /dev/loop2 [ 213.737617][ T30] audit: type=1800 audit(213.680:1292): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 213.737661][ T30] audit: type=1800 audit(213.700:1293): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 213.752074][ T30] audit: type=1800 audit(213.720:1294): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 213.830516][ T30] audit: type=1800 audit(213.770:1295): pid=10235 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1473" name="enabled" dev="configfs" ino=59896 res=0 errno=0 [ 213.830566][ T30] audit: type=1800 audit(213.770:1296): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 213.849129][ T30] audit: type=1800 audit(213.810:1297): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 213.866742][ T4725] Bluetooth: hci1: command tx timeout [ 213.872386][T10243] netlink: 'syz.0.1475': attribute type 21 has an invalid length. [ 213.875883][T10242] loop2: detected capacity change from 0 to 1024 [ 213.876418][T10242] EXT4-fs: Ignoring removed bh option [ 214.444498][T10248] loop6: detected capacity change from 0 to 4096 [ 214.444975][T10248] EXT4-fs: inline encryption not supported [ 214.563608][T10248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 214.563690][T10248] EXT4-fs (loop6): Test dummy encryption mode enabled [ 214.599767][T10248] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 214.599990][T10248] System zones: 0-5 [ 214.610326][T10248] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.869003][T10242] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 214.882461][T10242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.597364][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.643530][T10265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.643725][T10265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.841119][ T9519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.847178][T10279] FAULT_INJECTION: forcing a failure. [ 215.847178][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 215.847220][T10279] CPU: 0 UID: 0 PID: 10279 Comm: syz.2.1481 Tainted: G L syzkaller #0 PREEMPT [ 215.847235][T10279] Tainted: [L]=SOFTLOCKUP [ 215.847239][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 215.847245][T10279] Call trace: [ 215.847248][T10279] show_stack+0x2c/0x3c (C) [ 215.847269][T10279] __dump_stack+0x30/0x40 [ 215.847280][T10279] dump_stack_lvl+0xd8/0x12c [ 215.847290][T10279] dump_stack+0x1c/0x28 [ 215.847299][T10279] should_fail_ex+0x41c/0x590 [ 215.847310][T10279] should_failslab+0xc4/0x120 [ 215.847319][T10279] kmem_cache_alloc_noprof+0x94/0x5d8 [ 215.847328][T10279] security_file_alloc+0x3c/0x300 [ 215.847337][T10279] init_file+0x90/0x28c [ 215.847345][T10279] alloc_empty_file+0x80/0x1cc [ 215.847352][T10279] path_openat+0x7c/0x2a60 [ 215.847361][T10279] do_file_open+0x1c8/0x2e8 [ 215.847369][T10279] do_sys_openat2+0x114/0x1e8 [ 215.847379][T10279] do_sys_open+0xb0/0xe0 [ 215.847388][T10279] __arm64_sys_openat+0xa8/0xc4 [ 215.847397][T10279] invoke_syscall+0x98/0x244 [ 215.847408][T10279] el0_svc_common+0xec/0x23c [ 215.847417][T10279] do_el0_svc+0x4c/0x5c [ 215.847427][T10279] el0_svc+0x64/0x260 [ 215.847437][T10279] el0t_64_sync_handler+0x48/0x148 [ 215.847447][T10279] el0t_64_sync+0x198/0x19c [ 215.900615][T10283] netlink: zone id is out of range [ 215.900654][T10283] netlink: zone id is out of range [ 215.900674][T10283] netlink: zone id is out of range [ 215.900685][T10283] netlink: zone id is out of range [ 215.900695][T10283] netlink: zone id is out of range [ 215.900704][T10283] netlink: zone id is out of range [ 215.900712][T10283] netlink: set zone limit has 4 unknown bytes [ 215.947864][ T4725] Bluetooth: hci1: command tx timeout [ 215.973411][T10294] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1485'. [ 216.442008][T10313] loop7: detected capacity change from 0 to 1024 [ 216.443202][T10314] loop2: detected capacity change from 0 to 1024 [ 216.447963][T10313] EXT4-fs: Ignoring removed bh option [ 216.451731][T10314] EXT4-fs: inline encryption not supported [ 216.452955][T10313] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 216.474810][T10313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.549205][T10314] EXT4-fs: Mount option(s) incompatible with ext3 [ 217.348526][ T9982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.619307][T10376] md: could not open device unknown-block(1,0). [ 217.659156][T10376] md: could not open device unknown-block(1,3). [ 217.885356][T10398] FAULT_INJECTION: forcing a failure. [ 217.885356][T10398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.888217][T10398] CPU: 1 UID: 0 PID: 10398 Comm: syz.2.1509 Tainted: G L syzkaller #0 PREEMPT [ 217.888242][T10398] Tainted: [L]=SOFTLOCKUP [ 217.888246][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 217.888252][T10398] Call trace: [ 217.888256][T10398] show_stack+0x2c/0x3c (C) [ 217.888278][T10398] __dump_stack+0x30/0x40 [ 217.888290][T10398] dump_stack_lvl+0xd8/0x12c [ 217.888301][T10398] dump_stack+0x1c/0x28 [ 217.888311][T10398] should_fail_ex+0x41c/0x590 [ 217.888322][T10398] should_fail+0x14/0x24 [ 217.888332][T10398] should_fail_usercopy+0x20/0x30 [ 217.888342][T10398] simple_read_from_buffer+0xc4/0x238 [ 217.888352][T10398] proc_fail_nth_read+0x1a8/0x248 [ 217.888361][T10398] vfs_read+0x230/0x8c8 [ 217.888371][T10398] ksys_read+0x12c/0x228 [ 217.888377][T10398] __arm64_sys_read+0x84/0x98 [ 217.888384][T10398] invoke_syscall+0x98/0x244 [ 217.888394][T10398] el0_svc_common+0xec/0x23c [ 217.888404][T10398] do_el0_svc+0x4c/0x5c [ 217.888413][T10398] el0_svc+0x64/0x260 [ 217.888424][T10398] el0t_64_sync_handler+0x48/0x148 [ 217.888434][T10398] el0t_64_sync+0x198/0x19c [ 218.038448][T10400] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.250124][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 218.250166][ T30] audit: type=1800 audit(218.220:1326): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 218.265087][ T30] audit: type=1800 audit(218.230:1327): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 218.271340][ T30] audit: type=1800 audit(218.240:1328): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=140688 res=0 errno=0 [ 218.279190][T10406] loop2: detected capacity change from 0 to 1024 [ 218.279595][T10406] EXT4-fs: Ignoring removed bh option [ 218.286726][T10406] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 218.300534][ T30] audit: type=1800 audit(218.270:1329): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 218.309254][T10406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.377359][T10412] loop6: detected capacity change from 0 to 128 [ 218.377740][T10412] ext4: Unknown parameter 'permit_directio' [ 218.418264][ T30] audit: type=1800 audit(218.380:1330): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 218.762991][ T30] audit: type=1800 audit(218.730:1331): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 218.813164][ T30] audit: type=1800 audit(218.780:1332): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 218.822099][T10426] syzkaller0: entered promiscuous mode [ 218.823310][T10426] syzkaller0: entered allmulticast mode [ 218.846903][ T30] audit: type=1800 audit(218.800:1333): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15805 res=0 errno=0 [ 218.866123][ T30] audit: type=1800 audit(218.830:1334): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 218.952199][ T30] audit: type=1804 audit(218.910:1335): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1517" name="file0" dev="tmpfs" ino=1067 res=1 errno=0 [ 219.231258][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.232181][T10439] loop0: detected capacity change from 0 to 512 [ 219.240932][T10439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.405030][T10457] fuse: fd is not a fuse device [ 219.414835][T10455] netlink: 'syz.6.1529': attribute type 21 has an invalid length. [ 220.160635][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.790769][T10495] syzkaller0: entered promiscuous mode [ 220.790814][T10495] syzkaller0: entered allmulticast mode [ 220.846180][T10500] warning: `syz.2.1545' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 220.992122][T10506] netlink: zone id is out of range [ 220.992156][T10506] netlink: zone id is out of range [ 220.992181][T10506] netlink: zone id is out of range [ 220.992193][T10506] netlink: zone id is out of range [ 220.992203][T10506] netlink: zone id is out of range [ 220.992213][T10506] netlink: zone id is out of range [ 220.992221][T10506] netlink: set zone limit has 4 unknown bytes [ 221.041213][T10514] loop0: detected capacity change from 0 to 512 [ 221.042912][T10514] EXT4-fs: inline encryption not supported [ 221.046619][T10514] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 221.062773][T10514] EXT4-fs (loop0): 1 truncate cleaned up [ 221.064460][T10514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.092716][T10514] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.1550: bad extra_isize 62 (inode size 256) [ 221.101289][T10514] EXT4-fs (loop0): Remounting filesystem read-only [ 221.236938][T10520] loop7: detected capacity change from 0 to 1024 [ 221.237333][T10520] EXT4-fs: Ignoring removed bh option [ 221.240412][T10520] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 221.270820][T10520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.870052][T10534] loop2: detected capacity change from 0 to 4096 [ 221.874760][T10534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 221.876956][T10534] EXT4-fs (loop2): Test dummy encryption mode enabled [ 221.877437][T10537] netlink: 292 bytes leftover after parsing attributes in process `syz.6.1559'. [ 221.883884][T10534] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c019, mo2=0003] [ 221.886402][T10534] System zones: 0-5 [ 221.892069][T10534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.913230][T10516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.940050][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.987813][ T5079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.292038][ T9982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.293687][ T5079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.374699][ T4716] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.375748][ T4716] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.376177][ T4716] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.376721][ T4716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.377090][ T4716] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.704158][ T5079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.800486][ T5079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.077369][ T5079] bridge_slave_1: left allmulticast mode [ 223.079502][ T5079] bridge_slave_1: left promiscuous mode [ 223.080880][ T5079] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.085948][ T5079] bridge_slave_0: left allmulticast mode [ 223.088699][ T5079] bridge_slave_0: left promiscuous mode [ 223.088809][ T5079] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.123223][ T5079] bond_slave_0: left promiscuous mode [ 223.124425][ T5079] bond_slave_1: left promiscuous mode [ 223.266312][T10596] netlink: 'syz.7.1576': attribute type 2 has an invalid length. [ 223.266352][T10596] netlink: 'syz.7.1576': attribute type 1 has an invalid length. [ 223.266377][T10596] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1576'. [ 223.291788][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 223.291830][ T30] audit: type=1800 audit(223.260:1406): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 223.314119][ T5079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.409803][ T30] audit: type=1800 audit(223.380:1407): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 223.418007][ T5079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.428957][ T5079] bond0 (unregistering): Released all slaves [ 223.458052][T10603] syzkaller0: entered promiscuous mode [ 223.458138][T10603] syzkaller0: entered allmulticast mode [ 223.528406][ T30] audit: type=1800 audit(223.490:1408): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1577" name="file1" dev="tmpfs" ino=1114 res=0 errno=0 [ 223.712870][ T30] audit: type=1800 audit(223.680:1409): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 223.829440][ T30] audit: type=1800 audit(223.800:1410): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 223.861543][ T30] audit: type=1800 audit(223.830:1411): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 223.886407][T10619] loop7: detected capacity change from 0 to 4096 [ 223.895548][ T30] audit: type=1800 audit(223.860:1412): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 223.911694][T10556] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.911755][T10556] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.911945][T10556] bridge_slave_0: entered allmulticast mode [ 223.920413][T10556] bridge_slave_0: entered promiscuous mode [ 223.922563][T10619] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.934751][T10619] netlink: 'syz.7.1582': attribute type 5 has an invalid length. [ 223.972730][T10556] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.972822][T10556] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.972924][T10556] bridge_slave_1: entered allmulticast mode [ 223.973398][T10556] bridge_slave_1: entered promiscuous mode [ 224.001589][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 224.091982][T10635] loop6: detected capacity change from 0 to 4096 [ 224.093809][T10635] EXT4-fs: inline encryption not supported [ 224.427936][ T4725] Bluetooth: hci3: command tx timeout [ 224.945126][T10635] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 224.945168][T10635] EXT4-fs (loop6): Test dummy encryption mode enabled [ 224.962952][T10635] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 224.963187][T10635] System zones: 0-5 [ 224.971904][T10635] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.001523][T10556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.002622][T10556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.007201][ T30] audit: type=1800 audit(224.970:1413): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 225.010946][T10556] team0: Port device team_slave_0 added [ 225.011692][T10556] team0: Port device team_slave_1 added [ 225.018477][ T30] audit: type=1400 audit(224.990:1414): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="lo" requested=rw pid=10627 comm="syz.6.1583" name="file1" dev="overlay" ino=15 [ 225.099759][ T30] audit: type=1800 audit(225.070:1415): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 225.114383][ T5079] hsr_slave_0: left promiscuous mode [ 225.116199][ T5079] hsr_slave_1: left promiscuous mode [ 225.116504][ T5079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.116518][ T5079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.123109][T10640] (NULL device *): [drm] The number of CRTCs must be between 1 and 31 [ 225.164613][ T5079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.164657][ T5079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.182748][ T5079] veth1_macvtap: left promiscuous mode [ 225.182820][ T5079] veth0_macvtap: left promiscuous mode [ 225.187286][ T5079] veth1_vlan: left promiscuous mode [ 225.187355][ T5079] veth0_vlan: left promiscuous mode [ 225.210610][ T9519] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.411154][T10652] FAULT_INJECTION: forcing a failure. [ 225.411154][T10652] name failslab, interval 1, probability 0, space 0, times 0 [ 225.414728][T10652] CPU: 1 UID: 0 PID: 10652 Comm: syz.2.1590 Tainted: G L syzkaller #0 PREEMPT [ 225.414755][T10652] Tainted: [L]=SOFTLOCKUP [ 225.414759][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 225.414766][T10652] Call trace: [ 225.414770][T10652] show_stack+0x2c/0x3c (C) [ 225.414798][T10652] __dump_stack+0x30/0x40 [ 225.414811][T10652] dump_stack_lvl+0xd8/0x12c [ 225.414822][T10652] dump_stack+0x1c/0x28 [ 225.414831][T10652] should_fail_ex+0x41c/0x590 [ 225.414843][T10652] should_failslab+0xc4/0x120 [ 225.414851][T10652] __kmalloc_cache_noprof+0x94/0x5ec [ 225.414860][T10652] smk_fetch+0xa4/0x154 [ 225.414869][T10652] smack_d_instantiate+0x5c0/0x7a0 [ 225.414876][T10652] security_d_instantiate+0xf8/0x1dc [ 225.414884][T10652] d_splice_alias_ops+0x74/0x358 [ 225.414893][T10652] d_splice_alias+0x2c/0x3c [ 225.414901][T10652] kernfs_iop_lookup+0x1d8/0x210 [ 225.414910][T10652] __lookup_slow+0x1e4/0x2b4 [ 225.414918][T10652] lookup_slow+0x60/0x84 [ 225.414926][T10652] link_path_walk+0xb0c/0x1584 [ 225.414935][T10652] path_openat+0x1b4/0x2a60 [ 225.414943][T10652] do_file_open+0x1c8/0x2e8 [ 225.414951][T10652] do_sys_openat2+0x114/0x1e8 [ 225.414961][T10652] do_sys_open+0xb0/0xe0 [ 225.414970][T10652] __arm64_sys_openat+0xa8/0xc4 [ 225.414980][T10652] invoke_syscall+0x98/0x244 [ 225.414989][T10652] el0_svc_common+0xec/0x23c [ 225.414999][T10652] do_el0_svc+0x4c/0x5c [ 225.415008][T10652] el0_svc+0x64/0x260 [ 225.415019][T10652] el0t_64_sync_handler+0x48/0x148 [ 225.415029][T10652] el0t_64_sync+0x198/0x19c [ 225.435347][T10654] input: syz0 as /devices/virtual/input/input2 [ 225.435606][T10654] input: failed to attach handler leds to device input2, error: -6 [ 225.582549][ T9982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.617511][ T5079] team0 (unregistering): Port device team_slave_1 removed [ 225.627419][ T5079] team0 (unregistering): Port device team_slave_0 removed [ 225.918237][T10556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.918271][T10556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.918288][T10556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.919028][T10556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.919035][T10556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.919051][T10556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.024952][T10556] hsr_slave_0: entered promiscuous mode [ 226.187052][T10556] hsr_slave_1: entered promiscuous mode [ 226.272067][T10556] debugfs: 'hsr0' already exists in 'hsr' [ 226.272105][T10556] Cannot create hsr debugfs directory [ 226.508046][ T4725] Bluetooth: hci3: command tx timeout [ 226.564688][T10556] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 226.569144][T10556] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.572020][T10556] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 226.576261][T10556] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.599154][T10556] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 226.608610][T10556] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.609025][T10556] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 226.615966][T10556] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.715664][T10556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.724193][T10722] FAULT_INJECTION: forcing a failure. [ 226.724193][T10722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.724236][T10722] CPU: 0 UID: 0 PID: 10722 Comm: syz.7.1605 Tainted: G L syzkaller #0 PREEMPT [ 226.724253][T10722] Tainted: [L]=SOFTLOCKUP [ 226.724257][T10722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 226.724263][T10722] Call trace: [ 226.724267][T10722] show_stack+0x2c/0x3c (C) [ 226.724285][T10722] __dump_stack+0x30/0x40 [ 226.724296][T10722] dump_stack_lvl+0xd8/0x12c [ 226.724306][T10722] dump_stack+0x1c/0x28 [ 226.724315][T10722] should_fail_ex+0x41c/0x590 [ 226.724327][T10722] should_fail+0x14/0x24 [ 226.724336][T10722] should_fail_usercopy+0x20/0x30 [ 226.724347][T10722] simple_read_from_buffer+0xc4/0x238 [ 226.724357][T10722] proc_fail_nth_read+0x1a8/0x248 [ 226.724365][T10722] vfs_read+0x230/0x8c8 [ 226.724375][T10722] ksys_read+0x12c/0x228 [ 226.724381][T10722] __arm64_sys_read+0x84/0x98 [ 226.724388][T10722] invoke_syscall+0x98/0x244 [ 226.724398][T10722] el0_svc_common+0xec/0x23c [ 226.724408][T10722] do_el0_svc+0x4c/0x5c [ 226.724418][T10722] el0_svc+0x64/0x260 [ 226.724428][T10722] el0t_64_sync_handler+0x48/0x148 [ 226.724441][T10722] el0t_64_sync+0x198/0x19c [ 226.739923][T10556] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.771486][T10556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.773774][T10556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.779113][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.779163][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.784878][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.784939][ T5074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.943666][T10556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.971745][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 227.016008][T10556] veth0_vlan: entered promiscuous mode [ 227.024040][T10556] veth1_vlan: entered promiscuous mode [ 227.037485][T10556] veth0_macvtap: entered promiscuous mode [ 227.041024][T10556] veth1_macvtap: entered promiscuous mode [ 227.044607][T10556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.049268][T10556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.051532][ T1910] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.051594][ T1910] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.051616][ T1910] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.051632][ T1910] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.099097][ T5077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.099135][ T5077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.110924][ T1910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.110960][ T1910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.149558][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 227.292713][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 228.586637][ T4725] Bluetooth: hci3: command tx timeout [ 230.676734][ T4725] Bluetooth: hci3: command tx timeout [ 248.827352][ T1587] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.827401][ T1587] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.827688][ T1587] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 266.266663][ T4716] Bluetooth: hci0: command 0x0405 tx timeout [ 285.238992][T10912] loop7: detected capacity change from 0 to 1024 [ 285.242557][T10912] EXT4-fs: Ignoring removed bh option [ 285.244114][T10912] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 285.253825][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 285.253866][ T30] audit: type=1800 audit(285.220:1462): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 285.262624][T10912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.263463][T10915] loop2: detected capacity change from 0 to 1024 [ 285.263895][T10915] EXT4-fs: Ignoring removed bh option [ 285.267997][T10915] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 285.298586][ T30] audit: type=1800 audit(285.270:1463): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 285.302173][ T30] audit: type=1800 audit(285.270:1464): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 285.385506][T10915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.205998][ T9982] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.246633][ T30] audit: type=1800 audit(286.210:1465): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 286.286759][ T30] audit: type=1800 audit(286.250:1466): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 286.323337][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.342293][T10941] FAULT_INJECTION: forcing a failure. [ 286.342293][T10941] name failslab, interval 1, probability 0, space 0, times 0 [ 286.342333][T10941] CPU: 0 UID: 0 PID: 10941 Comm: syz.6.1615 Tainted: G L syzkaller #0 PREEMPT [ 286.342347][T10941] Tainted: [L]=SOFTLOCKUP [ 286.342350][T10941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 286.342356][T10941] Call trace: [ 286.342359][T10941] show_stack+0x2c/0x3c (C) [ 286.342379][T10941] __dump_stack+0x30/0x40 [ 286.342390][T10941] dump_stack_lvl+0xd8/0x12c [ 286.342400][T10941] dump_stack+0x1c/0x28 [ 286.342410][T10941] should_fail_ex+0x41c/0x590 [ 286.342421][T10941] should_failslab+0xc4/0x120 [ 286.342429][T10941] __kmalloc_cache_noprof+0x94/0x5ec [ 286.342438][T10941] smk_fetch+0xa4/0x154 [ 286.342447][T10941] smack_d_instantiate+0x6d4/0x7a0 [ 286.342454][T10941] security_d_instantiate+0xf8/0x1dc [ 286.342462][T10941] d_splice_alias_ops+0x74/0x358 [ 286.342471][T10941] d_splice_alias+0x2c/0x3c [ 286.342479][T10941] kernfs_iop_lookup+0x1d8/0x210 [ 286.342488][T10941] __lookup_slow+0x1e4/0x2b4 [ 286.342496][T10941] lookup_slow+0x60/0x84 [ 286.342504][T10941] link_path_walk+0xb0c/0x1584 [ 286.342513][T10941] path_openat+0x1b4/0x2a60 [ 286.342521][T10941] do_file_open+0x1c8/0x2e8 [ 286.342529][T10941] do_sys_openat2+0x114/0x1e8 [ 286.342539][T10941] do_sys_open+0xb0/0xe0 [ 286.342548][T10941] __arm64_sys_openat+0xa8/0xc4 [ 286.342558][T10941] invoke_syscall+0x98/0x244 [ 286.342568][T10941] el0_svc_common+0xec/0x23c [ 286.342578][T10941] do_el0_svc+0x4c/0x5c [ 286.342587][T10941] el0_svc+0x64/0x260 [ 286.342598][T10941] el0t_64_sync_handler+0x48/0x148 [ 286.342607][T10941] el0t_64_sync+0x198/0x19c [ 286.432297][ T30] audit: type=1800 audit(286.310:1467): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 286.432393][ T30] audit: type=1800 audit(286.310:1468): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1615" name="raid_disks" dev="sysfs" ino=108443 res=0 errno=0 [ 286.524318][ T30] audit: type=1800 audit(286.490:1469): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 286.583984][ T30] audit: type=1800 audit(286.550:1470): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 286.600088][ T30] audit: type=1800 audit(286.570:1471): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 286.693482][T10969] netlink: set zone limit has 4 unknown bytes [ 286.716974][T10970] netlink: 'syz.5.1620': attribute type 10 has an invalid length. [ 286.799951][T10974] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 287.057845][T10981] binder: 10978:10981 context manager tried to acquire desc 0 [ 287.057877][T10981] binder: 10978:10981 ioctl c0306201 20000740 returned -22 [ 287.123955][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.124169][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.274209][T10997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.276292][T10997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.456422][T11001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.456943][T11001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.533328][T11005] overlayfs: failed to clone upperpath [ 287.702825][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.705552][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.919394][T11045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.919615][T11045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.177486][T11069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.179440][T11069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.545048][T11115] syzkaller0: entered promiscuous mode [ 288.545096][T11115] syzkaller0: entered allmulticast mode [ 290.043769][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1743'. [ 290.089130][T11232] syzkaller0: entered promiscuous mode [ 290.089161][T11232] syzkaller0: entered allmulticast mode [ 290.260824][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 290.260866][ T30] audit: type=1800 audit(290.230:1559): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 290.284472][ T30] audit: type=1800 audit(290.250:1560): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 290.338729][ T30] audit: type=1800 audit(290.310:1561): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 290.349309][T11252] xt_hashlimit: size too large, truncated to 1048576 [ 290.401332][ T30] audit: type=1800 audit(290.370:1562): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 290.411087][T11255] xt_hashlimit: size too large, truncated to 1048576 [ 290.455938][ T30] audit: type=1800 audit(290.420:1563): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 290.479234][ T30] audit: type=1800 audit(290.450:1564): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 290.502389][T11262] syzkaller1: entered promiscuous mode [ 290.502425][T11262] syzkaller1: entered allmulticast mode [ 290.543357][ T30] audit: type=1800 audit(290.510:1565): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 290.554187][T11264] netlink: zone id is out of range [ 290.554231][T11264] netlink: zone id is out of range [ 290.565592][ T30] audit: type=1800 audit(290.530:1566): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 290.598243][ T30] audit: type=1800 audit(290.570:1567): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16039 res=0 errno=0 [ 290.605277][ T30] audit: type=1800 audit(290.570:1568): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 290.638379][T11272] lo speed is unknown, defaulting to 1000 [ 290.638440][T11272] lo speed is unknown, defaulting to 1000 [ 290.639826][T11272] lo speed is unknown, defaulting to 1000 [ 290.641664][T11272] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 290.643648][T11272] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 290.656017][T11272] lo speed is unknown, defaulting to 1000 [ 290.656499][T11272] lo speed is unknown, defaulting to 1000 [ 290.658173][T11272] lo speed is unknown, defaulting to 1000 [ 290.658504][T11272] lo speed is unknown, defaulting to 1000 [ 290.658869][T11272] lo speed is unknown, defaulting to 1000 [ 291.245780][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1784'. [ 291.329142][T11345] syzkaller1: entered promiscuous mode [ 291.330646][T11345] syzkaller1: entered allmulticast mode [ 291.418640][T11347] Bluetooth: MGMT ver 1.23 [ 291.461551][T11351] tipc: Started in network mode [ 291.461591][T11351] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 291.461764][T11351] tipc: Enabled bearer , priority 10 [ 291.596331][T11366] tipc: Started in network mode [ 291.598637][T11366] tipc: Node identity 080211, cluster identity 4711 [ 291.600106][T11366] tipc: Enabled bearer , priority 10 [ 291.827064][T11382] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 291.849924][T11384] syzkaller0: entered promiscuous mode [ 291.849960][T11384] syzkaller0: entered allmulticast mode [ 292.292019][T11433] netlink: 'syz.7.1826': attribute type 22 has an invalid length. [ 292.292053][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1826'. [ 292.303677][ T5074] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.303740][ T5074] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.303744][T11433] netlink: 'syz.7.1826': attribute type 22 has an invalid length. [ 292.303760][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1826'. [ 292.303788][ T5074] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.303817][ T5074] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.386411][T11442] tipc: Started in network mode [ 292.387597][T11442] tipc: Node identity 3a4640d4e248, cluster identity 4711 [ 292.389185][T11442] tipc: Enabled bearer , priority 0 [ 292.399311][T11442] syzkaller0: entered promiscuous mode [ 292.400409][T11442] syzkaller0: entered allmulticast mode [ 292.402123][T11442] tipc: Resetting bearer [ 292.418195][T11446] syzkaller0: entered promiscuous mode [ 292.418240][T11446] syzkaller0: entered allmulticast mode [ 292.424964][T11441] tipc: Resetting bearer [ 293.094271][T11441] tipc: Disabling bearer [ 293.098506][ T4820] tipc: Node number set to 9480874 [ 293.126828][ T11] tipc: Node number set to 134353152 [ 293.157532][T11455] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1835'. [ 293.297104][T11466] bridge1: entered promiscuous mode [ 293.308809][T11466] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 293.499631][T11498] netlink: 'syz.5.1854': attribute type 1 has an invalid length. [ 293.509676][T11498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.529394][T11498] bond1: (slave geneve2): making interface the new active one [ 293.530841][T11498] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 293.922105][T11538] syzkaller0: entered promiscuous mode [ 293.922150][T11538] syzkaller0: entered allmulticast mode [ 296.569419][T11507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.593065][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 296.593111][ T30] audit: type=1800 audit(296.560:1667): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 296.609848][ T30] audit: type=1800 audit(296.580:1668): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 296.635646][ T30] audit: type=1800 audit(296.600:1669): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 296.673887][ T30] audit: type=1800 audit(296.640:1670): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 296.699252][ T30] audit: type=1800 audit(296.670:1671): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 296.713015][ T30] audit: type=1800 audit(296.680:1672): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152093 res=0 errno=0 [ 296.753301][ T30] audit: type=1800 audit(296.720:1673): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 296.757135][ T30] audit: type=1800 audit(296.720:1674): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16624 res=0 errno=0 [ 296.774535][T11591] bridge0: port 5(syz_tun) entered blocking state [ 296.779162][T11591] bridge0: port 5(syz_tun) entered disabled state [ 296.780693][T11591] syz_tun: entered allmulticast mode [ 296.783047][T11591] syz_tun: entered promiscuous mode [ 296.790992][ T30] audit: type=1800 audit(296.760:1675): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16507 res=0 errno=0 [ 296.805281][ T30] audit: type=1800 audit(296.770:1676): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 296.851797][T11599] lo speed is unknown, defaulting to 1000 [ 297.006817][T11613] xt_hashlimit: size too large, truncated to 1048576 [ 297.709919][T11626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.710596][T11626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.339362][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.339581][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.663552][ T5073] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.688806][ T4716] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 298.691877][ T4716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 298.693927][ T4716] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 298.698478][ T4716] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 298.706512][ T4716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.750966][T11689] cgroup: Unknown subsys name 'cpuset' [ 298.780145][ T5073] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.790205][T11692] bridge2: entered promiscuous mode [ 298.790247][T11692] bridge2: entered allmulticast mode [ 298.869269][ T5073] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.895883][T11714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.898607][T11714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.916876][T11703] bridge1: entered promiscuous mode [ 298.951509][T11721] loop8: detected capacity change from 0 to 256 [ 298.955843][T11721] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 299.001878][T11678] lo speed is unknown, defaulting to 1000 [ 299.043975][ T5073] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.140153][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.141852][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.143653][T11678] bridge_slave_0: entered allmulticast mode [ 299.145626][T11678] bridge_slave_0: entered promiscuous mode [ 299.154542][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.156490][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.156743][T11678] bridge_slave_1: entered allmulticast mode [ 299.159917][T11678] bridge_slave_1: entered promiscuous mode [ 299.208740][T11678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.214602][T11678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.239971][ T5073] bridge_slave_1: left allmulticast mode [ 299.240008][ T5073] bridge_slave_1: left promiscuous mode [ 299.240125][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.246047][ T5073] bridge_slave_0: left allmulticast mode [ 299.247681][ T5073] bridge_slave_0: left promiscuous mode [ 299.247785][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.501824][ T5073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.531376][ T5073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.558302][ T5073] bond0 (unregistering): Released all slaves [ 299.577985][T11678] team0: Port device team_slave_0 added [ 299.581466][T11678] team0: Port device team_slave_1 added [ 299.615298][T11748] syzkaller0: left promiscuous mode [ 299.615335][T11748] syzkaller0: left allmulticast mode [ 299.627852][ T5073] tipc: Disabling bearer [ 299.632392][ T5073] tipc: Left network mode [ 299.642823][T11752] tipc: Enabling of bearer rejected, failed to enable media [ 299.650783][T11678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.652373][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.662412][T11678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.667358][T11678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.667389][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.667423][T11678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.695810][T11678] hsr_slave_0: entered promiscuous mode [ 299.704483][T11678] hsr_slave_1: entered promiscuous mode [ 299.704790][T11678] debugfs: 'hsr0' already exists in 'hsr' [ 299.704809][T11678] Cannot create hsr debugfs directory [ 299.709389][T11754] syzkaller0: entered promiscuous mode [ 299.709406][T11754] syzkaller0: entered allmulticast mode [ 299.859689][T11776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.861766][T11776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.030981][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 300.031033][T11791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.031208][T11791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.046034][ T5073] hsr_slave_0: left promiscuous mode [ 300.047434][ T5073] hsr_slave_1: left promiscuous mode [ 300.048069][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.048084][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.048778][ T5073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.048795][ T5073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.054228][ T5073] veth1_macvtap: left promiscuous mode [ 300.055304][ T5073] veth0_macvtap: left promiscuous mode [ 300.056440][ T5073] veth1_vlan: left promiscuous mode [ 300.057650][ T5073] veth0_vlan: left promiscuous mode [ 300.168092][ T5073] team0 (unregistering): Port device team_slave_1 removed [ 300.173841][ T5073] team0 (unregistering): Port device team_slave_0 removed [ 300.270414][ T4782] lo speed is unknown, defaulting to 1000 [ 300.270458][ T4782] infiniband syz0: ib_query_port failed (-19) [ 300.291807][T11678] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 300.300099][T11678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.302143][T11678] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 300.317732][T11678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.318146][T11678] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 300.326104][T11678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.329695][T11678] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 300.333889][T11678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.436382][T11678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.450565][T11678] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.457110][ T1885] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.457168][ T1885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.457710][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.457729][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.709528][T11841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.714128][T11841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.725414][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 300.749272][ T4725] Bluetooth: hci4: command tx timeout [ 300.757718][T11678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.793902][T11849] binder: 11848:11849 ioctl c0306201 200003c0 returned -14 [ 300.929282][T11678] veth0_vlan: entered promiscuous mode [ 300.934726][T11678] veth1_vlan: entered promiscuous mode [ 300.964997][T11678] veth0_macvtap: entered promiscuous mode [ 300.973317][T11678] veth1_macvtap: entered promiscuous mode [ 300.990803][T11678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.992060][T11678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.013142][T11882] fuse: fd is not a fuse device [ 301.033937][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 301.037606][ T5078] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.037667][ T5078] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.037691][ T5078] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.037708][ T5078] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.066282][ T5078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.066322][ T5078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.080148][ T1885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.080184][ T1885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.365456][T11897] vhci_hcd vhci_hcd.2: default hub control req: 010b v0000 i0000 l0 [ 301.386320][T11891] overlayfs: failed to resolve './file1': -2 [ 301.458926][T11908] loop7: detected capacity change from 0 to 2048 [ 301.510694][T11908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.641416][T11939] loop9: detected capacity change from 0 to 512 [ 301.652798][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 301.652836][ T30] audit: type=1800 audit(301.620:1789): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 301 ** replaying previous printk message ** [ 301.665303][T11939] ------------[ cut here ]------------ [ 301.665337][T11939] EA inode 11 i_nlink=2 [ 301.665462][T11939] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x480/0x488, CPU#0: syz.9.2002/11939 [ 301.670092][T11939] Modules linked in: [ 301.670775][T11939] CPU: 0 UID: 0 PID: 11939 Comm: syz.9.2002 Tainted: G L syzkaller #0 PREEMPT [ 301.672548][T11939] Tainted: [L]=SOFTLOCKUP [ 301.673282][T11939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 301.675075][T11939] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 301.676501][T11939] pc : ext4_xattr_inode_update_ref+0x480/0x488 [ 301.677635][T11939] lr : ext4_xattr_inode_update_ref+0x480/0x488 [ 301.678778][T11939] sp : ffff800092cd6f40 [ 301.679490][T11939] x29: ffff800092cd6fe0 x28: 0000000000000000 x27: 1fffe0002005578d [ 301.680958][T11939] x26: ffff0001002abac0 x25: dfff800000000000 x24: ffff800092cd6f60 [ 301.682454][T11939] x23: ffff70001259adec x22: ffff80008a158000 x21: 0000000000000002 [ 301.683965][T11939] x20: 0000000000000001 x19: ffff0001002aba80 x18: 1fffe00035bc5428 [ 301.685475][T11939] x17: 0000000000000003 x16: ffff800088b07000 x15: ffff800080d2b81c [ 301.686998][T11939] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 301.688490][T11939] x11: 0000000000000000 x10: 0000000000080000 x9 : 6de73d91fee1e100 [ 301.689961][T11939] x8 : 6de73d91fee1e100 x7 : ffff80008048e080 x6 : 0000000000000000 [ 301.691404][T11939] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f8070 [ 301.692812][T11939] x2 : 0000000100000000 x1 : ffff000103c5ba80 x0 : 0000000000000001 [ 301.694287][T11939] Call trace: [ 301.694873][T11939] ext4_xattr_inode_update_ref+0x480/0x488 (P) [ 301.696014][T11939] ext4_xattr_inode_dec_ref_all+0x7f0/0xb84 [ 301.697055][T11939] ext4_xattr_delete_inode+0x778/0x900 [ 301.698010][T11939] ext4_evict_inode+0xa0c/0xfb8 [ 301.698855][T11939] evict+0x4c0/0x74c [ 301.699556][T11939] iput+0x8f0/0xc2c [ 301.700248][T11939] ext4_process_orphan+0x24c/0x2c0 [ 301.701155][T11939] ext4_orphan_cleanup+0x7d4/0xd20 [ 301.702076][T11939] ext4_fill_super+0x4628/0x4e14 [ 301.702963][T11939] get_tree_bdev_flags+0x388/0x43c [ 301.703856][T11939] get_tree_bdev+0x2c/0x3c [ 301.704631][T11939] ext4_get_tree+0x28/0x38 [ 301.705395][T11939] vfs_get_tree+0x90/0x28c [ 301.706163][T11939] fc_mount+0x24/0xac [ 301.706830][T11939] do_new_mount+0x2a4/0x538 [ 301.707618][T11939] path_mount+0x5f0/0xa88 [ 301.708338][T11939] do_mount+0xe8/0x148 [ 301.709067][T11939] __arm64_sys_mount+0x33c/0x388 [ 301.709934][T11939] invoke_syscall+0x98/0x244 [ 301.710740][T11939] el0_svc_common+0xec/0x23c [ 301.711503][T11939] do_el0_svc+0x4c/0x5c [ 301.712223][T11939] el0_svc+0x64/0x260 [ 301.712913][T11939] el0t_64_sync_handler+0x48/0x148 [ 301.713813][T11939] el0t_64_sync+0x198/0x19c [ 301.714598][T11939] irq event stamp: 1610 [ 301.715321][T11939] hardirqs last enabled at (1609): [] arm64_exit_to_kernel_mode+0x80/0x94 [ 301.717132][T11939] hardirqs last disabled at (1610): [] el1_brk64+0x20/0x54 [ 301.718565][T11939] softirqs last enabled at (926): [] __alloc_skb+0x1c0/0x610 [ 301.720126][T11939] softirqs last disabled at (924): [] __alloc_skb+0x1a8/0x610 [ 301.721712][T11939] ---[ end trace 0000000000000000 ]--- [ 301.724953][ T30] audit: type=1800 audit(301.630:1790): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16858 res=0 errno=0 [ 301.742046][T11939] EXT4-fs (loop9): 1 orphan inode deleted [ 301.742529][T11939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 301.861478][T11908] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.973033][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19 [ 302.082082][T11954] syz_tun (unregistering): left allmulticast mode [ 302.082117][T11954] syz_tun (unregistering): left promiscuous mode [ 302.082150][T11954] bridge0: port 5(syz_tun) entered disabled state [ 302.204831][ T5077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 302.204877][ T5077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 302.313786][ T5077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 302.313832][ T5077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 302.372371][ T5077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 302.372414][ T5077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 302.432083][ T5077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 302.432123][ T5077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 302.532805][ T30] audit: type=1800 audit(302.500:1791): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161382 res=0 errno=0 [ 302.533526][ T30] audit: type=1800 audit(302.500:1792): pid=10926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=161387 res=0 errno=0 [ 302.533575][ T30] audit: type=1800 audit(302.500:1793): pid=10926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=161391 res=0 errno=0 [ 302.543270][ T30] audit: type=1800 audit(302.510:1794): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161468 res=0 errno=0 [ 302.543988][ T30] audit: type=1800 audit(302.510:1795): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=161473 res=0 errno=0 [ 302.544931][ T30] audit: type=1800 audit(302.510:1796): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161554 res=0 errno=0 [ 302.545270][ T30] audit: type=1800 audit(302.510:1797): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=161477 res=0 errno=0 [ 302.546176][ T30] audit: type=1800 audit(302.510:1798): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=161640 res=0 errno=0 [ 302.552143][ T5077] bridge_slave_1: left allmulticast mode [ 302.552165][ T5077] bridge_slave_1: left promiscuous mode [ 302.552274][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.559208][ T5077] bridge_slave_0: left allmulticast mode [ 302.559228][ T5077] bridge_slave_0: left promiscuous mode [ 302.559306][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.614371][ T5077] bond1 (unregistering): (slave geneve2): Releasing active interface [ 302.627210][ T5077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.667641][ T5077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.707000][ T5077] bond0 (unregistering): Released all slaves [ 302.709305][ T5077] bond1 (unregistering): Released all slaves [ 302.759153][ T5077] tipc: Disabling bearer [ 302.760441][ T5077] tipc: Left network mode [ 302.854027][ T4401] 8021q: adding VLAN 0 to HW filter on device eth21 [ 302.925627][ T5077] hsr_slave_0: left promiscuous mode [ 302.929875][ T5077] hsr_slave_1: left promiscuous mode [ 302.930157][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.931127][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.002093][ T5077] team0 (unregistering): Port device team_slave_1 removed [ 303.005913][ T5077] team0 (unregistering): Port device team_slave_0 removed [ 303.062101][ T4401] 8021q: adding VLAN 0 to HW filter on device eth23 [ 303.192344][ T4401] 8021q: adding VLAN 0 to HW filter on device eth22 [ 303.316143][ T4401] 8021q: adding VLAN 0 to HW filter on device eth20 [ 303.379962][ T5077] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.437208][ T5077] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.491337][T11938] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.505256][ T5077] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.584481][ T5077] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.730833][ T5077] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.733278][ T5077] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.789744][ T5077] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.789806][ T5077] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.839562][ T4401] 8021q: adding VLAN 0 to HW filter on device eth24 [ 303.879381][ T5077] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.879439][ T5077] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.935051][ T5077] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.935108][ T5077] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.979101][ T4401] 8021q: adding VLAN 0 to HW filter on device eth26 [ 304.082584][ T5077] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.121506][ T4401] 8021q: adding VLAN 0 to HW filter on device eth25 [ 304.155242][ T5077] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.234215][ T5077] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.245729][ T4401] 8021q: adding VLAN 0 to HW filter on device eth27 [ 304.307570][ T5077] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.373572][ T4401] 8021q: adding VLAN 0 to HW filter on device eth28 [ 304.438455][ T5077] bridge_slave_1: left allmulticast mode [ 304.438493][ T5077] bridge_slave_1: left promiscuous mode [ 304.438616][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.445857][ T5077] bridge_slave_0: left allmulticast mode [ 304.445892][ T5077] bridge_slave_0: left promiscuous mode [ 304.445979][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.463796][ T5077] bridge_slave_1: left allmulticast mode [ 304.464941][ T5077] bridge_slave_1: left promiscuous mode [ 304.466085][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.470644][ T5077] bridge_slave_0: left allmulticast mode [ 304.471740][ T5077] bridge_slave_0: left promiscuous mode [ 304.472876][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.479004][ T5077] batadv2: left allmulticast mode [ 304.480032][ T5077] batadv2: left promiscuous mode [ 304.481082][ T5077] bridge0: port 4(batadv2) entered disabled state [ 304.483231][ T5077] batadv1: left allmulticast mode [ 304.484098][ T5077] batadv1: left promiscuous mode [ 304.485073][ T5077] bridge0: port 3(batadv1) entered disabled state [ 304.487519][ T5077] bridge_slave_1: left allmulticast mode [ 304.488531][ T5077] bridge_slave_1: left promiscuous mode [ 304.489595][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.491940][ T5077] bridge_slave_0: left allmulticast mode [ 304.492959][ T5077] bridge_slave_0: left promiscuous mode [ 304.494143][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.598238][ T5077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.618060][ T5077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.637541][ T5077] bond0 (unregistering): Released all slaves [ 304.639959][ T5077] bond1 (unregistering): Released all slaves [ 304.690469][ T5077] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 304.721870][ T5077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.737872][ T5077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.769499][ T5077] bond0 (unregistering): Released all slaves [ 304.771839][ T5077] bond1 (unregistering): Released all slaves [ 304.775984][ T5077] bond2 (unregistering): Released all slaves [ 304.819716][ T5077] bond1 (unregistering): (slave geneve2): Releasing active interface [ 304.858066][ T5077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.887692][ T5077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.928504][ T5077] bond0 (unregistering): Released all slaves [ 304.933111][ T5077] bond1 (unregistering): Released all slaves [ 304.937574][ T4401] 8021q: adding VLAN 0 to HW filter on device eth29 [ 305.004227][ T5077] tipc: Left network mode [ 305.094894][ T4401] 8021q: adding VLAN 0 to HW filter on device eth31 [ 305.247801][ T4401] 8021q: adding VLAN 0 to HW filter on device eth30 [ 305.385059][ T4401] 8021q: adding VLAN 0 to HW filter on device eth33 [ 305.515363][ T4401] 8021q: adding VLAN 0 to HW filter on device eth32 [ 305.575377][ T5077] hsr_slave_0: left promiscuous mode [ 305.576902][ T5077] hsr_slave_1: left promiscuous mode [ 305.577782][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.577796][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.578591][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.578603][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.586016][ T5077] hsr_slave_0: left promiscuous mode [ 305.589529][ T5077] hsr_slave_1: left promiscuous mode [ 305.589869][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.589881][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.590960][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.590972][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.592543][ T5077] hsr_slave_0: left promiscuous mode [ 305.592785][ T5077] hsr_slave_1: left promiscuous mode [ 305.593001][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.593013][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.604570][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.604606][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.618084][ T5077] veth1_macvtap: left promiscuous mode [ 305.619230][ T5077] veth0_macvtap: left promiscuous mode [ 305.620373][ T5077] veth1_vlan: left promiscuous mode [ 305.621431][ T5077] veth0_vlan: left promiscuous mode [ 305.623091][ T5077] veth1_macvtap: left promiscuous mode [ 305.624108][ T5077] veth0_macvtap: left promiscuous mode [ 305.625165][ T5077] veth1_vlan: left promiscuous mode [ 305.626175][ T5077] veth0_vlan: left promiscuous mode [ 305.628890][ T5077] veth1_macvtap: left promiscuous mode [ 305.630000][ T5077] veth0_macvtap: left promiscuous mode [ 305.631128][ T5077] veth1_vlan: left promiscuous mode [ 305.632207][ T5077] veth0_vlan: left promiscuous mode [ 305.803786][ T5077] team0 (unregistering): Port device team_slave_1 removed [ 305.807613][ T5077] team0 (unregistering): Port device team_slave_0 removed [ 305.932097][ T5077] team0 (unregistering): Port device team_slave_1 removed [ 305.935853][ T5077] team0 (unregistering): Port device team_slave_0 removed [ 306.074905][ T5077] team0 (unregistering): Port device team_slave_1 removed [ 306.089608][ T5077] team0 (unregistering): Port device team_slave_0 removed [ 306.134277][ T4401] 8021q: adding VLAN 0 to HW filter on device eth34 [ 306.285044][ T4401] 8021q: adding VLAN 0 to HW filter on device eth35 [ 306.834083][ T5077] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.900485][ T5077] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.959403][ T5077] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.025758][ T5077] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.096280][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 307.096333][ T30] audit: type=1800 audit(307.060:1871): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162762 res=0 errno=0 [ 307.108202][ T30] audit: type=1800 audit(307.080:1872): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162848 res=0 errno=0 [ 307.112868][ T30] audit: type=1800 audit(307.080:1873): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=162767 res=0 errno=0 [ 307.116310][ T30] audit: type=1800 audit(307.080:1874): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=162934 res=0 errno=0 [ 307.119789][ T30] audit: type=1800 audit(307.090:1875): pid=4344 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=163020 res=0 errno=0 [ 307.122987][ T30] audit: type=1800 audit(307.090:1876): pid=10926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=162853 res=0 errno=0 [ 307.126189][ T30] audit: type=1800 audit(307.090:1877): pid=10926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=162857 res=0 errno=0 [ 307.129868][ T30] audit: type=1800 audit(307.090:1878): pid=10926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=162856 res=0 errno=0 [ 307.129901][ T30] audit: type=1800 audit(307.090:1879): pid=10926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="addr_assign_type" dev="sysfs" ino=162859 res=0 errno=0 [ 307.129923][ T30] audit: type=1800 audit(307.090:1880): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=162771 res=0 errno=0 [ 307.144601][ T5077] bridge_slave_1: left allmulticast mode [ 307.144634][ T5077] bridge_slave_1: left promiscuous mode [ 307.144728][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.152302][ T5077] bridge_slave_0: left allmulticast mode [ 307.152335][ T5077] bridge_slave_0: left promiscuous mode [ 307.153322][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.220409][ T5077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.247849][ T5077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.287594][ T5077] bond0 (unregistering): Released all slaves [ 307.428658][ T4401] 8021q: adding VLAN 0 to HW filter on device eth37 [ 307.556518][ T5077] hsr_slave_0: left promiscuous mode [ 307.559365][ T5077] hsr_slave_1: left promiscuous mode [ 307.560842][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.562392][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.564330][ T5077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.564986][ T5077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.568418][ T5077] veth1_macvtap: left promiscuous mode [ 307.568467][ T5077] veth0_macvtap: left promiscuous mode [ 307.568763][ T5077] veth1_vlan: left promiscuous mode [ 307.568809][ T5077] veth0_vlan: left promiscuous mode [ 307.669249][ T5077] team0 (unregistering): Port device team_slave_1 removed [ 307.672970][ T5077] team0 (unregistering): Port device team_slave_0 removed [ 307.723233][ T4401] 8021q: adding VLAN 0 to HW filter on device eth36 [ 307.864104][ T4401] 8021q: adding VLAN 0 to HW filter on device eth38 [ 307.997967][ T4401] 8021q: adding VLAN 0 to HW filter on device eth39 [ 310.267284][ T1587] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.267333][ T1587] ieee802154 phy1 wpan1: encryption failed: -22