last executing test programs:

1m7.00476395s ago: executing program 2 (id=697):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8919, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket(0x1f, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32, @ANYBLOB, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98)

1m6.329563211s ago: executing program 2 (id=703):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="46060900000800001c00128009000100626f6e64000000000c000280050011007c"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1m6.28787894s ago: executing program 2 (id=707):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xfffd, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x41}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x7, 0x6, @multicast}, 0x14)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)

1m6.045676265s ago: executing program 2 (id=713):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000019c0), 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = fanotify_init(0x2, 0x101000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x101, 0x8000031, r1, 0x0)
r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300))
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0xa001, 0x880b, 0x8}}}}}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x8100)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000001080)={0x9, 0x4000005, 0xa6, 0x30a})

1m6.008865094s ago: executing program 2 (id=716):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000840)={r1})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}, {&(0x7f0000000040)="7542473782798be019", 0x9}], 0x2}}], 0x2, 0x2090)
socket(0x2, 0x80805, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4)
close(0x3)

1m4.645749144s ago: executing program 2 (id=721):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket(0x1, 0x5, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x840)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7105026b020000"], 0x1b)

1m4.641337648s ago: executing program 32 (id=721):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
socket(0x1, 0x5, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x840)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x8, &(0x7f0000000340)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7105026b020000"], 0x1b)

3.501789291s ago: executing program 3 (id=1396):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x43, 0xa0, 0xd8, 0x98, 0x188, 0x178, 0x178, 0x188, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xb8, 0xd8, 0x0, {0x0, 0x7a010000}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@TRACE={0x20}}, {{@ip={@loopback, @multicast1, 0xffffffff, 0xffffff00, 'bond0\x00', 'syzkaller1\x00', {}, {0xff}, 0x1d, 0x1, 0xe}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa385120281f126a6bc52700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x43, 0xa0, 0xd8, 0x98, 0x188, 0x178, 0x178, 0x188, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xb8, 0xd8, 0x0, {0x0, 0x7a010000}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@TRACE={0x20}}, {{@ip={@loopback, @multicast1, 0xffffffff, 0xffffff00, 'bond0\x00', 'syzkaller1\x00', {}, {0xff}, 0x1d, 0x1, 0xe}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa385120281f126a6bc52700"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) (async)
r1 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x501903, 0x0)
write$tun(r2, &(0x7f0000000400)={@void, @val={0x1, 0x80, 0x800, 0xdd8d, 0x2, 0x1}, @ipv4=@dccp={{0x3b, 0x4, 0x0, 0x0, 0x13f, 0x64, 0x0, 0x9, 0x21, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0xbe, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x7}, {@empty, 0xffff0000}]}, @ra={0x94, 0x4}, @generic={0x89, 0xb, "54d2b7be865737a450"}, @rr={0x7, 0x27, 0xb6, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @local, @local, @multicast2, @multicast2]}, @cipso={0x86, 0x25, 0x0, [{0x6, 0x2}, {0x1, 0x10, "4be1f784870ba8b33b60aef42372"}, {0x0, 0xd, "034ab33af3a360cc26f277"}]}, @timestamp_addr={0x44, 0x14, 0x9d, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0xfffffff9}, {@multicast1, 0x9}]}, @timestamp_addr={0x44, 0x4c, 0xde, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x1000}, {@empty, 0x6}, {@local, 0x200}, {@private=0xa010101, 0xfffffffd}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1e}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x5f74a444}, {@multicast1, 0xffff}, {@rand_addr=0x64010100, 0x9}]}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x4, 0x0, 0x0, 0x6, 0x0, "f0312b", 0x3, "cdb43e"}, "4916edd46c2a851667c52b155abfea1685b976773d994b464f077d8da7fc4f95352403e29c33496b4a22945658209a4f986f1ca58048d53c0bb282e18797266806e677"}}}, 0x149)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r3, 0x4, 0x42000) (async)
fcntl$setstatus(r3, 0x4, 0x42000)
dup(r3) (async)
r4 = dup(r3)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB='lwfdno=', @ANYRESHEX=r1, @ANYBLOB=',k'])
getpid()

2.465523213s ago: executing program 3 (id=1406):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000003c0), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0xfffffffe}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_clone3(&(0x7f0000000740)={0x40009000, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), {0x9}, &(0x7f0000000680)=""/55, 0x37, &(0x7f00000006c0), &(0x7f0000000700)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x6}, 0x58)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000007c0)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00')
read$FUSE(r5, &(0x7f0000000240)={0x2020}, 0x2020)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xfffffffffffffffb, 0x0, 0x9500}, {0xffffffff, 0x2, 0x9, 0xa}]})
syz_clone3(&(0x7f00000015c0)={0x240002000, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480), {}, &(0x7f00000004c0)=""/56, 0x38, &(0x7f0000000500)=""/139, &(0x7f0000000800)=[r3, r4], 0x2, {r6}}, 0x58)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000000140003f87e"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44010}, 0x40054)

2.464711176s ago: executing program 1 (id=1408):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x66, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x80000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x180, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x84bf, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x4, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x10000004, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0xa506, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x80, 0x8, 0x8, 0x53, 0x6, 0x4, 0x404, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x403, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40898}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r8, 0x0, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5)

2.437972786s ago: executing program 0 (id=1409):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x81, 0x102)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000005c0)={0xd, @sdr={0x41416770, 0xfffffff7}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x20048000)

2.404820653s ago: executing program 0 (id=1410):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084)

2.305702804s ago: executing program 0 (id=1411):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000800001c00128009000100626f6e64000000000c000280050011007c"], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff0000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.864524685s ago: executing program 0 (id=1413):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, 0x0, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) (fail_nth: 5)
r5 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_opts(r6, 0x84, 0x1c, 0xfffffffffffffffe, &(0x7f0000000100)=0x40)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro', @ANYRESDEC=0x0])

1.83818212s ago: executing program 4 (id=1415):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x10, 0x0, 0xff, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_METRICS={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (fail_nth: 7)

1.762538465s ago: executing program 3 (id=1417):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x8000005}, 0x94)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000088da6f87bc65727506000500000000000000000035170000000000000083b39e3238228771e4f07d3c6ba524529391f9fa8b0d57f2f1a253b3205b65f65f23365fb4d4c8258f50d2d8b31e622cd330e552cd6bac155b6085c5ae089cba2d493ed42ba6893c62bfa78049b02ab04ab6a7a6bd8d17f0be1f39aad336f11e231294b0ae94140be066ee83ef8097b85892732119924a97185dcfd4a6428c6135b7bde3d07a179a588627740c6665a56cd2cd0c655adef51dbd46aa60f7f4c8b54a969cf5de3a52637608a5f0979f10b615951d254e"], 0x20}}, 0x0)
fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)

1.758591055s ago: executing program 1 (id=1418):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (fail_nth: 7)

1.463732832s ago: executing program 1 (id=1420):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840)
write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6103010b0bf23b"], 0x14)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)

1.426503703s ago: executing program 4 (id=1421):
r0 = socket(0x1e, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000000)=@vsock={0x1e, 0x0, 0x0, @hyper}, 0x80, 0x0}}], 0x2, 0x4004000) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@remote}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}]}, 0x154}}, 0x0)

1.356936723s ago: executing program 3 (id=1422):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00')
pread64(r0, &(0x7f0000001600)=""/4103, 0x1007, 0x97)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, &(0x7f0000000140)=',,\x00')

1.356555267s ago: executing program 1 (id=1423):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8919, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = socket(0x1f, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (fail_nth: 1)

1.330583454s ago: executing program 3 (id=1425):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x20000c40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011)

1.234385485s ago: executing program 4 (id=1426):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x20000000000000cc, &(0x7f0000000180)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)

1.174925513s ago: executing program 1 (id=1428):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x66, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x80000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x180, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x84bf, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x4, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x10000004, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0xa506, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x80, 0x8, 0x8, 0x53, 0x6, 0x4, 0x404, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x403, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40898}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r8, 0x0, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5)

1.173708826s ago: executing program 4 (id=1429):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095000000001f000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x200)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

777.730798ms ago: executing program 0 (id=1431):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}}], 0x2, 0x2090)
socket(0x2, 0x80805, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4)
close(0x3)

776.279928ms ago: executing program 0 (id=1432):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000280)="f697079a161cfb7702311e629acda76933ddd0c24174eb4d4d28f9", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x3, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x28)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x54, 0x0, 0x4, 0x4}, {0x6, 0x0, 0xfe, 0x4}]})
ioctl$XFS_IOC_GETPARENTS(r0, 0xc028583e, &(0x7f0000000300)={{[0x9, 0x6, 0x8, 0x7]}, 0x0, 0x2, 0xffffffff, 0x0, &(0x7f0000000180)=[{{@_ha_fsid={[0x760, 0x9]}, {0xfc01, 0x7, 0x10000, 0x7}}, 0x838, 0x0, 'macvlan0\x00'}, {{@align=0x1, {0xfff9, 0x6, 0x5a70}}, 0x1, 0x0, '%.:{\x00'}, {{@_ha_fsid={[0x5, 0x2]}, {0x5, 0x9, 0x38d6}}, 0xc6a, 0x0, '}]]\x00'}, {{@_ha_fsid={[0x0, 0x2]}, {0x9, 0x7, 0xb, 0x9}}, 0xffffffff, 0x0, '/proc/cpuinfo\x00'}]})
r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f020})
r2 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0002020100"], 0x18)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x400, &(0x7f0000000c00), 0x1, 0xb83, &(0x7f0000002080)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f00000000c0))
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000002e00)={0x2020}, 0x2020)
lseek(r3, 0xfffffffffffffff5, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00001700000000001c0037800b0001006970768a"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0)

637.381089ms ago: executing program 5 (id=1433):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000013c0)=0x8, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (fail_nth: 7)

600.863039ms ago: executing program 5 (id=1434):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840)
write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6103010b0bf23b"], 0x14)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)

529.286364ms ago: executing program 5 (id=1435):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0)
write$nci(r0, &(0x7f0000000180)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x8, @v={0x4, 0x2, 0x6, 0x1, {0x5, 0xc7, "45dd60830e42af44"}, 0x1}}, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1e, 0x0, 0x8, 0xff, 0x4, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)

429.699267ms ago: executing program 5 (id=1436):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r5, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)

282.402781ms ago: executing program 4 (id=1437):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf2501000000", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

156.009675ms ago: executing program 4 (id=1438):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xfffd, 0xb}, {0x5, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x41}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200040d0)
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f0000000140)="ba", 0x1, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @multicast}, 0x14)

137.378205ms ago: executing program 3 (id=1439):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
ioctl$FIBMAP(r3, 0x1, &(0x7f00000001c0)=0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

130.680809ms ago: executing program 5 (id=1440):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x20000000000000cc, &(0x7f0000000180)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r7, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)

107.549788ms ago: executing program 1 (id=1441):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4088090}, 0x0)
close(r1)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x4005) (fail_nth: 5)

0s ago: executing program 5 (id=1442):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
wait4(0x0, 0x0, 0x40000000, 0xffffffffffffffff)
prctl$PR_SET_MM_EXE_FILE(0x27, 0xd, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2})
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40000002, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r4, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4)
recvmmsg(r4, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRES32, @ANYRES16=0x0], 0x1, 0x1b1, &(0x7f0000000300)="$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")

kernel console output (not intermixed with test programs):

1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   98.170687][ T4712] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39
[   99.221757][ T7078] syzkaller0: entered promiscuous mode
[   99.221791][ T7078] syzkaller0: entered allmulticast mode
[   99.337429][ T4712] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.423935][ T4710] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.426119][ T4710] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.427823][ T4710] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.429933][ T4710] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.431507][ T4710] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.566324][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.566393][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.566456][ T7081] bridge_slave_0: entered allmulticast mode
[   99.566914][ T7081] bridge_slave_0: entered promiscuous mode
[   99.568040][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.568059][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.568111][ T7081] bridge_slave_1: entered allmulticast mode
[   99.568515][ T7081] bridge_slave_1: entered promiscuous mode
[   99.577590][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.578533][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.586011][ T7081] team0: Port device team_slave_0 added
[   99.587631][ T7081] team0: Port device team_slave_1 added
[   99.593528][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.593552][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.593568][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.594151][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.594159][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   99.594176][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.605053][ T7081] hsr_slave_0: entered promiscuous mode
[   99.605394][ T7081] hsr_slave_1: entered promiscuous mode
[   99.605625][ T7081] debugfs: 'hsr0' already exists in 'hsr'
[   99.605635][ T7081] Cannot create hsr debugfs directory
[  100.861612][ T7044] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.864300][ T7081] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  100.881583][ T7081] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.883249][ T7081] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  100.899849][ T7081] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.901769][ T7081] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  100.979472][ T7102] FAULT_INJECTION: forcing a failure.
[  100.979472][ T7102] name failslab, interval 1, probability 0, space 0, times 0
[  100.979512][ T7102] CPU: 1 UID: 0 PID: 7102 Comm: syz.3.726 Not tainted syzkaller #0 PREEMPT 
[  100.979526][ T7102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  100.979534][ T7102] Call trace:
[  100.979537][ T7102]  show_stack+0x2c/0x3c (C)
[  100.979559][ T7102]  __dump_stack+0x30/0x40
[  100.979569][ T7102]  dump_stack_lvl+0xd8/0x12c
[  100.979579][ T7102]  dump_stack+0x1c/0x28
[  100.979589][ T7102]  should_fail_ex+0x414/0x588
[  100.979599][ T7102]  should_failslab+0xc4/0x124
[  100.979613][ T7102]  kmem_cache_alloc_node_noprof+0x94/0x6c8
[  100.979623][ T7102]  __alloc_skb+0x1f0/0x5f8
[  100.979634][ T7102]  netlink_alloc_large_skb+0xd4/0x114
[  100.979645][ T7102]  netlink_sendmsg+0x4bc/0x920
[  100.979655][ T7102]  __sock_sendmsg+0xc8/0x138
[  100.979665][ T7102]  ____sys_sendmsg+0x418/0x70c
[  100.979671][ T7102]  ___sys_sendmsg+0x198/0x224
[  100.979678][ T7102]  __sys_sendmsg+0x160/0x214
[  100.979685][ T7102]  __arm64_sys_sendmsg+0x80/0x94
[  100.979692][ T7102]  invoke_syscall+0x98/0x244
[  100.979702][ T7102]  el0_svc_common+0xe8/0x23c
[  100.979712][ T7102]  do_el0_svc+0x48/0x58
[  100.979722][ T7102]  el0_svc+0x64/0x260
[  100.979730][ T7102]  el0t_64_sync_handler+0x48/0x148
[  100.979737][ T7102]  el0t_64_sync+0x198/0x19c
[  101.010973][ T7081] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  101.011326][ T7081] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  101.017987][ T7108] __nla_validate_parse: 14 callbacks suppressed
[  101.018044][ T7108] netlink: 264 bytes leftover after parsing attributes in process `syz.3.727'.
[  101.018159][ T7108] netlink: 264 bytes leftover after parsing attributes in process `syz.3.727'.
[  101.516119][ T4707] Bluetooth: hci2: command tx timeout
[  101.567096][ T7081] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.597018][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.728'.
[  101.607245][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.728'.
[  101.642442][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.653708][ T7081] 8021q: adding VLAN 0 to HW filter on device team0
[  101.656760][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.656799][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.663827][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.663878][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.677997][ T7127] syzkaller0: entered promiscuous mode
[  101.679156][ T7127] syzkaller0: entered allmulticast mode
[  101.699349][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'.
[  101.699382][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'.
[  102.068226][   T39] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.068919][   T39] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.068949][   T39] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.068977][   T39] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.069388][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'.
[  102.069402][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'.
[  102.080748][ T7081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  102.082598][ T7081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  102.143834][ T7151] netlink: 20 bytes leftover after parsing attributes in process `syz.4.736'.
[  102.153279][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.738'.
[  102.279697][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.367773][ T7081] veth0_vlan: entered promiscuous mode
[  102.371660][ T7081] veth1_vlan: entered promiscuous mode
[  102.380714][ T7081] veth0_macvtap: entered promiscuous mode
[  102.381935][ T7081] veth1_macvtap: entered promiscuous mode
[  102.386577][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.388943][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.391479][   T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.391531][   T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.391556][   T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.391577][   T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.594498][ T4707] Bluetooth: hci2: command tx timeout
[  105.127403][ T7147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  105.189737][   T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.189765][   T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.219245][ T7195] syzkaller0: entered promiscuous mode
[  105.219280][ T7195] syzkaller0: entered allmulticast mode
[  105.240839][ T4964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.240869][ T4964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.547312][ T7208] syzkaller0: entered promiscuous mode
[  105.548427][ T7208] syzkaller0: entered allmulticast mode
[  105.560544][ T7212] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  105.560618][ T7212] Error validating options; rc = [-22]
[  105.563912][ T7212] loop1: detected capacity change from 0 to 1024
[  105.568558][ T7212] =======================================================
[  105.568558][ T7212] WARNING: The mand mount option has been deprecated and
[  105.568558][ T7212]          and is ignored by this kernel. Remove the mand
[  105.568558][ T7212]          option from the mount to silence this warning.
[  105.568558][ T7212] =======================================================
[  105.582171][ T7212] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec01c, mo2=0002]
[  105.582222][ T7212] System zones: 0-1, 3-8
[  105.584181][ T7212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.593484][ T7212] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.751: lblock 3 mapped to illegal pblock 3 (length 3)
[  105.606174][ T7212] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  105.606224][ T7212] EXT4-fs (loop1): This should not happen!! Data will be lost
[  105.606224][ T7212] 
[  105.607115][ T7212] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.751: Freeing blocks not in datazone - block = 3, count = 3
[  105.618665][ T7212] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.751: Freeing blocks not in datazone - block = 0, count = 16
[  105.636616][ T7224] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  105.640544][ T4705] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  105.641292][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  105.675776][ T4707] Bluetooth: hci2: command tx timeout
[  106.047351][ T7247] syzkaller0: entered promiscuous mode
[  106.047389][ T7247] syzkaller0: entered allmulticast mode
[  106.068788][ T7251] syzkaller0: entered promiscuous mode
[  106.068821][ T7251] syzkaller0: entered allmulticast mode
[  107.464012][ T7269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.464779][ T7274] syzkaller0: entered promiscuous mode
[  107.464796][ T7274] syzkaller0: entered allmulticast mode
[  107.468749][ T7259] tipc: Resetting bearer <eth:syzkaller0>
[  107.471269][ T7293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  107.504609][ T7258] tipc: Resetting bearer <eth:syzkaller0>
[  107.508162][ T7292] infiniband syz2: set down
[  107.508194][ T7292] infiniband syz2: added ipvlan0
[  107.509315][ T7292] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  107.510310][ T7292] infiniband syz2: Couldn't open port 1
[  107.517570][ T7258] tipc: Disabling bearer <eth:syzkaller0>
[  107.519853][ T7292] RDS/IB: syz2: added
[  107.519962][ T7292] smc: adding ib device syz2 with port count 1
[  107.519989][ T7292] smc:    ib device syz2 port 1 has no pnetid
[  107.563072][ T7297] syzkaller0: entered promiscuous mode
[  107.564642][ T7297] syzkaller0: entered allmulticast mode
[  107.588252][ T7299] __nla_validate_parse: 4 callbacks suppressed
[  107.589407][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'.
[  107.591142][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'.
[  107.682863][ T7305] loop4: detected capacity change from 0 to 256
[  107.710314][ T7305] FAT-fs (loop4): IO charset is not found
[  107.740884][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.768'.
[  107.755303][ T4707] Bluetooth: hci2: command tx timeout
[  108.014642][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'.
[  108.016506][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'.
[  108.057697][ T7314] bond10: entered promiscuous mode
[  108.060372][ T7314] bond10: entered allmulticast mode
[  108.063707][   T40] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  108.065564][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  108.065598][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  108.065618][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  108.147883][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'.
[  108.164101][ T7326] syzkaller0: entered promiscuous mode
[  108.164134][ T7326] syzkaller0: entered allmulticast mode
[  108.194124][ T7328] syzkaller0: entered promiscuous mode
[  108.194157][ T7328] syzkaller0: entered allmulticast mode
[  108.608052][ T7336] syzkaller0: entered promiscuous mode
[  108.609257][ T7336] syzkaller0: entered allmulticast mode
[  108.860295][ T7358] input: syz1 as /devices/virtual/input/input8
[  109.033811][ T7353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.035671][ T7352] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  109.039726][ T7356] syzkaller0: entered promiscuous mode
[  109.041814][ T7356] syzkaller0: entered allmulticast mode
[  109.044870][ T7360] tipc: Resetting bearer <eth:syzkaller0>
[  109.061395][ T7347] tipc: Resetting bearer <eth:syzkaller0>
[  109.069137][ T7347] tipc: Disabling bearer <eth:syzkaller0>
[  109.108746][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.781'.
[  109.151445][ T7366] bond6: entered promiscuous mode
[  109.151488][ T7366] bond6: entered allmulticast mode
[  109.432573][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'.
[  109.470952][ T7378] loop3: detected capacity change from 0 to 8192
[  109.481932][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'.
[  109.500240][ T7386] syzkaller0: entered promiscuous mode
[  109.500271][ T7386] syzkaller0: entered allmulticast mode
[  109.506547][ T7378]  loop3: p1 p2 p3
[  110.023256][ T7394] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.029085][ T7401] syzkaller0: entered promiscuous mode
[  110.030194][ T7401] syzkaller0: entered allmulticast mode
[  110.041232][ T7412] syzkaller0: entered promiscuous mode
[  110.041272][ T7412] syzkaller0: entered allmulticast mode
[  110.132758][ T7433] loop1: detected capacity change from 0 to 128
[  110.136993][ T7433] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.144788][ T7433] fscrypt (loop1, inode 12): Unsupported encryption flags (0x10)
[  110.384428][ T7376] tipc: Resetting bearer <eth:syzkaller0>
[  110.387686][ T7376] tipc: Disabling bearer <eth:syzkaller0>
[  110.409486][ T4705] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.417300][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'.
[  110.555778][ T7447] syzkaller0: entered promiscuous mode
[  110.555813][ T7447] syzkaller0: entered allmulticast mode
[  110.566919][ T7446] input: syz1 as /devices/virtual/input/input9
[  110.746853][ T7467] syzkaller0: entered promiscuous mode
[  110.746889][ T7467] syzkaller0: entered allmulticast mode
[  110.785094][ T7470] FAULT_INJECTION: forcing a failure.
[  110.785094][ T7470] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.787989][ T7470] CPU: 0 UID: 0 PID: 7470 Comm: syz.0.807 Not tainted syzkaller #0 PREEMPT 
[  110.788018][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  110.788024][ T7470] Call trace:
[  110.788028][ T7470]  show_stack+0x2c/0x3c (C)
[  110.788051][ T7470]  __dump_stack+0x30/0x40
[  110.788063][ T7470]  dump_stack_lvl+0xd8/0x12c
[  110.788073][ T7470]  dump_stack+0x1c/0x28
[  110.788082][ T7470]  should_fail_ex+0x414/0x588
[  110.788092][ T7470]  should_fail+0x14/0x24
[  110.788100][ T7470]  should_fail_usercopy+0x20/0x30
[  110.788109][ T7470]  _inline_copy_from_user+0x40/0x180
[  110.788117][ T7470]  copy_msghdr_from_user+0xb8/0x194
[  110.788125][ T7470]  ___sys_sendmsg+0x14c/0x224
[  110.788132][ T7470]  __sys_sendmsg+0x160/0x214
[  110.788138][ T7470]  __arm64_sys_sendmsg+0x80/0x94
[  110.788145][ T7470]  invoke_syscall+0x98/0x244
[  110.788155][ T7470]  el0_svc_common+0xe8/0x23c
[  110.788165][ T7470]  do_el0_svc+0x48/0x58
[  110.788175][ T7470]  el0_svc+0x64/0x260
[  110.788183][ T7470]  el0t_64_sync_handler+0x48/0x148
[  110.788190][ T7470]  el0t_64_sync+0x198/0x19c
[  110.934857][ T7493] syzkaller0: entered promiscuous mode
[  110.936090][ T7493] syzkaller0: entered allmulticast mode
[  111.471199][ T7524] syzkaller0: entered promiscuous mode
[  111.471239][ T7524] syzkaller0: entered allmulticast mode
[  111.563846][ T7536] syzkaller0: entered promiscuous mode
[  111.563880][ T7536] syzkaller0: entered allmulticast mode
[  111.728077][ T7554] input: syz1 as /devices/virtual/input/input10
[  111.798551][   T30] audit: type=1326 audit(111.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7556 comm="syz.1.838" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5377aa8 code=0x0
[  111.806886][ T7559] FAULT_INJECTION: forcing a failure.
[  111.806886][ T7559] name failslab, interval 1, probability 0, space 0, times 0
[  111.806917][ T7559] CPU: 1 UID: 0 PID: 7559 Comm: syz.4.839 Not tainted syzkaller #0 PREEMPT 
[  111.806930][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  111.806938][ T7559] Call trace:
[  111.806942][ T7559]  show_stack+0x2c/0x3c (C)
[  111.806960][ T7559]  __dump_stack+0x30/0x40
[  111.806971][ T7559]  dump_stack_lvl+0xd8/0x12c
[  111.806981][ T7559]  dump_stack+0x1c/0x28
[  111.806990][ T7559]  should_fail_ex+0x414/0x588
[  111.807000][ T7559]  should_failslab+0xc4/0x124
[  111.807009][ T7559]  kmem_cache_alloc_node_noprof+0x94/0x6c8
[  111.807019][ T7559]  __alloc_skb+0x1f0/0x5f8
[  111.807030][ T7559]  netlink_alloc_large_skb+0xd4/0x114
[  111.807040][ T7559]  netlink_sendmsg+0x4bc/0x920
[  111.807050][ T7559]  __sock_sendmsg+0xc8/0x138
[  111.807060][ T7559]  __sys_sendto+0x254/0x338
[  111.807070][ T7559]  __arm64_sys_sendto+0xd8/0xf8
[  111.807079][ T7559]  invoke_syscall+0x98/0x244
[  111.807090][ T7559]  el0_svc_common+0xe8/0x23c
[  111.807099][ T7559]  do_el0_svc+0x48/0x58
[  111.807109][ T7559]  el0_svc+0x64/0x260
[  111.807117][ T7559]  el0t_64_sync_handler+0x48/0x148
[  111.807124][ T7559]  el0t_64_sync+0x198/0x19c
[  111.918714][ T7564] loop1: detected capacity change from 0 to 4096
[  111.922978][ T7564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.966432][ T7564] netlink: 'syz.1.838': attribute type 1 has an invalid length.
[  111.967103][ T7564] netlink: 'syz.1.838': attribute type 2 has an invalid length.
[  112.058020][ T7569] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  112.058050][ T7569] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  112.058083][ T7569] vhci_hcd vhci_hcd.3: default hub control req: 0303 v0014 i0007 l0
[  112.169366][ T7576] syzkaller0: entered promiscuous mode
[  112.169398][ T7576] syzkaller0: entered allmulticast mode
[  112.475222][ T7598] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.475616][ T7598] syzkaller0: entered promiscuous mode
[  112.475854][ T7598] syzkaller0: entered allmulticast mode
[  112.484791][ T7598] tipc: Resetting bearer <eth:syzkaller0>
[  112.516110][ T7597] tipc: Resetting bearer <eth:syzkaller0>
[  112.539455][ T7597] tipc: Disabling bearer <eth:syzkaller0>
[  112.563988][ T7608] syzkaller0: entered promiscuous mode
[  112.564025][ T7608] syzkaller0: entered allmulticast mode
[  112.636899][ T7618] __nla_validate_parse: 30 callbacks suppressed
[  112.636933][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'.
[  112.666341][ T7618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.858'.
[  112.666380][ T7621] FAULT_INJECTION: forcing a failure.
[  112.666380][ T7621] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.666407][ T7621] CPU: 0 UID: 0 PID: 7621 Comm: syz.5.859 Not tainted syzkaller #0 PREEMPT 
[  112.666421][ T7621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  112.666428][ T7621] Call trace:
[  112.666432][ T7621]  show_stack+0x2c/0x3c (C)
[  112.666452][ T7621]  __dump_stack+0x30/0x40
[  112.666463][ T7621]  dump_stack_lvl+0xd8/0x12c
[  112.666473][ T7621]  dump_stack+0x1c/0x28
[  112.666482][ T7621]  should_fail_ex+0x414/0x588
[  112.666492][ T7621]  should_fail+0x14/0x24
[  112.666500][ T7621]  should_fail_usercopy+0x20/0x30
[  112.666509][ T7621]  _copy_from_iter+0x19c/0x1048
[  112.666519][ T7621]  netlink_sendmsg+0x56c/0x920
[  112.666530][ T7621]  __sock_sendmsg+0xc8/0x138
[  112.666541][ T7621]  ____sys_sendmsg+0x418/0x70c
[  112.666547][ T7621]  ___sys_sendmsg+0x198/0x224
[  112.666554][ T7621]  __sys_sendmsg+0x160/0x214
[  112.666561][ T7621]  __arm64_sys_sendmsg+0x80/0x94
[  112.666567][ T7621]  invoke_syscall+0x98/0x244
[  112.666578][ T7621]  el0_svc_common+0xe8/0x23c
[  112.666587][ T7621]  do_el0_svc+0x48/0x58
[  112.666602][ T7621]  el0_svc+0x64/0x260
[  112.666611][ T7621]  el0t_64_sync_handler+0x48/0x148
[  112.666620][ T7621]  el0t_64_sync+0x198/0x19c
[  112.666987][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.735384][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.862'.
[  112.773393][ T7632] loop3: detected capacity change from 0 to 8192
[  112.798977][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'.
[  113.068600][ T7652] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.070239][ T7652] syzkaller0: entered promiscuous mode
[  113.070273][ T7652] syzkaller0: entered allmulticast mode
[  113.087258][   T30] audit: type=1326 audit(113.080:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7656 comm="syz.0.870" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d77aa8 code=0x0
[  113.260114][ T7661] input: syz1 as /devices/virtual/input/input11
[  113.927136][ T7652] tipc: Resetting bearer <eth:syzkaller0>
[  113.934877][ T7665] syzkaller0: entered promiscuous mode
[  113.935832][ T7665] syzkaller0: entered allmulticast mode
[  113.940733][ T7650] tipc: Resetting bearer <eth:syzkaller0>
[  113.952027][ T7650] tipc: Disabling bearer <eth:syzkaller0>
[  113.997039][ T7668] loop0: detected capacity change from 0 to 4096
[  114.001238][ T7668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.009756][ T7668] netlink: 'syz.0.870': attribute type 1 has an invalid length.
[  114.009782][ T7668] netlink: 'syz.0.870': attribute type 2 has an invalid length.
[  114.045295][ T7671] FAULT_INJECTION: forcing a failure.
[  114.045295][ T7671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  114.048327][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: syz.1.872 Not tainted syzkaller #0 PREEMPT 
[  114.048354][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  114.048360][ T7671] Call trace:
[  114.048364][ T7671]  show_stack+0x2c/0x3c (C)
[  114.048390][ T7671]  __dump_stack+0x30/0x40
[  114.048402][ T7671]  dump_stack_lvl+0xd8/0x12c
[  114.048412][ T7671]  dump_stack+0x1c/0x28
[  114.048421][ T7671]  should_fail_ex+0x414/0x588
[  114.048432][ T7671]  should_fail+0x14/0x24
[  114.048440][ T7671]  should_fail_usercopy+0x20/0x30
[  114.048448][ T7671]  _copy_from_iter+0x19c/0x1048
[  114.048458][ T7671]  netlink_sendmsg+0x56c/0x920
[  114.048470][ T7671]  __sock_sendmsg+0xc8/0x138
[  114.048480][ T7671]  ____sys_sendmsg+0x43c/0x70c
[  114.048487][ T7671]  ___sys_sendmsg+0x198/0x224
[  114.048494][ T7671]  __sys_sendmmsg+0x210/0x588
[  114.048501][ T7671]  __arm64_sys_sendmmsg+0xa0/0xbc
[  114.048508][ T7671]  invoke_syscall+0x98/0x244
[  114.048518][ T7671]  el0_svc_common+0xe8/0x23c
[  114.048528][ T7671]  do_el0_svc+0x48/0x58
[  114.048538][ T7671]  el0_svc+0x64/0x260
[  114.048546][ T7671]  el0t_64_sync_handler+0x48/0x148
[  114.048553][ T7671]  el0t_64_sync+0x198/0x19c
[  114.055104][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.873'.
[  114.108956][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.873'.
[  114.143008][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.170231][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'.
[  114.484498][ T7684] bond8: entered promiscuous mode
[  114.484535][ T7684] bond8: entered allmulticast mode
[  114.880857][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.878'.
[  114.941000][ T7707] loop4: detected capacity change from 0 to 512
[  114.969780][ T7707] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.882: iget: bad extra_isize 90 (inode size 256)
[  114.972993][ T7707] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  114.974364][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  114.974404][    C0] EXT4-fs (loop4): initial error at time 114: ext4_xattr_inode_iget:441: inode 11
[  114.974444][    C0] EXT4-fs (loop4): last error at time 114: ext4_xattr_inode_iget:441: inode 11
[  114.983722][ T7707] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.882: error while reading EA inode 11 err=-117
[  114.986819][ T7707] loop4: lost filesystem error report for type 5 error -117
[  114.987116][ T7707] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  114.987424][ T7707] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.882: iget: bad extra_isize 90 (inode size 256)
[  114.987446][ T7707] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  115.055395][ T7707] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.882: error while reading EA inode 11 err=-117
[  115.055439][ T7707] loop4: lost filesystem error report for type 5 error -117
[  115.059697][ T7707] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.882: iget: bad extra_isize 90 (inode size 256)
[  115.059732][ T7707] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  115.060085][ T7707] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.882: error while reading EA inode 18 err=-117
[  115.060102][ T7707] loop4: lost filesystem error report for type 5 error -117
[  115.060324][ T7707] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.882: iget: bad extra_isize 90 (inode size 256)
[  115.060338][ T7707] loop4: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  115.060512][ T7707] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.882: error while reading EA inode 18 err=-117
[  115.060524][ T7707] loop4: lost filesystem error report for type 5 error -117
[  115.060814][ T7707] EXT4-fs (loop4): 1 orphan inode deleted
[  115.061413][ T7707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.091658][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.192043][ T7714] input: syz1 as /devices/virtual/input/input12
[  116.093222][   T30] audit: type=1326 audit(116.080:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.5.885" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe777aa8 code=0x0
[  116.116949][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'.
[  116.127106][ T7718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.886'.
[  116.226547][ T7721] loop5: detected capacity change from 0 to 4096
[  116.229966][ T7723] bond10: entered promiscuous mode
[  116.229982][ T7723] bond10: entered allmulticast mode
[  116.239697][ T7721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.923645][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.400477][ T7760] input: syz1 as /devices/virtual/input/input13
[  118.280242][ T7762] __nla_validate_parse: 4 callbacks suppressed
[  118.281486][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'.
[  118.303146][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'.
[  118.372322][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'.
[  118.374099][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'.
[  118.394905][   T30] audit: type=1326 audit(118.390:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7769 comm="syz.1.903" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5377aa8 code=0x0
[  118.422777][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'.
[  118.519841][ T7774] loop1: detected capacity change from 0 to 4096
[  118.559275][ T7774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.640302][ T7788] FAULT_INJECTION: forcing a failure.
[  118.640302][ T7788] name failslab, interval 1, probability 0, space 0, times 0
[  118.640342][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.4.907 Not tainted syzkaller #0 PREEMPT 
[  118.640354][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  118.640361][ T7788] Call trace:
[  118.640366][ T7788]  show_stack+0x2c/0x3c (C)
[  118.640386][ T7788]  __dump_stack+0x30/0x40
[  118.640398][ T7788]  dump_stack_lvl+0xd8/0x12c
[  118.640407][ T7788]  dump_stack+0x1c/0x28
[  118.640420][ T7788]  should_fail_ex+0x414/0x588
[  118.640431][ T7788]  should_failslab+0xc4/0x124
[  118.640440][ T7788]  kmem_cache_alloc_noprof+0x8c/0x610
[  118.640449][ T7788]  skb_clone+0x1a8/0x31c
[  118.640458][ T7788]  __netlink_deliver_tap+0x36c/0x6f8
[  118.640469][ T7788]  netlink_deliver_tap+0x1d8/0x1dc
[  118.640479][ T7788]  netlink_unicast+0x5e8/0x800
[  118.640489][ T7788]  netlink_sendmsg+0x63c/0x920
[  118.640498][ T7788]  __sock_sendmsg+0xc8/0x138
[  118.640508][ T7788]  ____sys_sendmsg+0x418/0x70c
[  118.640515][ T7788]  ___sys_sendmsg+0x198/0x224
[  118.640522][ T7788]  __sys_sendmsg+0x160/0x214
[  118.640529][ T7788]  __arm64_sys_sendmsg+0x80/0x94
[  118.640535][ T7788]  invoke_syscall+0x98/0x244
[  118.640546][ T7788]  el0_svc_common+0xe8/0x23c
[  118.640555][ T7788]  do_el0_svc+0x48/0x58
[  118.640565][ T7788]  el0_svc+0x64/0x260
[  118.640573][ T7788]  el0t_64_sync_handler+0x48/0x148
[  118.640580][ T7788]  el0t_64_sync+0x198/0x19c
[  118.691941][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'.
[  118.746315][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.908'.
[  119.087800][ T4707] Bluetooth: Unknown BR/EDR signaling command 0x0e
[  119.089185][ T4707] Bluetooth: Wrong link type (-22)
[  119.089463][ T4707] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  119.089479][ T4707] Bluetooth: Wrong link type (-22)
[  119.089552][ T4707] Bluetooth: hci1: link tx timeout
[  119.089589][ T4707] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  119.492428][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.913'.
[  119.493262][ T7806] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  119.493282][ T7806] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode
[  119.494034][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.913'.
[  119.516100][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.912'.
[  119.520465][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.556749][ T7806] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[  119.558624][ T7806] mac80211_hwsim hwsim12 wlan0: left allmulticast mode
[  119.582128][ T7815] netlink: 'syz.1.915': attribute type 17 has an invalid length.
[  119.613322][ T7804] bond11: entered promiscuous mode
[  119.613361][ T7804] bond11: entered allmulticast mode
[  119.642698][ T7819] syzkaller0: entered promiscuous mode
[  119.643986][ T7819] syzkaller0: entered allmulticast mode
[  119.703795][ T7827] syzkaller0: entered promiscuous mode
[  119.703834][ T7827] syzkaller0: entered allmulticast mode
[  119.755728][ T7832] syzkaller0: entered promiscuous mode
[  119.757006][ T7832] syzkaller0: entered allmulticast mode
[  119.808764][ T7836] FAULT_INJECTION: forcing a failure.
[  119.808764][ T7836] name failslab, interval 1, probability 0, space 0, times 0
[  119.813247][ T7836] CPU: 0 UID: 0 PID: 7836 Comm: syz.5.922 Not tainted syzkaller #0 PREEMPT 
[  119.813274][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  119.813282][ T7836] Call trace:
[  119.813287][ T7836]  show_stack+0x2c/0x3c (C)
[  119.813311][ T7836]  __dump_stack+0x30/0x40
[  119.813324][ T7836]  dump_stack_lvl+0xd8/0x12c
[  119.813336][ T7836]  dump_stack+0x1c/0x28
[  119.813346][ T7836]  should_fail_ex+0x414/0x588
[  119.813356][ T7836]  should_failslab+0xc4/0x124
[  119.813364][ T7836]  __kmalloc_noprof+0x100/0x6f0
[  119.813374][ T7836]  sk_prot_alloc+0xc4/0x1ec
[  119.813383][ T7836]  sk_alloc+0x44/0x3a0
[  119.813392][ T7836]  bpf_prog_test_run_skb+0x2fc/0x1da8
[  119.813401][ T7836]  bpf_prog_test_run+0x1e0/0x248
[  119.813411][ T7836]  __sys_bpf+0x468/0x5f0
[  119.813421][ T7836]  __arm64_sys_bpf+0x80/0x98
[  119.813430][ T7836]  invoke_syscall+0x98/0x244
[  119.813440][ T7836]  el0_svc_common+0xe8/0x23c
[  119.813450][ T7836]  do_el0_svc+0x48/0x58
[  119.813459][ T7836]  el0_svc+0x64/0x260
[  119.813468][ T7836]  el0t_64_sync_handler+0x48/0x148
[  119.813475][ T7836]  el0t_64_sync+0x198/0x19c
[  119.915903][ T7841] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20000
[  119.916410][ T7841] xt_connbytes: Forcing CT accounting to be enabled
[  119.923346][   T30] audit: type=1326 audit(119.910:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7842 comm="syz.4.925" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0977aa8 code=0x0
[  120.010431][ T7846] FAULT_INJECTION: forcing a failure.
[  120.010431][ T7846] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  120.010468][ T7846] CPU: 1 UID: 0 PID: 7846 Comm: syz.0.926 Not tainted syzkaller #0 PREEMPT 
[  120.010478][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  120.010483][ T7846] Call trace:
[  120.010486][ T7846]  show_stack+0x2c/0x3c (C)
[  120.010504][ T7846]  __dump_stack+0x30/0x40
[  120.010516][ T7846]  dump_stack_lvl+0xd8/0x12c
[  120.010525][ T7846]  dump_stack+0x1c/0x28
[  120.010534][ T7846]  should_fail_ex+0x414/0x588
[  120.010544][ T7846]  should_fail+0x14/0x24
[  120.010552][ T7846]  should_fail_usercopy+0x20/0x30
[  120.010561][ T7846]  _inline_copy_from_user+0x40/0x180
[  120.010571][ T7846]  bpf_test_init+0xd8/0x154
[  120.010579][ T7846]  bpf_prog_test_run_xdp+0x410/0xdcc
[  120.010587][ T7846]  bpf_prog_test_run+0x1e0/0x248
[  120.010597][ T7846]  __sys_bpf+0x468/0x5f0
[  120.010613][ T7846]  __arm64_sys_bpf+0x80/0x98
[  120.010623][ T7846]  invoke_syscall+0x98/0x244
[  120.010634][ T7846]  el0_svc_common+0xe8/0x23c
[  120.010646][ T7846]  do_el0_svc+0x48/0x58
[  120.010656][ T7846]  el0_svc+0x64/0x260
[  120.010664][ T7846]  el0t_64_sync_handler+0x48/0x148
[  120.010671][ T7846]  el0t_64_sync+0x198/0x19c
[  120.056022][ T7847] loop4: detected capacity change from 0 to 4096
[  120.072299][ T7847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.330260][ T7855] netlink: 'syz.0.928': attribute type 17 has an invalid length.
[  120.406595][ T7862] syzkaller0: entered promiscuous mode
[  120.408806][ T7862] syzkaller0: entered allmulticast mode
[  120.425535][ T7865] loop3: detected capacity change from 0 to 4096
[  120.439122][ T7865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.516141][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.535692][ T7876] syzkaller0: entered promiscuous mode
[  120.536833][ T7876] syzkaller0: entered allmulticast mode
[  120.558585][ T7878] loop5: detected capacity change from 0 to 4096
[  120.580092][ T7878] EXT4-fs (loop5): Test dummy encryption mode enabled
[  120.583443][ T7878] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec11c, mo2=0002]
[  120.583503][ T7878] System zones: 0-5
[  120.584463][ T7878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.603875][ T7880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.605998][ T7880] syzkaller0: entered promiscuous mode
[  120.606022][ T7880] syzkaller0: entered allmulticast mode
[  120.646104][ T7880] tipc: Resetting bearer <eth:syzkaller0>
[  120.650454][ T7879] tipc: Resetting bearer <eth:syzkaller0>
[  120.676303][ T7879] tipc: Disabling bearer <eth:syzkaller0>
[  120.728882][ T7887] syzkaller0: entered promiscuous mode
[  120.728928][ T7887] syzkaller0: entered allmulticast mode
[  120.742421][ T7889] netlink: 'syz.0.942': attribute type 17 has an invalid length.
[  120.803233][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.878498][ T7899] 9p: Bad value for 'rfdno'
[  120.922477][ T7900] netlink: 'syz.4.945': attribute type 1 has an invalid length.
[  121.069714][    C0] vcan0: j1939_tp_rxtimer: 0x000000009ce0f762: rx timeout, send abort
[  121.114825][ T4710] Bluetooth: hci1: command 0x0406 tx timeout
[  121.344551][ T7905] input: syz1 as /devices/virtual/input/input14
[  121.568790][    C0] vcan0: j1939_tp_rxtimer: 0x00000000362c7805: rx timeout, send abort
[  121.569763][    C0] vcan0: j1939_tp_rxtimer: 0x000000009ce0f762: abort rx timeout. Force session deactivation
[  122.068840][    C0] vcan0: j1939_tp_rxtimer: 0x00000000362c7805: abort rx timeout. Force session deactivation
[  122.176987][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.227529][ T7909] syzkaller0: entered promiscuous mode
[  122.227563][ T7909] syzkaller0: entered allmulticast mode
[  122.243858][ T7911] syzkaller0: entered promiscuous mode
[  122.246248][ T7911] syzkaller0: entered allmulticast mode
[  122.328204][ T7915] syzkaller0: entered promiscuous mode
[  122.328239][ T7915] syzkaller0: entered allmulticast mode
[  122.349473][   T30] audit: type=1326 audit(122.340:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7920 comm="syz.4.954" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0977aa8 code=0x0
[  122.383927][ T7925] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  122.385914][ T7925] syzkaller0: entered promiscuous mode
[  122.387193][ T7925] syzkaller0: entered allmulticast mode
[  122.392779][ T7925] tipc: Resetting bearer <eth:syzkaller0>
[  122.398087][ T7924] tipc: Resetting bearer <eth:syzkaller0>
[  122.409926][ T7930] FAULT_INJECTION: forcing a failure.
[  122.409926][ T7930] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  122.409964][ T7930] CPU: 1 UID: 0 PID: 7930 Comm: syz.5.957 Not tainted syzkaller #0 PREEMPT 
[  122.409975][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  122.409982][ T7930] Call trace:
[  122.409986][ T7930]  show_stack+0x2c/0x3c (C)
[  122.410004][ T7930]  __dump_stack+0x30/0x40
[  122.410016][ T7930]  dump_stack_lvl+0xd8/0x12c
[  122.410026][ T7930]  dump_stack+0x1c/0x28
[  122.410036][ T7930]  should_fail_ex+0x414/0x588
[  122.410046][ T7930]  should_fail+0x14/0x24
[  122.410054][ T7930]  should_fail_usercopy+0x20/0x30
[  122.410063][ T7930]  _inline_copy_from_user+0x40/0x180
[  122.410074][ T7930]  __sys_bpf+0x140/0x5f0
[  122.410083][ T7930]  __arm64_sys_bpf+0x80/0x98
[  122.410092][ T7930]  invoke_syscall+0x98/0x244
[  122.410102][ T7930]  el0_svc_common+0xe8/0x23c
[  122.410112][ T7930]  do_el0_svc+0x48/0x58
[  122.410121][ T7930]  el0_svc+0x64/0x260
[  122.410129][ T7930]  el0t_64_sync_handler+0x48/0x148
[  122.410136][ T7930]  el0t_64_sync+0x198/0x19c
[  122.454920][ T7924] tipc: Disabling bearer <eth:syzkaller0>
[  122.460035][ T7928] loop4: detected capacity change from 0 to 4096
[  122.503711][ T7928] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.515313][ T7938] loop0: detected capacity change from 0 to 1024
[  122.520133][ T7938] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  122.520205][ T7938] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  122.533612][ T7938] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  122.536738][ T7938] EXT4-fs (loop0): orphan cleanup on readonly fs
[  122.538091][ T7938] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.959: Inode bitmap for bg 0 marked uninitialized
[  122.538117][ T7938] loop0: lost filesystem error report for type 5 error -117
[  122.541102][ T7938] EXT4-fs (loop0): Remounting filesystem read-only
[  122.541714][ T7938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  122.643273][ T7940] input: syz1 as /devices/virtual/input/input15
[  123.359907][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.408355][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.872790][ T7948] syzkaller0: entered promiscuous mode
[  123.874102][ T7948] syzkaller0: entered allmulticast mode
[  123.892200][ T7968] syzkaller0: entered promiscuous mode
[  123.893379][ T7968] syzkaller0: entered allmulticast mode
[  123.903726][ T7973] loop0: detected capacity change from 0 to 256
[  124.640974][ T7975] __nla_validate_parse: 13 callbacks suppressed
[  124.641194][ T7975] netlink: 40 bytes leftover after parsing attributes in process `syz.4.967'.
[  124.656269][ T7985] syzkaller0: entered promiscuous mode
[  124.657530][ T7985] syzkaller0: entered allmulticast mode
[  124.700361][ T8005] tipc: Can't bind to reserved service type 0
[  124.714107][   T30] audit: type=1326 audit(124.700:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8006 comm="syz.3.973" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80577aa8 code=0x0
[  124.846171][ T8010] loop3: detected capacity change from 0 to 4096
[  124.865458][ T8010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.077967][ T7995] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.078105][ T7996] syzkaller0: entered promiscuous mode
[  125.078117][ T7996] syzkaller0: entered allmulticast mode
[  125.083188][ T8001] tipc: Resetting bearer <eth:syzkaller0>
[  125.083786][ T8008] warning: `syz.4.972' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  125.092723][ T7991] tipc: Resetting bearer <eth:syzkaller0>
[  125.107351][ T7991] tipc: Disabling bearer <eth:syzkaller0>
[  125.373984][ T8027] input: syz1 as /devices/virtual/input/input16
[  125.915164][ T1595] ieee802154 phy0 wpan0: encryption failed: -22
[  125.916526][ T1595] ieee802154 phy1 wpan1: encryption failed: -22
[  126.128121][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.206003][ T8034] netlink: 'syz.0.981': attribute type 8 has an invalid length.
[  126.227379][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'.
[  126.296193][ T4812] psmouse serio0: Failed to reset mouse on : -5
[  126.438955][ T8050] loop0: detected capacity change from 0 to 512
[  126.440831][ T8050] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  126.538648][ T8050] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  126.538919][ T8050] Quota error (device loop0): write_blk: dquota write failed
[  126.538937][ T8050] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  126.538973][ T8050] Quota error (device loop0): write_blk: dquota write failed
[  126.539019][ T8050] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  126.539041][ T8050] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.981: Failed to acquire dquot type 1
[  126.539055][ T8050] loop0: lost filesystem error report for type 5 error -28
[  126.545713][    C1] EXT4-fs (loop0): error count since last fsck: 2
[  126.545727][    C1] EXT4-fs (loop0): initial error at time 126: ext4_mb_generate_buddy:1317
[  126.545741][    C1] EXT4-fs (loop0): last error at time 126: ext4_acquire_dquot:7034
[  126.550801][ T8050] EXT4-fs (loop0): 1 truncate cleaned up
[  126.551271][ T8050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.583121][ T8042] EXT4-fs error (device loop0): __ext4_remount:6837: comm syz.0.981: Abort forced by user
[  126.585389][ T8042] EXT4-fs (loop0): Remounting filesystem read-only
[  126.585403][ T8042] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  126.749814][ T8049] syzkaller0: entered promiscuous mode
[  126.749844][ T8049] syzkaller0: entered allmulticast mode
[  126.799373][ T8065] FAULT_INJECTION: forcing a failure.
[  126.799373][ T8065] name failslab, interval 1, probability 0, space 0, times 0
[  126.801833][ T8065] CPU: 1 UID: 0 PID: 8065 Comm: syz.1.985 Not tainted syzkaller #0 PREEMPT 
[  126.801849][ T8065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  126.801855][ T8065] Call trace:
[  126.801859][ T8065]  show_stack+0x2c/0x3c (C)
[  126.801882][ T8065]  __dump_stack+0x30/0x40
[  126.801893][ T8065]  dump_stack_lvl+0xd8/0x12c
[  126.801903][ T8065]  dump_stack+0x1c/0x28
[  126.801912][ T8065]  should_fail_ex+0x414/0x588
[  126.801922][ T8065]  should_failslab+0xc4/0x124
[  126.801931][ T8065]  kmem_cache_alloc_node_noprof+0x94/0x6c8
[  126.801940][ T8065]  __alloc_skb+0x1f0/0x5f8
[  126.801951][ T8065]  netlink_alloc_large_skb+0xd4/0x114
[  126.801962][ T8065]  netlink_sendmsg+0x4bc/0x920
[  126.801972][ T8065]  __sock_sendmsg+0xc8/0x138
[  126.801981][ T8065]  ____sys_sendmsg+0x418/0x70c
[  126.801988][ T8065]  ___sys_sendmsg+0x198/0x224
[  126.801995][ T8065]  __sys_sendmsg+0x160/0x214
[  126.802002][ T8065]  __arm64_sys_sendmsg+0x80/0x94
[  126.802008][ T8065]  invoke_syscall+0x98/0x244
[  126.802018][ T8065]  el0_svc_common+0xe8/0x23c
[  126.802028][ T8065]  do_el0_svc+0x48/0x58
[  126.802038][ T8065]  el0_svc+0x64/0x260
[  126.802046][ T8065]  el0t_64_sync_handler+0x48/0x148
[  126.802053][ T8065]  el0t_64_sync+0x198/0x19c
[  127.058730][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.111635][   T30] audit: type=1326 audit(127.100:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8082 comm="syz.0.990" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d77aa8 code=0x0
[  127.190909][ T8084] loop0: detected capacity change from 0 to 4096
[  127.200613][ T8084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.240366][ T8076] syzkaller0: entered promiscuous mode
[  127.241615][ T8076] syzkaller0: entered allmulticast mode
[  127.539441][ T8093] input: syz1 as /devices/virtual/input/input18
[  128.210920][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.573742][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'.
[  128.573774][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'.
[  128.574021][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'.
[  128.574035][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'.
[  128.574983][ T8103] Bluetooth: MGMT ver 1.23
[  128.638037][ T8107] syzkaller0: entered promiscuous mode
[  128.638084][ T8107] syzkaller0: entered allmulticast mode
[  128.642244][ T8109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.997'.
[  128.643749][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'.
[  128.687841][ T8111] syzkaller0: entered promiscuous mode
[  128.687878][ T8111] syzkaller0: entered allmulticast mode
[  128.730987][ T8118] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.731251][ T8118] syzkaller0: entered promiscuous mode
[  128.731262][ T8118] syzkaller0: entered allmulticast mode
[  130.149130][ T8122] tipc: Resetting bearer <eth:syzkaller0>
[  130.161401][ T8117] tipc: Resetting bearer <eth:syzkaller0>
[  130.168948][ T8117] tipc: Disabling bearer <eth:syzkaller0>
[  130.201772][ T4467] tipc: Node number set to 1945859954
[  130.282750][ T8143] syzkaller0: entered promiscuous mode
[  130.282787][ T8143] syzkaller0: entered allmulticast mode
[  130.284757][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'.
[  130.284772][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'.
[  130.285324][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1008'.
[  130.285335][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'.
[  130.311433][ T8147] loop3: detected capacity change from 0 to 2048
[  130.389323][ T8147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.569318][ T8154] input: syz1 as /devices/virtual/input/input19
[  130.810998][ T8158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1011'.
[  130.811203][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1011'.
[  130.886257][ T8164] syzkaller0: entered promiscuous mode
[  130.886295][ T8164] syzkaller0: entered allmulticast mode
[  130.888602][ T8162] syzkaller0: entered promiscuous mode
[  130.888644][ T8162] syzkaller0: entered allmulticast mode
[  130.908245][ T8167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.908558][ T8167] syzkaller0: entered promiscuous mode
[  130.908569][ T8167] syzkaller0: entered allmulticast mode
[  130.914258][ T8167] tipc: Resetting bearer <eth:syzkaller0>
[  130.921465][ T8166] tipc: Resetting bearer <eth:syzkaller0>
[  130.926942][ T8166] tipc: Disabling bearer <eth:syzkaller0>
[  131.024779][ T8171] loop0: detected capacity change from 0 to 256
[  131.030372][ T8171] FAT-fs (loop0): Directory bread(block 64) failed
[  131.030408][ T8171] FAT-fs (loop0): Directory bread(block 65) failed
[  131.030440][ T8171] FAT-fs (loop0): Directory bread(block 66) failed
[  131.030457][ T8171] FAT-fs (loop0): Directory bread(block 67) failed
[  131.030483][ T8171] FAT-fs (loop0): Directory bread(block 68) failed
[  131.030498][ T8171] FAT-fs (loop0): Directory bread(block 69) failed
[  131.030523][ T8171] FAT-fs (loop0): Directory bread(block 70) failed
[  131.030538][ T8171] FAT-fs (loop0): Directory bread(block 71) failed
[  131.030562][ T8171] FAT-fs (loop0): Directory bread(block 72) failed
[  131.030576][ T8171] FAT-fs (loop0): Directory bread(block 73) failed
[  131.213024][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.384257][ T8176] FAULT_INJECTION: forcing a failure.
[  131.384257][ T8176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  131.384318][ T8176] CPU: 1 UID: 0 PID: 8176 Comm: syz.3.1019 Not tainted syzkaller #0 PREEMPT 
[  131.384335][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  131.384343][ T8176] Call trace:
[  131.384347][ T8176]  show_stack+0x2c/0x3c (C)
[  131.384365][ T8176]  __dump_stack+0x30/0x40
[  131.384375][ T8176]  dump_stack_lvl+0xd8/0x12c
[  131.384385][ T8176]  dump_stack+0x1c/0x28
[  131.384394][ T8176]  should_fail_ex+0x414/0x588
[  131.384404][ T8176]  should_fail+0x14/0x24
[  131.384411][ T8176]  should_fail_usercopy+0x20/0x30
[  131.384420][ T8176]  _inline_copy_from_user+0x3c/0x194
[  131.384431][ T8176]  video_usercopy+0x2d0/0xe90
[  131.384440][ T8176]  video_ioctl2+0x3c/0x50
[  131.384448][ T8176]  v4l2_ioctl+0x148/0x18c
[  131.384456][ T8176]  __arm64_sys_ioctl+0x14c/0x1c4
[  131.384467][ T8176]  invoke_syscall+0x98/0x244
[  131.384477][ T8176]  el0_svc_common+0xe8/0x23c
[  131.384486][ T8176]  do_el0_svc+0x48/0x58
[  131.384496][ T8176]  el0_svc+0x64/0x260
[  131.384504][ T8176]  el0t_64_sync_handler+0x48/0x148
[  131.384511][ T8176]  el0t_64_sync+0x198/0x19c
[  131.549851][ T4812] misc userio: Buffer overflowed, userio client isn't keeping up
[  131.759693][ T8178] syzkaller0: entered promiscuous mode
[  131.759725][ T8178] syzkaller0: entered allmulticast mode
[  131.817886][ T8182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.818089][ T8182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.821851][ T8184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1023'.
[  131.823766][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'.
[  131.827884][ T8182] netlink: 'syz.1.1022': attribute type 13 has an invalid length.
[  131.867658][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.868389][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.209602][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1026'.
[  132.209641][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'.
[  132.333965][ T8182] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.615843][ T4812] input: PS/2 Generic Mouse as /devices/serio0/input/input17
[  132.634465][ T4965] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.634502][ T4965] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.634549][ T4965] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.634565][ T4965] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.634587][ T4965] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.634601][ T4965] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.634626][ T4965] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  132.634641][ T4965] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.666068][ T8195] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.666358][ T8195] syzkaller0: entered promiscuous mode
[  132.666369][ T8195] syzkaller0: entered allmulticast mode
[  132.674120][ T8195] tipc: Resetting bearer <eth:syzkaller0>
[  132.676932][ T8194] tipc: Resetting bearer <eth:syzkaller0>
[  132.681294][ T8194] tipc: Disabling bearer <eth:syzkaller0>
[  132.762944][ T8201] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  132.824703][ T4812] psmouse serio0: Failed to enable mouse on 
[  133.247091][ T8209] syzkaller0: entered promiscuous mode
[  133.252108][ T8209] syzkaller0: entered allmulticast mode
[  133.263855][ T8222] syzkaller0: entered promiscuous mode
[  133.265062][ T8222] syzkaller0: entered allmulticast mode
[  134.335725][ T8240] syzkaller0: entered promiscuous mode
[  134.335760][ T8240] syzkaller0: entered allmulticast mode
[  134.821929][ T8265] tipc: Started in network mode
[  134.821990][ T8265] tipc: Node identity 6a52290f26b7, cluster identity 4711
[  134.822048][ T8265] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.822281][ T8267] syzkaller0: entered promiscuous mode
[  134.822292][ T8267] syzkaller0: entered allmulticast mode
[  134.826956][ T8286] tipc: Resetting bearer <eth:syzkaller0>
[  134.829215][ T8262] tipc: Resetting bearer <eth:syzkaller0>
[  134.838535][ T8262] tipc: Disabling bearer <eth:syzkaller0>
[  134.873352][ T8294] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  134.951109][ T8298] loop4: detected capacity change from 0 to 512
[  135.216237][ T8298] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  135.216908][ T8298] EXT4-fs: failed to create workqueue
[  135.216938][ T8298] EXT4-fs (loop4): mount failed
[  135.568561][ T8320] bond7: entered promiscuous mode
[  135.570288][ T8320] bond7: entered allmulticast mode
[  135.577419][ T8318] syzkaller0: entered promiscuous mode
[  135.577453][ T8318] syzkaller0: entered allmulticast mode
[  135.583535][ T8330] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.586068][ T8330] syzkaller0: entered promiscuous mode
[  135.586084][ T8330] syzkaller0: entered allmulticast mode
[  135.594040][ T8330] tipc: Resetting bearer <eth:syzkaller0>
[  135.605104][ T8329] tipc: Resetting bearer <eth:syzkaller0>
[  135.615239][ T8332] __nla_validate_parse: 10 callbacks suppressed
[  135.615275][ T8332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1052'.
[  135.619830][ T8329] tipc: Disabling bearer <eth:syzkaller0>
[  135.756116][ T8343] FAULT_INJECTION: forcing a failure.
[  135.756116][ T8343] name failslab, interval 1, probability 0, space 0, times 0
[  135.756155][ T8343] CPU: 0 UID: 0 PID: 8343 Comm: syz.1.1056 Not tainted syzkaller #0 PREEMPT 
[  135.756168][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  135.756175][ T8343] Call trace:
[  135.756179][ T8343]  show_stack+0x2c/0x3c (C)
[  135.756197][ T8343]  __dump_stack+0x30/0x40
[  135.756208][ T8343]  dump_stack_lvl+0xd8/0x12c
[  135.756218][ T8343]  dump_stack+0x1c/0x28
[  135.756227][ T8343]  should_fail_ex+0x414/0x588
[  135.756237][ T8343]  should_failslab+0xc4/0x124
[  135.756245][ T8343]  __kmalloc_noprof+0x100/0x6f0
[  135.756254][ T8343]  security_sk_alloc+0x60/0x35c
[  135.756262][ T8343]  sk_prot_alloc+0xe0/0x1ec
[  135.756272][ T8343]  sk_alloc+0x44/0x3a0
[  135.756280][ T8343]  bpf_prog_test_run_skb+0x2fc/0x1da8
[  135.756289][ T8343]  bpf_prog_test_run+0x1e0/0x248
[  135.756300][ T8343]  __sys_bpf+0x468/0x5f0
[  135.756309][ T8343]  __arm64_sys_bpf+0x80/0x98
[  135.756318][ T8343]  invoke_syscall+0x98/0x244
[  135.756328][ T8343]  el0_svc_common+0xe8/0x23c
[  135.756337][ T8343]  do_el0_svc+0x48/0x58
[  135.756347][ T8343]  el0_svc+0x64/0x260
[  135.756355][ T8343]  el0t_64_sync_handler+0x48/0x148
[  135.756362][ T8343]  el0t_64_sync+0x198/0x19c
[  135.801339][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'.
[  135.817773][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1054'.
[  136.080091][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1054'.
[  136.097858][ T8353] syzkaller0: entered promiscuous mode
[  136.100317][ T8353] syzkaller0: entered allmulticast mode
[  136.124003][ T8361] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.124249][ T8361] syzkaller0: entered promiscuous mode
[  136.124260][ T8361] syzkaller0: entered allmulticast mode
[  136.140634][ T8360] tipc: Resetting bearer <eth:syzkaller0>
[  136.154793][ T8360] tipc: Disabling bearer <eth:syzkaller0>
[  136.183538][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1061'.
[  136.194658][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1062'.
[  136.602043][ T8375] bond12: entered promiscuous mode
[  136.603274][ T8375] bond12: entered allmulticast mode
[  136.615218][   T30] audit: type=1326 audit(136.610:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8386 comm="syz.5.1064" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe777aa8 code=0x0
[  136.748501][ T8393] loop5: detected capacity change from 0 to 4096
[  136.767004][ T8393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.341834][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'.
[  137.356559][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'.
[  137.395484][ T8405] syzkaller0: entered promiscuous mode
[  137.395519][ T8405] syzkaller0: entered allmulticast mode
[  137.435242][ T8407] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1071'.
[  137.438310][ T8407] syzkaller0: entered promiscuous mode
[  137.439677][ T8407] syzkaller0: entered allmulticast mode
[  137.453366][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.465010][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1072'.
[  137.482622][ T8413] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.483005][ T8413] syzkaller0: entered promiscuous mode
[  137.483017][ T8413] syzkaller0: entered allmulticast mode
[  137.493815][ T8412] tipc: Resetting bearer <eth:syzkaller0>
[  137.541474][ T8412] tipc: Disabling bearer <eth:syzkaller0>
[  137.578954][ T8420] syzkaller0: entered promiscuous mode
[  137.580061][ T8420] syzkaller0: entered allmulticast mode
[  137.600626][ T8422] bond13: entered promiscuous mode
[  137.605631][ T8422] bond13: entered allmulticast mode
[  137.698023][   T30] audit: type=1326 audit(137.690:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8437 comm="syz.3.1083" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80577aa8 code=0x0
[  137.833334][ T8444] loop3: detected capacity change from 0 to 4096
[  137.845795][ T8444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.413782][ T8452] syzkaller0: entered promiscuous mode
[  138.416179][ T8452] syzkaller0: entered allmulticast mode
[  138.416199][ T8454] FAULT_INJECTION: forcing a failure.
[  138.416199][ T8454] name failslab, interval 1, probability 0, space 0, times 0
[  138.416231][ T8454] CPU: 0 UID: 0 PID: 8454 Comm: syz.4.1086 Not tainted syzkaller #0 PREEMPT 
[  138.416244][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  138.416251][ T8454] Call trace:
[  138.416255][ T8454]  show_stack+0x2c/0x3c (C)
[  138.416276][ T8454]  __dump_stack+0x30/0x40
[  138.416289][ T8454]  dump_stack_lvl+0xd8/0x12c
[  138.416299][ T8454]  dump_stack+0x1c/0x28
[  138.416308][ T8454]  should_fail_ex+0x414/0x588
[  138.416319][ T8454]  should_failslab+0xc4/0x124
[  138.416329][ T8454]  __kmalloc_noprof+0x100/0x6f0
[  138.416338][ T8454]  hash_ipmark4_add+0xc38/0x1c34
[  138.416346][ T8454]  hash_ipmark4_uadt+0x5a0/0x7d4
[  138.416356][ T8454]  call_ad+0x1d8/0x74c
[  138.416364][ T8454]  ip_set_ad+0x670/0x7b0
[  138.416372][ T8454]  ip_set_uadd+0x74/0x8c
[  138.416380][ T8454]  nfnetlink_rcv_msg+0xa44/0x1034
[  138.416388][ T8454]  netlink_rcv_skb+0x22c/0x410
[  138.416398][ T8454]  nfnetlink_rcv+0x220/0x16f8
[  138.416406][ T8454]  netlink_unicast+0x610/0x800
[  138.416416][ T8454]  netlink_sendmsg+0x63c/0x920
[  138.416425][ T8454]  __sock_sendmsg+0xc8/0x138
[  138.416435][ T8454]  ____sys_sendmsg+0x418/0x70c
[  138.416442][ T8454]  ___sys_sendmsg+0x198/0x224
[  138.416449][ T8454]  __sys_sendmsg+0x160/0x214
[  138.416455][ T8454]  __arm64_sys_sendmsg+0x80/0x94
[  138.416462][ T8454]  invoke_syscall+0x98/0x244
[  138.416472][ T8454]  el0_svc_common+0xe8/0x23c
[  138.416482][ T8454]  do_el0_svc+0x48/0x58
[  138.416491][ T8454]  el0_svc+0x64/0x260
[  138.416499][ T8454]  el0t_64_sync_handler+0x48/0x148
[  138.416506][ T8454]  el0t_64_sync+0x198/0x19c
[  138.486288][ T8458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.488013][ T8458] syzkaller0: entered promiscuous mode
[  138.489501][ T8458] syzkaller0: entered allmulticast mode
[  138.504075][ T8457] tipc: Resetting bearer <eth:syzkaller0>
[  138.509908][ T8457] tipc: Disabling bearer <eth:syzkaller0>
[  138.821976][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.833603][ T8464] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  138.836554][ T8464] syzkaller0: entered promiscuous mode
[  138.837514][ T8464] syzkaller0: entered allmulticast mode
[  138.861786][ T8463] tipc: Resetting bearer <eth:syzkaller0>
[  138.885702][ T8463] tipc: Disabling bearer <eth:syzkaller0>
[  139.421731][ T8490] FAULT_INJECTION: forcing a failure.
[  139.421731][ T8490] name failslab, interval 1, probability 0, space 0, times 0
[  139.421770][ T8490] CPU: 1 UID: 0 PID: 8490 Comm: syz.4.1099 Not tainted syzkaller #0 PREEMPT 
[  139.421782][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  139.421790][ T8490] Call trace:
[  139.421794][ T8490]  show_stack+0x2c/0x3c (C)
[  139.421814][ T8490]  __dump_stack+0x30/0x40
[  139.421825][ T8490]  dump_stack_lvl+0xd8/0x12c
[  139.421835][ T8490]  dump_stack+0x1c/0x28
[  139.421844][ T8490]  should_fail_ex+0x414/0x588
[  139.421854][ T8490]  should_failslab+0xc4/0x124
[  139.421862][ T8490]  kmem_cache_alloc_node_noprof+0x94/0x6c8
[  139.421872][ T8490]  __alloc_skb+0x1f0/0x5f8
[  139.421883][ T8490]  inet6_ifmcaddr_notify+0xe8/0x1d4
[  139.421894][ T8490]  __ipv6_dev_mc_dec+0x288/0x2e4
[  139.421903][ T8490]  addrconf_leave_solict+0x104/0x190
[  139.421913][ T8490]  __ipv6_dev_ac_dec+0x3e4/0x4b0
[  139.421920][ T8490]  ipv6_dev_ac_dec+0x38/0xe8
[  139.421927][ T8490]  ipv6_sock_ac_drop+0x2f0/0x3ec
[  139.421934][ T8490]  do_ipv6_setsockopt+0x1b38/0x29d4
[  139.421944][ T8490]  ipv6_setsockopt+0x68/0x16c
[  139.421954][ T8490]  udpv6_setsockopt+0xa8/0xc0
[  139.421962][ T8490]  sock_common_setsockopt+0xb0/0xcc
[  139.421971][ T8490]  do_sock_setsockopt+0x1f0/0x330
[  139.421981][ T8490]  __sys_setsockopt+0x104/0x170
[  139.421992][ T8490]  __arm64_sys_setsockopt+0xb8/0xd4
[  139.422002][ T8490]  invoke_syscall+0x98/0x244
[  139.422012][ T8490]  el0_svc_common+0xe8/0x23c
[  139.422021][ T8490]  do_el0_svc+0x48/0x58
[  139.422031][ T8490]  el0_svc+0x64/0x260
[  139.422039][ T8490]  el0t_64_sync_handler+0x48/0x148
[  139.422046][ T8490]  el0t_64_sync+0x198/0x19c
[  140.063333][ T8498] syzkaller0: entered promiscuous mode
[  140.065028][ T8498] syzkaller0: entered allmulticast mode
[  140.099564][   T30] audit: type=1326 audit(140.090:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8499 comm="syz.3.1102" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80577aa8 code=0x0
[  140.110485][ T8502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  140.112146][ T8502] syzkaller0: entered promiscuous mode
[  140.113193][ T8502] syzkaller0: entered allmulticast mode
[  140.128267][ T8504] netlink: 'syz.4.1104': attribute type 22 has an invalid length.
[  140.130602][ T8501] tipc: Resetting bearer <eth:syzkaller0>
[  140.142307][ T8501] tipc: Disabling bearer <eth:syzkaller0>
[  140.177376][ T8507] loop3: detected capacity change from 0 to 4096
[  140.199214][ T8507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.973057][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.998301][ T8545] __nla_validate_parse: 14 callbacks suppressed
[  140.998596][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'.
[  141.014962][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'.
[  141.038248][ T8547] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.039780][ T8547] syzkaller0: entered promiscuous mode
[  141.040805][ T8547] syzkaller0: entered allmulticast mode
[  141.051740][ T8546] tipc: Resetting bearer <eth:syzkaller0>
[  141.058956][ T8546] tipc: Disabling bearer <eth:syzkaller0>
[  141.089294][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1118'.
[  141.091182][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1118'.
[  141.325577][   T30] audit: type=1326 audit(141.300:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.0.1126" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d77aa8 code=0x0
[  141.441178][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'.
[  141.603930][ T8572] loop0: detected capacity change from 0 to 4096
[  141.615403][ T8572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.099602][ T8582] FAULT_INJECTION: forcing a failure.
[  142.099602][ T8582] name failslab, interval 1, probability 0, space 0, times 0
[  142.099644][ T8582] CPU: 1 UID: 0 PID: 8582 Comm: syz.3.1128 Not tainted syzkaller #0 PREEMPT 
[  142.099656][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  142.099662][ T8582] Call trace:
[  142.099665][ T8582]  show_stack+0x2c/0x3c (C)
[  142.099683][ T8582]  __dump_stack+0x30/0x40
[  142.099694][ T8582]  dump_stack_lvl+0xd8/0x12c
[  142.099704][ T8582]  dump_stack+0x1c/0x28
[  142.099713][ T8582]  should_fail_ex+0x414/0x588
[  142.099723][ T8582]  should_failslab+0xc4/0x124
[  142.099732][ T8582]  kmem_cache_alloc_noprof+0x8c/0x610
[  142.099741][ T8582]  skb_clone+0x1a8/0x31c
[  142.099749][ T8582]  __netlink_deliver_tap+0x36c/0x6f8
[  142.099760][ T8582]  netlink_deliver_tap+0x1d8/0x1dc
[  142.099769][ T8582]  netlink_unicast+0x5e8/0x800
[  142.099779][ T8582]  netlink_sendmsg+0x63c/0x920
[  142.099788][ T8582]  __sock_sendmsg+0xc8/0x138
[  142.099798][ T8582]  ____sys_sendmsg+0x418/0x70c
[  142.099804][ T8582]  ___sys_sendmsg+0x198/0x224
[  142.099811][ T8582]  __sys_sendmsg+0x160/0x214
[  142.099818][ T8582]  __arm64_sys_sendmsg+0x80/0x94
[  142.099824][ T8582]  invoke_syscall+0x98/0x244
[  142.099834][ T8582]  el0_svc_common+0xe8/0x23c
[  142.099844][ T8582]  do_el0_svc+0x48/0x58
[  142.099853][ T8582]  el0_svc+0x64/0x260
[  142.099861][ T8582]  el0t_64_sync_handler+0x48/0x148
[  142.099869][ T8582]  el0t_64_sync+0x198/0x19c
[  142.181548][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.558611][ T8597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.595867][ T8599] loop4: detected capacity change from 0 to 256
[  142.604022][ T8599] FAT-fs (loop4): Directory bread(block 64) failed
[  142.614003][ T8599] FAT-fs (loop4): Directory bread(block 65) failed
[  142.614073][ T8599] FAT-fs (loop4): Directory bread(block 66) failed
[  142.614094][ T8599] FAT-fs (loop4): Directory bread(block 67) failed
[  142.614128][ T8599] FAT-fs (loop4): Directory bread(block 68) failed
[  142.614145][ T8599] FAT-fs (loop4): Directory bread(block 69) failed
[  142.614190][ T8599] FAT-fs (loop4): Directory bread(block 70) failed
[  142.614206][ T8599] FAT-fs (loop4): Directory bread(block 71) failed
[  142.614233][ T8599] FAT-fs (loop4): Directory bread(block 72) failed
[  142.614248][ T8599] FAT-fs (loop4): Directory bread(block 73) failed
[  142.665276][ T8594] tipc: Disabling bearer <eth:syzkaller0>
[  142.668399][ T8605] loop1: detected capacity change from 0 to 512
[  142.757745][ T4964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.757777][ T4964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.893047][ T8617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.916958][ T8621] xt_hashlimit: size too large, truncated to 1048576
[  143.079657][ T8555] Set syz1 is full, maxelem 65536 reached
[  143.104158][ T8633] syzkaller0: entered promiscuous mode
[  143.104197][ T8633] syzkaller0: entered allmulticast mode
[  143.135679][ T8638] netlink: 'syz.5.1148': attribute type 2 has an invalid length.
[  143.210993][ T8646] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.211261][ T8646] syzkaller0: entered promiscuous mode
[  143.211272][ T8646] syzkaller0: entered allmulticast mode
[  143.227807][ T8645] tipc: Resetting bearer <eth:syzkaller0>
[  143.238055][ T8645] tipc: Disabling bearer <eth:syzkaller0>
[  143.336868][ T8664] FAULT_INJECTION: forcing a failure.
[  143.336868][ T8664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.339526][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.5.1157 Not tainted syzkaller #0 PREEMPT 
[  143.339554][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  143.339561][ T8664] Call trace:
[  143.339565][ T8664]  show_stack+0x2c/0x3c (C)
[  143.339591][ T8664]  __dump_stack+0x30/0x40
[  143.339602][ T8664]  dump_stack_lvl+0xd8/0x12c
[  143.339618][ T8664]  dump_stack+0x1c/0x28
[  143.339629][ T8664]  should_fail_ex+0x414/0x588
[  143.339640][ T8664]  should_fail+0x14/0x24
[  143.339648][ T8664]  should_fail_usercopy+0x20/0x30
[  143.339657][ T8664]  _inline_copy_from_user+0x40/0x180
[  143.339666][ T8664]  copy_msghdr_from_user+0xb8/0x194
[  143.339674][ T8664]  ___sys_sendmsg+0x14c/0x224
[  143.339681][ T8664]  __sys_sendmsg+0x160/0x214
[  143.339688][ T8664]  __arm64_sys_sendmsg+0x80/0x94
[  143.339695][ T8664]  invoke_syscall+0x98/0x244
[  143.339705][ T8664]  el0_svc_common+0xe8/0x23c
[  143.339714][ T8664]  do_el0_svc+0x48/0x58
[  143.339724][ T8664]  el0_svc+0x64/0x260
[  143.339732][ T8664]  el0t_64_sync_handler+0x48/0x148
[  143.339739][ T8664]  el0t_64_sync+0x198/0x19c
[  143.453793][ T8679] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  143.498436][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'.
[  143.535951][ T8685] bond14: entered promiscuous mode
[  143.536944][ T8685] bond14: entered allmulticast mode
[  143.705774][ T8698] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.706200][ T8698] syzkaller0: entered promiscuous mode
[  143.706231][ T8698] syzkaller0: entered allmulticast mode
[  143.738651][ T8696] tipc: Resetting bearer <eth:syzkaller0>
[  143.765616][ T8696] tipc: Disabling bearer <eth:syzkaller0>
[  144.035975][ T8728] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  144.133149][ T8733] FAULT_INJECTION: forcing a failure.
[  144.133149][ T8733] name failslab, interval 1, probability 0, space 0, times 0
[  144.137273][ T8733] CPU: 0 UID: 0 PID: 8733 Comm: syz.0.1176 Not tainted syzkaller #0 PREEMPT 
[  144.137304][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  144.137311][ T8733] Call trace:
[  144.137315][ T8733]  show_stack+0x2c/0x3c (C)
[  144.137340][ T8733]  __dump_stack+0x30/0x40
[  144.137352][ T8733]  dump_stack_lvl+0xd8/0x12c
[  144.137362][ T8733]  dump_stack+0x1c/0x28
[  144.137372][ T8733]  should_fail_ex+0x414/0x588
[  144.137381][ T8733]  should_failslab+0xc4/0x124
[  144.137390][ T8733]  kmem_cache_alloc_noprof+0x8c/0x610
[  144.137399][ T8733]  skb_clone+0x1a8/0x31c
[  144.137407][ T8733]  __netlink_deliver_tap+0x36c/0x6f8
[  144.137419][ T8733]  netlink_deliver_tap+0x1d8/0x1dc
[  144.137428][ T8733]  netlink_unicast+0x5e8/0x800
[  144.137438][ T8733]  netlink_sendmsg+0x63c/0x920
[  144.137448][ T8733]  __sock_sendmsg+0xc8/0x138
[  144.137457][ T8733]  ____sys_sendmsg+0x418/0x70c
[  144.137464][ T8733]  ___sys_sendmsg+0x198/0x224
[  144.137471][ T8733]  __sys_sendmsg+0x160/0x214
[  144.137477][ T8733]  __arm64_sys_sendmsg+0x80/0x94
[  144.137484][ T8733]  invoke_syscall+0x98/0x244
[  144.137494][ T8733]  el0_svc_common+0xe8/0x23c
[  144.137504][ T8733]  do_el0_svc+0x48/0x58
[  144.137514][ T8733]  el0_svc+0x64/0x260
[  144.137522][ T8733]  el0t_64_sync_handler+0x48/0x148
[  144.137529][ T8733]  el0t_64_sync+0x198/0x19c
[  144.423997][ T8741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1175'.
[  144.461330][ T8741] veth1_to_team: entered promiscuous mode
[  144.465955][ T8741] gretap0: entered promiscuous mode
[  144.466514][ T8741] hsr1: entered promiscuous mode
[  145.037763][ T8776] FAULT_INJECTION: forcing a failure.
[  145.037763][ T8776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.040604][ T8776] CPU: 0 UID: 0 PID: 8776 Comm: syz.1.1187 Not tainted syzkaller #0 PREEMPT 
[  145.040631][ T8776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  145.040638][ T8776] Call trace:
[  145.040642][ T8776]  show_stack+0x2c/0x3c (C)
[  145.040665][ T8776]  __dump_stack+0x30/0x40
[  145.040679][ T8776]  dump_stack_lvl+0xd8/0x12c
[  145.040691][ T8776]  dump_stack+0x1c/0x28
[  145.040701][ T8776]  should_fail_ex+0x414/0x588
[  145.040713][ T8776]  should_fail+0x14/0x24
[  145.040721][ T8776]  should_fail_usercopy+0x20/0x30
[  145.040730][ T8776]  _inline_copy_from_user+0x40/0x180
[  145.040740][ T8776]  bpf_prog_test_run_xdp+0xad4/0xdcc
[  145.040748][ T8776]  bpf_prog_test_run+0x1e0/0x248
[  145.040759][ T8776]  __sys_bpf+0x468/0x5f0
[  145.040769][ T8776]  __arm64_sys_bpf+0x80/0x98
[  145.040778][ T8776]  invoke_syscall+0x98/0x244
[  145.040788][ T8776]  el0_svc_common+0xe8/0x23c
[  145.040798][ T8776]  do_el0_svc+0x48/0x58
[  145.040808][ T8776]  el0_svc+0x64/0x260
[  145.040816][ T8776]  el0t_64_sync_handler+0x48/0x148
[  145.040823][ T8776]  el0t_64_sync+0x198/0x19c
[  145.135386][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1191'.
[  145.137236][ T8784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1191'.
[  145.186502][ T8788] FAULT_INJECTION: forcing a failure.
[  145.186502][ T8788] name failslab, interval 1, probability 0, space 0, times 0
[  145.188853][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.5.1193 Not tainted syzkaller #0 PREEMPT 
[  145.188866][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  145.188871][ T8788] Call trace:
[  145.188874][ T8788]  show_stack+0x2c/0x3c (C)
[  145.188891][ T8788]  __dump_stack+0x30/0x40
[  145.188901][ T8788]  dump_stack_lvl+0xd8/0x12c
[  145.188911][ T8788]  dump_stack+0x1c/0x28
[  145.188920][ T8788]  should_fail_ex+0x414/0x588
[  145.188930][ T8788]  should_failslab+0xc4/0x124
[  145.188938][ T8788]  __kvmalloc_node_noprof+0x160/0x880
[  145.188948][ T8788]  bpf_test_run_xdp_live+0x194/0x16f0
[  145.188958][ T8788]  bpf_prog_test_run_xdp+0x638/0xdcc
[  145.188966][ T8788]  bpf_prog_test_run+0x1e0/0x248
[  145.188976][ T8788]  __sys_bpf+0x468/0x5f0
[  145.188986][ T8788]  __arm64_sys_bpf+0x80/0x98
[  145.188995][ T8788]  invoke_syscall+0x98/0x244
[  145.189004][ T8788]  el0_svc_common+0xe8/0x23c
[  145.189014][ T8788]  do_el0_svc+0x48/0x58
[  145.189024][ T8788]  el0_svc+0x64/0x260
[  145.189031][ T8788]  el0t_64_sync_handler+0x48/0x148
[  145.189039][ T8788]  el0t_64_sync+0x198/0x19c
[  145.271059][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1195'.
[  145.307744][ T8797] loop4: detected capacity change from 0 to 2048
[  145.332245][ T8797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.440344][ T8807] bond1: entered promiscuous mode
[  145.452033][ T8807] bond1: entered allmulticast mode
[  145.650872][ T4965] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  145.714540][ T4965] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 606 with error 28
[  145.717510][ T4965] EXT4-fs (loop4): This should not happen!! Data will be lost
[  145.717510][ T4965] 
[  145.720109][ T4965] EXT4-fs (loop4): Total free blocks count 0
[  145.721362][ T4965] EXT4-fs (loop4): Free/Dirty block details
[  145.722502][ T4965] EXT4-fs (loop4): free_blocks=2415919504
[  145.723622][ T4965] EXT4-fs (loop4): dirty_blocks=608
[  145.724836][ T4965] EXT4-fs (loop4): Block reservation details
[  145.725947][ T4965] EXT4-fs (loop4): i_reserved_data_blocks=38
[  145.731832][ T4706] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  145.738532][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.078689][ T8840] __nla_validate_parse: 4 callbacks suppressed
[  146.079511][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'.
[  146.153474][ T8853] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  146.157358][ T8853] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1208'.
[  146.621374][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'.
[  146.757683][ T8780] Set syz1 is full, maxelem 65536 reached
[  147.075208][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'.
[  147.075464][ T8904] loop0: detected capacity change from 0 to 256
[  147.076569][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'.
[  147.112734][ T8904] FAT-fs (loop0): Directory bread(block 64) failed
[  147.112782][ T8904] FAT-fs (loop0): Directory bread(block 65) failed
[  147.112813][ T8904] FAT-fs (loop0): Directory bread(block 66) failed
[  147.112827][ T8904] FAT-fs (loop0): Directory bread(block 67) failed
[  147.112850][ T8904] FAT-fs (loop0): Directory bread(block 68) failed
[  147.112862][ T8904] FAT-fs (loop0): Directory bread(block 69) failed
[  147.112884][ T8904] FAT-fs (loop0): Directory bread(block 70) failed
[  147.112895][ T8904] FAT-fs (loop0): Directory bread(block 71) failed
[  147.112917][ T8904] FAT-fs (loop0): Directory bread(block 72) failed
[  147.112928][ T8904] FAT-fs (loop0): Directory bread(block 73) failed
[  147.207361][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'.
[  147.224394][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1220'.
[  147.566163][ T8927] syzkaller0: entered promiscuous mode
[  147.567212][ T8927] syzkaller0: entered allmulticast mode
[  147.585118][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'.
[  147.613017][ T8933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1225'.
[  147.613284][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'.
[  147.764483][ T8941] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  148.050976][ T8949] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  148.353700][ T8958] loop1: detected capacity change from 0 to 4096
[  148.381209][ T8958] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  148.416932][ T8958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.451845][ T8963] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  148.539664][ T8966] syzkaller0: entered promiscuous mode
[  148.539702][ T8966] syzkaller0: entered allmulticast mode
[  148.683741][ T8969] bond13: option all_slaves_active: invalid value (124)
[  148.687937][ T8969] bond13 (unregistering): Released all slaves
[  148.973028][ T4705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.036151][ T8981] syzkaller0: entered promiscuous mode
[  149.036188][ T8981] syzkaller0: entered allmulticast mode
[  149.398801][ T8992] syz.5.1244 (8992): drop_caches: 4
[  149.422814][ T8992] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.425156][ T8992] batadv_slave_1: entered promiscuous mode
[  151.957686][ T8997] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  151.958028][ T8997] __nla_validate_parse: 9 callbacks suppressed
[  151.958351][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'.
[  151.962875][ T8999] syzkaller0: entered promiscuous mode
[  151.963138][ T8999] syzkaller0: entered allmulticast mode
[  151.969805][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1240'.
[  151.969966][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'.
[  152.360455][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'.
[  152.360489][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'.
[  152.360893][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'.
[  152.360915][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'.
[  152.407048][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'.
[  152.446817][ T9025] netlink: 'syz.1.1256': attribute type 10 has an invalid length.
[  152.457525][ T9021] bond16: option all_slaves_active: invalid value (124)
[  152.465550][ T9021] bond16 (unregistering): Released all slaves
[  152.473891][ T9025] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.476658][ T9025] team0: Port device bond0 added
[  152.483224][ T9025] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub
[  152.490017][ T9025] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1256'.
[  152.490057][ T9025] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1256'.
[  152.490081][ T9025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.544275][ T9030] syzkaller1: entered promiscuous mode
[  152.544313][ T9030] syzkaller1: entered allmulticast mode
[  152.551108][ T9030] veth0: entered promiscuous mode
[  152.578390][ T9036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.580951][ T9036] syzkaller0: entered promiscuous mode
[  152.582141][ T9036] syzkaller0: entered allmulticast mode
[  152.609880][ T9036] tipc: Resetting bearer <eth:syzkaller0>
[  152.622979][ T9035] tipc: Resetting bearer <eth:syzkaller0>
[  152.637662][ T9035] tipc: Disabling bearer <eth:syzkaller0>
[  152.645587][ T9039] syzkaller0: entered promiscuous mode
[  152.646824][ T9039] syzkaller0: entered allmulticast mode
[  152.757654][ T9047] loop3: detected capacity change from 0 to 1024
[  152.758075][ T9047] EXT4-fs: Ignoring removed bh option
[  152.758423][ T9047] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  152.773394][ T9047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.797543][ T9053] loop5: detected capacity change from 0 to 128
[  152.832985][ T9047] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.1266: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  152.843542][ T9047] EXT4-fs (loop3): Remounting filesystem read-only
[  152.848692][ T9058] loop4: detected capacity change from 0 to 1024
[  152.850687][ T9058] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  152.871316][ T9058] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.1267: lblock 2 mapped to illegal pblock 2 (length 1)
[  152.871354][ T9058] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  152.874475][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  152.874491][    C0] EXT4-fs (loop4): initial error at time 152: ext4_map_blocks:791: inode 3: block 2
[  152.874512][    C0] EXT4-fs (loop4): last error at time 152: ext4_map_blocks:791: inode 3: block 2
[  152.883224][ T9058] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  152.883273][ T9058] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.1267: lblock 0 mapped to illegal pblock 48 (length 1)
[  152.883306][ T9058] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  152.890037][ T9058] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  152.890072][ T9058] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1267: Failed to acquire dquot type 0
[  152.890103][ T9058] loop4: lost filesystem error report for type 5 error -117
[  152.896384][ T9058] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  152.899136][ T9058] loop4: lost filesystem error report for type 5 error -117
[  152.899311][ T9058] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.1267: mark_inode_dirty error
[  152.899330][ T9058] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  152.899409][ T9058] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117)
[  152.899447][ T9058] EXT4-fs (loop4): 1 orphan inode deleted
[  152.901146][ T9058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.909813][ T9058] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm syz.4.1267: lblock 1 mapped to illegal pblock 1 (length 1)
[  152.917170][ T9058] Quota error (device loop4): find_tree_dqentry: Can't read quota tree block 1
[  152.917223][ T9058] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 980643439
[  152.917250][ T9058] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1267: Failed to acquire dquot type 0
[  152.923971][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.952207][ T9064] loop3: detected capacity change from 0 to 512
[  152.955693][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.963415][ T3208] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  152.963447][ T3208] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  152.966002][ T3208] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  152.966077][ T3208] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0
[  152.966088][ T3208] loop4: lost filesystem error report for type 5 error -117
[  152.967182][ T4706] EXT4-fs error (device loop4): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0
[  152.967200][ T4706] loop4: lost filesystem error report for type 5 error -117
[  152.967783][ T4706] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem
[  152.967798][ T4706] loop4: lost filesystem error report for type 5 error -117
[  152.968013][ T4706] EXT4-fs error (device loop4): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error
[  152.968026][ T4706] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  152.973340][ T9064] EXT4-fs (loop3): 1 truncate cleaned up
[  152.973812][ T9064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.003330][ T9064] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1268: bg 0: block 465: padding at end of block bitmap is not set
[  153.005079][ T9067] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  153.007344][ T9064] EXT4-fs (loop3): Remounting filesystem read-only
[  153.010974][   T30] audit: type=1326 audit(153.000:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9063 comm="syz.3.1268" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff80577aa8 code=0x0
[  153.018328][ T9069] xt_hashlimit: size too large, truncated to 1048576
[  153.118654][ T9075] macvtap1: entered promiscuous mode
[  153.118687][ T9075] erspan0: entered promiscuous mode
[  153.119063][ T9075] macvtap1: entered allmulticast mode
[  153.119076][ T9075] erspan0: entered allmulticast mode
[  153.143469][ T9080] syzkaller0: entered promiscuous mode
[  153.143502][ T9080] syzkaller0: entered allmulticast mode
[  153.212863][ T9084] syzkaller0: entered promiscuous mode
[  153.212897][ T9084] syzkaller0: entered allmulticast mode
[  153.389506][ T9029] veth0: left promiscuous mode
[  153.481440][ T9105] macvtap2: entered promiscuous mode
[  153.482757][ T9105] macvtap2: entered allmulticast mode
[  153.520485][ T9107] syzkaller0: entered promiscuous mode
[  153.520532][ T9107] syzkaller0: entered allmulticast mode
[  153.555935][ T9112] loop1: detected capacity change from 0 to 256
[  153.577545][ T9112] FAT-fs (loop1): Directory bread(block 64) failed
[  153.577584][ T9112] FAT-fs (loop1): Directory bread(block 65) failed
[  153.577632][ T9112] FAT-fs (loop1): Directory bread(block 66) failed
[  153.577649][ T9112] FAT-fs (loop1): Directory bread(block 67) failed
[  153.577677][ T9112] FAT-fs (loop1): Directory bread(block 68) failed
[  153.577692][ T9112] FAT-fs (loop1): Directory bread(block 69) failed
[  153.577857][ T9112] FAT-fs (loop1): Directory bread(block 70) failed
[  153.577879][ T9112] FAT-fs (loop1): Directory bread(block 71) failed
[  153.577918][ T9112] FAT-fs (loop1): Directory bread(block 72) failed
[  153.577934][ T9112] FAT-fs (loop1): Directory bread(block 73) failed
[  153.596260][ T4718] Bluetooth: hci4: command 0x0406 tx timeout
[  153.596309][ T4718] Bluetooth: hci1: command 0x0406 tx timeout
[  153.596397][ T4709] Bluetooth: hci0: command 0x0406 tx timeout
[  153.689143][ T9118] netlink: 'syz.5.1291': attribute type 19 has an invalid length.
[  153.835480][ T4707] Bluetooth: hci3: command 0x0406 tx timeout
[  153.842488][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.259819][ T9133] loop4: detected capacity change from 0 to 4096
[  154.261429][ T9133] EXT4-fs (loop4): Test dummy encryption mode enabled
[  154.264237][ T9133] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec11c, mo2=0002]
[  154.264302][ T9133] System zones: 0-5
[  154.271666][ T9133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.440442][ T9143] erspan0: entered promiscuous mode
[  154.440556][ T9143] macvtap8: entered promiscuous mode
[  154.440616][ T9143] macvtap8: entered allmulticast mode
[  154.440623][ T9143] erspan0: entered allmulticast mode
[  154.459960][ T9145] syzkaller0: entered promiscuous mode
[  154.459999][ T9145] syzkaller0: entered allmulticast mode
[  154.477701][ T9147] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  154.479608][ T9147] netlink: 'syz.0.1302': attribute type 19 has an invalid length.
[  154.541241][ T9148] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[  154.696306][ T9156] loop5: detected capacity change from 0 to 512
[  154.707709][ T9156] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  154.709432][ T9156] System zones: 1-12
[  154.714621][ T9156] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.1306: Directory hole found for htree index block 0
[  154.714967][ T9156] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  154.717488][ T9156] EXT4-fs (loop5): Remounting filesystem read-only
[  154.717709][ T9156] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[  154.717761][ T9156] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  154.718264][ T9156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.755852][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.868865][ T9163] macvtap9: entered promiscuous mode
[  154.870022][ T9163] macvtap9: entered allmulticast mode
[  154.884867][ T9160] netlink: 'syz.5.1308': attribute type 22 has an invalid length.
[  154.911129][ T9167] FAULT_INJECTION: forcing a failure.
[  154.911129][ T9167] name failslab, interval 1, probability 0, space 0, times 0
[  154.911166][ T9167] CPU: 1 UID: 0 PID: 9167 Comm: syz.1.1311 Not tainted syzkaller #0 PREEMPT 
[  154.911181][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  154.911186][ T9167] Call trace:
[  154.911190][ T9167]  show_stack+0x2c/0x3c (C)
[  154.911208][ T9167]  __dump_stack+0x30/0x40
[  154.911218][ T9167]  dump_stack_lvl+0xd8/0x12c
[  154.911228][ T9167]  dump_stack+0x1c/0x28
[  154.911237][ T9167]  should_fail_ex+0x414/0x588
[  154.911247][ T9167]  should_failslab+0xc4/0x124
[  154.911255][ T9167]  kmem_cache_alloc_node_noprof+0x94/0x6c8
[  154.911264][ T9167]  __alloc_skb+0x1f0/0x5f8
[  154.911275][ T9167]  netlink_ack+0x11c/0x880
[  154.911286][ T9167]  netlink_rcv_skb+0x210/0x410
[  154.911295][ T9167]  rtnetlink_rcv+0x28/0x38
[  154.911304][ T9167]  netlink_unicast+0x610/0x800
[  154.911314][ T9167]  netlink_sendmsg+0x63c/0x920
[  154.911323][ T9167]  __sock_sendmsg+0xc8/0x138
[  154.911333][ T9167]  ____sys_sendmsg+0x43c/0x70c
[  154.911339][ T9167]  ___sys_sendmsg+0x198/0x224
[  154.911346][ T9167]  __sys_sendmmsg+0x210/0x588
[  154.911353][ T9167]  __arm64_sys_sendmmsg+0xa0/0xbc
[  154.911360][ T9167]  invoke_syscall+0x98/0x244
[  154.911370][ T9167]  el0_svc_common+0xe8/0x23c
[  154.911380][ T9167]  do_el0_svc+0x48/0x58
[  154.911389][ T9167]  el0_svc+0x64/0x260
[  154.911397][ T9167]  el0t_64_sync_handler+0x48/0x148
[  154.911404][ T9167]  el0t_64_sync+0x198/0x19c
[  154.947544][ T9171] netlink: 'syz.1.1313': attribute type 19 has an invalid length.
[  154.952406][ T9169] macvtap10: entered promiscuous mode
[  154.952619][ T9169] macvtap10: entered allmulticast mode
[  155.004920][ T9173] syzkaller0: entered promiscuous mode
[  155.004950][ T9173] syzkaller0: entered allmulticast mode
[  155.050167][ T9181] loop3: detected capacity change from 0 to 8
[  155.056800][ T9181] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[  155.056828][ T9181] unable to read xattr id index table
[  155.066947][ T9181] SQUASHFS error: zlib decompression failed, data probably corrupt
[  155.066983][ T9181] SQUASHFS error: Failed to read block 0x9b: -5
[  155.066991][ T9181] SQUASHFS error: Unable to read metadata cache entry [99]
[  155.066999][ T9181] SQUASHFS error: Unable to read inode 0x127
[  155.165932][ T9185] 8021q: VLANs not supported on ip_vti0
[  155.248906][ T9181] netlink: 'syz.3.1318': attribute type 10 has an invalid length.
[  155.572073][ T9198] erspan0: entered promiscuous mode
[  155.572182][ T9198] macvtap4: entered promiscuous mode
[  155.572249][ T9198] macvtap4: entered allmulticast mode
[  155.572257][ T9198] erspan0: entered allmulticast mode
[  155.591631][ T9195] macvtap11: entered promiscuous mode
[  155.594735][ T9195] macvtap11: entered allmulticast mode
[  155.606842][ T9199] loop1: detected capacity change from 0 to 128
[  155.669240][ T9206] xt_hashlimit: size too large, truncated to 1048576
[  155.684120][ T9208] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: e0:9f:18:36:00:85
[  155.776092][ T9213] xt_hashlimit: size too large, truncated to 1048576
[  155.784297][ T9214] bond17: option all_slaves_active: invalid value (124)
[  155.786756][ T9214] bond17 (unregistering): Released all slaves
[  156.086371][ T9235] FAULT_INJECTION: forcing a failure.
[  156.086371][ T9235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.086407][ T9235] CPU: 1 UID: 0 PID: 9235 Comm: syz.5.1335 Not tainted syzkaller #0 PREEMPT 
[  156.086422][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  156.086429][ T9235] Call trace:
[  156.086433][ T9235]  show_stack+0x2c/0x3c (C)
[  156.086455][ T9235]  __dump_stack+0x30/0x40
[  156.086470][ T9235]  dump_stack_lvl+0xd8/0x12c
[  156.086480][ T9235]  dump_stack+0x1c/0x28
[  156.086490][ T9235]  should_fail_ex+0x414/0x588
[  156.086502][ T9235]  should_fail+0x14/0x24
[  156.086510][ T9235]  should_fail_usercopy+0x20/0x30
[  156.086519][ T9235]  _copy_from_iter+0x19c/0x1048
[  156.086529][ T9235]  netlink_sendmsg+0x56c/0x920
[  156.086540][ T9235]  __sock_sendmsg+0xc8/0x138
[  156.086551][ T9235]  ____sys_sendmsg+0x418/0x70c
[  156.086558][ T9235]  ___sys_sendmsg+0x198/0x224
[  156.086564][ T9235]  __sys_sendmsg+0x160/0x214
[  156.086571][ T9235]  __arm64_sys_sendmsg+0x80/0x94
[  156.086578][ T9235]  invoke_syscall+0x98/0x244
[  156.086588][ T9235]  el0_svc_common+0xe8/0x23c
[  156.086598][ T9235]  do_el0_svc+0x48/0x58
[  156.086614][ T9235]  el0_svc+0x64/0x260
[  156.086623][ T9235]  el0t_64_sync_handler+0x48/0x148
[  156.086630][ T9235]  el0t_64_sync+0x198/0x19c
[  156.115397][ T9237] macvtap5: entered promiscuous mode
[  156.115473][ T9237] macvtap5: entered allmulticast mode
[  156.130589][ T4706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.153651][ T9241] sctp: [Deprecated]: syz.4.1337 (pid 9241) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.153651][ T9241] Use struct sctp_sack_info instead
[  156.158596][ T9241] sctp: [Deprecated]: syz.4.1337 (pid 9241) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.158596][ T9241] Use struct sctp_sack_info instead
[  156.359606][ T9255] nftables ruleset with unbound set
[  156.616202][ T9267] FAULT_INJECTION: forcing a failure.
[  156.616202][ T9267] name failslab, interval 1, probability 0, space 0, times 0
[  156.616242][ T9267] CPU: 1 UID: 0 PID: 9267 Comm: syz.5.1348 Not tainted syzkaller #0 PREEMPT 
[  156.616260][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  156.616267][ T9267] Call trace:
[  156.616270][ T9267]  show_stack+0x2c/0x3c (C)
[  156.616291][ T9267]  __dump_stack+0x30/0x40
[  156.616302][ T9267]  dump_stack_lvl+0xd8/0x12c
[  156.616312][ T9267]  dump_stack+0x1c/0x28
[  156.616321][ T9267]  should_fail_ex+0x414/0x588
[  156.616331][ T9267]  should_failslab+0xc4/0x124
[  156.616339][ T9267]  kmem_cache_alloc_noprof+0x8c/0x610
[  156.616349][ T9267]  skb_clone+0x1a8/0x31c
[  156.616357][ T9267]  nfnetlink_rcv+0x3cc/0x16f8
[  156.616366][ T9267]  netlink_unicast+0x610/0x800
[  156.616376][ T9267]  netlink_sendmsg+0x63c/0x920
[  156.616386][ T9267]  __sock_sendmsg+0xc8/0x138
[  156.616395][ T9267]  ____sys_sendmsg+0x418/0x70c
[  156.616402][ T9267]  ___sys_sendmsg+0x198/0x224
[  156.616409][ T9267]  __sys_sendmsg+0x160/0x214
[  156.616416][ T9267]  __arm64_sys_sendmsg+0x80/0x94
[  156.616423][ T9267]  invoke_syscall+0x98/0x244
[  156.616432][ T9267]  el0_svc_common+0xe8/0x23c
[  156.616442][ T9267]  do_el0_svc+0x48/0x58
[  156.616452][ T9267]  el0_svc+0x64/0x260
[  156.616460][ T9267]  el0t_64_sync_handler+0x48/0x148
[  156.616467][ T9267]  el0t_64_sync+0x198/0x19c
[  156.668307][ T9269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  156.668331][ T9269] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  156.668951][ T9269] vhci_hcd vhci_hcd.0: Device attached
[  156.682350][ T9270] macvtap1: entered promiscuous mode
[  156.682384][ T9270] dummy0: entered promiscuous mode
[  156.683511][ T9270] macvtap1: entered allmulticast mode
[  156.683686][ T9270] dummy0: entered allmulticast mode
[  157.054816][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.055069][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.122437][ T4467] usb 10-1: new low-speed USB device number 2 using vhci_hcd
[  157.146040][ T9291] loop5: detected capacity change from 0 to 2048
[  157.160363][ T9291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.205867][ T9291] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1355: bg 0: block 345: padding at end of block bitmap is not set
[  157.232004][ T9301] FAULT_INJECTION: forcing a failure.
[  157.232004][ T9301] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  157.232038][ T9301] CPU: 0 UID: 0 PID: 9301 Comm: syz.3.1357 Not tainted syzkaller #0 PREEMPT 
[  157.232050][ T9301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  157.232056][ T9301] Call trace:
[  157.232060][ T9301]  show_stack+0x2c/0x3c (C)
[  157.232083][ T9301]  __dump_stack+0x30/0x40
[  157.232094][ T9301]  dump_stack_lvl+0xd8/0x12c
[  157.232104][ T9301]  dump_stack+0x1c/0x28
[  157.232114][ T9301]  should_fail_ex+0x414/0x588
[  157.232124][ T9301]  should_fail+0x14/0x24
[  157.232134][ T9301]  should_fail_usercopy+0x20/0x30
[  157.232145][ T9301]  _copy_from_iter+0x19c/0x1048
[  157.232156][ T9301]  tun_get_user+0x200/0x3588
[  157.232168][ T9301]  tun_chr_write_iter+0xfc/0x168
[  157.232178][ T9301]  vfs_write+0x52c/0xa14
[  157.232189][ T9301]  ksys_write+0x12c/0x224
[  157.232198][ T9301]  __arm64_sys_write+0x7c/0x90
[  157.232208][ T9301]  invoke_syscall+0x98/0x244
[  157.232218][ T9301]  el0_svc_common+0xe8/0x23c
[  157.232227][ T9301]  do_el0_svc+0x48/0x58
[  157.232237][ T9301]  el0_svc+0x64/0x260
[  157.232245][ T9301]  el0t_64_sync_handler+0x48/0x148
[  157.232252][ T9301]  el0t_64_sync+0x198/0x19c
[  157.264832][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.391049][ T9271] vhci_hcd: connection reset by peer
[  157.405857][   T15] vhci_hcd vhci_hcd.4: stop threads
[  157.407478][   T15] vhci_hcd vhci_hcd.4: release socket
[  157.409499][   T15] vhci_hcd vhci_hcd.4: disconnect device
[  157.720467][ T9316] __nla_validate_parse: 35 callbacks suppressed
[  157.720503][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'.
[  157.723235][ T9316] macvtap12: entered promiscuous mode
[  157.723299][ T9316] macvtap12: entered allmulticast mode
[  157.766929][ T9318] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.770759][ T9318] tipc: Resetting bearer <eth:syzkaller0>
[  157.775211][ T9317] tipc: Disabling bearer <eth:syzkaller0>
[  157.882493][ T9321] FAULT_INJECTION: forcing a failure.
[  157.882493][ T9321] name failslab, interval 1, probability 0, space 0, times 0
[  157.882527][ T9321] CPU: 0 UID: 0 PID: 9321 Comm: syz.0.1363 Not tainted syzkaller #0 PREEMPT 
[  157.882541][ T9321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  157.882546][ T9321] Call trace:
[  157.882549][ T9321]  show_stack+0x2c/0x3c (C)
[  157.882570][ T9321]  __dump_stack+0x30/0x40
[  157.882581][ T9321]  dump_stack_lvl+0xd8/0x12c
[  157.882595][ T9321]  dump_stack+0x1c/0x28
[  157.882606][ T9321]  should_fail_ex+0x414/0x588
[  157.882616][ T9321]  should_failslab+0xc4/0x124
[  157.882625][ T9321]  __kmalloc_noprof+0x100/0x6f0
[  157.882635][ T9321]  nla_strdup+0xa0/0x148
[  157.882644][ T9321]  nf_tables_newtable+0x4dc/0x1120
[  157.882654][ T9321]  nfnetlink_rcv+0xca0/0x16f8
[  157.882663][ T9321]  netlink_unicast+0x610/0x800
[  157.882673][ T9321]  netlink_sendmsg+0x63c/0x920
[  157.882683][ T9321]  __sock_sendmsg+0xc8/0x138
[  157.882693][ T9321]  ____sys_sendmsg+0x418/0x70c
[  157.882700][ T9321]  ___sys_sendmsg+0x198/0x224
[  157.882707][ T9321]  __sys_sendmsg+0x160/0x214
[  157.882713][ T9321]  __arm64_sys_sendmsg+0x80/0x94
[  157.882721][ T9321]  invoke_syscall+0x98/0x244
[  157.882731][ T9321]  el0_svc_common+0xe8/0x23c
[  157.882741][ T9321]  do_el0_svc+0x48/0x58
[  157.882750][ T9321]  el0_svc+0x64/0x260
[  157.882758][ T9321]  el0t_64_sync_handler+0x48/0x148
[  157.882765][ T9321]  el0t_64_sync+0x198/0x19c
[  157.920839][ T9324] loop5: detected capacity change from 0 to 512
[  157.967545][ T9324] EXT4-fs (loop5): 1 orphan inode deleted
[  157.968125][ T9324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.371417][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.380518][ T9342] FAULT_INJECTION: forcing a failure.
[  158.380518][ T9342] name failslab, interval 1, probability 0, space 0, times 0
[  158.380551][ T9342] CPU: 0 UID: 0 PID: 9342 Comm: syz.0.1367 Not tainted syzkaller #0 PREEMPT 
[  158.380564][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  158.380571][ T9342] Call trace:
[  158.380575][ T9342]  show_stack+0x2c/0x3c (C)
[  158.380603][ T9342]  __dump_stack+0x30/0x40
[  158.380614][ T9342]  dump_stack_lvl+0xd8/0x12c
[  158.380625][ T9342]  dump_stack+0x1c/0x28
[  158.380635][ T9342]  should_fail_ex+0x414/0x588
[  158.380645][ T9342]  should_failslab+0xc4/0x124
[  158.380653][ T9342]  __kmalloc_cache_node_noprof+0x90/0x6ac
[  158.380663][ T9342]  page_pool_create_percpu+0x94/0xb08
[  158.380674][ T9342]  page_pool_create+0x24/0x34
[  158.380683][ T9342]  bpf_test_run_xdp_live+0x1ac/0x16f0
[  158.380692][ T9342]  bpf_prog_test_run_xdp+0x638/0xdcc
[  158.380701][ T9342]  bpf_prog_test_run+0x1e0/0x248
[  158.380711][ T9342]  __sys_bpf+0x468/0x5f0
[  158.380723][ T9342]  __arm64_sys_bpf+0x80/0x98
[  158.380733][ T9342]  invoke_syscall+0x98/0x244
[  158.380745][ T9342]  el0_svc_common+0xe8/0x23c
[  158.380754][ T9342]  do_el0_svc+0x48/0x58
[  158.380764][ T9342]  el0_svc+0x64/0x260
[  158.380772][ T9342]  el0t_64_sync_handler+0x48/0x148
[  158.380779][ T9342]  el0t_64_sync+0x198/0x19c
[  158.426845][ T9346] x_tables: duplicate underflow at hook 1
[  158.491132][ T9348] FAULT_INJECTION: forcing a failure.
[  158.491132][ T9348] name failslab, interval 1, probability 0, space 0, times 0
[  158.491172][ T9348] CPU: 0 UID: 0 PID: 9348 Comm: syz.0.1370 Not tainted syzkaller #0 PREEMPT 
[  158.491186][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  158.491194][ T9348] Call trace:
[  158.491198][ T9348]  show_stack+0x2c/0x3c (C)
[  158.491218][ T9348]  __dump_stack+0x30/0x40
[  158.491229][ T9348]  dump_stack_lvl+0xd8/0x12c
[  158.491239][ T9348]  dump_stack+0x1c/0x28
[  158.491248][ T9348]  should_fail_ex+0x414/0x588
[  158.491258][ T9348]  should_failslab+0xc4/0x124
[  158.491266][ T9348]  kmem_cache_alloc_noprof+0x8c/0x610
[  158.491275][ T9348]  skb_clone+0x1a8/0x31c
[  158.491283][ T9348]  dev_queue_xmit_nit+0x278/0x940
[  158.491293][ T9348]  dev_hard_start_xmit+0xb4/0x9ec
[  158.491302][ T9348]  __dev_queue_xmit+0xfc0/0x2c18
[  158.491312][ T9348]  __netlink_deliver_tap+0x484/0x6f8
[  158.491323][ T9348]  netlink_deliver_tap+0x1d8/0x1dc
[  158.491332][ T9348]  netlink_unicast+0x5e8/0x800
[  158.491342][ T9348]  netlink_sendmsg+0x63c/0x920
[  158.491352][ T9348]  __sock_sendmsg+0xc8/0x138
[  158.491361][ T9348]  ____sys_sendmsg+0x418/0x70c
[  158.491368][ T9348]  ___sys_sendmsg+0x198/0x224
[  158.491375][ T9348]  __sys_sendmsg+0x160/0x214
[  158.491381][ T9348]  __arm64_sys_sendmsg+0x80/0x94
[  158.491388][ T9348]  invoke_syscall+0x98/0x244
[  158.491398][ T9348]  el0_svc_common+0xe8/0x23c
[  158.491408][ T9348]  do_el0_svc+0x48/0x58
[  158.491417][ T9348]  el0_svc+0x64/0x260
[  158.491425][ T9348]  el0t_64_sync_handler+0x48/0x148
[  158.491432][ T9348]  el0t_64_sync+0x198/0x19c
[  158.492832][ T9348] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1370'.
[  158.693744][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1372'.
[  158.699610][ T9353] macvtap2: entered promiscuous mode
[  158.699684][ T9353] macvtap2: entered allmulticast mode
[  158.700863][ T9354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.708343][ T9354] tipc: Resetting bearer <eth:syzkaller0>
[  158.723027][ T9351] tipc: Disabling bearer <eth:syzkaller0>
[  158.931665][ T9373] loop5: detected capacity change from 0 to 512
[  158.963906][ T9373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.054396][ T9373] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  159.338374][ T9378] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  159.340841][ T7081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.369711][ T9381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1382'.
[  159.383782][ T9383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1381'.
[  159.406015][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1384'.
[  159.420165][ T9385] macvtap3: entered promiscuous mode
[  159.420261][ T9385] macvtap3: entered allmulticast mode
[  159.422622][ T9388] netlink: 'syz.3.1383': attribute type 11 has an invalid length.
[  159.460908][ T9389] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  159.467320][ T9389] tipc: Resetting bearer <eth:syzkaller0>
[  159.485515][ T9387] tipc: Disabling bearer <eth:syzkaller0>
[  159.538926][ T9396] syzkaller0: entered promiscuous mode
[  159.540108][ T9396] syzkaller0: entered allmulticast mode
[  160.607521][ T9418] 9p: Bad value for 'rfdno'
[  160.933160][ T9431] syzkaller0: entered promiscuous mode
[  160.933192][ T9431] syzkaller0: entered allmulticast mode
[  160.980985][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1397'.
[  160.984003][ T9439] macvtap4: entered promiscuous mode
[  160.984471][ T9439] macvtap4: entered allmulticast mode
[  161.070504][ T9443] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.077570][ T9443] tipc: Resetting bearer <eth:syzkaller0>
[  161.084633][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'.
[  161.084666][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1400'.
[  161.089849][ T9441] tipc: Disabling bearer <eth:syzkaller0>
[  161.093698][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'.
[  161.095484][ T9442] syzkaller0: entered promiscuous mode
[  161.095498][ T9442] syzkaller0: entered allmulticast mode
[  161.495198][ T9461] FAULT_INJECTION: forcing a failure.
[  161.495198][ T9461] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  161.495682][ T9461] CPU: 1 UID: 0 PID: 9461 Comm: syz.5.1402 Not tainted syzkaller #0 PREEMPT 
[  161.495694][ T9461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  161.495699][ T9461] Call trace:
[  161.495702][ T9461]  show_stack+0x2c/0x3c (C)
[  161.495722][ T9461]  __dump_stack+0x30/0x40
[  161.495733][ T9461]  dump_stack_lvl+0xd8/0x12c
[  161.495743][ T9461]  dump_stack+0x1c/0x28
[  161.495752][ T9461]  should_fail_ex+0x414/0x588
[  161.495761][ T9461]  should_fail+0x14/0x24
[  161.495769][ T9461]  should_fail_usercopy+0x20/0x30
[  161.495778][ T9461]  video_usercopy+0xad4/0xe90
[  161.495788][ T9461]  video_ioctl2+0x3c/0x50
[  161.495796][ T9461]  v4l2_ioctl+0x148/0x18c
[  161.495803][ T9461]  __arm64_sys_ioctl+0x14c/0x1c4
[  161.495814][ T9461]  invoke_syscall+0x98/0x244
[  161.495824][ T9461]  el0_svc_common+0xe8/0x23c
[  161.495834][ T9461]  do_el0_svc+0x48/0x58
[  161.495844][ T9461]  el0_svc+0x64/0x260
[  161.495852][ T9461]  el0t_64_sync_handler+0x48/0x148
[  161.495859][ T9461]  el0t_64_sync+0x198/0x19c
[  161.521402][ T9457] macvtap13: entered promiscuous mode
[  161.521480][ T9457] macvtap13: entered allmulticast mode
[  161.606271][ T9468] syzkaller0: entered promiscuous mode
[  161.606313][ T9468] syzkaller0: entered allmulticast mode
[  161.614298][ T9469] syzkaller0: entered promiscuous mode
[  161.614472][ T9469] syzkaller0: entered allmulticast mode
[  161.641634][ T9474] macvtap14: entered promiscuous mode
[  161.642840][ T9474] macvtap14: entered allmulticast mode
[  162.165009][   T15] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.165061][   T15] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.165149][   T15] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.165172][   T15] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.252668][ T4467] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  162.275003][ T9489] FAULT_INJECTION: forcing a failure.
[  162.275003][ T9489] name failslab, interval 1, probability 0, space 0, times 0
[  162.275042][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.5.1416 Not tainted syzkaller #0 PREEMPT 
[  162.275057][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  162.275064][ T9489] Call trace:
[  162.275068][ T9489]  show_stack+0x2c/0x3c (C)
[  162.275088][ T9489]  __dump_stack+0x30/0x40
[  162.275099][ T9489]  dump_stack_lvl+0xd8/0x12c
[  162.275109][ T9489]  dump_stack+0x1c/0x28
[  162.275118][ T9489]  should_fail_ex+0x414/0x588
[  162.275128][ T9489]  should_failslab+0xc4/0x124
[  162.275136][ T9489]  kmem_cache_alloc_node_noprof+0x94/0x6c8
[  162.275146][ T9489]  __alloc_skb+0x1f0/0x5f8
[  162.275156][ T9489]  netlink_ack+0x11c/0x880
[  162.275167][ T9489]  netlink_rcv_skb+0x210/0x410
[  162.275177][ T9489]  nfnetlink_rcv+0x220/0x16f8
[  162.275185][ T9489]  netlink_unicast+0x610/0x800
[  162.275194][ T9489]  netlink_sendmsg+0x63c/0x920
[  162.275204][ T9489]  __sock_sendmsg+0xc8/0x138
[  162.275214][ T9489]  ____sys_sendmsg+0x418/0x70c
[  162.275221][ T9489]  ___sys_sendmsg+0x198/0x224
[  162.275227][ T9489]  __sys_sendmsg+0x160/0x214
[  162.275234][ T9489]  __arm64_sys_sendmsg+0x80/0x94
[  162.275241][ T9489]  invoke_syscall+0x98/0x244
[  162.275251][ T9489]  el0_svc_common+0xe8/0x23c
[  162.275261][ T9489]  do_el0_svc+0x48/0x58
[  162.275270][ T9489]  el0_svc+0x64/0x260
[  162.275278][ T9489]  el0t_64_sync_handler+0x48/0x148
[  162.275286][ T9489]  el0t_64_sync+0x198/0x19c
[  162.356738][ T9493] FAULT_INJECTION: forcing a failure.
[  162.356738][ T9493] name failslab, interval 1, probability 0, space 0, times 0
[  162.356793][ T9493] CPU: 0 UID: 0 PID: 9493 Comm: syz.0.1413 Not tainted syzkaller #0 PREEMPT 
[  162.356804][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  162.356810][ T9493] Call trace:
[  162.356813][ T9493]  show_stack+0x2c/0x3c (C)
[  162.356833][ T9493]  __dump_stack+0x30/0x40
[  162.356844][ T9493]  dump_stack_lvl+0xd8/0x12c
[  162.356853][ T9493]  dump_stack+0x1c/0x28
[  162.356862][ T9493]  should_fail_ex+0x414/0x588
[  162.356872][ T9493]  should_failslab+0xc4/0x124
[  162.356881][ T9493]  kmem_cache_alloc_lru_noprof+0x94/0x618
[  162.356890][ T9493]  __d_alloc+0x50/0x690
[  162.356898][ T9493]  d_alloc_pseudo+0x2c/0xd8
[  162.356905][ T9493]  alloc_file_pseudo+0xdc/0x1ec
[  162.356913][ T9493]  __anon_inode_getfile+0x118/0x1c4
[  162.356923][ T9493]  __anon_inode_getfd+0x70/0xf4
[  162.356932][ T9493]  anon_inode_getfd+0x44/0x58
[  162.356941][ T9493]  bpf_map_new_fd+0x64/0x88
[  162.356950][ T9493]  map_create+0xdb8/0x123c
[  162.356959][ T9493]  __sys_bpf+0x1d4/0x5f0
[  162.356968][ T9493]  __arm64_sys_bpf+0x80/0x98
[  162.356977][ T9493]  invoke_syscall+0x98/0x244
[  162.356987][ T9493]  el0_svc_common+0xe8/0x23c
[  162.356997][ T9493]  do_el0_svc+0x48/0x58
[  162.357006][ T9493]  el0_svc+0x64/0x260
[  162.357014][ T9493]  el0t_64_sync_handler+0x48/0x148
[  162.357021][ T9493]  el0t_64_sync+0x198/0x19c
[  162.522808][ T9492] FAULT_INJECTION: forcing a failure.
[  162.522808][ T9492] name failslab, interval 1, probability 0, space 0, times 0
[  162.522853][ T9492] CPU: 1 UID: 0 PID: 9492 Comm: syz.1.1418 Not tainted syzkaller #0 PREEMPT 
[  162.522865][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  162.522870][ T9492] Call trace:
[  162.522874][ T9492]  show_stack+0x2c/0x3c (C)
[  162.522893][ T9492]  __dump_stack+0x30/0x40
[  162.522904][ T9492]  dump_stack_lvl+0xd8/0x12c
[  162.522914][ T9492]  dump_stack+0x1c/0x28
[  162.522923][ T9492]  should_fail_ex+0x414/0x588
[  162.522933][ T9492]  should_failslab+0xc4/0x124
[  162.522942][ T9492]  __kvmalloc_node_noprof+0x160/0x880
[  162.522951][ T9492]  page_pool_create_percpu+0x2fc/0xb08
[  162.522962][ T9492]  page_pool_create+0x24/0x34
[  162.522971][ T9492]  bpf_test_run_xdp_live+0x1ac/0x16f0
[  162.522981][ T9492]  bpf_prog_test_run_xdp+0x638/0xdcc
[  162.522989][ T9492]  bpf_prog_test_run+0x1e0/0x248
[  162.522999][ T9492]  __sys_bpf+0x468/0x5f0
[  162.523009][ T9492]  __arm64_sys_bpf+0x80/0x98
[  162.523018][ T9492]  invoke_syscall+0x98/0x244
[  162.523028][ T9492]  el0_svc_common+0xe8/0x23c
[  162.523037][ T9492]  do_el0_svc+0x48/0x58
[  162.523047][ T9492]  el0_svc+0x64/0x260
[  162.523055][ T9492]  el0t_64_sync_handler+0x48/0x148
[  162.523062][ T9492]  el0t_64_sync+0x198/0x19c
[  162.523075][ T9492] page_pool_create_percpu() gave up with errno -12
[  162.591321][ T9495] netlink: 'syz.3.1417': attribute type 4 has an invalid length.
[  162.671321][ T9510] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  162.671359][ T9510] Error validating options; rc = [-22]
[  162.731183][ T9523] __nla_validate_parse: 9 callbacks suppressed
[  162.731223][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1424'.
[  162.750613][ T9529] FAULT_INJECTION: forcing a failure.
[  162.750613][ T9529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.750657][ T9529] CPU: 1 UID: 0 PID: 9529 Comm: syz.1.1423 Not tainted syzkaller #0 PREEMPT 
[  162.750672][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  162.750678][ T9529] Call trace:
[  162.750682][ T9529]  show_stack+0x2c/0x3c (C)
[  162.750703][ T9529]  __dump_stack+0x30/0x40
[  162.750713][ T9529]  dump_stack_lvl+0xd8/0x12c
[  162.750723][ T9529]  dump_stack+0x1c/0x28
[  162.750732][ T9529]  should_fail_ex+0x414/0x588
[  162.750742][ T9529]  should_fail+0x14/0x24
[  162.750750][ T9529]  should_fail_usercopy+0x20/0x30
[  162.750759][ T9529]  _inline_copy_from_user+0x40/0x180
[  162.750768][ T9529]  copy_msghdr_from_user+0xb8/0x194
[  162.750776][ T9529]  ___sys_sendmsg+0x14c/0x224
[  162.750783][ T9529]  __sys_sendmsg+0x160/0x214
[  162.750790][ T9529]  __arm64_sys_sendmsg+0x80/0x94
[  162.750796][ T9529]  invoke_syscall+0x98/0x244
[  162.750807][ T9529]  el0_svc_common+0xe8/0x23c
[  162.750816][ T9529]  do_el0_svc+0x48/0x58
[  162.750826][ T9529]  el0_svc+0x64/0x260
[  162.750834][ T9529]  el0t_64_sync_handler+0x48/0x148
[  162.750841][ T9529]  el0t_64_sync+0x198/0x19c
[  162.825441][ T9522] syzkaller0: entered promiscuous mode
[  162.827898][ T9522] syzkaller0: entered allmulticast mode
[  163.276643][   T30] audit: type=1326 audit(163.260:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9549 comm="syz.0.1432" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d77aa8 code=0x0
[  163.303769][ T9540] Injecting memory failure for pfn 0x21cf58 at process virtual address 0x20ffa000
[  163.314385][ T9540] Memory failure: 0x21cf58: unhandlable page.
[  163.316502][ T9540] Memory failure: 0x21cf58: recovery action for get hwpoison page: Ignored
[  163.371582][ T9557] FAULT_INJECTION: forcing a failure.
[  163.371582][ T9557] name failslab, interval 1, probability 0, space 0, times 0
[  163.371639][ T9557] CPU: 0 UID: 0 PID: 9557 Comm: syz.5.1433 Not tainted syzkaller #0 PREEMPT 
[  163.371653][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  163.371659][ T9557] Call trace:
[  163.371662][ T9557]  show_stack+0x2c/0x3c (C)
[  163.371680][ T9557]  __dump_stack+0x30/0x40
[  163.371690][ T9557]  dump_stack_lvl+0xd8/0x12c
[  163.371700][ T9557]  dump_stack+0x1c/0x28
[  163.371709][ T9557]  should_fail_ex+0x414/0x588
[  163.371719][ T9557]  should_failslab+0xc4/0x124
[  163.371727][ T9557]  kmem_cache_alloc_noprof+0x8c/0x610
[  163.371736][ T9557]  inet_bind_bucket_create+0x3c/0x1d0
[  163.371748][ T9557]  __inet_hash_connect+0xc70/0x15b8
[  163.371758][ T9557]  inet_hash_connect+0x128/0x22c
[  163.371768][ T9557]  tcp_v4_connect+0xa14/0x1428
[  163.371777][ T9557]  __inet_stream_connect+0x1f8/0xc18
[  163.371786][ T9557]  inet_stream_connect+0x74/0xb0
[  163.371794][ T9557]  kernel_connect+0x12c/0x1a0
[  163.371802][ T9557]  smc_connect+0x2f8/0x610
[  163.371811][ T9557]  __sys_connect_file+0x13c/0x184
[  163.371821][ T9557]  __sys_connect+0x114/0x194
[  163.371830][ T9557]  __arm64_sys_connect+0x7c/0x94
[  163.371840][ T9557]  invoke_syscall+0x98/0x244
[  163.371850][ T9557]  el0_svc_common+0xe8/0x23c
[  163.371860][ T9557]  do_el0_svc+0x48/0x58
[  163.371869][ T9557]  el0_svc+0x64/0x260
[  163.371877][ T9557]  el0t_64_sync_handler+0x48/0x148
[  163.371884][ T9557]  el0t_64_sync+0x198/0x19c
[  163.420631][ T9558] loop0: detected capacity change from 0 to 4096
[  163.449116][ T9558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.462330][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'.
[  163.578806][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1436'.
[  163.756502][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'.
[  163.857854][ T9558] netlink: 'syz.0.1432': attribute type 1 has an invalid length.
[  163.859595][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1432'.
[  163.867289][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1437'.
[  163.940518][ T9593] syzkaller0: entered promiscuous mode
[  163.940557][ T9593] syzkaller0: entered allmulticast mode
[  163.941351][ T9593] FAULT_INJECTION: forcing a failure.
[  163.941351][ T9593] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  163.941366][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.1.1441 Not tainted syzkaller #0 PREEMPT 
[  163.941376][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  163.941380][ T9593] Call trace:
[  163.941384][ T9593]  show_stack+0x2c/0x3c (C)
[  163.941403][ T9593]  __dump_stack+0x30/0x40
[  163.941416][ T9593]  dump_stack_lvl+0xd8/0x12c
[  163.941426][ T9593]  dump_stack+0x1c/0x28
[  163.941435][ T9593]  should_fail_ex+0x414/0x588
[  163.941445][ T9593]  should_fail+0x14/0x24
[  163.941453][ T9593]  should_fail_usercopy+0x20/0x30
[  163.941462][ T9593]  _copy_from_iter+0x19c/0x1048
[  163.941473][ T9593]  skb_copy_datagram_from_iter+0xe8/0x5bc
[  163.941484][ T9593]  packet_sendmsg+0x2a98/0x3f4c
[  163.941495][ T9593]  __sock_sendmsg+0xc8/0x138
[  163.941505][ T9593]  ____sys_sendmsg+0x418/0x70c
[  163.941511][ T9593]  ___sys_sendmsg+0x198/0x224
[  163.941518][ T9593]  __sys_sendmsg+0x160/0x214
[  163.941525][ T9593]  __arm64_sys_sendmsg+0x80/0x94
[  163.941532][ T9593]  invoke_syscall+0x98/0x244
[  163.941542][ T9593]  el0_svc_common+0xe8/0x23c
[  163.941552][ T9593]  do_el0_svc+0x48/0x58
[  163.941562][ T9593]  el0_svc+0x64/0x260
[  163.941569][ T9593]  el0t_64_sync_handler+0x48/0x148
[  163.941576][ T9593]  el0t_64_sync+0x198/0x19c
[  163.976192][ T9588] loop3: detected capacity change from 0 to 2048
[  163.987966][ T9588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.043263][ T9587] 
[  164.043698][ T9587] ======================================================
[  164.044880][ T9587] WARNING: possible circular locking dependency detected
[  164.046029][ T9587] syzkaller #0 Not tainted
[  164.046809][ T9587] ------------------------------------------------------
[  164.048071][ T9587] syz.3.1439/9587 is trying to acquire lock:
[  164.049140][ T9587] ffff0000f07c80c0 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x30/0x114
[  164.050919][ T9587] 
[  164.050919][ T9587] but task is already holding lock:
[  164.052079][ T9587] ffff0000db5d6c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x16c/0x2d8
[  164.053957][ T9587] 
[  164.053957][ T9587] which lock already depends on the new lock.
[  164.053957][ T9587] 
[  164.055832][ T9587] 
[  164.055832][ T9587] the existing dependency chain (in reverse order) is:
[  164.057516][ T9587] 
[  164.057516][ T9587] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  164.059034][ T9587]        percpu_down_read_internal+0x5c/0x294
[  164.060125][ T9587]        ext4_writepages+0x16c/0x2d8
[  164.061004][ T9587]        do_writepages+0x270/0x468
[  164.061860][ T9587]        __writeback_single_inode+0x144/0x1808
[  164.062885][ T9587]        writeback_single_inode+0x3b8/0xaa0
[  164.063868][ T9587]        write_inode_now+0x170/0x208
[  164.064737][ T9587]        iput+0x6bc/0xb90
[  164.065474][ T9587]        ext4_xattr_block_set+0x12dc/0x2188
[  164.066476][ T9587]        ext4_expand_extra_isize_ea+0xb18/0x13a0
[  164.067546][ T9587]        __ext4_expand_extra_isize+0x29c/0x370
[  164.068568][ T9587]        __ext4_mark_inode_dirty+0x3a4/0x810
[  164.069676][ T9587]        ext4_evict_inode+0x7a0/0xfc4
[  164.070672][ T9587]        evict+0x4b8/0x740
[  164.071478][ T9587]        iput+0x858/0xb90
[  164.072277][ T9587]        ext4_process_orphan+0x240/0x2b4
[  164.073247][ T9587]        ext4_orphan_cleanup+0x7b8/0xd30
[  164.074167][ T9587]        ext4_fill_super+0x45a4/0x4d60
[  164.075160][ T9587]        get_tree_bdev_flags+0x380/0x434
[  164.076165][ T9587]        get_tree_bdev+0x2c/0x3c
[  164.077018][ T9587]        ext4_get_tree+0x28/0x38
[  164.077873][ T9587]        vfs_get_tree+0x90/0x28c
[  164.078765][ T9587]        fc_mount+0x24/0xac
[  164.079537][ T9587]        do_new_mount+0x2a4/0x540
[  164.080448][ T9587]        path_mount+0x5d0/0xa68
[  164.081281][ T9587]        do_mount+0xe8/0x148
[  164.082078][ T9587]        __arm64_sys_mount+0x334/0x380
[  164.083078][ T9587]        invoke_syscall+0x98/0x244
[  164.084009][ T9587]        el0_svc_common+0xe8/0x23c
[  164.084909][ T9587]        do_el0_svc+0x48/0x58
[  164.085684][ T9587]        el0_svc+0x64/0x260
[  164.086370][ T9587]        el0t_64_sync_handler+0x48/0x148
[  164.087351][ T9587]        el0t_64_sync+0x198/0x19c
[  164.088263][ T9587] 
[  164.088263][ T9587] -> #0 (&ei->xattr_sem){++++}-{4:4}:
[  164.089658][ T9587]        __lock_acquire+0x1780/0x2f44
[  164.090642][ T9587]        lock_acquire+0x140/0x368
[  164.091581][ T9587]        down_write+0x50/0xc0
[  164.092376][ T9587]        ext4_destroy_inline_data+0x30/0x114
[  164.093427][ T9587]        ext4_do_writepages+0x474/0x3ac8
[  164.094431][ T9587]        ext4_writepages+0x194/0x2d8
[  164.096144][ T9587]        do_writepages+0x270/0x468
[  164.097094][ T9587]        filemap_writeback+0x230/0x2bc
[  164.098089][ T9587]        filemap_flush+0x30/0x40
[  164.098993][ T9587]        ext4_convert_inline_data+0x138/0x4e4
[  164.100065][ T9587]        ext4_page_mkwrite+0x1cc/0xd48
[  164.101011][ T9587]        do_page_mkwrite+0x138/0x2b8
[  164.101975][ T9587]        do_wp_page+0x1e10/0x4070
[  164.102917][ T9587]        handle_mm_fault+0x10c8/0x245c
[  164.103915][ T9587]        do_page_fault+0x768/0xb64
[  164.104803][ T9587]        do_mem_abort+0x70/0x190
[  164.105675][ T9587]        el0_da+0x78/0x254
[  164.106470][ T9587]        el0t_64_sync_handler+0x10c/0x148
[  164.107521][ T9587]        el0t_64_sync+0x198/0x19c
[  164.108429][ T9587] 
[  164.108429][ T9587] other info that might help us debug this:
[  164.108429][ T9587] 
[  164.110292][ T9587]  Possible unsafe locking scenario:
[  164.110292][ T9587] 
[  164.111555][ T9587]        CPU0                    CPU1
[  164.112460][ T9587]        ----                    ----
[  164.113420][ T9587]   rlock(&sbi->s_writepages_rwsem);
[  164.114377][ T9587]                                lock(&ei->xattr_sem);
[  164.115613][ T9587]                                lock(&sbi->s_writepages_rwsem);
[  164.117035][ T9587]   lock(&ei->xattr_sem);
[  164.117854][ T9587] 
[  164.117854][ T9587]  *** DEADLOCK ***
[  164.117854][ T9587] 
[  164.119268][ T9587] 4 locks held by syz.3.1439/9587:
[  164.120168][ T9587]  #0: ffff0000ce7adbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1c4/0x498
[  164.121884][ T9587]  #1: ffff000115020508 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a0/0xd48
[  164.123560][ T9587]  #2: ffff0000f07c8510 (mapping.invalidate_lock#2){++++}-{4:4}, at: ext4_page_mkwrite+0x1c4/0xd48
[  164.125454][ T9587]  #3: ffff0000db5d6c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x16c/0x2d8
[  164.127348][ T9587] 
[  164.127348][ T9587] stack backtrace:
[  164.128304][ T9587] CPU: 0 UID: 0 PID: 9587 Comm: syz.3.1439 Not tainted syzkaller #0 PREEMPT 
[  164.129832][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  164.131602][ T9587] Call trace:
[  164.132145][ T9587]  show_stack+0x2c/0x3c (C)
[  164.132944][ T9587]  __dump_stack+0x30/0x40
[  164.133728][ T9587]  dump_stack_lvl+0xd8/0x12c
[  164.134584][ T9587]  dump_stack+0x1c/0x28
[  164.135350][ T9587]  print_circular_bug+0x328/0x330
[  164.136217][ T9587]  check_noncircular+0x158/0x174
[  164.137054][ T9587]  __lock_acquire+0x1780/0x2f44
[  164.137866][ T9587]  lock_acquire+0x140/0x368
[  164.138702][ T9587]  down_write+0x50/0xc0
[  164.139421][ T9587]  ext4_destroy_inline_data+0x30/0x114
[  164.140366][ T9587]  ext4_do_writepages+0x474/0x3ac8
[  164.141238][ T9587]  ext4_writepages+0x194/0x2d8
[  164.142165][ T9587]  do_writepages+0x270/0x468
[  164.143039][ T9587]  filemap_writeback+0x230/0x2bc
[  164.143953][ T9587]  filemap_flush+0x30/0x40
[  164.144827][ T9587]  ext4_convert_inline_data+0x138/0x4e4
[  164.145837][ T9587]  ext4_page_mkwrite+0x1cc/0xd48
[  164.146725][ T9587]  do_page_mkwrite+0x138/0x2b8
[  164.147533][ T9587]  do_wp_page+0x1e10/0x4070
[  164.148312][ T9587]  handle_mm_fault+0x10c8/0x245c
[  164.149195][ T9587]  do_page_fault+0x768/0xb64
[  164.150000][ T9587]  do_mem_abort+0x70/0x190
[  164.150804][ T9587]  el0_da+0x78/0x254
[  164.151511][ T9587]  el0t_64_sync_handler+0x10c/0x148
[  164.152408][ T9587]  el0t_64_sync+0x198/0x19c
[  164.154585][ T9587] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  164.157166][ T9587] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  164.159329][ T9587] EXT4-fs (loop3): This should not happen!! Data will be lost
[  164.159329][ T9587] 
[  164.161071][ T9587] EXT4-fs (loop3): Total free blocks count 0
[  164.162171][ T9587] EXT4-fs (loop3): Free/Dirty block details
[  164.163250][ T9587] EXT4-fs (loop3): free_blocks=4096
[  164.164302][ T9587] EXT4-fs (loop3): dirty_blocks=704
[  164.164318][ T9587] EXT4-fs (loop3): Block reservation details
[  164.164359][ T9587] EXT4-fs (loop3): i_reserved_data_blocks=44
[  164.167989][ T9588] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 672 with error 28
[  164.194200][ T9600] loop5: detected capacity change from 0 to 8
[  164.196250][ T9600] Filesystem uses "lzo" compression. This is not supported
[  164.225825][ T4714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.226536][ T4713] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost