last executing test programs: 17.127698104s ago: executing program 3 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001040)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002340)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[], 0x1, 0x1c1, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x21002, 0x48) syz_io_uring_setup(0x4c2, &(0x7f0000000540)={0x0, 0x1319, 0x10, 0x1, 0x11}, &(0x7f0000000040), &(0x7f0000000080), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8}, 0x8}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x2, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r3}, &(0x7f0000001300), &(0x7f0000001340)='%-5lx \x00'}, 0x20) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:', @ANYRESDEC], 0x4e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x12, 0x0, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x80000000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) r5 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0xee01, 0x0, 0xee01, 0x180, 0x1}, 0x0, 0x0, 0x8, 0x80000001, 0x4, 0x9, 0x81, 0x5, 0x7, 0x8000}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4008, r4}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) 17.063200864s ago: executing program 3 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)={0x130, r1, 0xacf5e67dd0b583a1, 0x70fd29, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "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"}]}]]}, 0x130}, 0x1, 0x0, 0x0, 0x2004c815}, 0x24040000) 16.958632549s ago: executing program 3 (id=369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x8}}, @TCA_RED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, @TCA_RED_MARK_BLOCK={0x8}]}}]}, 0x150}}, 0x0) 16.85693686s ago: executing program 3 (id=372): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = eventfd2(0x7, 0x801) dup3(r1, 0xffffffffffffffff, 0x80000) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x267) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) eventfd2(0x7, 0x801) (async) dup3(r1, 0xffffffffffffffff, 0x80000) (async) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x267) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) (async) 16.767002964s ago: executing program 3 (id=375): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "3a5eecea2084d7a8851c054a342a948e"}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) (fail_nth: 2) 16.648950321s ago: executing program 1 (id=377): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "3a5eecea2084d7a8851c054a342a948e"}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) 16.427307911s ago: executing program 1 (id=380): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 16.258696695s ago: executing program 1 (id=381): epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) 16.096490657s ago: executing program 3 (id=382): r0 = timerfd_create(0x7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) pipe2$watch_queue(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000ec0)={{r2, &(0x7f0000000d80)='ext4\x00', 0x18080, &(0x7f0000000dc0)={@align=0x9, {0x1ff, 0x600, 0xd47453aa, 0x80}}, 0x0, &(0x7f0000000e00), &(0x7f0000000e40)=0x80000000}, {[0x2, 0x51e, 0x7fffffff, 0x4]}, 0x6, 0x3c, &(0x7f0000000e80)=""/60}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x7, &(0x7f0000000080)=@raw=[@alu={0x7, 0x1, 0x4, 0x3, 0x3, 0x10, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call], &(0x7f0000000140)='GPL\x00', 0x5, 0x7f, &(0x7f0000000180)=""/127, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, r3, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000880)=[{0x0, 0x2, 0x5, 0x7}, {0x3, 0x5, 0xa, 0x3}, {0x1, 0x3, 0x5, 0x1}, {0x3, 0x2, 0xc, 0x2}], 0x10, 0x1}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a40)={r4, 0xc, 0x5a, 0xffffffffffffff80}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000ff"], 0x40) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$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") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000400)=""/166, 0xa6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) fallocate(r10, 0x8, 0x4000, 0x8000) 16.074928371s ago: executing program 32 (id=382): r0 = timerfd_create(0x7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b40), &(0x7f0000000b80), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) pipe2$watch_queue(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000ec0)={{r2, &(0x7f0000000d80)='ext4\x00', 0x18080, &(0x7f0000000dc0)={@align=0x9, {0x1ff, 0x600, 0xd47453aa, 0x80}}, 0x0, &(0x7f0000000e00), &(0x7f0000000e40)=0x80000000}, {[0x2, 0x51e, 0x7fffffff, 0x4]}, 0x6, 0x3c, &(0x7f0000000e80)=""/60}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x7, &(0x7f0000000080)=@raw=[@alu={0x7, 0x1, 0x4, 0x3, 0x3, 0x10, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call], &(0x7f0000000140)='GPL\x00', 0x5, 0x7f, &(0x7f0000000180)=""/127, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, r3, 0x8, &(0x7f0000000240)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000880)=[{0x0, 0x2, 0x5, 0x7}, {0x3, 0x5, 0xa, 0x3}, {0x1, 0x3, 0x5, 0x1}, {0x3, 0x2, 0xc, 0x2}], 0x10, 0x1}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a40)={r4, 0xc, 0x5a, 0xffffffffffffff80}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000ff"], 0x40) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$eJzs3E1oXNUeAPD/nUyapB+vee/19b3mVU2tYrCY2rTaLgSpKLhQEOtClyEfJTZtpEnBlipTkLqUgntx6daFW3VTiitBcFWXghSKdNNWEEfuzL2TyfTO5Dsh7e8HyZxz750558y55875mLkBPLIG039JPXwzInZHRKn1gMH6w707l8fu37k8FpVq9dTvSe1pd9N4JnuZ2JFFhkoRpU+S+R1NZi9eOjM6PT1xPosfnjv7weHZi5eem+rNtpw4cezokeMvjryw/EIVpJeW6+7AxzP7973+3rU3x8r59jy15nKslcEYLMpKzdNrndgm29UUTspNkW2bkBmWLD3/0+rqrrX/3dEV5Q5HV5ojpfXPHbCeqtVqtaf97kq6v1quzrtSBR4a0bvZOQA2R/5Bn45/87+ijsDDOoy7fbI+AErLfS/7i3iitjEf4HS3jG9za/GeDEbEu5U/vkj/Yp3mIQAAmn13Mu8JtvT/+usrI39euP5y+viPbA2lPyL+GRH/ioh/R8SeiPhPROyNiP9GxP9aXr8rIqod0h9siTfSb8wul26tUVELpf2/l7K1rXs/R9b/W5CB/q5arK/5aRPPZ+/JUHT3TE5NTxzpkMb3r/70Wbt9ef+vN3tM08/7glk+bpVbJujGR+dGV1DUQrevRAyUs/I3+r9JOSJprAQkEbEvIgaan1jp/Lr9TeGpZ7/a34h0Lzyuuf9bXP6aauE6WqeliiWqfhnxTL3+K9EofyxYREwWrE+eHT09cXri3EhjffJwb0z3dUrjhx+vvtVu36Ll/+bXxhpl5rXj357KWtbqpfW/PebrP/L12/ny9ycRSWO9dnb5aVz95dMHxjR51S1e/8Xn/7bknVo4H4N9ODo3d/5IxLbkjQe3j8w/N4+nj+k5nJZ/6GDr+V9Lt3aNy9+J/0dEehI/FhGPR32EmOb9QEQ8GREHO5T/xitPvd9u3xLP/7ruDomsUFr+8VhY/nrNL6j/+fX6doEkuyAU7Oo6c+Dm/YGVlj+t/2O10FC2pfj6lyy4RLTLaf5pl275a9XvHgAAAGwNpYjY2TSXtDNKpeHh+hzQnthemp6ZnTs0OXPh3Hi6L6I/ukuTU9O1+c/6fHB3ks9/9jfFR1riR7N548+7+mrx4bGZ6fFNLTmwo9bmk9JwxI1dTe0/9VvLFHOH7wkDW9UarKMBW1Sn9p924vde28DMABtq6Z//1z9a14wAG66p/bf7Wl9lBd/7ArYA438gs6TLgWsGbH1VbRkeactq/4cW+eUfsKWU4+1GeGl39ez4e1dgC9H/h0fSor/rX1Wg2lO8qzcePDh6O79gV6wsG30FaW1KIO1ZLX5wfi1eTVr5zRuyLX0Fx5zM7pbQ/n4OWT7aphWl5WWspyCtldTp5AreljSr+S1MKudnT+9d85O/mn1Xfq1Pm683pJ0WBTbyKgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+/g4AAP//l8DN3Q==") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000400)=""/166, 0xa6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8541, 0x1a9) fallocate(r10, 0x8, 0x4000, 0x8000) 15.105024976s ago: executing program 1 (id=396): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x81e, &(0x7f00000001c0), 0x3, 0x4bf, &(0x7f0000000f00)="$eJzs3ctvW1UaAPDPdpMmaaavGY3ajjSt1JE6DzVPjZrMzGZWwKISohIbkEpI3FDixFHsFBJ1kcCuCxYIBBJiwZ6/gA1dUSEh1rBHLFARlCABEpLRvbbbxImDgRK3ub+fdJtzH/Z3Tq3v6Nzje30DyKwzyT+5iMGI+DgijtRXtx5wpv5n48716WTJRa126atcelyy3jy0+bpDEbEWEX0R8cQjEc/mtsetrKzOTZVKxaXG+nB1fnG4srJ6/ur81GxxtrgwOnFhcnJiZHxs8r619cYrz9+4+N5jve9+9/LtW69+8H5SrcHGvs3t6MR6h8fVm94TxzZtOxAR//slwR5ghUZ7+rtdEX6V5PP7Y0ScTfP/SBTSTxPIglqtVvuxdrDd7rUasG/l0zFwLj8UEfVyPj80VB/D/ykG8qVypfqvK+XlhZn6WPlo9OSvXC0VRxrnCkejJ5esj6ble+tjLevjEekY+LVCf7o+NF0uzextVwe0ONSS/98W6vkPZIRTfsgu+Q/ZJf8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/yC75D9kl/yGTHr94MVlqzfvfZ66tLM+Vr52fKVbmhuaXp4f6YmlxaLZcnk3v2Zn/ufcrlcuLo/+O5b6oFivV4crK6uX58vJC9XJ6X//lYs+etAroxLHTNz/NRcTaf/rTJdHb2CdXYX+r1XLR7XuQge4odLsDArrG1B9kl3N8oPUnelvHBX3tXrh4b74QeLjku10BoGvOnfT9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DhZP4fsmtwp+d/HY74w6Znd41ExOGI+KTQc7D5rC9gP8h/kWuM/88d+dtg697e3PfpVwS9EfHCW5feeHGqWl0aTbZ/fXd79c3G9rFNL2x7wgB0SzNPm3kMAGTXxp3r081lL+N++f/6RQjb4x9ozE32pd9RDmzktlyrkLtP1y6srUfEiZ3i5xrPO6+fyAxsFLbFP974m6u/RVrfA+lz0/cm/slN8f+6Kf6p3/y/AtlwM+l/RnbKv3ya03E3/7b2P4P36dqJ9v1f/m7/V2jT/53uMMZzb7/0edv46xGndozfjNeXxmqNn9TtXIfxbz/95J/b7au9U3+fneI3JaXh6vzicGVl9Xz6O3KzxYXRiQuTkxMj42OTw+kc9XBzpnq7/5746NZu7R9oE3+39ifb/tFh+3/4y4dPndkl/t/P7vz5H98lfn9E/LPD+N+MffZMu31J/Jk27c/vEj/ZNt5h/Mrrjx7s8FAAYA9UVlbnpkql4pKCgkJXCusPRjVaCt3umYDfW2UlOTVPkr7bNQEAAAAAAAAAAAA6tReXE3e7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+8FPAQAA//8mrNPI") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001200000008000800000300000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 14.973224096s ago: executing program 1 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "000000000000000000000000000000000000000000000000000000000000000000000000fffffff100"}, @TCA_RED_MARK_BLOCK={0x8}]}}]}, 0x150}}, 0x0) 14.488869876s ago: executing program 1 (id=402): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x0, 0xfb, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000002c0001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 14.413605567s ago: executing program 33 (id=402): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x0, 0xfb, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000002c0001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4.276439094s ago: executing program 5 (id=523): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000280)='%t\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='addr\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@request_death, @clear_death], 0x3e, 0x0, &(0x7f0000000240)="2f2aefa92367bdae6e69d9eb186b56663d2af21ee9d9e21ca96f510c671494d853644c75ca759998db7d21fa758c9d4ff1aacf225ba306e06340a1cae555"}) 4.036145597s ago: executing program 6 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 4.031256312s ago: executing program 5 (id=526): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x15}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}}}}}, 0x0) fadvise64(r0, 0x8, 0xc, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000470001000800000095"], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 3.937333873s ago: executing program 6 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500003f00002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2.871544524s ago: executing program 6 (id=536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000280)='%t\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='addr\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000200)=[@request_death, @clear_death], 0x3e, 0x0, &(0x7f0000000240)="2f2aefa92367bdae6e69d9eb186b56663d2af21ee9d9e21ca96f510c671494d853644c75ca759998db7d21fa758c9d4ff1aacf225ba306e06340a1cae555"}) 2.87057189s ago: executing program 5 (id=537): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a53f2719efb234644b972a5d2", 0x0, 0xf0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/vs/conn_lfactor\x00', 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8000, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1}}, {@inode_readahead_blks}, {@usrjquota}, {@dax_inode}, {@noblock_validity}, {@noquota}]}, 0x0, 0x47b, &(0x7f0000000bc0)="$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") 2.858892928s ago: executing program 6 (id=538): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0xf4240, 0x0, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x5, 0x5, 0x6, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x24, 0x81, 0x8, 0x40, 0x1c}, 0xe) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) 2.677009215s ago: executing program 4 (id=540): syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x8, 0x0, 0xfb, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000003000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.350967292s ago: executing program 2 (id=543): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff04800000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94) 2.281214859s ago: executing program 2 (id=545): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/pids.max\x00', 0xc85c3, 0x9) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) (async) getdents64(r0, &(0x7f0000000080)=""/206, 0xce) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000f00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000240)=@caif=@util={0x25, "6b52de16e623bda42b86778d452dfae2"}, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x110}, 0x4) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg(r2, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000004ec0)=' ', 0x1}], 0x1, &(0x7f0000002000)=ANY=[], 0x100}}], 0x1, 0x24000041) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt/file0\x00', 0x42, 0x1ff) fsetxattr(r5, &(0x7f0000000140)=@known='user.syz\x00', 0x0, 0x0, 0x0) (async) fsetxattr(r5, &(0x7f0000000340)=@known='user.syz\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r6, 0x0, 0x2) syz_usbip_server_init(0x1) read(r6, 0x0, 0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000440), &(0x7f0000000480)) (async) r8 = getegid() fchown(r1, r7, r8) (async) fchownat(r0, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, r8, 0x1000) 2.280941678s ago: executing program 4 (id=546): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x34, 0x0, 0x7, 0x9, 0x9, 0x2, 0x1, 0x80000000}}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000611ae946aa1fd6700000009e0000000000000000fb2ba750305ef770101cb34962bf3c30f6191e4682148e98017e94738b5f3552f74e4390789fece9585b5257f3c404"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r3 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x70}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) ioctl$sock_inet_SIOCGARP(r4, 0x8954, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x5c, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e22, 0x1, 'sed\x00', 0x12, 0x0, 0x26}, 0x2c) ioctl$AUTOFS_IOC_FAIL(r9, 0x9361, 0xf8aa) 2.280516053s ago: executing program 5 (id=547): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500004000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.889665654s ago: executing program 6 (id=548): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x15}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}}}}}, 0x0) fadvise64(r0, 0x8, 0xc, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000470001000800000095"], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 1.468496606s ago: executing program 0 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x8}}, @TCA_RED_STAB={0x104, 0x2, "00000000000000000000000000000000000000000000000000000000000000000000000000f1ffffff00"}, @TCA_RED_MARK_BLOCK={0x8}]}}]}, 0x150}}, 0x0) 1.459519341s ago: executing program 0 (id=551): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) socket(0x400000000010, 0x3, 0x0) epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) semctl$SETALL(0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xf8, 0xf8, 'B'}}}}}, &(0x7f0000000480)={0x0, 0x4, [0x5c, 0xa90, 0xa4c, 0x14f]}) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r4 = accept$inet(0xffffffffffffffff, 0x0, 0x0) read(r4, &(0x7f0000000100), 0x4) 1.391973331s ago: executing program 2 (id=552): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)={0x130, r1, 0xacf5e67dd0b583a1, 0x70fd29, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x2000000, 0x5d}}}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "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"}]}]]}, 0x130}, 0x1, 0x0, 0x0, 0x2004c815}, 0x24040000) 1.382340776s ago: executing program 0 (id=553): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r1, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c000280080007008100ffea080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) 1.267974857s ago: executing program 5 (id=554): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x801, 0x0) listen(r3, 0x540) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r5) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x1d2) write(r6, &(0x7f0000000600)='12', 0x2) setrlimit(0x9, &(0x7f0000000000)={0xfffffffffffffff9, 0x67d3}) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1.266861912s ago: executing program 4 (id=555): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc80, &(0x7f0000000600)=ANY=[@ANYRES16=0x0], 0x1, 0x266, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x10b442, 0x0) pwrite64(r0, &(0x7f0000000440)="67dd3cc9f5", 0x5, 0x3) write$FUSE_INTERRUPT(r0, &(0x7f00000021c0)={0x10}, 0x10) 1.264342553s ago: executing program 2 (id=556): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ffff850000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x1002, &(0x7f00000017c0)=""/4098, 0x40f00}, 0x94) 1.216999189s ago: executing program 0 (id=557): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00f9a1f6edb16e7c9f792b104bb511bce015a61c9a0b0f89f68d51d8cf742a685fd8a0bbf985b16c4309a4ad6b03a7aea2f1e658b4a12dcc482ee80de5ced69b9bd2646a20b8"], 0x1, 0x1d7, &(0x7f0000000000)="$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") 1.149947237s ago: executing program 0 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000050400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) 1.149755496s ago: executing program 2 (id=559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x14) tkill(r1, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0800000004000000040000000700000000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='*:', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.144799909s ago: executing program 4 (id=560): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "3a5eecea2084d7a8851c054a342a948e"}]}}]}, 0x48}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0xffffffffffff) 781.187302ms ago: executing program 6 (id=561): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x3, 0x815, 0xa, 0x15e, 0x0}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x3, 0x3, 0x104, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)=@newlinkprop={0x28, 0x6c, 0x623, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1002, 0x901b0}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@errors_remount}]}, 0xfe, 0x596, &(0x7f00000026c0)="$eJzs3d9rFNceAPDvbLLRGK9GELn3crkEfKhF3Jikthb6YB9LKxXadxuSNUg2rmQ3YlKh+lBf+lKkUEqF0j+g730q0n+gf4WlFaRIqAX7sGU2s7pJdvPL1azZzwdG58ycmXPOznxPzuzZZQPoWSPpP7mI/0TEl0nE4aZ9/ZHtHFnJt/zoxlS6JFGrffRHEkm2rZE/yf4fyhL/joifP484mVtfbmVxaXayVCrOZ+nR6tzV0cri0qnLc5MzxZnilfGJibNnJsbffuvNjrX19QuPv/nw3ntnvzi+/PUPD47cSeJcHMz2NbdjQ/s23HuzOTESI9lrko9zazKObafir4BktyvAjvRlcZ6PtA84HH1Z1AN732cRUdu+Jzs4Bug6yU7iH9gDGuOAxrP9lp+D94iH7648AK1vf7Ly3kjsrz8bHVhOVj0Zpc+7wx0oPy3jx9/v3kmX2M77EADP6eatiDjd39++/1vj79qWz316C3nWlqH/g5fnXjr++WkwYl38556Of6LF+GeoRezuxObxn3uwMgnVZKADBWfS8d87Lce/T4sc7stS/6qP+fLJpculYtq3HYqIE5Hfl6Y3ms85u3y/bafZPP5Ll7T8xlgwq8eD/jVzTtOT1cnnaXOzh7ci/rvJ+Ddpcf3T1+PCFss4Vrz7/3b7Nm//i1X7PuK1ltf/2YxWsvH85Gj9fhht3BXr/Xn72C/tyt/t9qfX/8DG7R9OmudrK9sv47v9T4rt9o0k2aTpNu//geTjes/U6AquT1ar82MRA8kH9fSq7ePPjm2kG/nT9p843jr+N7r/ByPiky22//bR222z1q//4d29/tPbuv4brzw+s3JQ867773/6bbvyt9b/vVFfO5Ft2Ur/17aCA6u37PiFAwAAAAAAgC6UG4g4GEmukM3pH4xcrlBY+XzH0TiQK5Ur1ZOXygtXpqP+XdnhyOcaM91DTZ+HGMuOb6THs8/HNtITEXEkIr7qG6ynC1Pl0vRuNx4AAAAAAAAAAAAAAAAAAAC6xFC0/v5/6re+3a4d8ML5yW/oXavif1+LDJ34pSegK/n7D71L/EPvEv/Qu8Q/9C7xD71L/EPv2ln8/+9QxysCvHT+/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBHXTh/Pl1qy49uTEXE/ri2uDBbvnZqupifLcwtTBWmyvNXCzPl8kypWJgqz212vlK5fHVsPBauj1aLlepoZXHp4lx54Ur14uW5yZnixWL+5TQLAAAAAAAAAAAAAAAAAAAAXimVxaXZyVKpON+dK/kOn/DXLmnXHlrp745qWJmvDEYHT7i6n/irVqvtVh8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8EAAD//3hONlo=") r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000040)=0xb) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000100)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x0) r6 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xd075, 0xc00, 0x1, 0x33b, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x10, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3fe, 0xfff, 0x35315852, 0x3, 0x8, [{0x8, 0xf}, {0x8, 0xa}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x9}, {0x6, 0xc}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCGETD(r11, 0x5424, &(0x7f0000000040)) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)={0x5, 0x0, 0x5, 0x7fff}) 536.303335ms ago: executing program 4 (id=562): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) socket(0x400000000010, 0x3, 0x0) epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) semctl$SETALL(0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x0, 0x4, [0x5c, 0xa90, 0xa4c, 0x14f]}) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r4 = accept$inet(0xffffffffffffffff, 0x0, 0x0) read(r4, &(0x7f0000000100), 0x4) 340.868477ms ago: executing program 0 (id=563): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f00008f4000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x1, './proc\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000003c00)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000440)="d7395d44476ffbeee66955e307f2df6a03ae6a7aa1e971cb45bcfa189ce8b5d04b20ecc614f4abf2c3", 0x29}, {&(0x7f0000000480)="c22242265d431a0ed2085afeabaffc2b50891dc969013c34ca1b86a521ec9c4ffbada0bdc5072da0e9277903f793f6130930922baff27efc2d5a1e4521b65c3981b67670", 0x44}, {&(0x7f0000000500)}, {&(0x7f0000000540)="db03417cb4fa527e6da81b1b60684d418e7ca13cbe0190bf8fe9212c1ff1d39f7f3cae433bc517be4c7aaecce4204082", 0x30}, {&(0x7f0000000580)="b1a9d4e357c200eec94e2f47c8a3f74d5a893b5c058a12c58e9286d1804cfb1bb019f5c114d3c3e5e3f47e0247020d11e5eae71eed1f2c7b0159f70134859aba0e473e2f58ecc246dd634323808646ece1a38cfa265fcad8747ce833c5028ab7ec774219157deb", 0x67}], 0x5, &(0x7f00000037c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r0]}}], 0xb8, 0x200000d4}}, {{&(0x7f0000003880)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003900)="db67c177c89818c583b1edd44011096d63fe8cd2c93984610547d78e5b722210a8cd0e42c0112d4d388b4edfd9b22157d3d0031154cc70ac925448b0504b3c62b741e1f0b6230e5f33fa29180d4cb68ce4c8a98d3817de263bec1c7fd8a86af614cf125b9af5bfaeea9aa19d1b66a72896f6e5c7891a1db885966a4bab9eb8b42f078b0eb4ef0b65c31de616cce621c18f246cc190bce5988925bc3bf1ad34a8d9f596bd25243e5aa6d778156d024ba94ee4c332d75ab70c04b049d85c80e0c3bb4cdba657", 0xc5}, {&(0x7f0000003a00)="976750f6d3a67094273a2653ce2d3370a275f2c8e500e34525371bfdf7cb9d171d152693d56eb8a0c3f0edf7d84cedd4c3263428394325b50fa2ff911b2931ab7c52cb1c2079c104f0a986a3d437084ca89af001eccbb10b0f5bac57b08b4cd74779e2e4b36097dd8d675c20f6508e7b1c006808c9a596ec804cc759574cf366b8a62b57919064bb9672152c12f0742fd139a92069b5a003ccef48890585633ae97d4c2a65a4b3dc481f76c4ae23cedccf8c68bec243fb1fe0f8dc3138229a4ddb4c438e11e3f83e0d6bb0e281a9a0c6b729e26121eabcc9fc8c379910a722cd3edf304fe344b7683bb0b66880918ce99e7d941ec4", 0xf5}], 0x2, &(0x7f0000003b80)=[@rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x78}}], 0x2, 0x408d4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x29cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0), 0x0, 0x80000}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f00000016c0)=[{0x0}], 0x1}, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r5, 0x5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = fcntl$getown(r7, 0x9) ioprio_get$pid(0x1, r8) 106.20669ms ago: executing program 5 (id=564): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) bind$can_raw(0xffffffffffffffff, &(0x7f0000000240), 0x10) socket(0x400000000010, 0x3, 0x0) epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000002c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) semctl$SETALL(0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x8100, 0x1, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xf8, 0xf8, 'B'}}}}}, &(0x7f0000000480)={0x0, 0x4, [0x5c, 0xa90, 0xa4c, 0x14f]}) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r4 = accept$inet(0xffffffffffffffff, 0x0, 0x0) read(r4, &(0x7f0000000100), 0x4) 64.388256ms ago: executing program 2 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500004100002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 0s ago: executing program 4 (id=566): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='sessname=s+ device_path=/dev/ram0 path=ip:027.0.0.1', 0x33) r1 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r1, &(0x7f00000000c0)=""/234, 0xea, 0x0, &(0x7f00000001c0)=@in={0x2, 0x4e23, @remote}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = semget$private(0x0, 0x3, 0x200) semctl$IPC_RMID(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): 31.804912][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.804943][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.820146][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.820200][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.820291][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.820335][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.826856][ T4724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.830400][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.830783][ T4724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.832650][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.838622][ T4724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.841044][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.841718][ T4724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.843305][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.866887][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.866944][ T4724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.867041][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.867074][ T4724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.874696][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.888469][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.892164][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.894680][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.897074][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.920423][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.923012][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.923663][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.925439][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.932758][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.940201][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.941841][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.943355][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.944823][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.949636][ T1250] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.951115][ T1250] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.959781][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.963566][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.971077][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.974263][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.974316][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.979453][ T4716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.982740][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.984639][ T4716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.987242][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.990287][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.990343][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.990718][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.990737][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.991081][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.991102][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.002367][ T4716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.005188][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.007045][ T4716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.009984][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.020858][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.024513][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.024567][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.032376][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.043193][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.043255][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.107221][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.123342][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.125269][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.125300][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.166005][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.166060][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.180826][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.192070][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.211381][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.211439][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.212039][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.212057][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.234842][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.281085][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.365224][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.427298][ T4713] veth0_vlan: entered promiscuous mode [ 32.442436][ T4724] veth0_vlan: entered promiscuous mode [ 32.450399][ T4713] veth1_vlan: entered promiscuous mode [ 32.458438][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.461851][ T4724] veth1_vlan: entered promiscuous mode [ 32.464239][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.468501][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.476059][ T4724] veth0_macvtap: entered promiscuous mode [ 32.499494][ T4710] veth0_vlan: entered promiscuous mode [ 32.512981][ T4719] veth0_vlan: entered promiscuous mode [ 32.514958][ T4724] veth1_macvtap: entered promiscuous mode [ 32.523877][ T4713] veth0_macvtap: entered promiscuous mode [ 32.530726][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.534399][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.536799][ T4710] veth1_vlan: entered promiscuous mode [ 32.538507][ T4716] veth0_vlan: entered promiscuous mode [ 32.540223][ T4719] veth1_vlan: entered promiscuous mode [ 32.543104][ T4713] veth1_macvtap: entered promiscuous mode [ 32.560084][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.560665][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.560696][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.564973][ T4719] veth0_macvtap: entered promiscuous mode [ 32.571084][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.572400][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.577148][ T4716] veth1_vlan: entered promiscuous mode [ 32.582768][ T4719] veth1_macvtap: entered promiscuous mode [ 32.591059][ T4710] veth0_macvtap: entered promiscuous mode [ 32.592288][ T4710] veth1_macvtap: entered promiscuous mode [ 32.609233][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.613049][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.616936][ T1250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.633273][ T4716] veth0_macvtap: entered promiscuous mode [ 32.639825][ T1250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.639880][ T1250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.654845][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.656030][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.662689][ T454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.664503][ T454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.668426][ T1250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.668718][ T1250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.668742][ T1250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.668764][ T1250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.675684][ T4716] veth1_macvtap: entered promiscuous mode [ 32.698221][ T454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.698608][ T1250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.698646][ T1250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.698667][ T1250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.698685][ T1250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.698701][ T1250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.705455][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.705470][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.710579][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.712534][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.743512][ T1250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.743549][ T1250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.758492][ T1250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.758525][ T1250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.768356][ T1250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.768688][ T1250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.768862][ T1250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.768884][ T1250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.782216][ T1250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.782256][ T1250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.791655][ T3286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.791684][ T3286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.806306][ T3286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.806338][ T3286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.817041][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.817076][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.824417][ T4724] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.833060][ T3286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.833097][ T3286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.865146][ T3286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.865186][ T3286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.875022][ T4893] loop3: detected capacity change from 0 to 8 [ 32.875536][ T4893] squashfs: Unknown parameter 'ÎœôÔÕZ&ËÌÀ -_qK›&&—ÚcäÆÆÀ#ÁÌšzdQqeUvbNNjQ1CÅ-˜µö×Tš%8þÈs8$i:è0ññÈ‚¹‹-Sáì™òëØ4Ž0, priority 0 [ 184.892082][ T5707] set_capacity_and_notify: 6 callbacks suppressed [ 184.892125][ T5707] loop4: detected capacity change from 0 to 1024 [ 184.908350][ T5707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 185.184620][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.252029][ T5722] tmpfs: Cannot change global quota limit on remount [ 185.609563][ T5698] tipc: Resetting bearer [ 185.615734][ T5698] tipc: Disabling bearer [ 185.754852][ T5741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 185.757213][ T5740] loop2: detected capacity change from 0 to 512 [ 185.757921][ T5740] EXT4-fs: inline encryption not supported [ 185.757957][ T5740] EXT4-fs: Ignoring removed i_version option [ 185.757964][ T5740] ext4: Unknown parameter 'hash' [ 185.764690][ T5742] loop1: detected capacity change from 0 to 128 [ 185.781277][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.806999][ T5744] loop2: detected capacity change from 0 to 1024 [ 185.825073][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.841556][ T5744] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 185.841647][ T5744] System zones: 0-1, 3-12 [ 185.842215][ T5744] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.843898][ T5749] FAULT_INJECTION: forcing a failure. [ 185.843898][ T5749] name fail_futex, interval 1, probability 0, space 0, times 0 [ 185.843915][ T5749] CPU: 1 UID: 0 PID: 5749 Comm: syz.3.218 Not tainted syzkaller #0 PREEMPT [ 185.843926][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 185.843931][ T5749] Call trace: [ 185.843934][ T5749] show_stack+0x2c/0x3c (C) [ 185.843955][ T5749] __dump_stack+0x30/0x40 [ 185.843966][ T5749] dump_stack_lvl+0xd8/0x12c [ 185.843976][ T5749] dump_stack+0x1c/0x28 [ 185.843985][ T5749] should_fail_ex+0x41c/0x590 [ 185.843994][ T5749] should_fail+0x14/0x24 [ 185.844000][ T5749] get_futex_key+0x1ec/0x12b0 [ 185.844009][ T5749] futex_wake+0x10c/0x594 [ 185.844017][ T5749] do_futex+0x2c4/0x378 [ 185.844025][ T5749] __arm64_sys_futex+0x2e4/0x418 [ 185.844034][ T5749] invoke_syscall+0x98/0x244 [ 185.844044][ T5749] el0_svc_common+0xec/0x23c [ 185.844053][ T5749] do_el0_svc+0x4c/0x5c [ 185.844063][ T5749] el0_svc+0x64/0x260 [ 185.844072][ T5749] el0t_64_sync_handler+0x44/0x104 [ 185.844081][ T5749] el0t_64_sync+0x198/0x19c [ 185.878603][ T5752] loop4: detected capacity change from 0 to 512 [ 185.880678][ T5752] EXT4-fs: Ignoring removed nobh option [ 185.882477][ T5752] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.889339][ T5752] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 185.894634][ T5752] EXT4-fs (loop4): 1 truncate cleaned up [ 185.895007][ T5744] EXT4-fs (loop2): re-mounted 00000000-0500-0000-0000-000000000000 ro. [ 185.898232][ T5752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.904709][ T30] audit: type=1326 audit(185.425:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.4.219" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 185.904761][ T30] audit: type=1326 audit(185.425:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.4.219" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 185.904796][ T30] audit: type=1326 audit(185.425:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.4.219" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb275c16c code=0x7ffc0000 [ 185.904820][ T30] audit: type=1326 audit(185.425:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.4.219" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 185.904839][ T30] audit: type=1326 audit(185.425:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.4.219" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 185.904858][ T30] audit: type=1326 audit(185.425:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.4.219" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 185.904878][ T30] audit: type=1326 audit(185.425:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.4.219" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 185.915513][ T5754] netlink: 2 bytes leftover after parsing attributes in process `syz.2.217'. [ 185.916885][ T30] audit: type=1326 audit(185.425:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.4.219" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 185.920566][ T30] audit: type=1326 audit(185.435:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.4.219" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 185.974941][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 185.990436][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.016233][ T5761] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 186.066396][ T5761] bond1: (slave veth0_to_bond): Releasing active interface [ 186.091815][ T5761] bond2: (slave veth0_to_bond): making interface the new active one [ 186.094262][ T5761] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 186.107051][ T5761] macvlan2: entered promiscuous mode [ 186.108854][ T5761] macvlan2: entered allmulticast mode [ 186.111347][ T5761] bond2: entered promiscuous mode [ 186.111394][ T5761] veth0_to_bond: entered promiscuous mode [ 186.112831][ T5761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.135291][ T5776] FAULT_INJECTION: forcing a failure. [ 186.135291][ T5776] name failslab, interval 1, probability 0, space 0, times 0 [ 186.135336][ T5776] CPU: 1 UID: 0 PID: 5776 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT [ 186.135348][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 186.135355][ T5776] Call trace: [ 186.135359][ T5776] show_stack+0x2c/0x3c (C) [ 186.135384][ T5776] __dump_stack+0x30/0x40 [ 186.135398][ T5776] dump_stack_lvl+0xd8/0x12c [ 186.135410][ T5776] dump_stack+0x1c/0x28 [ 186.135422][ T5776] should_fail_ex+0x41c/0x590 [ 186.135432][ T5776] should_failslab+0xc4/0x120 [ 186.135442][ T5776] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 186.135458][ T5776] __alloc_skb+0x1f0/0x610 [ 186.135471][ T5776] netlink_ack+0x11c/0x890 [ 186.135484][ T5776] netlink_rcv_skb+0x21c/0x414 [ 186.135494][ T5776] xfrm_netlink_rcv+0x80/0x9c [ 186.135507][ T5776] netlink_unicast+0x600/0x7f8 [ 186.135517][ T5776] netlink_sendmsg+0x648/0x948 [ 186.135528][ T5776] __sock_sendmsg+0xc8/0x17c [ 186.135538][ T5776] ____sys_sendmsg+0x3d0/0x6c8 [ 186.135549][ T5776] ___sys_sendmsg+0x198/0x224 [ 186.135560][ T5776] __sys_sendmsg+0x158/0x204 [ 186.135571][ T5776] __arm64_sys_sendmsg+0x88/0x9c [ 186.135583][ T5776] invoke_syscall+0x98/0x244 [ 186.135596][ T5776] el0_svc_common+0xec/0x23c [ 186.135607][ T5776] do_el0_svc+0x4c/0x5c [ 186.135619][ T5776] el0_svc+0x64/0x260 [ 186.135631][ T5776] el0t_64_sync_handler+0x44/0x104 [ 186.135641][ T5776] el0t_64_sync+0x198/0x19c [ 186.176295][ T4836] IPVS: starting estimator thread 0... [ 186.178415][ T5779] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 186.197578][ T5761] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 186.238226][ T5761] bond2: left promiscuous mode [ 186.238260][ T5761] veth0_to_bond: left promiscuous mode [ 186.245008][ T5787] loop2: detected capacity change from 0 to 1024 [ 186.271585][ T5781] IPVS: using max 66 ests per chain, 158400 per kthread [ 186.275976][ T5787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.290446][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.327004][ T5793] loop2: detected capacity change from 0 to 256 [ 186.394566][ T5801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'. [ 186.398780][ T5801] ipvlan1: entered promiscuous mode [ 186.404172][ T5801] ipvlan1: left promiscuous mode [ 186.835761][ T4711] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 186.854800][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'. [ 186.864009][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 186.865601][ T5819] syzkaller1: entered promiscuous mode [ 186.865630][ T5819] syzkaller1: entered allmulticast mode [ 186.928606][ T5822] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 186.941536][ T5822] bond1: (slave veth0_to_bond): making interface the new active one [ 186.943309][ T5822] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 187.171067][ T5822] macvlan2: entered promiscuous mode [ 187.171111][ T5822] macvlan2: entered allmulticast mode [ 187.172217][ T5822] bond1: entered promiscuous mode [ 187.172229][ T5822] veth0_to_bond: entered promiscuous mode [ 187.172472][ T5822] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.203203][ T5822] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 187.224579][ T5822] bond1: left promiscuous mode [ 187.224613][ T5822] veth0_to_bond: left promiscuous mode [ 187.272754][ T5830] netlink: 'syz.3.246': attribute type 3 has an invalid length. [ 187.272792][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 187.274246][ T5830] netlink: 'syz.3.246': attribute type 3 has an invalid length. [ 187.274259][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 187.360561][ T5838] loop2: detected capacity change from 0 to 128 [ 187.373054][ T5838] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.459129][ T5846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.251'. [ 187.461131][ T5846] ipvlan1: entered promiscuous mode [ 187.462059][ T5846] ipvlan1: left promiscuous mode [ 187.822163][ T4711] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 187.865450][ T5857] loop1: detected capacity change from 0 to 8 [ 187.873688][ T5857] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 187.873725][ T5857] unable to read xattr id index table [ 187.880457][ T5857] SQUASHFS error: zlib decompression failed, data probably corrupt [ 187.880496][ T5857] SQUASHFS error: Failed to read block 0x9b: -5 [ 187.880504][ T5857] SQUASHFS error: Unable to read metadata cache entry [99] [ 187.880511][ T5857] SQUASHFS error: Unable to read inode 0x127 [ 187.929817][ T5859] loop1: detected capacity change from 0 to 8 [ 187.986112][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.987480][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.340979][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.444984][ T5874] vlan3: entered allmulticast mode [ 188.446458][ T5874] bridge1: entered allmulticast mode [ 188.450478][ T5874] bridge1: port 1(erspan0) entered blocking state [ 188.452116][ T5874] bridge1: port 1(erspan0) entered disabled state [ 188.453703][ T5874] erspan0: entered allmulticast mode [ 188.457388][ T5874] erspan0: entered promiscuous mode [ 188.458940][ T5874] bridge1: port 1(erspan0) entered blocking state [ 188.458983][ T5874] bridge1: port 1(erspan0) entered forwarding state [ 188.505992][ T5879] ipvlan1: entered promiscuous mode [ 188.506488][ T5879] ipvlan1: left promiscuous mode [ 188.535711][ T5877] binder: 5876:5877 got transaction to invalid handle, 2 [ 188.535813][ T5877] binder: 5876:5877 cannot find target node [ 188.535829][ T5877] binder: 5876:5877 transaction call to 0:0 failed 5/29201/-22, code 0 size 0-0 line 3252 [ 188.547524][ T5877] syzkaller0: entered promiscuous mode [ 188.547557][ T5877] syzkaller0: entered allmulticast mode [ 188.661992][ T5887] FAULT_INJECTION: forcing a failure. [ 188.661992][ T5887] name failslab, interval 1, probability 0, space 0, times 0 [ 188.662045][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: syz.2.267 Not tainted syzkaller #0 PREEMPT [ 188.662056][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 188.662062][ T5887] Call trace: [ 188.662066][ T5887] show_stack+0x2c/0x3c (C) [ 188.662089][ T5887] __dump_stack+0x30/0x40 [ 188.662102][ T5887] dump_stack_lvl+0xd8/0x12c [ 188.662118][ T5887] dump_stack+0x1c/0x28 [ 188.662130][ T5887] should_fail_ex+0x41c/0x590 [ 188.662140][ T5887] should_failslab+0xc4/0x120 [ 188.662150][ T5887] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 188.662161][ T5887] __alloc_skb+0x1f0/0x610 [ 188.662173][ T5887] netlink_ack+0x11c/0x890 [ 188.662185][ T5887] netlink_rcv_skb+0x21c/0x414 [ 188.662195][ T5887] xfrm_netlink_rcv+0x80/0x9c [ 188.662208][ T5887] netlink_unicast+0x600/0x7f8 [ 188.662218][ T5887] netlink_sendmsg+0x648/0x948 [ 188.662229][ T5887] __sock_sendmsg+0xc8/0x17c [ 188.662239][ T5887] ____sys_sendmsg+0x3d0/0x6c8 [ 188.662250][ T5887] ___sys_sendmsg+0x198/0x224 [ 188.662261][ T5887] __sys_sendmsg+0x158/0x204 [ 188.662272][ T5887] __arm64_sys_sendmsg+0x88/0x9c [ 188.662283][ T5887] invoke_syscall+0x98/0x244 [ 188.662296][ T5887] el0_svc_common+0xec/0x23c [ 188.662307][ T5887] do_el0_svc+0x4c/0x5c [ 188.662319][ T5887] el0_svc+0x64/0x260 [ 188.662332][ T5887] el0t_64_sync_handler+0x44/0x104 [ 188.662342][ T5887] el0t_64_sync+0x198/0x19c [ 188.953948][ T5921] netlink: 'syz.2.279': attribute type 32 has an invalid length. [ 188.962324][ T5925] FAULT_INJECTION: forcing a failure. [ 188.962324][ T5925] name failslab, interval 1, probability 0, space 0, times 0 [ 188.964002][ T4711] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 188.967451][ T5925] CPU: 1 UID: 0 PID: 5925 Comm: syz.1.281 Not tainted syzkaller #0 PREEMPT [ 188.967472][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 188.967478][ T5925] Call trace: [ 188.967483][ T5925] show_stack+0x2c/0x3c (C) [ 188.967508][ T5925] __dump_stack+0x30/0x40 [ 188.967522][ T5925] dump_stack_lvl+0xd8/0x12c [ 188.967534][ T5925] dump_stack+0x1c/0x28 [ 188.967546][ T5925] should_fail_ex+0x41c/0x590 [ 188.967556][ T5925] should_failslab+0xc4/0x120 [ 188.967566][ T5925] kmem_cache_alloc_noprof+0x94/0x5d8 [ 188.967576][ T5925] skb_clone+0x1ac/0x320 [ 188.967589][ T5925] __netlink_deliver_tap+0x364/0x6f4 [ 188.967602][ T5925] netlink_deliver_tap+0x1d8/0x1dc [ 188.967613][ T5925] __netlink_sendskb+0x78/0xd0 [ 188.967623][ T5925] netlink_sendskb+0x2c/0xdc [ 188.967633][ T5925] netlink_unicast+0x2c0/0x7f8 [ 188.967643][ T5925] netlink_ack+0x570/0x890 [ 188.967653][ T5925] netlink_rcv_skb+0x21c/0x414 [ 188.967664][ T5925] xfrm_netlink_rcv+0x80/0x9c [ 188.967676][ T5925] netlink_unicast+0x600/0x7f8 [ 188.967686][ T5925] netlink_sendmsg+0x648/0x948 [ 188.967697][ T5925] __sock_sendmsg+0xc8/0x17c [ 188.967707][ T5925] ____sys_sendmsg+0x3d0/0x6c8 [ 188.967718][ T5925] ___sys_sendmsg+0x198/0x224 [ 188.967730][ T5925] __sys_sendmsg+0x158/0x204 [ 188.967741][ T5925] __arm64_sys_sendmsg+0x88/0x9c [ 188.967752][ T5925] invoke_syscall+0x98/0x244 [ 188.967765][ T5925] el0_svc_common+0xec/0x23c [ 188.967777][ T5925] do_el0_svc+0x4c/0x5c [ 188.967788][ T5925] el0_svc+0x64/0x260 [ 188.967799][ T5925] el0t_64_sync_handler+0x44/0x104 [ 188.967809][ T5925] el0t_64_sync+0x198/0x19c [ 188.979127][ T5921] bond2: Setting coupled_control to off (0) [ 189.089676][ T5936] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 189.097927][ T5936] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.285: lblock 1 mapped to illegal pblock 1 (length 1) [ 189.102373][ T5936] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.104629][ T5936] __quota_error: 27 callbacks suppressed [ 189.107977][ T5936] Quota error (device loop3): write_blk: dquota write failed [ 189.109569][ T5936] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 189.111730][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 189.111742][ C1] EXT4-fs (loop3): initial error at time 188: ext4_map_blocks:833: inode 3: block 1 [ 189.111764][ C1] EXT4-fs (loop3): last error at time 188: ext4_map_blocks:833: inode 3: block 1 [ 189.116959][ T5936] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.285: Failed to acquire dquot type 0 [ 189.119271][ T5936] loop3: lost filesystem error report for type 5 error -117 [ 189.119844][ T5936] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.285: Freeing blocks not in datazone - block = 0, count = 4096 [ 189.120832][ T5936] loop3: lost filesystem error report for type 5 error -117 [ 189.123429][ T5936] EXT4-fs error (device loop3): ext4_read_inode_bitmap:141: comm syz.3.285: Invalid inode bitmap blk 0 in block_group 0 [ 189.123451][ T5936] loop3: lost filesystem error report for type 5 error -117 [ 189.125028][ T5936] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 189.125049][ T5936] loop3: lost filesystem error report for type 5 error -117 [ 189.126424][ T5936] EXT4-fs (loop3): 1 orphan inode deleted [ 189.126921][ T5936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.141417][ T5936] tipc: Started in network mode [ 189.141433][ T5936] tipc: Node identity 1, cluster identity 4711 [ 189.141442][ T5936] tipc: Node number set to 1 [ 189.147358][ T5936] tipc: New replicast peer: 127.0.0.1 [ 189.148131][ T5936] tipc: Enabled bearer , priority 10 [ 189.149546][ T5936] tipc: Disabling bearer [ 189.163549][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.275745][ T5949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.313457][ T5949] overlayfs: failed to set xattr on upper [ 189.313822][ T5949] overlayfs: ...falling back to redirect_dir=nofollow. [ 189.314163][ T5949] overlayfs: ...falling back to uuid=null. [ 189.381248][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.737862][ T5965] EXT4-fs: inline encryption not supported [ 189.740205][ T5965] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 189.740238][ T5965] EXT4-fs (loop4): Test dummy encryption mode enabled [ 189.742518][ T5965] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 189.742552][ T5965] System zones: 0-5 [ 189.743600][ T5965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.746998][ T5965] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 189.818208][ T5968] netlink: 'syz.4.293': attribute type 8 has an invalid length. [ 189.825970][ T5969] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 190.038563][ T5972] __nla_validate_parse: 5 callbacks suppressed [ 190.040466][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 190.050130][ T5972] vlan4: entered allmulticast mode [ 190.051823][ T5972] bridge2: entered allmulticast mode [ 190.056149][ T5972] erspan0: left allmulticast mode [ 190.057267][ T5972] erspan0: left promiscuous mode [ 190.058756][ T5972] bridge1: port 1(erspan0) entered disabled state [ 190.064086][ T5972] bridge2: port 1(erspan0) entered blocking state [ 190.065538][ T5972] bridge2: port 1(erspan0) entered disabled state [ 190.067037][ T5972] erspan0: entered allmulticast mode [ 190.068833][ T5972] erspan0: entered promiscuous mode [ 190.070365][ T5972] bridge2: port 1(erspan0) entered blocking state [ 190.070402][ T5972] bridge2: port 1(erspan0) entered forwarding state [ 190.113872][ T5975] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 190.127547][ T5975] bond1: (slave veth0_to_bond): Releasing active interface [ 190.175272][ T5975] bond3: (slave veth0_to_bond): making interface the new active one [ 190.177661][ T5975] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 190.185584][ T5975] macvlan2: entered promiscuous mode [ 190.186886][ T5975] macvlan2: entered allmulticast mode [ 190.188744][ T5975] bond3: entered promiscuous mode [ 190.189872][ T5975] veth0_to_bond: entered promiscuous mode [ 190.191438][ T5975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.249668][ T5975] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 190.271531][ T5975] bond3: left promiscuous mode [ 190.272609][ T5975] veth0_to_bond: left promiscuous mode [ 190.422825][ T5985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.299'. [ 190.878232][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.305'. [ 190.885508][ T6001] ipvlan1: entered promiscuous mode [ 190.890539][ T6001] ipvlan1: left promiscuous mode [ 190.897836][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.010774][ T6013] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 191.046335][ T6013] bond3: (slave veth0_to_bond): Releasing active interface [ 191.075572][ T6013] bond4: (slave veth0_to_bond): making interface the new active one [ 191.077231][ T6013] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 191.083458][ T6013] macvlan2: entered promiscuous mode [ 191.083571][ T6013] macvlan2: entered allmulticast mode [ 191.083858][ T6013] bond4: entered promiscuous mode [ 191.083867][ T6013] veth0_to_bond: entered promiscuous mode [ 191.084154][ T6013] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 191.317789][ T6013] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 191.391788][ T6013] bond4: left promiscuous mode [ 191.392999][ T6013] veth0_to_bond: left promiscuous mode [ 191.409885][ T6019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.309'. [ 191.828521][ T6038] set_capacity_and_notify: 3 callbacks suppressed [ 191.828563][ T6038] loop0: detected capacity change from 0 to 128 [ 192.075243][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 192.107590][ T6045] loop0: detected capacity change from 0 to 1024 [ 192.118178][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.146138][ T4711] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 192.149789][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.180562][ T6056] loop1: detected capacity change from 0 to 128 [ 192.219961][ T6056] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.563045][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.324'. [ 192.614332][ T6070] loop4: detected capacity change from 0 to 128 [ 192.705831][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 192.720159][ T6078] vlan3: entered allmulticast mode [ 192.720197][ T6078] bridge2: entered allmulticast mode [ 192.725104][ T6078] erspan0: left allmulticast mode [ 192.725150][ T6078] erspan0: left promiscuous mode [ 192.725264][ T6078] bridge1: port 1(erspan0) entered disabled state [ 192.732699][ T6078] bridge2: port 1(erspan0) entered blocking state [ 192.734209][ T6078] bridge2: port 1(erspan0) entered disabled state [ 192.735189][ T6078] erspan0: entered allmulticast mode [ 192.735791][ T6078] erspan0: entered promiscuous mode [ 192.736117][ T6078] bridge2: port 1(erspan0) entered blocking state [ 192.736146][ T6078] bridge2: port 1(erspan0) entered forwarding state [ 192.809675][ T4711] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 193.452646][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.529097][ T6109] loop4: detected capacity change from 0 to 8 [ 193.546793][ T6109] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 193.546832][ T6109] unable to read xattr id index table [ 193.547181][ T6109] SQUASHFS error: zlib decompression failed, data probably corrupt [ 193.547200][ T6109] SQUASHFS error: Failed to read block 0x9b: -5 [ 193.547213][ T6109] SQUASHFS error: Unable to read metadata cache entry [99] [ 193.547226][ T6109] SQUASHFS error: Unable to read inode 0x127 [ 193.860340][ T6113] FAULT_INJECTION: forcing a failure. [ 193.860340][ T6113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.860394][ T6113] CPU: 0 UID: 0 PID: 6113 Comm: syz.0.339 Not tainted syzkaller #0 PREEMPT [ 193.860408][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 193.860415][ T6113] Call trace: [ 193.860419][ T6113] show_stack+0x2c/0x3c (C) [ 193.860446][ T6113] __dump_stack+0x30/0x40 [ 193.860458][ T6113] dump_stack_lvl+0xd8/0x12c [ 193.860469][ T6113] dump_stack+0x1c/0x28 [ 193.860478][ T6113] should_fail_ex+0x41c/0x590 [ 193.860487][ T6113] should_fail+0x14/0x24 [ 193.860493][ T6113] should_fail_usercopy+0x20/0x30 [ 193.860501][ T6113] _copy_to_iter+0x424/0x10f8 [ 193.860511][ T6113] seq_read_iter+0x9f0/0xbe8 [ 193.860520][ T6113] seq_read+0x278/0x3a8 [ 193.860526][ T6113] proc_reg_read+0x1d0/0x248 [ 193.860537][ T6113] do_loop_readv_writev+0x24c/0x3dc [ 193.860546][ T6113] vfs_readv+0x258/0x520 [ 193.860554][ T6113] do_preadv+0x11c/0x224 [ 193.860561][ T6113] __arm64_sys_preadv+0xac/0xc4 [ 193.860568][ T6113] invoke_syscall+0x98/0x244 [ 193.860580][ T6113] el0_svc_common+0xec/0x23c [ 193.860589][ T6113] do_el0_svc+0x4c/0x5c [ 193.860599][ T6113] el0_svc+0x64/0x260 [ 193.860610][ T6113] el0t_64_sync_handler+0x44/0x104 [ 193.860618][ T6113] el0t_64_sync+0x198/0x19c [ 194.164300][ T6118] loop3: detected capacity change from 0 to 1024 [ 194.168323][ T6118] EXT4-fs: inline encryption not supported [ 194.174837][ T4711] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 194.194837][ T6118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.244064][ T6118] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 194.293769][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.462937][ T6138] loop1: detected capacity change from 0 to 512 [ 194.481716][ T6138] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.350: corrupted in-inode xattr: invalid ea_ino [ 194.481754][ T6138] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 194.485281][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 194.485300][ C1] EXT4-fs (loop1): initial error at time 193: ext4_iget_extra_inode:5180: inode 15 [ 194.485319][ C1] EXT4-fs (loop1): last error at time 193: ext4_iget_extra_inode:5180: inode 15 [ 194.490242][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 194.491415][ T6138] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.350: couldn't read orphan inode 15 (err -117) [ 194.491440][ T6138] loop1: lost filesystem error report for type 5 error -117 [ 194.492013][ T6138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.771314][ T6138] nvme_fabrics: unknown parameter or missing value 'ctrl_loss_tmo=' in ctrl creation request [ 194.779407][ T6145] vlan5: entered allmulticast mode [ 194.779445][ T6145] bridge3: entered allmulticast mode [ 194.808451][ T6141] erspan0: left allmulticast mode [ 194.809535][ T6141] erspan0: left promiscuous mode [ 194.810711][ T6141] bridge2: port 1(erspan0) entered disabled state [ 194.821589][ T6148] loop4: detected capacity change from 0 to 128 [ 194.831118][ T6148] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.845081][ T6141] bridge3: port 1(erspan0) entered blocking state [ 194.845146][ T6141] bridge3: port 1(erspan0) entered disabled state [ 194.845209][ T6141] erspan0: entered allmulticast mode [ 194.845707][ T6141] erspan0: entered promiscuous mode [ 194.845983][ T6141] bridge3: port 1(erspan0) entered blocking state [ 194.846018][ T6141] bridge3: port 1(erspan0) entered forwarding state [ 194.955228][ T6157] overlayfs: failed to resolve './bus': -2 [ 195.227928][ T6165] loop2: detected capacity change from 0 to 8 [ 195.232667][ T6165] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 195.236582][ T6165] unable to read xattr id index table [ 195.238239][ T6165] SQUASHFS error: zlib decompression failed, data probably corrupt [ 195.238264][ T6165] SQUASHFS error: Failed to read block 0x9b: -5 [ 195.238285][ T6165] SQUASHFS error: Unable to read metadata cache entry [99] [ 195.238300][ T6165] SQUASHFS error: Unable to read inode 0x127 [ 195.410165][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.414473][ T6173] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.357'. [ 195.416596][ T6173] veth0_to_bond: default FDB implementation only supports local addresses [ 195.523189][ T6182] loop3: detected capacity change from 0 to 1024 [ 195.538719][ T6182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.782365][ T6182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.360: bg 0: block 112: padding at end of block bitmap is not set [ 195.813536][ T4724] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.815725][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.849189][ T6191] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.853068][ T6190] FAULT_INJECTION: forcing a failure. [ 195.853068][ T6190] name failslab, interval 1, probability 0, space 0, times 0 [ 195.853113][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.3.363 Not tainted syzkaller #0 PREEMPT [ 195.853127][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 195.853133][ T6190] Call trace: [ 195.853137][ T6190] show_stack+0x2c/0x3c (C) [ 195.853159][ T6190] __dump_stack+0x30/0x40 [ 195.853173][ T6190] dump_stack_lvl+0xd8/0x12c [ 195.853184][ T6190] dump_stack+0x1c/0x28 [ 195.853196][ T6190] should_fail_ex+0x41c/0x590 [ 195.853206][ T6190] should_failslab+0xc4/0x120 [ 195.853217][ T6190] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 195.853227][ T6190] __alloc_skb+0x1f0/0x610 [ 195.853240][ T6190] netlink_ack+0x11c/0x890 [ 195.853251][ T6190] netlink_rcv_skb+0x21c/0x414 [ 195.853262][ T6190] xfrm_netlink_rcv+0x80/0x9c [ 195.853275][ T6190] netlink_unicast+0x600/0x7f8 [ 195.853285][ T6190] netlink_sendmsg+0x648/0x948 [ 195.853296][ T6190] __sock_sendmsg+0xc8/0x17c [ 195.853306][ T6190] ____sys_sendmsg+0x3d0/0x6c8 [ 195.853317][ T6190] ___sys_sendmsg+0x198/0x224 [ 195.853328][ T6190] __sys_sendmsg+0x158/0x204 [ 195.853339][ T6190] __arm64_sys_sendmsg+0x88/0x9c [ 195.853351][ T6190] invoke_syscall+0x98/0x244 [ 195.853364][ T6190] el0_svc_common+0xec/0x23c [ 195.853375][ T6190] do_el0_svc+0x4c/0x5c [ 195.853387][ T6190] el0_svc+0x64/0x260 [ 195.853398][ T6190] el0t_64_sync_handler+0x44/0x104 [ 195.853408][ T6190] el0t_64_sync+0x198/0x19c [ 195.901450][ T6194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.364'. [ 195.963129][ T6201] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 195.963157][ T6201] unable to read xattr id index table [ 195.967400][ T6201] SQUASHFS error: zlib decompression failed, data probably corrupt [ 195.969145][ T6201] SQUASHFS error: Failed to read block 0x9b: -5 [ 195.969177][ T6201] SQUASHFS error: Unable to read metadata cache entry [99] [ 195.969191][ T6201] SQUASHFS error: Unable to read inode 0x127 [ 196.013065][ T4724] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.116230][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.367'. [ 196.185822][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 196.195097][ T6214] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.372: iget: bad i_size value: 38620345925642 [ 196.195142][ T6214] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.197594][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 196.197608][ C1] EXT4-fs (loop3): initial error at time 194: ext4_orphan_get:1399: inode 15 [ 196.197627][ C1] EXT4-fs (loop3): last error at time 194: ext4_orphan_get:1399: inode 15 [ 196.204096][ T6214] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.372: couldn't read orphan inode 15 (err -117) [ 196.204128][ T6214] loop3: lost filesystem error report for type 5 error -117 [ 196.204762][ T6214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.245441][ T6221] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.325315][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.662089][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.1.380'. [ 196.702172][ T6238] ipvlan1: entered promiscuous mode [ 196.702603][ T6238] ipvlan1: left promiscuous mode [ 196.703271][ T6241] binder: 6231:6241 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 196.706398][ T6241] binder: 6231:6241 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 196.706442][ T6241] binder: 6241 RLIMIT_NICE not set [ 196.985093][ T454] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.038866][ T4718] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.041438][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.045048][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.048963][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.051443][ T4718] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.084013][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 197.098189][ T454] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.171332][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.190686][ T454] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.321909][ T454] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.374291][ T6280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 197.388894][ T6280] ipvlan1: entered promiscuous mode [ 197.389388][ T6280] ipvlan1: left promiscuous mode [ 197.409317][ T6250] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.409414][ T6250] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.409481][ T6250] bridge_slave_0: entered allmulticast mode [ 197.409931][ T6250] bridge_slave_0: entered promiscuous mode [ 197.410979][ T6250] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.411024][ T6250] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.411079][ T6250] bridge_slave_1: entered allmulticast mode [ 197.411754][ T6250] bridge_slave_1: entered promiscuous mode [ 197.420495][ T6250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.421617][ T6250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.440295][ T6250] team0: Port device team_slave_0 added [ 197.445377][ T6250] team0: Port device team_slave_1 added [ 197.474055][ T6250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.474508][ T6250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.476755][ T6250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.478780][ T6250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.478789][ T6250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 197.478804][ T6250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.546961][ T6250] hsr_slave_0: entered promiscuous mode [ 197.550134][ T6250] hsr_slave_1: entered promiscuous mode [ 197.551831][ T6250] debugfs: 'hsr0' already exists in 'hsr' [ 197.553774][ T6250] Cannot create hsr debugfs directory [ 197.563306][ T454] bridge_slave_1: left allmulticast mode [ 197.566014][ T454] bridge_slave_1: left promiscuous mode [ 197.566763][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.573452][ T454] bridge_slave_0: left allmulticast mode [ 197.576290][ T454] bridge_slave_0: left promiscuous mode [ 197.577654][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.609443][ T6291] set_capacity_and_notify: 5 callbacks suppressed [ 197.610956][ T6291] loop4: detected capacity change from 0 to 512 [ 197.611432][ T454] erspan0: left allmulticast mode [ 197.611450][ T454] erspan0: left promiscuous mode [ 197.611534][ T454] bridge2: port 1(erspan0) entered disabled state [ 197.617219][ T6291] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 197.631629][ T6291] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.395: bg 0: block 104: invalid block bitmap [ 197.631676][ T6291] loop4: lost filesystem error report for type 5 error -117 [ 197.633446][ T6291] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 197.633462][ T6291] loop4: lost filesystem error report for type 5 error -117 [ 197.633834][ T6291] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.395: invalid indirect mapped block 1 (level 1) [ 197.633852][ T6291] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 197.634122][ T6291] EXT4-fs (loop4): 1 truncate cleaned up [ 197.634998][ T6291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.935922][ T6297] loop1: detected capacity change from 0 to 512 [ 197.953016][ T6297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.992025][ T454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.000148][ T454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.009840][ T454] bond0 (unregistering): Released all slaves [ 198.013417][ T454] bond1 (unregistering): Released all slaves [ 198.020718][ T454] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 198.052533][ T454] bond2 (unregistering): Released all slaves [ 198.059141][ T6289] netlink: 'syz.2.394': attribute type 26 has an invalid length. [ 198.086755][ T6291] overlayfs: workdir and upperdir must reside under the same mount [ 198.102921][ T4716] VFS: Lookup of '.' in ext4 loop1 would have caused loop [ 198.103200][ T4716] VFS: Lookup of '.' in ext4 loop1 would have caused loop [ 198.124537][ T454] tipc: Left network mode [ 198.308855][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 198.329901][ T6250] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 198.334163][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 198.336181][ T6250] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.339624][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 198.341390][ T6250] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.347060][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 198.347997][ T6250] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.353413][ T6250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 198.495832][ T6250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.501756][ T6347] FAULT_INJECTION: forcing a failure. [ 198.501756][ T6347] name failslab, interval 1, probability 0, space 0, times 0 [ 198.502193][ T6250] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.514076][ T1412] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.514133][ T1412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.518233][ T1412] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.518272][ T1412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.525667][ T6347] CPU: 1 UID: 0 PID: 6347 Comm: syz.0.400 Not tainted syzkaller #0 PREEMPT [ 198.525693][ T6347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 198.525698][ T6347] Call trace: [ 198.525702][ T6347] show_stack+0x2c/0x3c (C) [ 198.525727][ T6347] __dump_stack+0x30/0x40 [ 198.525738][ T6347] dump_stack_lvl+0xd8/0x12c [ 198.525748][ T6347] dump_stack+0x1c/0x28 [ 198.525758][ T6347] should_fail_ex+0x41c/0x590 [ 198.525766][ T6347] should_failslab+0xc4/0x120 [ 198.525774][ T6347] __kmalloc_noprof+0x108/0x6b8 [ 198.525783][ T6347] bpf_test_init+0xa8/0x154 [ 198.525792][ T6347] bpf_prog_test_run_skb+0x2a0/0x1ed0 [ 198.525799][ T6347] bpf_prog_test_run+0x1e0/0x250 [ 198.525807][ T6347] __sys_bpf+0x6bc/0x82c [ 198.525814][ T6347] __arm64_sys_bpf+0xd0/0xec [ 198.525821][ T6347] invoke_syscall+0x98/0x244 [ 198.525830][ T6347] el0_svc_common+0xec/0x23c [ 198.525840][ T6347] do_el0_svc+0x4c/0x5c [ 198.525849][ T6347] el0_svc+0x64/0x260 [ 198.525859][ T6347] el0t_64_sync_handler+0x44/0x104 [ 198.525867][ T6347] el0t_64_sync+0x198/0x19c [ 198.529886][ T6250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.530697][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.580272][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.619920][ T454] hsr_slave_0: left promiscuous mode [ 198.621178][ T454] hsr_slave_1: left promiscuous mode [ 198.621503][ T454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.621519][ T454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.640470][ T454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.642007][ T454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.687242][ T454] veth1_macvtap: left promiscuous mode [ 198.687307][ T454] veth0_macvtap: left promiscuous mode [ 198.687347][ T454] veth1_vlan: left promiscuous mode [ 198.687385][ T454] veth0_vlan: left promiscuous mode [ 198.688602][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.694200][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.696030][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.698525][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.700338][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.042633][ T454] team0 (unregistering): Port device team_slave_1 removed [ 199.051221][ T454] team0 (unregistering): Port device team_slave_0 removed [ 199.125171][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 199.266118][ T4718] Bluetooth: hci1: command tx timeout [ 199.299981][ T6374] loop2: detected capacity change from 0 to 512 [ 199.320817][ T6378] loop0: detected capacity change from 0 to 4096 [ 199.346039][ T6378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.426722][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.541643][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 199.610502][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.410'. [ 199.613472][ T6250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.629728][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 199.644801][ T6423] FAULT_INJECTION: forcing a failure. [ 199.644801][ T6423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.647521][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.0.411 Not tainted syzkaller #0 PREEMPT [ 199.647536][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 199.647542][ T6423] Call trace: [ 199.647545][ T6423] show_stack+0x2c/0x3c (C) [ 199.647568][ T6423] __dump_stack+0x30/0x40 [ 199.647579][ T6423] dump_stack_lvl+0xd8/0x12c [ 199.647589][ T6423] dump_stack+0x1c/0x28 [ 199.647599][ T6423] should_fail_ex+0x41c/0x590 [ 199.647607][ T6423] should_fail+0x14/0x24 [ 199.647614][ T6423] should_fail_usercopy+0x20/0x30 [ 199.647621][ T6423] _inline_copy_from_user+0x3c/0x174 [ 199.647630][ T6423] bpf_test_init+0xd8/0x154 [ 199.647637][ T6423] bpf_prog_test_run_skb+0x2a0/0x1ed0 [ 199.647644][ T6423] bpf_prog_test_run+0x1e0/0x250 [ 199.647652][ T6423] __sys_bpf+0x6bc/0x82c [ 199.647659][ T6423] __arm64_sys_bpf+0xd0/0xec [ 199.647666][ T6423] invoke_syscall+0x98/0x244 [ 199.647676][ T6423] el0_svc_common+0xec/0x23c [ 199.647686][ T6423] do_el0_svc+0x4c/0x5c [ 199.647695][ T6423] el0_svc+0x64/0x260 [ 199.647705][ T6423] el0t_64_sync_handler+0x44/0x104 [ 199.647713][ T6423] el0t_64_sync+0x198/0x19c [ 199.682822][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.683753][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.683867][ T6356] bridge_slave_0: entered allmulticast mode [ 199.684346][ T6356] bridge_slave_0: entered promiscuous mode [ 199.686677][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.688826][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.688995][ T6356] bridge_slave_1: entered allmulticast mode [ 199.689523][ T6356] bridge_slave_1: entered promiscuous mode [ 199.711047][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.712055][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.727504][ T6356] team0: Port device team_slave_0 added [ 199.729299][ T6356] team0: Port device team_slave_1 added [ 199.985028][ T454] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.062773][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.064159][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.068512][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.070607][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.070620][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.070646][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.107731][ T6356] hsr_slave_0: entered promiscuous mode [ 200.123597][ T6356] hsr_slave_1: entered promiscuous mode [ 200.125649][ T6356] debugfs: 'hsr0' already exists in 'hsr' [ 200.129752][ T6356] Cannot create hsr debugfs directory [ 200.180171][ T454] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.219735][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 200.290035][ T454] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.322833][ T6250] veth0_vlan: entered promiscuous mode [ 200.354156][ T6250] veth1_vlan: entered promiscuous mode [ 200.380459][ T6451] loop2: detected capacity change from 0 to 512 [ 200.391442][ T6451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.391489][ T6451] EXT4-fs: Invalid want_extra_isize 1 [ 200.420943][ T454] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.446967][ T6356] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.462515][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 200.462948][ T6356] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.464008][ T6469] loop0: detected capacity change from 0 to 128 [ 200.466154][ T6469] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.475788][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 200.484382][ T6356] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.487478][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 200.489181][ T6356] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.495722][ T6356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 200.513459][ T6250] veth0_macvtap: entered promiscuous mode [ 200.527520][ T6250] veth1_macvtap: entered promiscuous mode [ 200.577787][ T6250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.587032][ T6250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.592556][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.648840][ T6485] Bluetooth: MGMT ver 1.23 [ 200.683826][ T3227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.685939][ T3227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.711542][ T454] bridge_slave_1: left allmulticast mode [ 200.711581][ T454] bridge_slave_1: left promiscuous mode [ 200.711665][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.714819][ T454] bridge_slave_0: left allmulticast mode [ 200.714835][ T454] bridge_slave_0: left promiscuous mode [ 200.714898][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.715498][ T6487] loop0: detected capacity change from 0 to 8 [ 200.716612][ T6487] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 200.716620][ T6487] unable to read xattr id index table [ 200.717733][ T6487] SQUASHFS error: zlib decompression failed, data probably corrupt [ 200.717749][ T6487] SQUASHFS error: Failed to read block 0x9b: -5 [ 200.717756][ T6487] SQUASHFS error: Unable to read metadata cache entry [99] [ 200.717763][ T6487] SQUASHFS error: Unable to read inode 0x127 [ 200.895522][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 200.901260][ T4718] Bluetooth: hci3: command tx timeout [ 200.909718][ T454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.924579][ T454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.935034][ T454] bond0 (unregistering): Released all slaves [ 200.937543][ T454] bond1 (unregistering): Released all slaves [ 200.942130][ T454] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 200.967706][ T454] bond2 (unregistering): Released all slaves [ 200.976096][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 200.988940][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 201.002654][ T1412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.002683][ T1412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.022735][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.024526][ T1412] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.034962][ T3227] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.035619][ T3227] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.035682][ T3227] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.035745][ T3227] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.035765][ T3227] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.049654][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.056997][ T1250] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.057049][ T1250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.057607][ T1250] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.057627][ T1250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.066974][ T1250] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.067337][ T1250] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.131797][ T6356] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.131842][ T6356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.261494][ T6535] 8021q: VLANs not supported on gre0 [ 201.281481][ T6518] loop0: detected capacity change from 0 to 512 [ 201.283321][ T6518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 201.284863][ T6518] EXT4-fs: Invalid want_extra_isize 1 [ 201.339392][ T454] hsr_slave_0: left promiscuous mode [ 201.340626][ T454] hsr_slave_1: left promiscuous mode [ 201.340918][ T454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.340930][ T454] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.341925][ T454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.341936][ T454] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.353458][ T454] veth1_macvtap: left promiscuous mode [ 201.353508][ T454] veth0_macvtap: left promiscuous mode [ 201.353649][ T454] veth1_vlan: left promiscuous mode [ 201.353685][ T454] veth0_vlan: left promiscuous mode [ 201.364709][ T6543] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 201.381906][ T6545] loop0: detected capacity change from 0 to 128 [ 201.397064][ T6545] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.426519][ T6548] loop2: detected capacity change from 0 to 128 [ 201.467730][ T6548] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.508255][ T4718] Bluetooth: hci1: command tx timeout [ 201.701703][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.876005][ T454] team0 (unregistering): Port device team_slave_1 removed [ 201.888442][ T454] team0 (unregistering): Port device team_slave_0 removed [ 201.982648][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 201.988504][ T6554] veth0_macvtap: left promiscuous mode [ 202.149809][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.156847][ T6578] __nla_validate_parse: 1 callbacks suppressed [ 202.156887][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.5.439'. [ 202.242466][ T6584] vfat: Unknown parameter 'uni_xlatÏ' [ 202.262752][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.442'. [ 202.270513][ T6591] ipvlan1: entered promiscuous mode [ 202.273261][ T6591] ipvlan1: left promiscuous mode [ 202.308298][ T6584] usb usb1: usbfs: process 6584 (syz.5.441) did not claim interface 0 before use [ 202.398483][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.514398][ T6356] veth0_vlan: entered promiscuous mode [ 202.520653][ T6599] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.546890][ T6356] veth1_vlan: entered promiscuous mode [ 202.606343][ T6356] veth0_macvtap: entered promiscuous mode [ 202.664317][ T6356] veth1_macvtap: entered promiscuous mode [ 202.704877][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.716176][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.766702][ T454] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.766765][ T454] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.766805][ T454] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.766828][ T454] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.873431][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.873450][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.898760][ T6616] netlink: 'syz.0.446': attribute type 29 has an invalid length. [ 202.930362][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.930396][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.950993][ T6250] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.038099][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 203.157142][ T4718] Bluetooth: hci3: command tx timeout [ 203.241886][ T6618] Injecting memory failure for pfn 0x219070 at process virtual address 0x20ffb000 [ 203.247618][ T6618] Memory failure: 0x219070: unhandlable page. [ 203.278781][ T6635] set_capacity_and_notify: 2 callbacks suppressed [ 203.278831][ T6635] loop2: detected capacity change from 0 to 8 [ 203.283052][ T6618] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 203.288532][ T6635] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 203.288572][ T6635] unable to read xattr id index table [ 203.357170][ T6635] SQUASHFS error: zlib decompression failed, data probably corrupt [ 203.357210][ T6635] SQUASHFS error: Failed to read block 0x9b: -5 [ 203.357237][ T6635] SQUASHFS error: Unable to read metadata cache entry [99] [ 203.357255][ T6635] SQUASHFS error: Unable to read inode 0x127 [ 203.679643][ T6653] loop2: detected capacity change from 0 to 128 [ 203.711584][ T6653] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.762416][ T4718] Bluetooth: hci1: command tx timeout [ 204.470813][ T6678] loop5: detected capacity change from 0 to 128 [ 204.487013][ T6678] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.580050][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 204.618828][ T4719] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.696028][ T6250] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.703131][ T6694] loop2: detected capacity change from 0 to 512 [ 204.728400][ T6699] loop6: detected capacity change from 0 to 512 [ 204.773474][ T6699] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.460: corrupted xattr block 33: invalid header [ 204.776735][ T6699] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.460: corrupted xattr block 33: invalid header [ 204.777627][ T6699] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.460: corrupted xattr block 33: invalid header [ 204.838460][ T6709] loop2: detected capacity change from 0 to 256 [ 204.838930][ T6709] vfat: Unknown parameter 'shor95' [ 205.165954][ T4402] veth0_macvtap: entered promiscuous mode [ 205.239328][ T6725] loop0: detected capacity change from 0 to 1024 [ 205.248499][ T6726] loop5: detected capacity change from 0 to 8 [ 205.254579][ T6725] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.255180][ T6726] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 205.255189][ T6726] unable to read xattr id index table [ 205.255514][ T6726] SQUASHFS error: zlib decompression failed, data probably corrupt [ 205.255526][ T6726] SQUASHFS error: Failed to read block 0x9b: -5 [ 205.255532][ T6726] SQUASHFS error: Unable to read metadata cache entry [99] [ 205.255539][ T6726] SQUASHFS error: Unable to read inode 0x127 [ 205.271938][ T6725] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 205.272092][ T6725] EXT4-fs (loop0): orphan cleanup on readonly fs [ 205.275470][ T6725] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.466: Freeing blocks not in datazone - block = 0, count = 4096 [ 205.278448][ T6725] loop0: lost filesystem error report for type 5 error -117 [ 205.279619][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 205.279653][ C0] EXT4-fs (loop0): initial error at time 203: ext4_free_blocks:6718 [ 205.279686][ C0] EXT4-fs (loop0): last error at time 203: ext4_free_blocks:6718 [ 205.294446][ T6725] EXT4-fs (loop0): 1 orphan inode deleted [ 205.305552][ T6729] loop6: detected capacity change from 0 to 1024 [ 205.323466][ T6725] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 16: comm syz.0.466: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 205.409878][ T4718] Bluetooth: hci3: command tx timeout [ 205.471532][ T6735] loop5: detected capacity change from 0 to 8192 [ 205.781071][ T6764] fs-verity (loop6, inode 16): fs-verity keyring is empty, rejecting signed file! [ 205.913194][ T4718] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 205.913247][ T4718] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 205.927251][ T6796] overlayfs: failed to resolve './file0': -2 [ 205.946933][ T6795] sysfs: Unknown parameter './sys/class/devcoredump/disabled' [ 205.985590][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.5.482'. [ 206.016730][ T4718] Bluetooth: hci1: command tx timeout [ 206.017273][ T6811] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 206.091264][ T6811] bond4: (slave veth0_to_bond): Releasing active interface [ 206.127535][ T6811] bond5: (slave veth0_to_bond): making interface the new active one [ 206.129390][ T6811] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 206.143519][ T6811] macvlan2: entered promiscuous mode [ 206.143560][ T6811] macvlan2: entered allmulticast mode [ 206.143869][ T6811] bond5: entered promiscuous mode [ 206.143878][ T6811] veth0_to_bond: entered promiscuous mode [ 206.144185][ T6811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.216224][ T6821] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 206.223347][ T4799] IPVS: starting estimator thread 0... [ 206.320276][ T6822] IPVS: using max 46 ests per chain, 110400 per kthread [ 206.398595][ T6811] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 206.439699][ T6811] bond5: left promiscuous mode [ 206.439741][ T6811] veth0_to_bond: left promiscuous mode [ 206.777416][ T6834] netlink: 48 bytes leftover after parsing attributes in process `syz.0.491'. [ 207.216096][ T6846] EXT4-fs (loop0): bs(8192) > ps(4096) unsupported for encrypt [ 207.258943][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.496'. [ 207.327030][ T6854] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 207.330842][ T6854] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.498: bg 0: block 104: invalid block bitmap [ 207.330882][ T6854] loop6: lost filesystem error report for type 5 error -117 [ 207.331045][ T6854] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 207.331064][ T6854] loop6: lost filesystem error report for type 5 error -117 [ 207.331221][ T6854] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.498: invalid indirect mapped block 1 (level 1) [ 207.331241][ T6854] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 207.331417][ T6854] EXT4-fs (loop6): 1 truncate cleaned up [ 207.347898][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 207.358270][ T6857] vlan6: entered allmulticast mode [ 207.358284][ T6857] bridge4: entered allmulticast mode [ 207.359375][ T6857] erspan0: left allmulticast mode [ 207.359389][ T6857] erspan0: left promiscuous mode [ 207.359468][ T6857] bridge3: port 1(erspan0) entered disabled state [ 207.362458][ T6854] overlayfs: workdir and upperdir must reside under the same mount [ 207.387980][ T6857] bridge4: port 1(erspan0) entered blocking state [ 207.390223][ T6857] bridge4: port 1(erspan0) entered disabled state [ 207.390368][ T6857] erspan0: entered allmulticast mode [ 207.390936][ T6857] erspan0: entered promiscuous mode [ 207.392582][ T6857] bridge4: port 1(erspan0) entered blocking state [ 207.392613][ T6857] bridge4: port 1(erspan0) entered forwarding state [ 207.505045][ T6870] netlink: 'syz.0.503': attribute type 1 has an invalid length. [ 207.528961][ T6870] bond5: (slave veth0_to_bond): Releasing active interface [ 207.538884][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.502'. [ 207.538918][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.502'. [ 207.664916][ T4718] Bluetooth: hci3: command tx timeout [ 207.776160][ T6870] bond6: (slave veth0_to_bond): making interface the new active one [ 207.779271][ T6870] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 207.793789][ T6874] bridge_slave_0: left allmulticast mode [ 207.796893][ T6874] bridge_slave_0: left promiscuous mode [ 207.799490][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.810108][ T6874] bridge_slave_1: left allmulticast mode [ 207.810154][ T6874] bridge_slave_1: left promiscuous mode [ 207.810607][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.826916][ T6874] bond0: (slave bond_slave_0): Releasing backup interface [ 207.862521][ T6874] bond0: (slave bond_slave_1): Releasing backup interface [ 207.890686][ T6874] team0: Port device team_slave_0 removed [ 207.896239][ T6874] team0: Port device team_slave_1 removed [ 207.896653][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.896667][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.898253][ T6874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.898263][ T6874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.899709][ T6874] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 207.913154][ T6870] macvlan2: entered promiscuous mode [ 207.915146][ T6870] macvlan2: entered allmulticast mode [ 207.916659][ T6870] bond6: entered promiscuous mode [ 207.920776][ T6870] veth0_to_bond: entered promiscuous mode [ 207.921177][ T6870] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 207.947166][ T6870] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 207.968837][ T6870] bond6: left promiscuous mode [ 207.969976][ T6870] veth0_to_bond: left promiscuous mode [ 208.102746][ T6897] binder: 6896:6897 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 208.105622][ T6897] binder: 6897 RLIMIT_NICE not set [ 208.107167][ T4799] binder: undelivered death notification, 0000000000000000 [ 208.152601][ T6899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.512'. [ 208.505499][ T6907] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 208.515776][ T6907] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.513: bg 0: block 104: invalid block bitmap [ 208.515822][ T6907] loop4: lost filesystem error report for type 5 error -117 [ 208.516141][ T6907] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 208.516233][ T6907] loop4: lost filesystem error report for type 5 error -117 [ 208.517006][ T6907] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.513: invalid indirect mapped block 1 (level 1) [ 208.517032][ T6907] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 208.519475][ T6907] EXT4-fs (loop4): 1 truncate cleaned up [ 208.576947][ T6907] overlayfs: workdir and upperdir must reside under the same mount [ 208.766174][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.522'. [ 208.789918][ T6937] binder: 6936:6937 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 208.789958][ T6937] binder: 6937 RLIMIT_NICE not set [ 208.794755][ T4799] binder: undelivered death notification, 0000000000000000 [ 209.023023][ T6940] dlm: no locking on control device [ 209.049402][ T6942] netlink: 'syz.6.525': attribute type 1 has an invalid length. [ 209.071043][ T6946] set_capacity_and_notify: 9 callbacks suppressed [ 209.072662][ T6946] loop5: detected capacity change from 0 to 128 [ 209.075324][ T6945] loop4: detected capacity change from 0 to 512 [ 209.077313][ T6945] EXT4-fs: Ignoring removed bh option [ 209.077347][ T6945] EXT4-fs: Ignoring removed mblk_io_submit option [ 209.079838][ T6945] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 209.083559][ T6945] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 209.123732][ T6945] EXT4-fs (loop4): orphan cleanup on readonly fs [ 209.127180][ T6945] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 209.127235][ T6945] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 209.127275][ T6945] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.527: Failed to acquire dquot type 1 [ 209.127295][ T6945] loop4: lost filesystem error report for type 5 error -5 [ 209.128477][ T6945] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.527: Invalid block bitmap block 0 in block_group 0 [ 209.128508][ T6945] loop4: lost filesystem error report for type 5 error -117 [ 209.135971][ T6945] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.527: Invalid block bitmap block 0 in block_group 0 [ 209.136014][ T6945] loop4: lost filesystem error report for type 5 error -117 [ 209.138092][ C1] EXT4-fs (loop4): error count since last fsck: 3 [ 209.138128][ C1] EXT4-fs (loop4): last error at time 206: ext4_read_block_bitmap_nowait:483 [ 209.140954][ T6945] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.527: Invalid block bitmap block 0 in block_group 0 [ 209.140989][ T6945] loop4: lost filesystem error report for type 5 error -117 [ 209.142205][ T6945] Quota error (device loop4): write_blk: dquota write failed [ 209.142263][ T6945] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 209.142286][ T6945] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.527: Failed to acquire dquot type 1 [ 209.142304][ T6945] loop4: lost filesystem error report for type 5 error -28 [ 209.143498][ T6945] Quota error (device loop4): write_blk: dquota write failed [ 209.143556][ T6945] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 209.143577][ T6945] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.527: Failed to acquire dquot type 1 [ 209.145732][ T6945] EXT4-fs (loop4): 1 orphan inode deleted [ 209.529911][ T6957] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.527: deleted inode referenced: 12 [ 210.195097][ T6978] binder: 6977:6978 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 210.195138][ T6978] binder: 6978 RLIMIT_NICE not set [ 210.195343][ T867] binder: undelivered death notification, 0000000000000000 [ 210.326859][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.539'. [ 210.624738][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'. [ 210.674272][ T6982] loop5: detected capacity change from 0 to 512 [ 210.674694][ T6982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.674725][ T6982] EXT4-fs: Invalid want_extra_isize 1 [ 210.690272][ T6994] loop0: detected capacity change from 0 to 128 [ 210.803320][ T7001] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 210.803349][ T7001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 210.814115][ T7001] vhci_hcd vhci_hcd.0: Device attached [ 210.852641][ T7004] vhci_hcd: connection closed [ 210.914167][ T454] vhci_hcd vhci_hcd.2: stop threads [ 210.917960][ T454] vhci_hcd vhci_hcd.2: release socket [ 210.918029][ T454] vhci_hcd vhci_hcd.2: disconnect device [ 211.123643][ T7013] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 211.143372][ T4806] IPVS: starting estimator thread 0... [ 211.191785][ T7018] loop6: detected capacity change from 0 to 128 [ 211.251465][ T7016] IPVS: using max 65 ests per chain, 156000 per kthread [ 211.693828][ T7033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.553'. [ 211.823129][ T7040] loop4: detected capacity change from 0 to 128 [ 211.850679][ T7042] loop0: detected capacity change from 0 to 8 [ 211.857791][ T7042] Filesystem uses "unknown" compression. This is not supported [ 211.942512][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 212.268880][ T7053] erspan0: left allmulticast mode [ 212.295038][ T7053] erspan0: left promiscuous mode [ 212.295290][ T7053] bridge4: port 1(erspan0) entered disabled state [ 212.298172][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 212.298632][ T5358] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 212.666552][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.561'. [ 213.014747][ T7066] loop6: detected capacity change from 0 to 1024 [ 213.102883][ T7066] EXT4-fs mount: 22 callbacks suppressed [ 213.126934][ T7066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.182229][ T7079] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 213.291886][ T5427] rtrs_client L2023: : CM error (CM event: address error, err: -ENODEV) [ 213.291953][ T5427] ================================================================== [ 213.291963][ T5427] BUG: KASAN: null-ptr-deref in trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 213.291985][ T5427] Read of size 255 at addr 0000000000000000 by task kworker/u8:11/5427 [ 213.291994][ T5427] [ 213.292000][ T5427] CPU: 0 UID: 0 PID: 5427 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT [ 213.292010][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 213.292017][ T5427] Workqueue: ib_addr process_one_req [ 213.292037][ T5427] Call trace: [ 213.292042][ T5427] show_stack+0x2c/0x3c (C) [ 213.292059][ T5427] __dump_stack+0x30/0x40 [ 213.292075][ T5427] dump_stack_lvl+0xd8/0x12c [ 213.292088][ T5427] print_report+0x58/0x84 [ 213.292100][ T5427] kasan_report+0x8c/0xc4 [ 213.292120][ T5427] kasan_check_range+0x17c/0x1ac [ 213.292134][ T5427] __asan_memcpy+0x3c/0x84 [ 213.292150][ T5427] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 213.292162][ T5427] __traceiter_rtrs_rdma_error_recovery+0x74/0xc8 [ 213.292174][ T5427] rtrs_rdma_error_recovery+0x2d4/0x400 [ 213.292188][ T5427] rtrs_clt_rdma_cm_handler+0x498/0x1a18 [ 213.292202][ T5427] cma_cm_event_handler+0xbc/0x4c8 [ 213.292216][ T5427] addr_handler+0x210/0x3c4 [ 213.292228][ T5427] process_one_req+0x26c/0x440 [ 213.292240][ T5427] process_scheduled_works+0x788/0x10b8 [ 213.292254][ T5427] worker_thread+0x798/0xbd0 [ 213.292266][ T5427] kthread+0x304/0x3d4 [ 213.292280][ T5427] ret_from_fork+0x10/0x20 [ 213.292292][ T5427] ================================================================== [ 213.292310][ T5427] Disabling lock debugging due to kernel taint [ 213.334202][ T7079] rtrs_client L2641: : init_conns() failed: err=-EHOSTUNREACH path=@ip:27.0.0.1 [:0] [ 213.334282][ T7079] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 213.334306][ T7079] Mem abort info: [ 213.334333][ T7079] ESR = 0x0000000096000006 [ 213.334354][ T7079] EC = 0x25: DABT (current EL), IL = 32 bits [ 213.334375][ T7079] SET = 0, FnV = 0 [ 213.334394][ T7079] EA = 0, S1PTW = 0 [ 213.334412][ T7079] FSC = 0x06: level 2 translation fault [ 213.334430][ T7079] Data abort info: [ 213.334448][ T7079] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 213.334467][ T7079] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 213.334486][ T7079] GCS = 0, Overlay = 0, DirtyBit = 0 [ 213.334506][ T7079] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000108072000 [ 213.334526][ T7079] [0000000000000000] pgd=0800000110108403, p4d=0800000110108403, pud=080000013a48a403, pmd=0000000000000000 [ 213.334618][ T7079] Internal error: Oops: 0000000096000006 [#1] SMP [ 213.351378][ T7079] Modules linked in: [ 213.352088][ T7079] CPU: 0 UID: 0 PID: 7079 Comm: syz.4.566 Tainted: G B syzkaller #0 PREEMPT [ 213.353934][ T7079] Tainted: [B]=BAD_PAGE [ 213.354698][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 213.356499][ T7079] pstate: a3400005 (NzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 213.357928][ T7079] pc : __pi_memcpy_generic+0x110/0x22c [ 213.358969][ T7079] lr : __asan_memcpy+0x68/0x84 [ 213.359818][ T7079] sp : ffff800095686f30 [ 213.360566][ T7079] x29: ffff800095686f30 x28: 1fffe0001b808401 x27: 0000000000000000 [ 213.362045][ T7079] x26: ffff800095686f80 x25: 1fffe0001b738001 x24: dfff800000000000 [ 213.363568][ T7079] x23: ffff700012ad0df0 x22: ffff8000845810b8 x21: ffff0000cfe899f4 [ 213.365080][ T7079] x20: 0000000000000000 x19: 00000000000000ff x18: 1fffe00034bb7428 [ 213.366629][ T7079] x17: 2048434145524e55 x16: 54534f48452d3d72 x15: 0000000000000000 [ 213.368143][ T7079] x14: ffff0000cfe899f4 x13: 0000000000000007 x12: 0000000000000000 [ 213.369648][ T7079] x11: ffff600019fd135f x10: 0000000000000000 x9 : dfff800000000000 [ 213.371167][ T7079] x8 : 0000000000000001 x7 : 0000000000000000 x6 : 7461705f746c6326 [ 213.372635][ T7079] x5 : ffff0000cfe89af3 x4 : 00000000000000ff x3 : ffff8000845810b8 [ 213.374118][ T7079] x2 : 00000000000000ff x1 : 0000000000000000 x0 : ffff0000cfe899f4 [ 213.375575][ T7079] Call trace: [ 213.376197][ T7079] __pi_memcpy_generic+0x110/0x22c (P) [ 213.377190][ T7079] trace_event_raw_event_rtrs_clt_conn_class+0x220/0x480 [ 213.378413][ T7079] __traceiter_rtrs_clt_close_conns+0x74/0xc8 [ 213.379500][ T7079] rtrs_clt_close_conns+0x2f0/0x40c [ 213.380467][ T7079] rtrs_clt_open+0xa6c/0xd54 [ 213.381311][ T7079] rnbd_clt_map_device+0xcb8/0x1f64 [ 213.382251][ T7079] rnbd_clt_map_device_store+0x900/0xad8 [ 213.383297][ T7079] dev_attr_store+0x6c/0x90 [ 213.384137][ T7079] sysfs_kf_write+0xe0/0x108 [ 213.384986][ T7079] kernfs_fop_write_iter+0x260/0x3b8 [ 213.385902][ T7079] vfs_write+0x51c/0xa0c [ 213.386654][ T7079] ksys_write+0x12c/0x228 [ 213.387430][ T7079] __arm64_sys_write+0x84/0x98 [ 213.388289][ T7079] invoke_syscall+0x98/0x244 [ 213.389128][ T7079] el0_svc_common+0x19c/0x23c [ 213.389986][ T7079] do_el0_svc+0x4c/0x5c [ 213.390863][ T7079] el0_svc+0x64/0x260 [ 213.391656][ T7079] el0t_64_sync_handler+0x44/0x104 [ 213.392667][ T7079] el0t_64_sync+0x198/0x19c [ 213.393507][ T7079] Code: cb01000e b4fffc2e eb0201df 540004a3 (a940342c) [ 213.394780][ T7079] ---[ end trace 0000000000000000 ]--- [ 213.688604][ T7079] Kernel panic - not syncing: Oops: Fatal exception [ 213.689854][ T7079] SMP: stopping secondary CPUs [ 213.690790][ T7079] Kernel Offset: disabled [ 213.691607][ T7079] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 213.692838][ T7079] Memory Limit: none [ 213.993712][ T7079] Rebooting in 86400 seconds..