last executing test programs: 1m17.491501s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0) lseek(r2, 0x4, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000040)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x3, 0x47}]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) recvmmsg(r1, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)=""/95, 0x5f}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000c04fcff", 0x58}], 0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@private1, 0x0}, &(0x7f0000000040)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) ftruncate(r7, 0xc17a) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x6, 0x6, 0x70001, 0x1, 0x6, '\x00', r6, r7, 0x4, 0x4, 0x3, 0x7, @void, @value, @value=r8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x3c, r11, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x4080) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x54, r11, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xa}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 1m16.685517287s ago: executing program 4 (id=15): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) r0 = socket(0xa, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xc000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r5, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x1, 0x43, 0x40, 0x41}, 0x50) 1m15.536046417s ago: executing program 4 (id=23): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000080)={[{@bsdgroups}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000440, 0x0, 0xff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000700)='./file0\x00', 0x10, &(0x7f0000000000)={[{@oldalloc}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0xfe, 0x450, &(0x7f0000000140)="$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") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x1, @local, 0x9}}, 0x80000000, 0x5, 0x738, 0x7f, 0x9}, &(0x7f0000000680)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000006c0)={r2, 0xb1b}, &(0x7f0000000740)=0x8) 1m15.358492479s ago: executing program 4 (id=25): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x303, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="f60c4f95023c"}]}, 0x40}}, 0x8000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001000000020028000000000a05000000000000000000030000000900010073797a30000000000800024000000001140000001100010000000000000000000000000a"], 0xb0}}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) (async) r2 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000080)={0x0, 0x35315258, 0xf00, 0x9, 0x2, @discrete={0x2, 0x4}}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000000206010100000000000000000020000005000100070000000900020073797a3100000000050005000a0000000500040000000000110003"], 0x4c}}, 0x0) listen(r3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000d8008062ef00000000", @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x6, 0x1, 0x6, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0xfffffffb, 0x31b8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000740)={@private2}, &(0x7f0000000780)=0x14) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r6, 0x58, &(0x7f00000003c0)}, 0x10) (async) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r9) getsockname$packet(r9, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r10, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xdaf}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmmsg$inet(r8, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @dev={0xac, 0x14, 0x14, 0x41}}}}], 0x20}}], 0x1, 0x4880) (async) connect$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="b2", 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18, 0xc00c815}}], 0x1, 0x20040804) 1m14.774018025s ago: executing program 4 (id=26): r0 = mmap$IORING_OFF_SQES(0x0, 0xb951, 0x1, 0x8010, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, 0x0, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x6836}, 0x0) getpid() (async) r1 = getpid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x88000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x40086604, 0xfffffffffffffffe) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x40086604, 0xfffffffffffffffe) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000180)="505b21e36f", 0x5, 0x814, &(0x7f0000000300)=@ieee802154, 0x80) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) keyctl$assume_authority(0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'pim6reg\x00', 0x0}) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@private1, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x0, 0x0, 0x0, 0x0, 0x1460236, r8}) (async) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000540)={@private1, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x0, 0x0, 0x0, 0x0, 0x1460236, r8}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000019000100000000c800"/28], 0x1c}}, 0x0) r10 = syz_io_uring_setup(0x76fb, &(0x7f0000000400)={0x0, 0x5962, 0x2, 0xfffffffe, 0x52}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_FTRUNCATE={0x37, 0x2, 0x0, r10, 0x2, 0x0, 0x0, 0x0, 0x1, {0x0, r14}}) syz_io_uring_submit(0x0, 0x0, r0, &(0x7f0000000080)=@IORING_OP_EPOLL_WAIT={0x3b, 0x921e3811015850b1, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x20002000}, {0x6000201c}, {}, {0x68002011}, {0x40002002}, {0x2000}], 0x6, 0x0, 0x1, {0x0, r14}}) (async) syz_io_uring_submit(0x0, 0x0, r0, &(0x7f0000000080)=@IORING_OP_EPOLL_WAIT={0x3b, 0x921e3811015850b1, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x20002000}, {0x6000201c}, {}, {0x68002011}, {0x40002002}, {0x2000}], 0x6, 0x0, 0x1, {0x0, r14}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.547819254s ago: executing program 4 (id=33): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) mremap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000016c000/0x2000)=nil) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delqdisc={0x2c, 0x25, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xb, 0xb}, {0x9, 0xd}, {0xb, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x60, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000080) (async) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.358340366s ago: executing program 3 (id=38): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x81e, &(0x7f00000001c0), 0x3, 0x4bf, &(0x7f0000000f00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)=' \x00 127.0.0.1 2000000000 \\calhost\n', 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) 1m14.226045603s ago: executing program 3 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r1, &(0x7f0000000200)="64bf1a9318aed3c113e5c765b011ef221526026e2d4cd5a0770cf40306259799bff3859e9e248ed8bbc9d513c0c505cf0b707a63b3c28e172b9888419b10f9f388cd7872c2e1dd81f0ed79d4530a36b4088239292e36eca9bbb9d75f31c0b51893e7a91297f69eea7979878220b1bf087749afb08aa7c25645cdcf4f5c758609805ba64b7e91ad9443ecd0a06ff310a2e0558673df0a6b2e0c38178e4e0b2e19f2db1b43afe7fbf5f80853", 0xab, 0x4000, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r5, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f00000002c0)=""/273, &(0x7f0000000280)=0x111) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc0000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000010001a800c000a800500080001000000140003006970766c616e30000000000000000000b8003480140035006e657464657673696d300000000000001400350076657468315f766c616e00000000000014003500766c616e30000000000000000000000014003500626f6e645f736c6176655f300000000014003500766972745f77696669300000000000001400350067656e65766531000000000000000000140035006261746164765f736c6176655f3100001400350076657468305f746f5f68737200000000140035007663616e3000"/228], 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1m13.019147769s ago: executing program 4 (id=62): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/100, 0x64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f0000001780), 0x0, 0xc040) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) syz_io_uring_setup(0x4909, &(0x7f00000002c0)={0x0, 0xc41b, 0x0, 0x7, 0x28f, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) 1m12.913238148s ago: executing program 32 (id=62): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/bluetooth/rfcomm\x00', 0x0, 0x0) read(r3, &(0x7f0000000200)=""/100, 0x64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f0000001780), 0x0, 0xc040) mount$nfs4(&(0x7f0000000040)='/', 0x0, 0x0, 0x197841, 0x0) syz_io_uring_setup(0x4909, &(0x7f00000002c0)={0x0, 0xc41b, 0x0, 0x7, 0x28f, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) 1m12.905338722s ago: executing program 3 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@sb={'sb', 0x3d, 0x3}}, {@delalloc}, {@journal_dev}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@data_err_ignore}]}, 0xfc, 0x57d, &(0x7f0000001500)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@bridge_dellink={0x2c, 0x11, 0x7, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r4, 0x2040, 0x64010}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000280)={&(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x100000000000001f, &(0x7f00000002c0), 0x4d}, 0x24008004) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25070000ea080003007517e59e9efc78fbd4ccf1edd5bf57bb21360f4d8d70e338757fc7", @ANYRES32=0x0, @ANYBLOB="0c009900ff070000710000001400040073797a6b616c6c65723000000000000008000500070000000a00180003030303030300000400cc00"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) 1m12.895327111s ago: executing program 33 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@sb={'sb', 0x3d, 0x3}}, {@delalloc}, {@journal_dev}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@data_err_ignore}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@bridge_dellink={0x2c, 0x11, 0x7, 0x1000000, 0xfffffffe, {0x7, 0x0, 0x0, r4, 0x2040, 0x64010}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000280)={&(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x100000000000001f, &(0x7f00000002c0), 0x4d}, 0x24008004) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25070000ea080003007517e59e9efc78fbd4ccf1edd5bf57bb21360f4d8d70e338757fc7", @ANYRES32=0x0, @ANYBLOB="0c009900ff070000710000001400040073797a6b616c6c65723000000000000008000500070000000a00180003030303030300000400cc00"], 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x24004884) 1m11.350184027s ago: executing program 2 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES8=0x0, @ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SIOCSIFHWADDR(r1, 0x40187542, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x101, 0x7, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8404) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x18}) fstat(r4, &(0x7f0000002a00)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x20, 0x9, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@generic="d6c00201"]}, @nested={0x8, 0x94, 0x0, 0x1, [@nested={0x4, 0xd7}]}, @typed={0xb, 0x0, 0x0, 0x0, @str='{&(/(:\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) utimensat(r6, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000200)={0x0, 0x6, 0x2}, 0xc) r7 = socket(0x400000000010, 0x3, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000280)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x10, 0x3a, '\x00', 0x3a, 'syzkaller\x00', 0x3a, './file1'}, 0x32) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c0400070080000300", 0x33a) 1m11.314283127s ago: executing program 2 (id=86): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) 1m11.2077981s ago: executing program 2 (id=88): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x2000007, @private0={0xfc, 0x0, '\x00', 0x80}, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r3, 0x9}, &(0x7f0000000080)=0x8) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_u}], [], 0x6b}}) 1m11.163366572s ago: executing program 2 (id=90): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) r1 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x34, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048844) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(r2, &(0x7f0000006980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m11.137023024s ago: executing program 2 (id=91): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b, 0x21}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}]}, 0xe4}, 0x1, 0x0, 0x0, 0x48000}, 0x4020) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b, 0x21}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}]}, 0xe4}, 0x1, 0x0, 0x0, 0x48000}, 0x4020) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xfa8527d05305aaf4) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xfa8527d05305aaf4) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r2, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) socket$unix(0x1, 0x3, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x4040) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000b40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000640)={0x4bc, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x4a8, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xa}, @device_b, @device_a, @random="9ee5aea8eeb6", {0xc}, @value=@ver_80211n={0x0, 0x3, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @void, @void, @void, @void, @void, [{0xdd, 0x4c, "0091a93c4a723e1304153aa6bf4dff6d04ab9146bdfbf3f70e9980239fadecf3a7fda3d20d767abec2a5a1b3af59194ac738166fccbfd54d60f41257e0f234c8f3eb7866c072042fc9f0bd54"}, {0xdd, 0x54, "80e356aaeecf2b5ad33f2c87c7b27dd98a0e7baae2dbc23e884cf068140c3656149109b498337b8166aa39b31df45996852ede3916b828948d2e47e26725855113a16e23348443d759136935d89d8261d19c050d"}, {0xdd, 0x9, "dee8db2dbbbb355521"}, {0xdd, 0xab, "64240b0afb573404d38c8370751e55eb26a9539f7e1d0eb9b46ba0bd624de350d6aba6a652d2fbeb19f924551fbb415ff7931e88b5f8f16f85d1fbac31c684c0e86517cbf0c0f521cab0d9299238637fa5a32c5232f78bad82ef44cce83bae19af083defc8edff050bdf5bd5da0c5605f9b563d6dc9a5301b87fdab89c07a21ba01a50cf61920af4cef0fbb480a3cbcbd4eb4151d5b1fd99ae5191449e0540c099ebf491c013e7a273d7be"}, {0xdd, 0x64, "7463e790df1e5cb2d6046babd2ce23c5a526c6dc6b5bd761b7201bdef47217d9fb7031ef2e2b9374385543746d10978cdd1a58df43843b268b9f3ac1155967a25a0ef704ecd18664fbc49141d747b67c482fc72560513c80011f66f201dd14b7fc6b42ca"}, {0xdd, 0xbc, "c1bbde2ecf9448ab9f1bdb7523409f77f2258e4c1bcb5d88824eda422ba634880a439ea5b2409ca21028bc47ff1fe30445fda5393ab0ad88efa51c79bbb3d79e1f01d0897acd60256e317a9a0f6a7990257c86c5f710bb98bd4c2d3ca026478aadf484875b310deee3120a5fa52ab1d27b7f02a9a7360c50c294cc432ca16b91b06b01f78304543fba3f996e48c4026953bb35f1eb64648e9f97eafce45e32a5c42822483325bd93b69605a9a58bd2156b4c56280b58bfc1cac249f9"}, {0xdd, 0x24, "19990759d4ca370dbcde1212dffdae0379f3694aad2366a1d88b775681195147b3041748"}, {0xdd, 0xdd, "e1d94bf805fdc73046a4c690838b44bfb0d2c4f8f311a3e79fd988716933732857f2a6c0b1037546ef9e29fb6ffc23292bcdd97e54f12d4bd42da63907f672a11d702af1720ec76f7e8d9b7478774334a16d3e1635cbe832fecbe072b9606f90d12af321094084c6af2ed324d55d0dea437e7b5a5823edafe8979fdf31f265b573097b0e23d9e347791985980e7eacb051c82f430a9d7d2edfaac4eb05d4a55467d2d4827c325af7922c86d135b2d1ac978da339e53c9b9af6f9f4003d2535b74da03db847f23ad3261fa5ca3402a308ffcaeabc90bb0d7c686d696c04"}, {0xdd, 0xb6, "f5c663e563634aa3b478248ed549cf7fb8b188a9e7fd214e84b4778c189b3e6704a6194c114175aa125b9ba78b20b28034cc4daee095dce58cf97acafc2e5e12e27577ebbfd07cffbf0190a98c4828e53f30ed16f1a031a0d963d67e3ee36933c0b7abf4d73435b286fbb84674c80bcc08c0ca38e876fb98f6e2896005ba4f8aeb1db66ede5a2c396f7fcc00d9ab624da488275e63d4aebc4571e9b153a4f15595e39a56cf7b648d27dabc2d2b4cbdc23df65756504f"}, {0xdd, 0x49, "845d243ec0be485261f0ec8b09bd603324a769243f8452dd5778f0fb38e53296b12d575baf8031d205bf1dd4f4a6152b1b767bc63536f04f0bec6af5e719825ed41429528f33b1f6e3"}]}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c8c5) socket$phonet_pipe(0x23, 0x5, 0x2) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000b80)=0x9, 0x4) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000bc0)) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000c00)=0x5, 0x4) (async) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000c00)=0x5, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000c40)=0x6, 0x4) setrlimit(0x8, &(0x7f0000000c80)={0x5, 0xffffffffffffffff}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7000002) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xbc}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004003}, 0x4080) syz_ublk_setup_io_uring(0x701c, &(0x7f0000000dc0)={0x0, 0x8638, 0x100, 0x1, 0xfd}, &(0x7f0000000e40)=0x0, &(0x7f0000000e80), &(0x7f0000000ec0)) mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x9, 0x100812, 0xffffffffffffffff, 0x0) (async) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x9, 0x100812, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x6ce7, &(0x7f0000000f00)={0x0, 0xe029, 0x2000, 0x1, 0x203}, &(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)) (async) syz_ublk_setup_io_uring(0x6ce7, &(0x7f0000000f00)={0x0, 0xe029, 0x2000, 0x1, 0x203}, &(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000001080)=@IORING_OP_PIPE={0x3e, 0x70, 0x0, 0x0, 0x0, &(0x7f0000001040)=[0x5, 0x7], 0x0, 0x800, 0x0, {0x0, 0x0, 0x42a}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000011c0)={'\x00', 0xb, 0x6, 0x8, 0x9, 0x6, 0xffffffffffffffff}) syz_open_procfs$userns(0x0, &(0x7f0000001240)) (async) r11 = syz_open_procfs$userns(0x0, &(0x7f0000001240)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000001340)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3e5b9dda, 0x2b}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1a}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r12, 0x84, 0x5, &(0x7f0000001380)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x2}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r12, 0x84, 0x5, &(0x7f0000001380)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x2}}}, 0x84) 1m10.771625469s ago: executing program 2 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000001080)={@id={0x2, 0x0, @d}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/119, 0x77}], 0x1, 0x3, 0x2) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, r3, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x608100, 0x0) splice(r4, 0x0, r5, 0x0, 0x7, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x3) 1m10.672920215s ago: executing program 34 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000001080)={@id={0x2, 0x0, @d}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000000000)=""/119, 0x77}], 0x1, 0x3, 0x2) lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, r3, &(0x7f0000000480)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x608100, 0x0) splice(r4, 0x0, r5, 0x0, 0x7, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140), 0x2, 0x3) 54.941627752s ago: executing program 1 (id=278): r0 = syz_open_dev$video4linux(&(0x7f0000000600), 0xfffffffffffffff7, 0x8001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000640)=0x80000) fsopen(&(0x7f0000000000)='nsfs\x00', 0x1) 54.874179929s ago: executing program 1 (id=279): syz_read_part_table(0x5d4, &(0x7f0000000000)="$eJzs279r02kcB/BPqiF3OrgIBy6nDg6HHCiOZlBJoqKQi3aRGxQUETNFECIXEHTQDIoZxNFFCln6Y2qaoVNLC517pUOPQocud7RLoUtzhD5dyg0tlx4cvF7w5cPzfN/f5/N8/oBv8L82FH/1er1MRPRyEd8d8uvhdqF462z5WuV+RKZ/WPz+8w+/9N/8mBL9U/vOp/VKWn/7eqL7fvNmtr18b+vCw5nm0N51IuJ1RJwc6QwPYj6O1mh+9tSbt7XSh3r+2VKpsfZuceHu2Eah0rnTbI3fzt54nHJzqR5P9UXU41U8j0dRjWo8idqA+n9pr17aOVNqTz69ul3sfpy+nHLlfznnQfu/PPfpQatx/eLE6c9X6lPzlfVju7lq7oguAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQI3mZ0+9eVsrfajncxGx9m5x4e7YRqHSudNsjd/O3niccnOpHk/1RdTjVTyPR1GNajyJ2t6Bvd5B2n7/D/2fLZUaa1/aq5d2zpTak0+vbhe7H6cvp1x5UAPvs7//y3OfHrQa1y9OnP58pT41X1k/tpur5o7oAgAAAAAAAAAAAAAAAAAAABARheKts+VrlfsRmfg1In7687eh/n4v/e+eSbnzqa6k/W9fT3Tfb97MtpfvbV14ONP8I+2/Ts/Jkc7wfz4Mh/Z3AAAA///sR5Sb") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x4000080) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)={0x1ec, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xae4}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd23}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x20000000}, 0x4051) 54.618246422s ago: executing program 1 (id=282): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x0, 0x7fff7ffc}]}) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x1, 0x40, 0x4000009, 0xffffffff, {{0x6, 0x4, 0x3, 0x8, 0x18, 0x64, 0xfffe, 0xf7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @rand_addr=0x64010100, {[@generic={0x88, 0x2}]}}}}}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x188, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xfd, 0xa9, @random="072dd85c14400a17f3d3ad6adadff693b47f0650c448775b7c2cde2b137f4998eb182e9f943506576a8a187b85c78d9328d9022032a55f8e8668c2f3f326491f720383b16f8f3ca16cc97cf82681a78818621e71bc3831104821a54f132051797e5c2739d0f748e077c348b3c946f8517e42c7b3528808439d141410315d4e125a6edb81299e7819717ecce46a0025c24b136f5a66a3b5e48deec4750ff06da5be61861117075370b18e50766646ae20c68810efd6d321655456b678c53f0cb159b219ee636c51cc291121971e7c618d4effd9d490a3feaaa1894237bc4ee3aafdec5ad609a8e43a37f3d7b31fb87b5f266c02bbe14d206cd8"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x18, 0xa8, @random="3e8b43b86e6c96a5d33afc3a996e6ae5e457c1eb"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xc624}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xae}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xe0}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x188}, 0x1, 0x0, 0x0, 0x4040000}, 0x11) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)='v', 0x1, 0x88c1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.295587151s ago: executing program 1 (id=283): r0 = socket(0x10, 0x3, 0x0) (async) io_setup(0x3, &(0x7f00000000c0)) userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x64, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xd6, 0x9}}}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0xfffd, @val={0x8c, 0x18, {0x0, "24e5ea3c21c3", @long="5601f5f04ef706287517224b9d6d386c"}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) socket$packet(0x11, 0x2, 0x300) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) umount2(&(0x7f0000000400)='./file0\x00', 0xc) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}, @in6={0xa, 0x4e21, 0x51f, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}], 0x38) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="19d930c682bb52eca9c6dccc36f9f6a1cbda161345df8f687dba063f41ba0b03bf6bda649d", @ANYRES16=r5, @ANYBLOB="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"], 0x2e8}, 0x1, 0x0, 0x0, 0x20040040}, 0x24008880) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x208, 0x2e0, 0x2e0, 0x208, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0xf0, 0x118, 0x0, {0x1000000}, [@common=@dst={{0x48}, {0x7fff, 0x3, 0x7de91c6f22c9938, [0x9, 0x1ff, 0x87e, 0x2a, 0xafd4, 0x9, 0xa, 0x7, 0x6, 0x1000, 0x6, 0x200, 0x9, 0x0, 0x7, 0x3], 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x1, 0x1, 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) (async) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) 50.571178126s ago: executing program 1 (id=291): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0xc76, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r1 = socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$packet(0x11, 0x2, 0x300) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x7ff, 0x4) syz_open_procfs$namespace(0x0, 0x0) socket(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) pipe2(&(0x7f00000000c0), 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x4000) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x88d0) 49.765698409s ago: executing program 1 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x190) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) recvmmsg(r0, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000003}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/70, 0x46}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000001980)=""/4089, 0xff9}, {&(0x7f0000001880)=""/96, 0x60}, {&(0x7f0000001340)=""/244, 0xf4}, {&(0x7f0000001240)=""/117, 0x75}], 0x6}, 0x518}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003440)=""/227, 0xe3}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000003640)=""/180, 0xb4}, {&(0x7f0000001900)=""/116, 0x74}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/91, 0x5b}], 0x6}, 0xfffffff8}], 0x7, 0x40010000, 0x0) 49.675827915s ago: executing program 35 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x190) (async) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) recvmmsg(r0, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x20000003}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/70, 0x46}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000001980)=""/4089, 0xff9}, {&(0x7f0000001880)=""/96, 0x60}, {&(0x7f0000001340)=""/244, 0xf4}, {&(0x7f0000001240)=""/117, 0x75}], 0x6}, 0x518}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003440)=""/227, 0xe3}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000003640)=""/180, 0xb4}, {&(0x7f0000001900)=""/116, 0x74}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/91, 0x5b}], 0x6}, 0xfffffff8}], 0x7, 0x40010000, 0x0) 30.962212597s ago: executing program 5 (id=517): syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x800) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffebe, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) write(r2, &(0x7f0000000000)="01", 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x14\xe2\xc3\x11\xe2\xcb\x86\xc8-Hs\xc6\xafm\xdc{\xdeU#\xebp7-\x9f\xb8\xf3A\xb2CX\xd3//\xdd28+\x9dS\"\x9bm\x19\xd0K4a\xe6\xfb\xdb\xf7\xe4K\xb5\xc8\x94_\a\xe61\x91\xe4<@\xc37+\x9c\xb2\xe8E=T\xd5\xb1\'\xc3w\f\'\xd4\x97\xf8\xba\xe8\xa0\n\x8d\xc7\xc9\x7f\xa8\x1d\x88\xa3\x17\xca\xa5e\x7fYj\x82Z\xe9K\xa0T\\\x87u\x8coL\a|\xc8f^\x01\x04\xe4\x8e\x0f\xfe\x16\xa7G\xd4\xa1\xef\xc5\xa7k\x1dE\xb0\x9d!i\x99\\^\\]G?E+\xcd}\xf7i\xe2\xa2\x8dEW\xab\xdc\x8c\xe9Y\xb1\xc8\xc4\x97!\xbc\xf4\xef\xc9\x03v\xf3 \xb2\xc5\xd5\xf0$\xa0KD5\xf4\x9c\xe1\r\xc4\xa0\xd1\'\xadC\xb7Z\f[t_E\xfd\x1c\x90v0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x5c, 0x5, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0xfb}, @jumbo={0xc2, 0x4, 0x29}]}, 0x38) 29.957384831s ago: executing program 5 (id=524): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000dbd9682e00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="000000181200"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000000a850000000c000000b7000000000000009500000000000000", @ANYRESHEX=r0, @ANYBLOB="b5b585a58746430b45fcb62f8fc3f44691953e8f7d8eaec2551ca43e21990b2de607df9889bd40b9defc0646e71d53219f5771a49b353c71b11ddf657a17cfbef4827aa73e9e714ea986581abf9a54492515da3d9c3eff52107bc7d1ceb6ea628e7513dfe7666dee536419a84ba89973f600ef2cc1f7545b5e18b22c981709b19d96348172ffa97dbda3282e6687cf973f5210774380f7c72d87757e9d8c3e42fa75668acc77f93567ac9efc3653fbbcfcd29637ee1761aa27f4", @ANYBLOB="78a14011521da95a73cdcd09a8fc66b16d41acff520b766f41f00013a718ff9f971bf11fdb40f60fcac11d3681c49bc921da45820ed50673f864559117d2d66f0af42e07324a7b30dca20b129a921cb18a4f9f25f46665138c49d596c12aeec1ce36e35c26d844822b8e8871a8d3cdced3b703ab3fcd69841d5b8b90406cee367cff41227b249b1c6188f39004706daac1fb801c15e05147b53c9ba26a39aaa34150"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x7ac, 0xfffffffffffffffc, 0x1, 0x3, 0x1, 0x7ff, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0407"], 0x102) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 28.894196704s ago: executing program 5 (id=533): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140)={[{@errors_remount}, {@stripe={'stripe', 0x3d, 0xf7b2}}, {@grpquota}]}, 0x1, 0x51f, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='!sub', 0x4) (async) write(r1, &(0x7f0000000400)='!sub', 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000080)={0x80004001, 0x6, 0x4, 0x8f10, 0x7, 0x7}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000040)) 28.725853923s ago: executing program 5 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r1, 0x0, 0x0) fchdir(r5) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)={0x1}) symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) r7 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000980), 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file1\x00', 0x501100, 0x1a0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 28.384880882s ago: executing program 5 (id=541): openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/ftrace_dump_on_oops\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x45, 0x18, 0xfa00, {0x6, 0x0, 0x106, 0x5}}, 0x20) 28.350443877s ago: executing program 36 (id=541): openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/sched/sched_switch/filter\x00', 0x2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000000c0)=0x2c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/ftrace_dump_on_oops\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x45, 0x18, 0xfa00, {0x6, 0x0, 0x106, 0x5}}, 0x20) 4.385929011s ago: executing program 7 (id=792): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e1f, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @random="eaf9035cbf7b"}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @random="b3e1af68ca36"}, 0x10) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x8, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0x905e5596, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) r9 = dup(r0) read$FUSE(r9, &(0x7f0000008340)={0x2020}, 0x2020) sendmsg$nl_route_sched_retired(r9, &(0x7f0000002400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)=@delqdisc={0x98, 0x25, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x10}, {0x4, 0xb}, {0x5, 0xb}}, [@q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x35}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0xfdf, 0x14a4014, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0xfffffffe}}, 0x50) r10 = io_uring_setup(0x675a, &(0x7f0000002500)={0x0, 0xf530, 0x800, 0x1, 0x3c, 0x0, r9}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x2874, &(0x7f0000002580)={0x0, 0x4e45, 0x40, 0x3, 0x1c0, 0x0, r10}, &(0x7f0000002600), &(0x7f0000002640), &(0x7f0000002680)) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000002440), &(0x7f00000024c0)=0x68) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r11}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0xfa0, 0xffffffff, 0xfffffffc, {0x8000, 0x0, 0x1, 0x91, 0x22, 0xf7fe, 0x3, 0x0, 0xfffffff7, 0x4000, 0x0, r12, 0x0, 0x0, 0xeffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100000003"], 0xfeffffff) 3.162899329s ago: executing program 7 (id=805): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x50) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c33a10", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}}}}, 0x0) (async) madvise(&(0x7f0000a07000/0x1000)=nil, 0x1000, 0x64) 2.885630593s ago: executing program 7 (id=810): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, r1, 0x15, 0x0, @val=@iter={0x0}}, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2}) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xfffe, 0x0, 0x0, 0x8, 0xb, 0x5, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf723}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x918d}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x10) getsockopt$inet_opts(r1, 0x6, 0x4, 0xffffffffffffffff, &(0x7f00000001c0)=0x51) 2.609078887s ago: executing program 9 (id=811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70bd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0x2, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x5}, {0x9, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_NBYTE={0x8, 0x2, 0x0, 0x0, {{0x1, 0x2, 0x1}, {0x7, 0x0, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) (fail_nth: 8) 2.57639907s ago: executing program 7 (id=812): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x44041}, 0x40010) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="030021"], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r9, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000040)={0x2, 0x11, 0x87, 0x1, 0x0, 0x7, 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="01020304", 0x4, 0x0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRES64], 0x0) 2.378201228s ago: executing program 9 (id=814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x52142, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) (async) chdir(&(0x7f0000000300)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000340)='./file1\x00', 0x2) 2.110030642s ago: executing program 9 (id=815): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x200, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1cc, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1bc, 0x1, [@m_tunnel_key={0x1b8, 0xf, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffff8, 0x3, 0x1, 0x54a3d969, 0x9e2}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x141, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xec}}]}, 0x200}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffdfff, 0x40}) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x200, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1cc, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1bc, 0x1, [@m_tunnel_key={0x1b8, 0xf, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffff8, 0x3, 0x1, 0x54a3d969, 0x9e2}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x141, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xec}}]}, 0x200}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) socket(0x10, 0x803, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffdfff, 0x40}) (async) setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) (async) listxattr(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) (async) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) 2.014070087s ago: executing program 9 (id=817): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) fchown(r0, r2, 0x0) r3 = syz_clone(0x84008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x9, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) ptrace(0x10, r3) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, &(0x7f00000000c0)) unshare(0x20000400) sendfile(r1, r1, 0x0, 0x7) 1.910462499s ago: executing program 9 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) close(r0) 1.646868657s ago: executing program 8 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/amd_pstate\x00', 0x0, 0x0) close(r0) 1.570210787s ago: executing program 8 (id=826): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='4\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) 1.570085065s ago: executing program 8 (id=827): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/dwc3\x00', 0x0, 0x0) close(r0) 1.557799605s ago: executing program 8 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000407d1ed43000010000000109022200010100e0320904000001030002000921100100012222000705810308000a0000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/arvo/roccatarvo0/mode_key\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='invalid\n', 0x8) 1.451102914s ago: executing program 9 (id=829): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1d19b6"], 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}}, 0x4000050) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet_nvme_pdu(r1, &(0x7f00000003c0)=@r2t={{0x9, 0x2, 0x18, 0x6, 0x7ff00000}, 0x6, 0x0, 0x0, 0xb751}, 0x80, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x1}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdn', @ANYRESHEX=r4, @ANYBLOB="98f8fdf89158"]) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000f6ffffff0000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c000480280001800a00010071756f746100000018000280"], 0xc8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a1401082cbd7000fddbdf250900020073797a300000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 1.400501892s ago: executing program 37 (id=829): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e1d19b6"], 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}}, 0x4000050) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet_nvme_pdu(r1, &(0x7f00000003c0)=@r2t={{0x9, 0x2, 0x18, 0x6, 0x7ff00000}, 0x6, 0x0, 0x0, 0xb751}, 0x80, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x0, 0x0, 0x0, 0x4, 0x1}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdn', @ANYRESHEX=r4, @ANYBLOB="98f8fdf89158"]) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000f6ffffff0000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c000480280001800a00010071756f746100000018000280"], 0xc8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a1401082cbd7000fddbdf250900020073797a300000000008"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 494.317936ms ago: executing program 7 (id=834): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='gve\x00', 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0000:00:04.0\x00', 0xd) close(r1) 493.990539ms ago: executing program 7 (id=835): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 447.92798ms ago: executing program 6 (id=837): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/event_source/devices\x00', 0x10000, 0x0) getdents64(r0, &(0x7f0000000000)=""/1024, 0x400) 366.450597ms ago: executing program 6 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040), &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/mlx4_core\x00', 0x0, 0x0) 366.226234ms ago: executing program 6 (id=839): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./export\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 localhost\n', 0x24) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='localhost ./export 2147483647 140290 0 0 0\n', 0x2c) close(r1) 363.220183ms ago: executing program 6 (id=840): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./c235\x00', 0x81b6, 0xaeb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./c235\x00', 0x2, 0x0) ioctl(r0, 0xc138fd00, &(0x7f0000000100)="040000003000000000000000380100"/48) 334.326042ms ago: executing program 6 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:04.0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f00000000c0)='driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='gve', 0x3) close(r1) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/gve\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f00000001c0)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='0000:00:04.0', 0xc) close(r3) openat(r2, &(0x7f0000000200)='0000:00:04.0\x00', 0x0, 0x0) 309.140865ms ago: executing program 6 (id=842): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ff000040da0b538100300000000109022700010100a0320904000003ffff0000070581020002000705020200020007058303400008"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x20, &(0x7f0000000140)={0xc0, 0x5, 0x4, '\x00\x00\x00\\'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'\x00', 0x1}) 222.442564ms ago: executing program 0 (id=843): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/vulnerabilities/spec_store_bypass\x00', 0x0, 0x0) 222.24258ms ago: executing program 0 (id=844): syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x2) 216.03691ms ago: executing program 0 (id=845): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2, 0x0) 192.607798ms ago: executing program 0 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/virtio/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/1024, 0x400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000600)=""/1024, 0x400) 121.778692ms ago: executing program 0 (id=847): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1, 0x0) 121.066134ms ago: executing program 0 (id=848): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80000}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000780)=@ublk_ctrl_cmd_sqes={0x2e, 0x0, 0x0, r0, 0xc0207518, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', @any_cmd={0x0, 0xffff, 0x18, 0x7f00000007b0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8, 0x0, 0x1000}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x0, 0x5f5e100}, 0x0) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a40)={0x0, 0x5f5e100}, 0x0) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x4002) pwrite64$ublk_bdev(r10, &(0x7f0000800000)='\x00'/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) 29.958703ms ago: executing program 8 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/modules\x00', 0x0, 0x0) read(r0, &(0x7f0000000000), 0x1000) 0s ago: executing program 8 (id=850): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./export\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000120)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000130)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) kernel console output (not intermixed with test programs): 717820][ T4719] Bluetooth: hci4: command 0x0c1a tx timeout [ 77.026039][ T7588] loop5: detected capacity change from 0 to 512 [ 77.026387][ T5144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.046184][ T7588] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.503: bad orphan inode 17 [ 77.046220][ T7588] loop5: lost filesystem error report for type 5 error -117 [ 77.049748][ T7588] ext4_test_bit(bit=16, block=4) = 1 [ 77.052731][ T7588] is_bad_inode(inode)=0 [ 77.053796][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 77.053806][ C0] EXT4-fs (loop5): initial error at time 77: ext4_orphan_get:1429 [ 77.053819][ C0] EXT4-fs (loop5): last error at time 77: ext4_orphan_get:1429 [ 77.058299][ T7588] NEXT_ORPHAN(inode)=0 [ 77.058311][ T7588] max_ino=32 [ 77.058317][ T7588] i_nlink=1 [ 77.080958][ T7588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.134016][ T7588] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.503: bg 0: block 7: invalid block bitmap [ 77.163532][ T7594] loop7: detected capacity change from 0 to 2048 [ 77.176848][ T7594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.220019][ T5146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.420763][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.506'. [ 77.671090][ T7601] netlink: 24 bytes leftover after parsing attributes in process `syz.6.507'. [ 77.671149][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.6.507'. [ 77.682511][ T7612] 9p: Bad value for 'rfdno' [ 78.351245][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.511'. [ 78.549220][ T7619] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 78.563073][ T7619] EXT4-fs (loop7): Remounting filesystem read-only [ 78.720537][ T5355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.744200][ T7630] lo speed is unknown, defaulting to 1000 [ 78.793109][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 78.832947][ T7630] lo speed is unknown, defaulting to 1000 [ 78.848875][ T7633] loop5: detected capacity change from 0 to 2048 [ 78.868462][ T7633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.960167][ T7630] lo speed is unknown, defaulting to 1000 [ 79.146272][ T7630] lo speed is unknown, defaulting to 1000 [ 79.207934][ T7639] loop7: detected capacity change from 0 to 1024 [ 79.218368][ T7639] EXT4-fs: Ignoring removed nobh option [ 79.218399][ T7639] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.262480][ T7639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.530325][ T5355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.556161][ T7630] lo speed is unknown, defaulting to 1000 [ 79.625198][ T5146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.786256][ T7666] loop7: detected capacity change from 0 to 256 [ 79.836987][ T7666] FAT-fs (loop7): IO charset c not found [ 79.857685][ T7675] loop5: detected capacity change from 0 to 1024 [ 79.891893][ T7675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.374993][ T7708] netlink: 68 bytes leftover after parsing attributes in process `syz.8.529'. [ 80.434335][ T7714] loop8: detected capacity change from 0 to 512 [ 80.873099][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 80.909582][ T5146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.959706][ T7729] loop5: detected capacity change from 0 to 512 [ 80.980468][ T7729] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.001043][ T7729] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.533: iget: bad i_size value: 2533274857506816 [ 81.005336][ T7729] EXT4-fs (loop5): Remounting filesystem read-only [ 81.074239][ T30] audit: type=1326 audit(82.066:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 81.079291][ T30] audit: type=1326 audit(82.066:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 81.083873][ T30] audit: type=1326 audit(82.076:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 81.088955][ T30] audit: type=1326 audit(82.076:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 81.100315][ T30] audit: type=1326 audit(82.086:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 81.100370][ T30] audit: type=1326 audit(82.086:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff89379060 code=0x7ffc0000 [ 81.111428][ T30] audit: type=1326 audit(82.086:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff893790cc code=0x7ffc0000 [ 81.111478][ T30] audit: type=1326 audit(82.086:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff89358078 code=0x7ffc0000 [ 81.111499][ T30] audit: type=1326 audit(82.086:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=435 compat=0 ip=0xffff8937a368 code=0x7ffc0000 [ 81.111518][ T30] audit: type=1326 audit(82.086:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7734 comm="syz.7.535" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff893580d0 code=0x7ffc0000 [ 81.187774][ T7743] ipt_ECN: cannot use operation on non-tcp rule [ 81.191304][ T7743] Bluetooth: hci0: unsupported parameter 5135 [ 81.191611][ T7743] Bluetooth: hci0: unsupported parameter 8192 [ 81.191626][ T7743] Bluetooth: hci0: unsupported parameter 5135 [ 81.191633][ T7743] Bluetooth: hci0: unsupported parameter 8192 [ 81.327831][ T5146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.396407][ T5154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.408798][ T7751] input input9: cannot allocate more than FF_MAX_EFFECTS effects [ 81.460001][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.460755][ T7755] netlink: 20 bytes leftover after parsing attributes in process `syz.6.544'. [ 81.464868][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.466715][ T4719] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.468834][ T4719] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.473967][ T4719] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.517048][ T5154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.526917][ T7755] loop6: detected capacity change from 0 to 4096 [ 81.541121][ T7755] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.554074][ T7755] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.544: corrupted inode contents [ 81.556559][ T7755] EXT4-fs error (device loop6): ext4_dirty_inode:6731: inode #15: comm syz.6.544: mark_inode_dirty error [ 81.558874][ T7755] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.544: corrupted inode contents [ 81.561232][ T7755] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.544: mark_inode_dirty error [ 81.563558][ T7755] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.544: corrupted inode contents [ 81.565997][ T7755] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.544: mark_inode_dirty error [ 81.568563][ T7755] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.544: corrupted inode contents [ 81.571046][ T7755] EXT4-fs error (device loop6): ext4_truncate:4721: inode #15: comm syz.6.544: mark_inode_dirty error [ 81.573831][ T7755] EXT4-fs error (device loop6) in ext4_setattr:6247: Corrupt filesystem [ 81.579082][ T7755] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #15: comm syz.6.544: corrupted inode contents [ 81.588339][ T7759] loop8: detected capacity change from 0 to 512 [ 81.593803][ T7757] netlink: 76 bytes leftover after parsing attributes in process `syz.8.543'. [ 81.617433][ T5144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.635763][ T5154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.754209][ T7761] lo speed is unknown, defaulting to 1000 [ 81.788383][ T5154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.105917][ T7786] trusted_key: encrypted_key: key user:syz not found [ 82.162150][ T5154] bridge_slave_1: left allmulticast mode [ 82.162190][ T5154] bridge_slave_1: left promiscuous mode [ 82.162299][ T5154] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.417578][ T5154] bridge_slave_0: left allmulticast mode [ 82.417621][ T5154] bridge_slave_0: left promiscuous mode [ 82.417804][ T5154] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.492381][ T5154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.499779][ T5154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.524121][ T5154] bond0 (unregistering): Released all slaves [ 82.597047][ T7796] binder: 7795:7796 context manager tried to acquire desc 0 [ 82.597077][ T7796] binder: 7795:7796 ioctl c0306201 200005c0 returned -22 [ 83.107118][ T7823] loop7: detected capacity change from 0 to 2048 [ 83.131598][ T7830] lo speed is unknown, defaulting to 1000 [ 83.147029][ T7837] FAULT_INJECTION: forcing a failure. [ 83.147029][ T7837] name fail_futex, interval 1, probability 0, space 0, times 0 [ 83.147073][ T7837] CPU: 1 UID: 0 PID: 7837 Comm: syz.6.559 Tainted: G L syzkaller #0 PREEMPT [ 83.147089][ T7837] Tainted: [L]=SOFTLOCKUP [ 83.147093][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.147098][ T7837] Call trace: [ 83.147101][ T7837] show_stack+0x2c/0x3c (C) [ 83.147120][ T7837] __dump_stack+0x30/0x40 [ 83.147132][ T7837] dump_stack_lvl+0xd8/0x12c [ 83.147144][ T7837] dump_stack+0x1c/0x28 [ 83.147155][ T7837] should_fail_ex+0x41c/0x590 [ 83.147167][ T7837] should_fail+0x14/0x24 [ 83.147178][ T7837] get_futex_key+0x1ec/0x12b0 [ 83.147189][ T7837] futex_wake+0x10c/0x594 [ 83.147205][ T7837] do_futex+0x2c4/0x378 [ 83.147215][ T7837] __arm64_sys_futex+0x2e4/0x418 [ 83.147225][ T7837] invoke_syscall+0x98/0x244 [ 83.147237][ T7837] el0_svc_common+0xec/0x23c [ 83.147249][ T7837] do_el0_svc+0x4c/0x5c [ 83.147260][ T7837] el0_svc+0x64/0x260 [ 83.147270][ T7837] el0t_64_sync_handler+0x44/0x104 [ 83.147280][ T7837] el0t_64_sync+0x198/0x19c [ 83.180284][ T7823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.186095][ T7823] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 83.187653][ T7823] EXT4-fs error (device loop7) in ext4_setattr:6247: error 28 [ 83.205750][ T1166] IPVS: starting estimator thread 0... [ 83.222982][ T5355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.240938][ T7761] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.244420][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.244534][ T7761] bridge_slave_0: entered allmulticast mode [ 83.252005][ T7761] bridge_slave_0: entered promiscuous mode [ 83.258161][ T7761] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.258862][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.258956][ T7761] bridge_slave_1: entered allmulticast mode [ 83.264519][ T7761] bridge_slave_1: entered promiscuous mode [ 83.277635][ T7851] tipc: Can't bind to reserved service type 2 [ 83.288547][ T4393] 8021q: adding VLAN 0 to HW filter on device eth18 [ 83.295200][ T7845] IPVS: using max 57 ests per chain, 136800 per kthread [ 83.309688][ T7761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.310629][ T7761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.400111][ T7761] team0: Port device team_slave_0 added [ 83.401992][ T7761] team0: Port device team_slave_1 added [ 83.430539][ T5154] hsr_slave_0: left promiscuous mode [ 83.431753][ T5154] hsr_slave_1: left promiscuous mode [ 83.432049][ T5154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.432060][ T5154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.438814][ T5154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.438827][ T5154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.447952][ T5154] veth1_macvtap: left promiscuous mode [ 83.448035][ T5154] veth0_macvtap: left promiscuous mode [ 83.448091][ T5154] veth1_vlan: left promiscuous mode [ 83.448131][ T5154] veth0_vlan: left promiscuous mode [ 83.513251][ T4719] Bluetooth: hci3: command tx timeout [ 83.574575][ T7873] loop6: detected capacity change from 0 to 512 [ 83.576309][ T7873] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.577674][ T7873] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.567: bad orphan inode 131083 [ 83.577700][ T7873] loop6: lost filesystem error report for type 5 error -117 [ 83.578540][ T7873] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.580515][ T7873] EXT4-fs (loop6): shut down requested (2) [ 83.581049][ T7873] EXT4-fs warning (device loop6): ext4_empty_dir:3096: inode #2: comm syz.6.567: directory missing '.' [ 83.581332][ T7873] netlink: 56 bytes leftover after parsing attributes in process `syz.6.567'. [ 83.656623][ T5154] team0 (unregistering): Port device team_slave_1 removed [ 83.662316][ T5154] team0 (unregistering): Port device team_slave_0 removed [ 83.718930][ T1166] smc: removing ib device syz0 [ 83.769532][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.769561][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.769590][ T7761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.811598][ T26] lo speed is unknown, defaulting to 1000 [ 83.811642][ T26] syz0: Port: 1 Link DOWN [ 83.827935][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.7.565'. [ 83.852112][ T5144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.880494][ T7761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.882536][ T7761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.889580][ T7761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.898792][ T7893] loop8: detected capacity change from 0 to 128 [ 83.994739][ T7761] hsr_slave_0: entered promiscuous mode [ 83.995137][ T7761] hsr_slave_1: entered promiscuous mode [ 83.995334][ T7761] debugfs: 'hsr0' already exists in 'hsr' [ 83.995344][ T7761] Cannot create hsr debugfs directory [ 84.003368][ T7896] Injecting memory failure for pfn 0x1334c4 at process virtual address 0x20945000 [ 84.015002][ T7896] Memory failure: 0x1334c4: recovery action for clean LRU page: Recovered [ 84.016903][ T7896] Injecting memory failure for pfn 0x1334c5 at process virtual address 0x20946000 [ 84.019166][ T7896] Memory failure: 0x1334c5: recovery action for clean LRU page: Recovered [ 84.020903][ T7896] Injecting memory failure for pfn 0x15ea62 at process virtual address 0x20947000 [ 84.022746][ T7896] Memory failure: 0x15ea62: recovery action for clean LRU page: Recovered [ 84.024452][ T7896] Injecting memory failure for pfn 0x15ea63 at process virtual address 0x20948000 [ 84.026543][ T7896] Memory failure: 0x15ea63: recovery action for clean LRU page: Recovered [ 84.029539][ T7896] tmpfs: Bad value for 'mpol' [ 84.078233][ T7905] Injecting memory failure for pfn 0x131ee5 at process virtual address 0x20000000 [ 84.084117][ T7905] Memory failure: 0x131ee5: Sending SIGBUS to syz.8.573:7905 due to hardware memory corruption [ 84.086260][ T7905] Memory failure: 0x131ee5: recovery action for dirty LRU page: Recovered [ 84.810018][ T4393] 8021q: adding VLAN 0 to HW filter on device eth17 [ 84.884302][ T7761] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 84.887718][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.888195][ T7761] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 84.892205][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.919387][ T7761] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 84.926488][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.928618][ T7761] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 84.938684][ T7761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.004409][ T7761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.019387][ T7761] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.027383][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.027450][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.041829][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.041882][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.141974][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.144364][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.146196][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.149228][ T7961] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.153927][ T7961] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 85.170324][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.170842][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.171204][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.181090][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.181480][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.181840][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.187932][ T7961] wlan0 speed is unknown, defaulting to 1000 [ 85.192382][ T7965] netlink: 'syz.6.583': attribute type 4 has an invalid length. [ 85.237753][ T7965] loop6: detected capacity change from 0 to 512 [ 85.242225][ T7970] loop7: detected capacity change from 0 to 1024 [ 85.251395][ T7970] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 85.259879][ T7970] JBD2: no valid journal superblock found [ 85.275984][ T7970] EXT4-fs (loop7): Could not load journal inode [ 85.277606][ T7965] EXT4-fs (loop6): required journal recovery suppressed and not mounted read-only [ 85.309303][ T7975] cgroup: Bad value for 'name' [ 85.634095][ T4719] Bluetooth: hci3: command tx timeout [ 85.817373][ T4393] 8021q: adding VLAN 0 to HW filter on device eth16 [ 85.826518][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.589'. [ 85.859479][ T7965] netlink: 'syz.6.583': attribute type 1 has an invalid length. [ 85.859513][ T7965] netlink: 224 bytes leftover after parsing attributes in process `syz.6.583'. [ 85.859665][ T7965] libceph: secret too big 55 [ 85.912167][ T7761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.150543][ T8032] device-mapper: ioctl: Invalid data size in the ioctl structure: 1074579912 [ 86.407799][ T7761] veth0_vlan: entered promiscuous mode [ 86.410341][ T7761] veth1_vlan: entered promiscuous mode [ 86.433512][ T8039] loop8: detected capacity change from 0 to 8192 [ 86.441753][ T7761] veth0_macvtap: entered promiscuous mode [ 86.442949][ T7761] veth1_macvtap: entered promiscuous mode [ 86.467246][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.468638][ T7761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.537913][ T8059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.596'. [ 86.573169][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.573481][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.573504][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.573529][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.599009][ T8065] wlan0 speed is unknown, defaulting to 1000 [ 86.618155][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.618382][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.635378][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.635410][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.660740][ T4393] 8021q: adding VLAN 0 to HW filter on device eth19 [ 86.703987][ T8075] loop9: detected capacity change from 0 to 512 [ 86.716756][ T8075] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.738904][ T8075] __quota_error: 410 callbacks suppressed [ 86.738951][ T8075] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 1 [ 86.739020][ T8075] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 86.739046][ T8075] EXT4-fs error (device loop9): ext4_acquire_dquot:7069: comm syz.9.542: Failed to acquire dquot type 1 [ 86.739065][ T8075] loop9: lost filesystem error report for type 5 error -5 [ 86.743060][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 86.743094][ C0] EXT4-fs (loop9): initial error at time 87: ext4_acquire_dquot:7069 [ 86.743122][ C0] EXT4-fs (loop9): last error at time 87: ext4_acquire_dquot:7069 [ 86.758799][ T8075] EXT4-fs (loop9): Remounting filesystem read-only [ 86.759039][ T8075] EXT4-fs (loop9): 1 truncate cleaned up [ 86.760636][ T8075] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.921646][ T7761] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.979173][ T8114] loop9: detected capacity change from 0 to 1024 [ 87.006948][ T8114] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.044050][ T8121] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 87.147707][ T8133] loop8: detected capacity change from 0 to 128 [ 87.153602][ T8133] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 87.154965][ T6700] udevd[6700]: incorrect ext4 checksum on /dev/loop8 [ 87.216105][ T8137] netlink: 'syz.6.615': attribute type 3 has an invalid length. [ 87.217792][ T8137] netlink: 'syz.6.615': attribute type 1 has an invalid length. [ 87.419010][ T8142] netlink: 'syz.6.616': attribute type 2 has an invalid length. [ 87.419048][ T8142] netlink: 1020 bytes leftover after parsing attributes in process `syz.6.616'. [ 87.693297][ T4719] Bluetooth: hci3: command tx timeout [ 87.816479][ T7761] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.989983][ T8175] FAULT_INJECTION: forcing a failure. [ 87.989983][ T8175] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 87.990023][ T8175] CPU: 1 UID: 0 PID: 8175 Comm: syz.9.625 Tainted: G L syzkaller #0 PREEMPT [ 87.990038][ T8175] Tainted: [L]=SOFTLOCKUP [ 87.990042][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.990048][ T8175] Call trace: [ 87.990052][ T8175] show_stack+0x2c/0x3c (C) [ 87.990075][ T8175] __dump_stack+0x30/0x40 [ 87.990088][ T8175] dump_stack_lvl+0xd8/0x12c [ 87.990099][ T8175] dump_stack+0x1c/0x28 [ 87.990108][ T8175] should_fail_ex+0x41c/0x590 [ 87.990119][ T8175] should_fail+0x14/0x24 [ 87.990129][ T8175] should_fail_usercopy+0x20/0x30 [ 87.990139][ T8175] _inline_copy_from_user+0x3c/0x174 [ 87.990149][ T8175] do_sock_getsockopt+0x210/0x720 [ 87.990158][ T8175] __sys_getsockopt+0xfc/0x168 [ 87.990166][ T8175] __arm64_sys_getsockopt+0xc8/0xe4 [ 87.990174][ T8175] invoke_syscall+0x98/0x244 [ 87.990184][ T8175] el0_svc_common+0xec/0x23c [ 87.990200][ T8175] do_el0_svc+0x4c/0x5c [ 87.990214][ T8175] el0_svc+0x64/0x260 [ 87.990228][ T8175] el0t_64_sync_handler+0x44/0x104 [ 87.990239][ T8175] el0t_64_sync+0x198/0x19c [ 88.110360][ T8182] netlink: 'syz.9.627': attribute type 3 has an invalid length. [ 88.110401][ T8182] netlink: 'syz.9.627': attribute type 1 has an invalid length. [ 88.172265][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.8.629'. [ 88.172266][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.629'. [ 88.172282][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.629'. [ 88.172739][ T8190] netlink: 'syz.8.629': attribute type 15 has an invalid length. [ 88.179074][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.8.629'. [ 88.179170][ T8189] netlink: 'syz.8.629': attribute type 15 has an invalid length. [ 88.277588][ T8194] netlink: 'syz.8.630': attribute type 2 has an invalid length. [ 88.385415][ T4719] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 88.402510][ T4719] Bluetooth: hci4: unexpected cc 0x0c47 length: 2 > 1 [ 88.402549][ T4719] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 88.402601][ T4719] Bluetooth: hci4: unexpected cc 0x0c47 length: 2 > 1 [ 88.402619][ T4719] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 88.407189][ T8222] FAULT_INJECTION: forcing a failure. [ 88.407189][ T8222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.407213][ T8222] CPU: 1 UID: 0 PID: 8222 Comm: syz.7.638 Tainted: G L syzkaller #0 PREEMPT [ 88.407228][ T8222] Tainted: [L]=SOFTLOCKUP [ 88.407232][ T8222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.407237][ T8222] Call trace: [ 88.407240][ T8222] show_stack+0x2c/0x3c (C) [ 88.407259][ T8222] __dump_stack+0x30/0x40 [ 88.407270][ T8222] dump_stack_lvl+0xd8/0x12c [ 88.407280][ T8222] dump_stack+0x1c/0x28 [ 88.407289][ T8222] should_fail_ex+0x41c/0x590 [ 88.407300][ T8222] should_fail+0x14/0x24 [ 88.407309][ T8222] should_fail_usercopy+0x20/0x30 [ 88.407319][ T8222] copy_from_sockptr_offset+0x84/0x1e8 [ 88.407329][ T8222] do_tcp_getsockopt+0x150/0x1c78 [ 88.407337][ T8222] tcp_getsockopt+0x6c/0xe8 [ 88.407345][ T8222] sock_common_getsockopt+0xa8/0xc4 [ 88.407353][ T8222] do_sock_getsockopt+0x338/0x720 [ 88.407362][ T8222] __sys_getsockopt+0xfc/0x168 [ 88.407370][ T8222] __arm64_sys_getsockopt+0xc8/0xe4 [ 88.407378][ T8222] invoke_syscall+0x98/0x244 [ 88.407388][ T8222] el0_svc_common+0xec/0x23c [ 88.407398][ T8222] do_el0_svc+0x4c/0x5c [ 88.407407][ T8222] el0_svc+0x64/0x260 [ 88.407416][ T8222] el0t_64_sync_handler+0x44/0x104 [ 88.407425][ T8222] el0t_64_sync+0x198/0x19c [ 88.739152][ T8235] __nla_validate_parse: 1 callbacks suppressed [ 88.739198][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.739245][ T8235] dummy0: entered promiscuous mode [ 88.740117][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.740184][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.740252][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.740305][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.740358][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.740411][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.740464][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.740519][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.740586][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.645'. [ 88.801435][ T8245] loop6: detected capacity change from 0 to 128 [ 88.806020][ T8245] EXT4-fs (loop6): Test dummy encryption mode enabled [ 88.814970][ T8245] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.151474][ T5154] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 89.753310][ T4719] Bluetooth: hci3: command tx timeout [ 90.042137][ T8297] loop8: detected capacity change from 0 to 512 [ 90.046570][ T8297] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.093699][ T8297] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #17: comm syz.8.652: inode has both inline data and extents flags [ 90.093739][ T8297] loop8: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 90.096856][ T8297] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.652: couldn't read orphan inode 17 (err -117) [ 90.096891][ T8297] loop8: lost filesystem error report for type 5 error -117 [ 90.097518][ T8297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.687084][ T8307] FAULT_INJECTION: forcing a failure. [ 90.687084][ T8307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.687125][ T8307] CPU: 0 UID: 0 PID: 8307 Comm: syz.0.653 Tainted: G L syzkaller #0 PREEMPT [ 90.687143][ T8307] Tainted: [L]=SOFTLOCKUP [ 90.687147][ T8307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.687152][ T8307] Call trace: [ 90.687155][ T8307] show_stack+0x2c/0x3c (C) [ 90.687172][ T8307] __dump_stack+0x30/0x40 [ 90.687189][ T8307] dump_stack_lvl+0xd8/0x12c [ 90.687202][ T8307] dump_stack+0x1c/0x28 [ 90.687212][ T8307] should_fail_ex+0x41c/0x590 [ 90.687223][ T8307] should_fail+0x14/0x24 [ 90.687233][ T8307] should_fail_usercopy+0x20/0x30 [ 90.687243][ T8307] copy_to_sockptr+0x7c/0x1a8 [ 90.687251][ T8307] do_tcp_getsockopt+0x1044/0x1c78 [ 90.687259][ T8307] tcp_getsockopt+0x6c/0xe8 [ 90.687266][ T8307] sock_common_getsockopt+0xa8/0xc4 [ 90.687275][ T8307] do_sock_getsockopt+0x338/0x720 [ 90.687284][ T8307] __sys_getsockopt+0xfc/0x168 [ 90.687292][ T8307] __arm64_sys_getsockopt+0xc8/0xe4 [ 90.687300][ T8307] invoke_syscall+0x98/0x244 [ 90.687310][ T8307] el0_svc_common+0xec/0x23c [ 90.687320][ T8307] do_el0_svc+0x4c/0x5c [ 90.687329][ T8307] el0_svc+0x64/0x260 [ 90.687339][ T8307] el0t_64_sync_handler+0x44/0x104 [ 90.687347][ T8307] el0t_64_sync+0x198/0x19c [ 90.719305][ T8309] validate_nla: 67 callbacks suppressed [ 90.719319][ T8309] netlink: 'syz.0.654': attribute type 3 has an invalid length. [ 91.265779][ T8315] md: ram1 does not have a valid v1.0 superblock, not importing! [ 91.266029][ T8314] md: ram0 does not have a valid v1.0 superblock, not importing! [ 91.423738][ T8259] syz.0.645 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 91.423794][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT [ 91.423810][ T8259] Tainted: [L]=SOFTLOCKUP [ 91.423814][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.423820][ T8259] Call trace: [ 91.423823][ T8259] show_stack+0x2c/0x3c (C) [ 91.423842][ T8259] __dump_stack+0x30/0x40 [ 91.423854][ T8259] dump_stack_lvl+0xd8/0x12c [ 91.423864][ T8259] dump_stack+0x1c/0x28 [ 91.423873][ T8259] dump_header+0xbc/0x3f0 [ 91.423886][ T8259] oom_kill_process+0x248/0x8f0 [ 91.423895][ T8259] out_of_memory+0xd24/0x1064 [ 91.423903][ T8259] mem_cgroup_out_of_memory+0xe8/0x170 [ 91.423912][ T8259] try_charge_memcg+0x9bc/0xd38 [ 91.423923][ T8259] charge_memcg+0x19c/0x2a0 [ 91.423933][ T8259] __mem_cgroup_charge+0x38/0x98 [ 91.423943][ T8259] shmem_alloc_and_add_folio+0x61c/0xed8 [ 91.423953][ T8259] shmem_get_folio_gfp+0x4a8/0x1464 [ 91.423962][ T8259] shmem_write_begin+0x160/0x448 [ 91.423972][ T8259] generic_perform_write+0x23c/0x7a4 [ 91.423982][ T8259] shmem_file_write_iter+0x10c/0x134 [ 91.423991][ T8259] __kernel_write_iter+0x334/0x740 [ 91.424002][ T8259] dump_user_range+0x36c/0x7a0 [ 91.424011][ T8259] elf_core_dump+0x2c74/0x31e8 [ 91.424022][ T8259] coredump_write+0x10dc/0x17fc [ 91.424030][ T8259] vfs_coredump+0x2adc/0x3994 [ 91.424038][ T8259] get_signal+0xd88/0x1094 [ 91.424046][ T8259] arch_do_signal_or_restart+0x1c8/0x444c [ 91.424057][ T8259] exit_to_user_mode_loop+0x70/0x17c [ 91.424066][ T8259] el0_da+0x1a4/0x254 [ 91.424076][ T8259] el0t_64_sync_handler+0xd8/0x104 [ 91.424085][ T8259] el0t_64_sync+0x198/0x19c [ 91.424106][ T8259] memory: usage 307200kB, limit 307200kB, failcnt 23205 [ 91.424113][ T8259] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 91.424121][ T8259] kmem: usage 6880kB, limit 9007199254740988kB, failcnt 0 [ 91.424127][ T8259] Memory cgroup stats for /syz0: [ 91.424210][ T8259] cache 307101696 [ 91.424216][ T8259] rss 425984 [ 91.424220][ T8259] rss_huge 0 [ 91.424224][ T8259] shmem 307007488 [ 91.424228][ T8259] mapped_file 101171200 [ 91.424232][ T8259] dirty 16384 [ 91.424236][ T8259] writeback 0 [ 91.424240][ T8259] workingset_refault_anon 36 [ 91.424243][ T8259] workingset_refault_file 0 [ 91.424247][ T8259] swap 127991808 [ 91.424250][ T8259] swapcached 128147456 [ 91.424253][ T8259] pgpgin 185706 [ 91.424256][ T8259] pgpgout 110626 [ 91.424259][ T8259] pgfault 114276 [ 91.424263][ T8259] pgmajfault 76 [ 91.424266][ T8259] inactive_anon 268189696 [ 91.424269][ T8259] active_anon 38887424 [ 91.424272][ T8259] inactive_file 73728 [ 91.424276][ T8259] active_file 16384 [ 91.424279][ T8259] unevictable 0 [ 91.424282][ T8259] hierarchical_memory_limit 314572800 [ 91.424286][ T8259] hierarchical_memsw_limit 9223372036854771712 [ 91.424289][ T8259] total_cache 307101696 [ 91.424292][ T8259] total_rss 425984 [ 91.424296][ T8259] total_rss_huge 0 [ 91.424299][ T8259] total_shmem 307007488 [ 91.424302][ T8259] total_mapped_file 101171200 [ 91.424305][ T8259] total_dirty 16384 [ 91.424309][ T8259] total_writeback 0 [ 91.424312][ T8259] total_workingset_refault_anon 36 [ 91.424315][ T8259] total_workingset_refault_file 0 [ 91.424319][ T8259] total_swap 127991808 [ 91.424322][ T8259] total_swapcached 128147456 [ 91.424325][ T8259] total_pgpgin 185706 [ 91.424329][ T8259] total_pgpgout 110626 [ 91.424332][ T8259] total_pgfault 114276 [ 91.424335][ T8259] total_pgmajfault 76 [ 91.424338][ T8259] total_inactive_anon 268189696 [ 91.424342][ T8259] total_active_anon 38887424 [ 91.424345][ T8259] total_inactive_file 73728 [ 91.424348][ T8259] total_active_file 16384 [ 91.424352][ T8259] total_unevictable 0 [ 91.424355][ T8259] anon_cost 1216 [ 91.424358][ T8259] file_cost 0 [ 91.424362][ T8259] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8259,uid=0 [ 91.424554][ T8259] Memory cgroup out of memory: Killed process 8259 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:30348kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 91.476147][ T8255] syz.0.645 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 91.476168][ T8255] CPU: 1 UID: 0 PID: 8255 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT [ 91.476180][ T8255] Tainted: [L]=SOFTLOCKUP [ 91.476183][ T8255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.476188][ T8255] Call trace: [ 91.476195][ T8255] show_stack+0x2c/0x3c (C) [ 91.476215][ T8255] __dump_stack+0x30/0x40 [ 91.476227][ T8255] dump_stack_lvl+0xd8/0x12c [ 91.476238][ T8255] dump_stack+0x1c/0x28 [ 91.476248][ T8255] dump_header+0xbc/0x3f0 [ 91.476258][ T8255] oom_kill_process+0x248/0x8f0 [ 91.476267][ T8255] out_of_memory+0xd24/0x1064 [ 91.476274][ T8255] mem_cgroup_out_of_memory+0xe8/0x170 [ 91.476283][ T8255] try_charge_memcg+0x9bc/0xd38 [ 91.476293][ T8255] charge_memcg+0x19c/0x2a0 [ 91.476303][ T8255] __mem_cgroup_charge+0x38/0x98 [ 91.476313][ T8255] shmem_alloc_and_add_folio+0x61c/0xed8 [ 91.476323][ T8255] shmem_get_folio_gfp+0x4a8/0x1464 [ 91.476332][ T8255] shmem_write_begin+0x160/0x448 [ 91.476342][ T8255] generic_perform_write+0x23c/0x7a4 [ 91.476352][ T8255] shmem_file_write_iter+0x10c/0x134 [ 91.476362][ T8255] __kernel_write_iter+0x334/0x740 [ 91.476372][ T8255] dump_user_range+0x36c/0x7a0 [ 91.476381][ T8255] elf_core_dump+0x2c74/0x31e8 [ 91.476392][ T8255] coredump_write+0x10dc/0x17fc [ 91.476400][ T8255] vfs_coredump+0x2adc/0x3994 [ 91.476408][ T8255] get_signal+0xd88/0x1094 [ 91.476416][ T8255] arch_do_signal_or_restart+0x1c8/0x444c [ 91.476426][ T8255] exit_to_user_mode_loop+0x70/0x17c [ 91.476436][ T8255] el0_da+0x1a4/0x254 [ 91.476446][ T8255] el0t_64_sync_handler+0xd8/0x104 [ 91.476454][ T8255] el0t_64_sync+0x198/0x19c [ 91.476464][ T8255] memory: usage 307200kB, limit 307200kB, failcnt 23281 [ 91.476469][ T8255] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 91.476475][ T8255] kmem: usage 6672kB, limit 9007199254740988kB, failcnt 0 [ 91.476480][ T8255] Memory cgroup stats for /syz0: [ 91.476544][ T8255] cache 307204096 [ 91.476549][ T8255] rss 425984 [ 91.476552][ T8255] rss_huge 0 [ 91.476556][ T8255] shmem 307122176 [ 91.476560][ T8255] mapped_file 101228544 [ 91.476563][ T8255] dirty 0 [ 91.476566][ T8255] writeback 0 [ 91.476569][ T8255] workingset_refault_anon 36 [ 91.476573][ T8255] workingset_refault_file 0 [ 91.476576][ T8255] swap 127991808 [ 91.476579][ T8255] swapcached 128147456 [ 91.476582][ T8255] pgpgin 185734 [ 91.476585][ T8255] pgpgout 110629 [ 91.476589][ T8255] pgfault 114290 [ 91.476592][ T8255] pgmajfault 76 [ 91.476595][ T8255] inactive_anon 268050432 [ 91.476598][ T8255] active_anon 39010304 [ 91.476602][ T8255] inactive_file 81920 [ 91.476605][ T8255] active_file 0 [ 91.476608][ T8255] unevictable 0 [ 91.476611][ T8255] hierarchical_memory_limit 314572800 [ 91.476615][ T8255] hierarchical_memsw_limit 9223372036854771712 [ 91.476618][ T8255] total_cache 307204096 [ 91.476622][ T8255] total_rss 425984 [ 91.476625][ T8255] total_rss_huge 0 [ 91.476628][ T8255] total_shmem 307122176 [ 91.476631][ T8255] total_mapped_file 101228544 [ 91.476635][ T8255] total_dirty 0 [ 91.476638][ T8255] total_writeback 0 [ 91.476641][ T8255] total_workingset_refault_anon 36 [ 91.476644][ T8255] total_workingset_refault_file 0 [ 91.476648][ T8255] total_swap 127991808 [ 91.476651][ T8255] total_swapcached 128147456 [ 91.476655][ T8255] total_pgpgin 185734 [ 91.476658][ T8255] total_pgpgout 110629 [ 91.476661][ T8255] total_pgfault 114290 [ 91.476664][ T8255] total_pgmajfault 76 [ 91.476667][ T8255] total_inactive_anon 268050432 [ 91.476671][ T8255] total_active_anon 39010304 [ 91.476674][ T8255] total_inactive_file 81920 [ 91.476678][ T8255] total_active_file 0 [ 91.476681][ T8255] total_unevictable 0 [ 91.476684][ T8255] anon_cost 16260 [ 91.476687][ T8255] file_cost 443 [ 91.476691][ T8255] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8266,uid=0 [ 91.476884][ T8255] Memory cgroup out of memory: Killed process 8266 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:29888kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 91.687361][ T8261] syz.0.645 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 91.690123][ T8261] CPU: 0 UID: 0 PID: 8261 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT [ 91.690149][ T8261] Tainted: [L]=SOFTLOCKUP [ 91.690154][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.690162][ T8261] Call trace: [ 91.690166][ T8261] show_stack+0x2c/0x3c (C) [ 91.690189][ T8261] __dump_stack+0x30/0x40 [ 91.690202][ T8261] dump_stack_lvl+0xd8/0x12c [ 91.690212][ T8261] dump_stack+0x1c/0x28 [ 91.690222][ T8261] dump_header+0xbc/0x3f0 [ 91.690233][ T8261] oom_kill_process+0x248/0x8f0 [ 91.690241][ T8261] out_of_memory+0xd24/0x1064 [ 91.690248][ T8261] mem_cgroup_out_of_memory+0xe8/0x170 [ 91.690257][ T8261] try_charge_memcg+0x9bc/0xd38 [ 91.690268][ T8261] charge_memcg+0x19c/0x2a0 [ 91.690277][ T8261] __mem_cgroup_charge+0x38/0x98 [ 91.690287][ T8261] shmem_alloc_and_add_folio+0x61c/0xed8 [ 91.690297][ T8261] shmem_get_folio_gfp+0x4a8/0x1464 [ 91.690307][ T8261] shmem_write_begin+0x160/0x448 [ 91.690317][ T8261] generic_perform_write+0x23c/0x7a4 [ 91.690327][ T8261] shmem_file_write_iter+0x10c/0x134 [ 91.690337][ T8261] __kernel_write_iter+0x334/0x740 [ 91.690347][ T8261] dump_user_range+0x36c/0x7a0 [ 91.690357][ T8261] elf_core_dump+0x2c74/0x31e8 [ 91.690367][ T8261] coredump_write+0x10dc/0x17fc [ 91.690376][ T8261] vfs_coredump+0x2adc/0x3994 [ 91.690384][ T8261] get_signal+0xd88/0x1094 [ 91.690392][ T8261] arch_do_signal_or_restart+0x1c8/0x444c [ 91.690402][ T8261] exit_to_user_mode_loop+0x70/0x17c [ 91.690412][ T8261] el0_da+0x1a4/0x254 [ 91.690422][ T8261] el0t_64_sync_handler+0xd8/0x104 [ 91.690431][ T8261] el0t_64_sync+0x198/0x19c [ 91.690469][ T8261] memory: usage 307200kB, limit 307200kB, failcnt 24773 [ 91.690483][ T8261] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 91.690495][ T8261] kmem: usage 6660kB, limit 9007199254740988kB, failcnt 0 [ 91.690505][ T8261] Memory cgroup stats for /syz0: [ 91.690584][ T8261] cache 307326976 [ 91.690593][ T8261] rss 425984 [ 91.690601][ T8261] rss_huge 0 [ 91.690608][ T8261] shmem 307298304 [ 91.690615][ T8261] mapped_file 99237888 [ 91.690622][ T8261] dirty 0 [ 91.690629][ T8261] writeback 0 [ 91.690636][ T8261] workingset_refault_anon 36 [ 91.690642][ T8261] workingset_refault_file 86 [ 91.690649][ T8261] swap 127991808 [ 91.690656][ T8261] swapcached 129437696 [ 91.690663][ T8261] pgpgin 186811 [ 91.690669][ T8261] pgpgout 111676 [ 91.690676][ T8261] pgfault 114406 [ 91.690683][ T8261] pgmajfault 81 [ 91.690690][ T8261] inactive_anon 259387392 [ 91.690696][ T8261] active_anon 48111616 [ 91.690703][ T8261] inactive_file 28672 [ 91.690710][ T8261] active_file 0 [ 91.690716][ T8261] unevictable 0 [ 91.690723][ T8261] hierarchical_memory_limit 314572800 [ 91.690730][ T8261] hierarchical_memsw_limit 9223372036854771712 [ 91.690737][ T8261] total_cache 307326976 [ 91.690744][ T8261] total_rss 425984 [ 91.690750][ T8261] total_rss_huge 0 [ 91.690757][ T8261] total_shmem 307298304 [ 91.690764][ T8261] total_mapped_file 99237888 [ 91.690770][ T8261] total_dirty 0 [ 91.690777][ T8261] total_writeback 0 [ 91.690784][ T8261] total_workingset_refault_anon 36 [ 91.690791][ T8261] total_workingset_refault_file 86 [ 91.690798][ T8261] total_swap 127991808 [ 91.690804][ T8261] total_swapcached 129437696 [ 91.690811][ T8261] total_pgpgin 186811 [ 91.690818][ T8261] total_pgpgout 111676 [ 91.690825][ T8261] total_pgfault 114406 [ 91.690831][ T8261] total_pgmajfault 81 [ 91.690838][ T8261] total_inactive_anon 259387392 [ 91.690845][ T8261] total_active_anon 48111616 [ 91.690852][ T8261] total_inactive_file 28672 [ 91.690858][ T8261] total_active_file 0 [ 91.690865][ T8261] total_unevictable 0 [ 91.690872][ T8261] anon_cost 8946 [ 91.690878][ T8261] file_cost 2033 [ 91.690885][ T8261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8257,uid=0 [ 91.690971][ T8261] Memory cgroup out of memory: Killed process 8257 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:29632kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 91.767354][ T8245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.877103][ T8256] syz.0.645 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 91.877153][ T8256] CPU: 1 UID: 0 PID: 8256 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT [ 91.877167][ T8256] Tainted: [L]=SOFTLOCKUP [ 91.877171][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.877178][ T8256] Call trace: [ 91.877182][ T8256] show_stack+0x2c/0x3c (C) [ 91.877205][ T8256] __dump_stack+0x30/0x40 [ 91.877219][ T8256] dump_stack_lvl+0xd8/0x12c [ 91.877231][ T8256] dump_stack+0x1c/0x28 [ 91.877243][ T8256] dump_header+0xbc/0x3f0 [ 91.877254][ T8256] oom_kill_process+0x248/0x8f0 [ 91.877262][ T8256] out_of_memory+0xd24/0x1064 [ 91.877269][ T8256] mem_cgroup_out_of_memory+0xe8/0x170 [ 91.877278][ T8256] try_charge_memcg+0x9bc/0xd38 [ 91.877289][ T8256] charge_memcg+0x19c/0x2a0 [ 91.877298][ T8256] __mem_cgroup_charge+0x38/0x98 [ 91.877308][ T8256] shmem_alloc_and_add_folio+0x61c/0xed8 [ 91.877318][ T8256] shmem_get_folio_gfp+0x4a8/0x1464 [ 91.877328][ T8256] shmem_fault+0x15c/0x32c [ 91.877337][ T8256] __do_fault+0xf4/0x4a8 [ 91.877348][ T8256] do_pte_missing+0x1764/0x2a28 [ 91.877358][ T8256] handle_mm_fault+0x1534/0x2bec [ 91.877368][ T8256] __get_user_pages+0x82c/0x13b0 [ 91.877376][ T8256] get_dump_page+0x16c/0x374 [ 91.877383][ T8256] dump_user_range+0x158/0x7a0 [ 91.877393][ T8256] elf_core_dump+0x2c74/0x31e8 [ 91.877403][ T8256] coredump_write+0x10dc/0x17fc [ 91.877412][ T8256] vfs_coredump+0x2adc/0x3994 [ 91.877420][ T8256] get_signal+0xd88/0x1094 [ 91.877428][ T8256] arch_do_signal_or_restart+0x1c8/0x444c [ 91.877438][ T8256] exit_to_user_mode_loop+0x70/0x17c [ 91.877448][ T8256] el0_da+0x1a4/0x254 [ 91.877458][ T8256] el0t_64_sync_handler+0xd8/0x104 [ 91.877466][ T8256] el0t_64_sync+0x198/0x19c [ 91.877476][ T8256] memory: usage 307200kB, limit 307200kB, failcnt 26487 [ 91.877482][ T8256] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 91.877488][ T8256] kmem: usage 6244kB, limit 9007199254740988kB, failcnt 0 [ 91.877493][ T8256] Memory cgroup stats for /syz0: [ 91.877630][ T8256] cache 307752960 [ 91.877634][ T8256] rss 425984 [ 91.877638][ T8256] rss_huge 0 [ 91.877641][ T8256] shmem 307752960 [ 91.877645][ T8256] mapped_file 96153600 [ 91.877649][ T8256] dirty 0 [ 91.877652][ T8256] writeback 0 [ 91.877655][ T8256] workingset_refault_anon 36 [ 91.877658][ T8256] workingset_refault_file 135 [ 91.877662][ T8256] swap 127995904 [ 91.877665][ T8256] swapcached 133853184 [ 91.877668][ T8256] pgpgin 189667 [ 91.877671][ T8256] pgpgout 114428 [ 91.877674][ T8256] pgfault 114595 [ 91.877678][ T8256] pgmajfault 86 [ 91.877681][ T8256] inactive_anon 259522560 [ 91.877684][ T8256] active_anon 48652288 [ 91.877687][ T8256] inactive_file 0 [ 91.877691][ T8256] active_file 0 [ 91.877694][ T8256] unevictable 0 [ 91.877697][ T8256] hierarchical_memory_limit 314572800 [ 91.877700][ T8256] hierarchical_memsw_limit 9223372036854771712 [ 91.877704][ T8256] total_cache 307752960 [ 91.877707][ T8256] total_rss 425984 [ 91.877710][ T8256] total_rss_huge 0 [ 91.877714][ T8256] total_shmem 307752960 [ 91.877717][ T8256] total_mapped_file 96153600 [ 91.877720][ T8256] total_dirty 0 [ 91.877723][ T8256] total_writeback 0 [ 91.877726][ T8256] total_workingset_refault_anon 36 [ 91.877730][ T8256] total_workingset_refault_file 135 [ 91.877733][ T8256] total_swap 127995904 [ 91.877737][ T8256] total_swapcached 133853184 [ 91.877740][ T8256] total_pgpgin 189667 [ 91.877743][ T8256] total_pgpgout 114428 [ 91.877747][ T8256] total_pgfault 114595 [ 91.877750][ T8256] total_pgmajfault 86 [ 91.877753][ T8256] total_inactive_anon 259522560 [ 91.877756][ T8256] total_active_anon 48652288 [ 91.877760][ T8256] total_inactive_file 0 [ 91.877763][ T8256] total_active_file 0 [ 91.877766][ T8256] total_unevictable 0 [ 91.877770][ T8256] anon_cost 5931 [ 91.877773][ T8256] file_cost 5663 [ 91.877777][ T8256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8258,uid=0 [ 91.877951][ T8256] Memory cgroup out of memory: Killed process 8258 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:29376kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 91.889121][ T8256] syz.0.645 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 91.889139][ T8256] CPU: 1 UID: 0 PID: 8256 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT [ 91.889150][ T8256] Tainted: [L]=SOFTLOCKUP [ 91.889153][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.889158][ T8256] Call trace: [ 91.889161][ T8256] show_stack+0x2c/0x3c (C) [ 91.889177][ T8256] __dump_stack+0x30/0x40 [ 91.889188][ T8256] dump_stack_lvl+0xd8/0x12c [ 91.889203][ T8256] dump_stack+0x1c/0x28 [ 91.889213][ T8256] dump_header+0xbc/0x3f0 [ 91.889224][ T8256] oom_kill_process+0x248/0x8f0 [ 91.889233][ T8256] out_of_memory+0xd24/0x1064 [ 91.889240][ T8256] mem_cgroup_out_of_memory+0xe8/0x170 [ 91.889248][ T8256] try_charge_memcg+0x9bc/0xd38 [ 91.889259][ T8256] charge_memcg+0x19c/0x2a0 [ 91.889269][ T8256] __mem_cgroup_charge+0x38/0x98 [ 91.889279][ T8256] shmem_alloc_and_add_folio+0x61c/0xed8 [ 91.889289][ T8256] shmem_get_folio_gfp+0x4a8/0x1464 [ 91.889298][ T8256] shmem_fault+0x15c/0x32c [ 91.889308][ T8256] __do_fault+0xf4/0x4a8 [ 91.889319][ T8256] do_pte_missing+0x1764/0x2a28 [ 91.889329][ T8256] handle_mm_fault+0x1534/0x2bec [ 91.889339][ T8256] __get_user_pages+0x82c/0x13b0 [ 91.889346][ T8256] get_dump_page+0x16c/0x374 [ 91.889354][ T8256] dump_user_range+0x158/0x7a0 [ 91.889363][ T8256] elf_core_dump+0x2c74/0x31e8 [ 91.889374][ T8256] coredump_write+0x10dc/0x17fc [ 91.889382][ T8256] vfs_coredump+0x2adc/0x3994 [ 91.889390][ T8256] get_signal+0xd88/0x1094 [ 91.889399][ T8256] arch_do_signal_or_restart+0x1c8/0x444c [ 91.889409][ T8256] exit_to_user_mode_loop+0x70/0x17c [ 91.889419][ T8256] el0_da+0x1a4/0x254 [ 91.889428][ T8256] el0t_64_sync_handler+0xd8/0x104 [ 91.889437][ T8256] el0t_64_sync+0x198/0x19c [ 91.889446][ T8256] memory: usage 307200kB, limit 307200kB, failcnt 26504 [ 91.889452][ T8256] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 91.889458][ T8256] kmem: usage 6244kB, limit 9007199254740988kB, failcnt 0 [ 91.889463][ T8256] Memory cgroup stats for /syz0: [ 91.889519][ T8256] cache 307752960 [ 91.889523][ T8256] rss 425984 [ 91.889526][ T8256] rss_huge 0 [ 91.889530][ T8256] shmem 307752960 [ 91.889533][ T8256] mapped_file 96153600 [ 91.889536][ T8256] dirty 0 [ 91.889539][ T8256] writeback 0 [ 91.889542][ T8256] workingset_refault_anon 36 [ 91.889546][ T8256] workingset_refault_file 135 [ 91.889549][ T8256] swap 127995904 [ 91.889552][ T8256] swapcached 133853184 [ 91.889556][ T8256] pgpgin 189667 [ 91.889559][ T8256] pgpgout 114428 [ 91.889562][ T8256] pgfault 114595 [ 91.889565][ T8256] pgmajfault 86 [ 91.889568][ T8256] inactive_anon 259522560 [ 91.889572][ T8256] active_anon 48652288 [ 91.889575][ T8256] inactive_file 0 [ 91.889578][ T8256] active_file 0 [ 91.889581][ T8256] unevictable 0 [ 91.889585][ T8256] hierarchical_memory_limit 314572800 [ 91.889588][ T8256] hierarchical_memsw_limit 9223372036854771712 [ 91.889592][ T8256] total_cache 307752960 [ 91.889595][ T8256] total_rss 425984 [ 91.889598][ T8256] total_rss_huge 0 [ 91.889602][ T8256] total_shmem 307752960 [ 91.889605][ T8256] total_mapped_file 96153600 [ 91.889608][ T8256] total_dirty 0 [ 91.889611][ T8256] total_writeback 0 [ 91.889615][ T8256] total_workingset_refault_anon 36 [ 91.889618][ T8256] total_workingset_refault_file 135 [ 91.889622][ T8256] total_swap 127995904 [ 91.889625][ T8256] total_swapcached 133853184 [ 91.889629][ T8256] total_pgpgin 189667 [ 91.889632][ T8256] total_pgpgout 114428 [ 91.889635][ T8256] total_pgfault 114595 [ 91.889639][ T8256] total_pgmajfault 86 [ 91.889642][ T8256] total_inactive_anon 259522560 [ 91.889645][ T8256] total_active_anon 48652288 [ 91.889649][ T8256] total_inactive_file 0 [ 91.889652][ T8256] total_active_file 0 [ 91.889655][ T8256] total_unevictable 0 [ 91.889659][ T8256] anon_cost 10202 [ 91.889662][ T8256] file_cost 1865 [ 91.889666][ T8256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8261,uid=0 [ 91.889719][ T8256] Memory cgroup out of memory: Killed process 8261 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:29312kB, UID:0 pgtables:172kB oom_score_adj:1000 [ 91.903376][ T4702] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 91.903397][ T4702] CPU: 1 UID: 0 PID: 4702 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT [ 91.903408][ T4702] Tainted: [L]=SOFTLOCKUP [ 91.903411][ T4702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.903417][ T4702] Call trace: [ 91.903420][ T4702] show_stack+0x2c/0x3c (C) [ 91.903437][ T4702] __dump_stack+0x30/0x40 [ 91.903448][ T4702] dump_stack_lvl+0xd8/0x12c [ 91.903457][ T4702] dump_stack+0x1c/0x28 [ 91.903467][ T4702] dump_header+0xbc/0x3f0 [ 91.903478][ T4702] oom_kill_process+0x248/0x8f0 [ 91.903486][ T4702] out_of_memory+0xd24/0x1064 [ 91.903493][ T4702] mem_cgroup_out_of_memory+0xe8/0x170 [ 91.903502][ T4702] try_charge_memcg+0x9bc/0xd38 [ 91.903512][ T4702] charge_memcg+0x19c/0x2a0 [ 91.903522][ T4702] __mem_cgroup_charge+0x38/0x98 [ 91.903532][ T4702] filemap_add_folio+0x258/0x7fc [ 91.903541][ T4702] __filemap_get_folio_mpol+0x534/0x1054 [ 91.903551][ T4702] filemap_fault+0xbb4/0x1498 [ 91.903560][ T4702] __do_fault+0xf4/0x4a8 [ 91.903570][ T4702] do_pte_missing+0x1764/0x2a28 [ 91.903581][ T4702] handle_mm_fault+0x1534/0x2bec [ 91.903591][ T4702] do_page_fault+0x77c/0xb88 [ 91.903601][ T4702] do_translation_fault+0xc4/0x114 [ 91.903610][ T4702] do_mem_abort+0x70/0x194 [ 91.903619][ T4702] el0_da+0x78/0x254 [ 91.903629][ T4702] el0t_64_sync_handler+0xd8/0x104 [ 91.903637][ T4702] el0t_64_sync+0x198/0x19c [ 91.903647][ T4702] memory: usage 307200kB, limit 307200kB, failcnt 26542 [ 91.903653][ T4702] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 91.903659][ T4702] kmem: usage 6244kB, limit 9007199254740988kB, failcnt 0 [ 91.903665][ T4702] Memory cgroup stats for /syz0: [ 91.903729][ T4702] cache 307752960 [ 91.903733][ T4702] rss 425984 [ 91.903736][ T4702] rss_huge 0 [ 91.903739][ T4702] shmem 307752960 [ 91.903742][ T4702] mapped_file 96153600 [ 91.903745][ T4702] dirty 0 [ 91.903749][ T4702] writeback 0 [ 91.903752][ T4702] workingset_refault_anon 36 [ 91.903755][ T4702] workingset_refault_file 135 [ 91.903759][ T4702] swap 127995904 [ 91.903762][ T4702] swapcached 133853184 [ 91.903765][ T4702] pgpgin 189667 [ 91.903768][ T4702] pgpgout 114428 [ 91.903771][ T4702] pgfault 114595 [ 91.903775][ T4702] pgmajfault 86 [ 91.903778][ T4702] inactive_anon 259522560 [ 91.903781][ T4702] active_anon 48652288 [ 91.903785][ T4702] inactive_file 0 [ 91.903788][ T4702] active_file 0 [ 91.903791][ T4702] unevictable 0 [ 91.903794][ T4702] hierarchical_memory_limit 314572800 [ 91.903798][ T4702] hierarchical_memsw_limit 9223372036854771712 [ 91.903802][ T4702] total_cache 307752960 [ 91.903805][ T4702] total_rss 425984 [ 91.903808][ T4702] total_rss_huge 0 [ 91.903811][ T4702] total_shmem 307752960 [ 91.903815][ T4702] total_mapped_file 96153600 [ 91.903818][ T4702] total_dirty 0 [ 91.903821][ T4702] total_writeback 0 [ 91.903825][ T4702] total_workingset_refault_anon 36 [ 91.903828][ T4702] total_workingset_refault_file 135 [ 91.903832][ T4702] total_swap 127995904 [ 91.903835][ T4702] total_swapcached 133853184 [ 91.903838][ T4702] total_pgpgin 189667 [ 91.903842][ T4702] total_pgpgout 114428 [ 91.903845][ T4702] total_pgfault 114595 [ 91.903848][ T4702] total_pgmajfault 86 [ 91.903851][ T4702] total_inactive_anon 259522560 [ 91.903855][ T4702] total_active_anon 48652288 [ 91.903859][ T4702] total_inactive_file 0 [ 91.903862][ T4702] total_active_file 0 [ 91.903865][ T4702] total_unevictable 0 [ 91.903869][ T4702] anon_cost 10202 [ 91.903872][ T4702] file_cost 1865 [ 91.903875][ T4702] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8271,uid=0 [ 91.904002][ T4702] Memory cgroup out of memory: Killed process 8271 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:28032kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 92.008166][ T8337] loop9: detected capacity change from 0 to 256 [ 92.047362][ T30] audit: type=1400 audit(93.026:519): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=8336 comm="syz.9.660" name="/" dev="loop9" ino=1 [ 92.324430][ T6695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.357897][ T5144] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.499276][ T8356] sctp: [Deprecated]: syz.0.662 (pid 8356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.499276][ T8356] Use struct sctp_sack_info instead [ 92.549098][ T8366] netlink: 'syz.0.665': attribute type 3 has an invalid length. [ 92.848528][ T8371] FAULT_INJECTION: forcing a failure. [ 92.848528][ T8371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.848579][ T8371] CPU: 1 UID: 0 PID: 8371 Comm: syz.9.666 Tainted: G L syzkaller #0 PREEMPT [ 92.848597][ T8371] Tainted: [L]=SOFTLOCKUP [ 92.848601][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.848607][ T8371] Call trace: [ 92.848610][ T8371] show_stack+0x2c/0x3c (C) [ 92.848632][ T8371] __dump_stack+0x30/0x40 [ 92.848643][ T8371] dump_stack_lvl+0xd8/0x12c [ 92.848654][ T8371] dump_stack+0x1c/0x28 [ 92.848664][ T8371] should_fail_ex+0x41c/0x590 [ 92.848676][ T8371] should_fail+0x14/0x24 [ 92.848685][ T8371] should_fail_usercopy+0x20/0x30 [ 92.848695][ T8371] copy_to_sockptr+0x7c/0x1a8 [ 92.848705][ T8371] do_tcp_getsockopt+0x1078/0x1c78 [ 92.848712][ T8371] tcp_getsockopt+0x6c/0xe8 [ 92.848720][ T8371] sock_common_getsockopt+0xa8/0xc4 [ 92.848729][ T8371] do_sock_getsockopt+0x338/0x720 [ 92.848737][ T8371] __sys_getsockopt+0xfc/0x168 [ 92.848745][ T8371] __arm64_sys_getsockopt+0xc8/0xe4 [ 92.848754][ T8371] invoke_syscall+0x98/0x244 [ 92.848764][ T8371] el0_svc_common+0xec/0x23c [ 92.848774][ T8371] do_el0_svc+0x4c/0x5c [ 92.848783][ T8371] el0_svc+0x64/0x260 [ 92.848793][ T8371] el0t_64_sync_handler+0x44/0x104 [ 92.848801][ T8371] el0t_64_sync+0x198/0x19c [ 93.314560][ T8394] loop7: detected capacity change from 0 to 2048 [ 93.344497][ T8394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 93.355291][ T8394] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm syz.7.673: bg 0: block 240: padding at end of block bitmap is not set [ 93.377317][ T8394] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 93.380687][ T8394] EXT4-fs (loop7): This should not happen!! Data will be lost [ 93.380687][ T8394] [ 93.382931][ T8394] EXT4-fs (loop7): Total free blocks count 0 [ 93.384515][ T8394] EXT4-fs (loop7): Free/Dirty block details [ 93.384619][ T8394] EXT4-fs (loop7): free_blocks=0 [ 93.384664][ T8394] EXT4-fs (loop7): dirty_blocks=16 [ 93.384679][ T8394] EXT4-fs (loop7): Block reservation details [ 93.384693][ T8394] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 93.499646][ T8405] netlink: 'syz.6.679': attribute type 3 has an invalid length. [ 93.502984][ T5355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 93.616657][ T8411] loop7: detected capacity change from 0 to 4096 [ 93.648445][ T8411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.766494][ T8409] loop6: detected capacity change from 0 to 256 [ 93.767934][ T42] IPVS: starting estimator thread 0... [ 93.897575][ T8421] IPVS: using max 58 ests per chain, 139200 per kthread [ 94.246904][ T8425] __nla_validate_parse: 59 callbacks suppressed [ 94.248600][ T8425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.683'. [ 94.270632][ T8428] loop9: detected capacity change from 0 to 2048 [ 94.282826][ T8428] netlink: 16 bytes leftover after parsing attributes in process `syz.9.684'. [ 94.284367][ T8425] loop6: detected capacity change from 0 to 128 [ 94.304961][ T8425] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.582416][ T8435] netlink: 'syz.9.687': attribute type 13 has an invalid length. [ 94.631684][ T5355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.799803][ T5144] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.835770][ T8442] netlink: 16 bytes leftover after parsing attributes in process `syz.7.686'. [ 94.839626][ T8446] input: syz1 as /devices/virtual/input/input11 [ 94.848527][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.689'. [ 95.351569][ T8461] overlayfs: overlapping lowerdir path [ 95.352707][ T30] audit: type=1326 audit(96.336:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.8.693" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4579368 code=0x7ffc0000 [ 95.352765][ T30] audit: type=1326 audit(96.336:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.8.693" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4579368 code=0x7ffc0000 [ 95.352790][ T30] audit: type=1326 audit(96.336:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.8.693" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=73 compat=0 ip=0xffffb4579368 code=0x7ffc0000 [ 95.352815][ T30] audit: type=1326 audit(96.336:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.8.693" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4579368 code=0x7ffc0000 [ 95.352835][ T30] audit: type=1326 audit(96.336:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.8.693" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4579368 code=0x7ffc0000 [ 95.352856][ T30] audit: type=1326 audit(96.336:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.8.693" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4579368 code=0x7ffc0000 [ 95.352883][ T30] audit: type=1326 audit(96.336:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.8.693" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4579368 code=0x7ffc0000 [ 95.352902][ T30] audit: type=1326 audit(96.336:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.8.693" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4579368 code=0x7ffc0000 [ 95.352921][ T30] audit: type=1326 audit(96.336:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8460 comm="syz.8.693" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb4579368 code=0x7ffc0000 [ 95.502951][ T8466] syz.0.695 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 95.502995][ T8466] CPU: 0 UID: 0 PID: 8466 Comm: syz.0.695 Tainted: G L syzkaller #0 PREEMPT [ 95.503015][ T8466] Tainted: [L]=SOFTLOCKUP [ 95.503018][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.503027][ T8466] Call trace: [ 95.503030][ T8466] show_stack+0x2c/0x3c (C) [ 95.503052][ T8466] __dump_stack+0x30/0x40 [ 95.503067][ T8466] dump_stack_lvl+0xd8/0x12c [ 95.503077][ T8466] dump_stack+0x1c/0x28 [ 95.503087][ T8466] dump_header+0xbc/0x3f0 [ 95.503099][ T8466] oom_kill_process+0x248/0x8f0 [ 95.503108][ T8466] out_of_memory+0xd24/0x1064 [ 95.503115][ T8466] mem_cgroup_out_of_memory+0xe8/0x170 [ 95.503125][ T8466] try_charge_memcg+0x9bc/0xd38 [ 95.503137][ T8466] charge_memcg+0x19c/0x2a0 [ 95.503147][ T8466] __mem_cgroup_charge+0x38/0x98 [ 95.503157][ T8466] shmem_alloc_and_add_folio+0x61c/0xed8 [ 95.503170][ T8466] shmem_get_folio_gfp+0x4a8/0x1464 [ 95.503183][ T8466] shmem_fault+0x15c/0x32c [ 95.503193][ T8466] __do_fault+0xf4/0x4a8 [ 95.503206][ T8466] do_pte_missing+0x1764/0x2a28 [ 95.503216][ T8466] handle_mm_fault+0x1534/0x2bec [ 95.503226][ T8466] __get_user_pages+0x82c/0x13b0 [ 95.503234][ T8466] populate_vma_page_range+0x260/0x358 [ 95.503243][ T8466] __mm_populate+0x204/0x328 [ 95.503251][ T8466] vm_mmap_pgoff+0x358/0x46c [ 95.503258][ T8466] ksys_mmap_pgoff+0xd0/0x5b4 [ 95.503266][ T8466] __arm64_sys_mmap+0x110/0x12c [ 95.503276][ T8466] invoke_syscall+0x98/0x244 [ 95.503287][ T8466] el0_svc_common+0xec/0x23c [ 95.503297][ T8466] do_el0_svc+0x4c/0x5c [ 95.503307][ T8466] el0_svc+0x64/0x260 [ 95.503317][ T8466] el0t_64_sync_handler+0x44/0x104 [ 95.503326][ T8466] el0t_64_sync+0x198/0x19c [ 95.503445][ T8466] memory: usage 307200kB, limit 307200kB, failcnt 52158 [ 95.503452][ T8466] memory+swap: usage 432116kB, limit 9007199254740988kB, failcnt 0 [ 95.503458][ T8466] kmem: usage 4788kB, limit 9007199254740988kB, failcnt 0 [ 95.503463][ T8466] Memory cgroup stats for /syz0: [ 95.503540][ T8466] cache 309329920 [ 95.503544][ T8466] rss 241664 [ 95.503547][ T8466] rss_huge 0 [ 95.503551][ T8466] shmem 309329920 [ 95.503554][ T8466] mapped_file 132296704 [ 95.503558][ T8466] dirty 0 [ 95.503561][ T8466] writeback 0 [ 95.503564][ T8466] workingset_refault_anon 72 [ 95.503567][ T8466] workingset_refault_file 323 [ 95.503571][ T8466] swap 127913984 [ 95.503574][ T8466] swapcached 214339584 [ 95.503578][ T8466] pgpgin 264455 [ 95.503581][ T8466] pgpgout 188852 [ 95.503584][ T8466] pgfault 144434 [ 95.503587][ T8466] pgmajfault 112 [ 95.503591][ T8466] inactive_anon 281403392 [ 95.503594][ T8466] active_anon 28053504 [ 95.503597][ T8466] inactive_file 0 [ 95.503601][ T8466] active_file 0 [ 95.503604][ T8466] unevictable 0 [ 95.503607][ T8466] hierarchical_memory_limit 314572800 [ 95.503611][ T8466] hierarchical_memsw_limit 9223372036854771712 [ 95.503615][ T8466] total_cache 309329920 [ 95.503618][ T8466] total_rss 241664 [ 95.503622][ T8466] total_rss_huge 0 [ 95.503625][ T8466] total_shmem 309329920 [ 95.503628][ T8466] total_mapped_file 132296704 [ 95.503632][ T8466] total_dirty 0 [ 95.503635][ T8466] total_writeback 0 [ 95.503638][ T8466] total_workingset_refault_anon 72 [ 95.503642][ T8466] total_workingset_refault_file 323 [ 95.503646][ T8466] total_swap 127913984 [ 95.503649][ T8466] total_swapcached 214339584 [ 95.503653][ T8466] total_pgpgin 264455 [ 95.503656][ T8466] total_pgpgout 188852 [ 95.503659][ T8466] total_pgfault 144434 [ 95.503663][ T8466] total_pgmajfault 112 [ 95.503666][ T8466] total_inactive_anon 281403392 [ 95.503670][ T8466] total_active_anon 28053504 [ 95.503673][ T8466] total_inactive_file 0 [ 95.503676][ T8466] total_active_file 0 [ 95.503680][ T8466] total_unevictable 0 [ 95.503683][ T8466] anon_cost 12873 [ 95.503686][ T8466] file_cost 121 [ 95.503690][ T8466] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8255,uid=0 [ 95.503810][ T8466] Memory cgroup out of memory: Killed process 8255 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:27860kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 96.005436][ T8466] syz.0.695 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.005482][ T8466] CPU: 0 UID: 0 PID: 8466 Comm: syz.0.695 Tainted: G L syzkaller #0 PREEMPT [ 96.005495][ T8466] Tainted: [L]=SOFTLOCKUP [ 96.005498][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.005503][ T8466] Call trace: [ 96.005506][ T8466] show_stack+0x2c/0x3c (C) [ 96.005523][ T8466] __dump_stack+0x30/0x40 [ 96.005534][ T8466] dump_stack_lvl+0xd8/0x12c [ 96.005544][ T8466] dump_stack+0x1c/0x28 [ 96.005553][ T8466] dump_header+0xbc/0x3f0 [ 96.005564][ T8466] oom_kill_process+0x248/0x8f0 [ 96.005572][ T8466] out_of_memory+0xd24/0x1064 [ 96.005579][ T8466] mem_cgroup_out_of_memory+0xe8/0x170 [ 96.005587][ T8466] try_charge_memcg+0x9bc/0xd38 [ 96.005597][ T8466] charge_memcg+0x19c/0x2a0 [ 96.005607][ T8466] __mem_cgroup_charge+0x38/0x98 [ 96.005617][ T8466] shmem_alloc_and_add_folio+0x61c/0xed8 [ 96.005628][ T8466] shmem_get_folio_gfp+0x4a8/0x1464 [ 96.005637][ T8466] shmem_fault+0x15c/0x32c [ 96.005647][ T8466] __do_fault+0xf4/0x4a8 [ 96.005658][ T8466] do_pte_missing+0x1764/0x2a28 [ 96.005669][ T8466] handle_mm_fault+0x1534/0x2bec [ 96.005679][ T8466] __get_user_pages+0x82c/0x13b0 [ 96.005687][ T8466] populate_vma_page_range+0x260/0x358 [ 96.005695][ T8466] __mm_populate+0x204/0x328 [ 96.005702][ T8466] vm_mmap_pgoff+0x358/0x46c [ 96.005710][ T8466] ksys_mmap_pgoff+0xd0/0x5b4 [ 96.005717][ T8466] __arm64_sys_mmap+0x110/0x12c [ 96.005727][ T8466] invoke_syscall+0x98/0x244 [ 96.005737][ T8466] el0_svc_common+0xec/0x23c [ 96.005747][ T8466] do_el0_svc+0x4c/0x5c [ 96.005756][ T8466] el0_svc+0x64/0x260 [ 96.005766][ T8466] el0t_64_sync_handler+0x44/0x104 [ 96.005775][ T8466] el0t_64_sync+0x198/0x19c [ 96.005795][ T8466] memory: usage 307200kB, limit 307200kB, failcnt 55754 [ 96.005801][ T8466] memory+swap: usage 432124kB, limit 9007199254740988kB, failcnt 0 [ 96.005807][ T8466] kmem: usage 4788kB, limit 9007199254740988kB, failcnt 0 [ 96.005812][ T8466] Memory cgroup stats for /syz0: [ 96.005872][ T8466] cache 309354496 [ 96.005876][ T8466] rss 241664 [ 96.005880][ T8466] rss_huge 0 [ 96.005883][ T8466] shmem 309354496 [ 96.005886][ T8466] mapped_file 132308992 [ 96.005889][ T8466] dirty 0 [ 96.005893][ T8466] writeback 0 [ 96.005896][ T8466] workingset_refault_anon 72 [ 96.005899][ T8466] workingset_refault_file 323 [ 96.005903][ T8466] swap 127922176 [ 96.005906][ T8466] swapcached 214339584 [ 96.005909][ T8466] pgpgin 264499 [ 96.005912][ T8466] pgpgout 188896 [ 96.005916][ T8466] pgfault 144475 [ 96.005919][ T8466] pgmajfault 113 [ 96.005922][ T8466] inactive_anon 280829952 [ 96.005926][ T8466] active_anon 28803072 [ 96.005929][ T8466] inactive_file 0 [ 96.005932][ T8466] active_file 0 [ 96.005936][ T8466] unevictable 0 [ 96.005939][ T8466] hierarchical_memory_limit 314572800 [ 96.005942][ T8466] hierarchical_memsw_limit 9223372036854771712 [ 96.005946][ T8466] total_cache 309354496 [ 96.005949][ T8466] total_rss 241664 [ 96.005953][ T8466] total_rss_huge 0 [ 96.005956][ T8466] total_shmem 309354496 [ 96.005959][ T8466] total_mapped_file 132308992 [ 96.005963][ T8466] total_dirty 0 [ 96.005966][ T8466] total_writeback 0 [ 96.005969][ T8466] total_workingset_refault_anon 72 [ 96.005973][ T8466] total_workingset_refault_file 323 [ 96.005976][ T8466] total_swap 127922176 [ 96.005980][ T8466] total_swapcached 214339584 [ 96.005983][ T8466] total_pgpgin 264499 [ 96.005986][ T8466] total_pgpgout 188896 [ 96.005990][ T8466] total_pgfault 144475 [ 96.005993][ T8466] total_pgmajfault 113 [ 96.005997][ T8466] total_inactive_anon 280829952 [ 96.006000][ T8466] total_active_anon 28803072 [ 96.006003][ T8466] total_inactive_file 0 [ 96.006007][ T8466] total_active_file 0 [ 96.006010][ T8466] total_unevictable 0 [ 96.006013][ T8466] anon_cost 15368 [ 96.006017][ T8466] file_cost 11 [ 96.006020][ T8466] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8263,uid=0 [ 96.006070][ T8466] Memory cgroup out of memory: Killed process 8263 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:27764kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 96.327697][ T8478] loop8: detected capacity change from 0 to 512 [ 96.357055][ T8478] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.359350][ T8478] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 96.359390][ T8478] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 96.359487][ T8478] EXT4-fs (loop8): orphan cleanup on readonly fs [ 96.363199][ T8478] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.698: bg 0: block 15: invalid block bitmap [ 96.363225][ T8478] loop8: lost filesystem error report for type 5 error -117 [ 96.364578][ T8476] netlink: 'syz.9.697': attribute type 3 has an invalid length. [ 96.364590][ T8476] netlink: 'syz.9.697': attribute type 1 has an invalid length. [ 96.371314][ T8478] EXT4-fs (loop8): Remounting filesystem read-only [ 96.373059][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 96.373071][ C0] EXT4-fs (loop8): initial error at time 97: ext4_validate_block_bitmap:436 [ 96.373087][ C0] EXT4-fs (loop8): last error at time 97: ext4_validate_block_bitmap:436 [ 96.373237][ T8478] EXT4-fs (loop8): 1 truncate cleaned up [ 96.373705][ T8478] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 96.396785][ T8260] syz.0.645 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 96.396825][ T8260] CPU: 0 UID: 0 PID: 8260 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT [ 96.396842][ T8260] Tainted: [L]=SOFTLOCKUP [ 96.396847][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.396852][ T8260] Call trace: [ 96.396855][ T8260] show_stack+0x2c/0x3c (C) [ 96.396875][ T8260] __dump_stack+0x30/0x40 [ 96.396886][ T8260] dump_stack_lvl+0xd8/0x12c [ 96.396896][ T8260] dump_stack+0x1c/0x28 [ 96.396905][ T8260] dump_header+0xbc/0x3f0 [ 96.396916][ T8260] oom_kill_process+0x248/0x8f0 [ 96.396925][ T8260] out_of_memory+0xd24/0x1064 [ 96.396932][ T8260] mem_cgroup_out_of_memory+0xe8/0x170 [ 96.396940][ T8260] try_charge_memcg+0x9bc/0xd38 [ 96.396951][ T8260] charge_memcg+0x19c/0x2a0 [ 96.396961][ T8260] __mem_cgroup_charge+0x38/0x98 [ 96.396971][ T8260] shmem_alloc_and_add_folio+0x61c/0xed8 [ 96.396981][ T8260] shmem_get_folio_gfp+0x4a8/0x1464 [ 96.396991][ T8260] shmem_write_begin+0x160/0x448 [ 96.397001][ T8260] generic_perform_write+0x23c/0x7a4 [ 96.397011][ T8260] shmem_file_write_iter+0x10c/0x134 [ 96.397021][ T8260] __kernel_write_iter+0x334/0x740 [ 96.397032][ T8260] dump_user_range+0x36c/0x7a0 [ 96.397041][ T8260] elf_core_dump+0x2c74/0x31e8 [ 96.397051][ T8260] coredump_write+0x10dc/0x17fc [ 96.397060][ T8260] vfs_coredump+0x2adc/0x3994 [ 96.397068][ T8260] get_signal+0xd88/0x1094 [ 96.397076][ T8260] arch_do_signal_or_restart+0x1c8/0x444c [ 96.397086][ T8260] exit_to_user_mode_loop+0x70/0x17c [ 96.397096][ T8260] el0_da+0x1a4/0x254 [ 96.397106][ T8260] el0t_64_sync_handler+0xd8/0x104 [ 96.397115][ T8260] el0t_64_sync+0x198/0x19c [ 96.397160][ T8260] memory: usage 307200kB, limit 307200kB, failcnt 57934 [ 96.397175][ T8260] memory+swap: usage 432124kB, limit 9007199254740988kB, failcnt 0 [ 96.397192][ T8260] kmem: usage 4736kB, limit 9007199254740988kB, failcnt 0 [ 96.397206][ T8260] Memory cgroup stats for /syz0: [ 96.397280][ T8260] cache 309407744 [ 96.397290][ T8260] rss 241664 [ 96.397298][ T8260] rss_huge 0 [ 96.397305][ T8260] shmem 309403648 [ 96.397312][ T8260] mapped_file 124059648 [ 96.397319][ T8260] dirty 0 [ 96.397326][ T8260] writeback 0 [ 96.397333][ T8260] workingset_refault_anon 72 [ 96.397340][ T8260] workingset_refault_file 324 [ 96.397347][ T8260] swap 127922176 [ 96.397353][ T8260] swapcached 214360064 [ 96.397360][ T8260] pgpgin 264549 [ 96.397367][ T8260] pgpgout 188933 [ 96.397374][ T8260] pgfault 144485 [ 96.397381][ T8260] pgmajfault 113 [ 96.397387][ T8260] inactive_anon 280375296 [ 96.397394][ T8260] active_anon 29282304 [ 96.397401][ T8260] inactive_file 0 [ 96.397408][ T8260] active_file 0 [ 96.397415][ T8260] unevictable 0 [ 96.397421][ T8260] hierarchical_memory_limit 314572800 [ 96.397428][ T8260] hierarchical_memsw_limit 9223372036854771712 [ 96.397436][ T8260] total_cache 309407744 [ 96.397443][ T8260] total_rss 241664 [ 96.397449][ T8260] total_rss_huge 0 [ 96.397456][ T8260] total_shmem 309403648 [ 96.397463][ T8260] total_mapped_file 124059648 [ 96.397470][ T8260] total_dirty 0 [ 96.397476][ T8260] total_writeback 0 [ 96.397483][ T8260] total_workingset_refault_anon 72 [ 96.397490][ T8260] total_workingset_refault_file 324 [ 96.397497][ T8260] total_swap 127922176 [ 96.397504][ T8260] total_swapcached 214360064 [ 96.397511][ T8260] total_pgpgin 264549 [ 96.397518][ T8260] total_pgpgout 188933 [ 96.397525][ T8260] total_pgfault 144485 [ 96.397531][ T8260] total_pgmajfault 113 [ 96.397538][ T8260] total_inactive_anon 280375296 [ 96.397545][ T8260] total_active_anon 29282304 [ 96.397552][ T8260] total_inactive_file 0 [ 96.397559][ T8260] total_active_file 0 [ 96.397566][ T8260] total_unevictable 0 [ 96.397573][ T8260] anon_cost 15791 [ 96.397579][ T8260] file_cost 11 [ 96.397587][ T8260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8260,uid=0 [ 96.397669][ T8260] Memory cgroup out of memory: Killed process 8260 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:27704kB, UID:0 pgtables:220kB oom_score_adj:1000 [ 96.474859][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.592035][ T8478] netlink: 'syz.8.698': attribute type 4 has an invalid length. [ 96.915021][ T8493] FAULT_INJECTION: forcing a failure. [ 96.915021][ T8493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.915062][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.7.701 Tainted: G L syzkaller #0 PREEMPT [ 96.915076][ T8493] Tainted: [L]=SOFTLOCKUP [ 96.915080][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.915087][ T8493] Call trace: [ 96.915090][ T8493] show_stack+0x2c/0x3c (C) [ 96.915108][ T8493] __dump_stack+0x30/0x40 [ 96.915120][ T8493] dump_stack_lvl+0xd8/0x12c [ 96.915130][ T8493] dump_stack+0x1c/0x28 [ 96.915139][ T8493] should_fail_ex+0x41c/0x590 [ 96.915150][ T8493] should_fail+0x14/0x24 [ 96.915159][ T8493] should_fail_usercopy+0x20/0x30 [ 96.915170][ T8493] copy_from_sockptr+0x7c/0x1e0 [ 96.915184][ T8493] __cgroup_bpf_run_filter_getsockopt+0x290/0xa6c [ 96.915195][ T8493] do_sock_getsockopt+0x718/0x720 [ 96.915205][ T8493] __sys_getsockopt+0xfc/0x168 [ 96.915213][ T8493] __arm64_sys_getsockopt+0xc8/0xe4 [ 96.915222][ T8493] invoke_syscall+0x98/0x244 [ 96.915232][ T8493] el0_svc_common+0xec/0x23c [ 96.915241][ T8493] do_el0_svc+0x4c/0x5c [ 96.915251][ T8493] el0_svc+0x64/0x260 [ 96.915260][ T8493] el0t_64_sync_handler+0x44/0x104 [ 96.915269][ T8493] el0t_64_sync+0x198/0x19c [ 96.936051][ T6695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.010513][ T8485] loop9: detected capacity change from 0 to 2048 [ 97.043309][ T8485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.269892][ T8510] loop8: detected capacity change from 0 to 128 [ 97.279443][ T8510] FAT-fs (loop8): data area starts beyond volume (414 > 128) [ 97.279496][ T8510] FAT-fs (loop8): Can't find a valid FAT filesystem [ 97.514067][ T8519] loop6: detected capacity change from 0 to 512 [ 97.514465][ T8519] ext4: Unknown parameter 'fowner' [ 97.621369][ T8527] FAULT_INJECTION: forcing a failure. [ 97.621369][ T8527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.621406][ T8527] CPU: 0 UID: 0 PID: 8527 Comm: syz.6.709 Tainted: G L syzkaller #0 PREEMPT [ 97.621421][ T8527] Tainted: [L]=SOFTLOCKUP [ 97.621425][ T8527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 97.621430][ T8527] Call trace: [ 97.621433][ T8527] show_stack+0x2c/0x3c (C) [ 97.621451][ T8527] __dump_stack+0x30/0x40 [ 97.621463][ T8527] dump_stack_lvl+0xd8/0x12c [ 97.621472][ T8527] dump_stack+0x1c/0x28 [ 97.621482][ T8527] should_fail_ex+0x41c/0x590 [ 97.621494][ T8527] should_fail+0x14/0x24 [ 97.621503][ T8527] should_fail_usercopy+0x20/0x30 [ 97.621513][ T8527] _inline_copy_from_user+0x3c/0x174 [ 97.621524][ T8527] copy_msghdr_from_user+0xb8/0x194 [ 97.621533][ T8527] ___sys_sendmsg+0x14c/0x224 [ 97.621542][ T8527] __sys_sendmsg+0x158/0x204 [ 97.621550][ T8527] __arm64_sys_sendmsg+0x88/0x9c [ 97.621558][ T8527] invoke_syscall+0x98/0x244 [ 97.621568][ T8527] el0_svc_common+0xec/0x23c [ 97.621578][ T8527] do_el0_svc+0x4c/0x5c [ 97.621587][ T8527] el0_svc+0x64/0x260 [ 97.621596][ T8527] el0t_64_sync_handler+0x44/0x104 [ 97.621605][ T8527] el0t_64_sync+0x198/0x19c [ 97.932285][ T7761] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.987409][ T8543] netlink: 'syz.0.711': attribute type 15 has an invalid length. [ 97.987448][ T8543] netlink: 'syz.0.711': attribute type 7 has an invalid length. [ 98.094932][ T8540] netlink: 'syz.8.710': attribute type 3 has an invalid length. [ 98.094973][ T8540] netlink: 'syz.8.710': attribute type 1 has an invalid length. [ 98.191574][ T8556] loop6: detected capacity change from 0 to 1024 [ 98.195226][ T8556] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 98.620876][ T8573] FAULT_INJECTION: forcing a failure. [ 98.620876][ T8573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.623562][ T8573] CPU: 0 UID: 0 PID: 8573 Comm: syz.0.718 Tainted: G L syzkaller #0 PREEMPT [ 98.623578][ T8573] Tainted: [L]=SOFTLOCKUP [ 98.623582][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.623587][ T8573] Call trace: [ 98.623591][ T8573] show_stack+0x2c/0x3c (C) [ 98.623612][ T8573] __dump_stack+0x30/0x40 [ 98.623624][ T8573] dump_stack_lvl+0xd8/0x12c [ 98.623634][ T8573] dump_stack+0x1c/0x28 [ 98.623644][ T8573] should_fail_ex+0x41c/0x590 [ 98.623655][ T8573] should_fail+0x14/0x24 [ 98.623664][ T8573] should_fail_usercopy+0x20/0x30 [ 98.623674][ T8573] copy_from_sockptr+0x7c/0x1e0 [ 98.623684][ T8573] __cgroup_bpf_run_filter_getsockopt+0x3ec/0xa6c [ 98.623694][ T8573] do_sock_getsockopt+0x718/0x720 [ 98.623703][ T8573] __sys_getsockopt+0xfc/0x168 [ 98.623711][ T8573] __arm64_sys_getsockopt+0xc8/0xe4 [ 98.623720][ T8573] invoke_syscall+0x98/0x244 [ 98.623730][ T8573] el0_svc_common+0xec/0x23c [ 98.623739][ T8573] do_el0_svc+0x4c/0x5c [ 98.623749][ T8573] el0_svc+0x64/0x260 [ 98.623758][ T8573] el0t_64_sync_handler+0x44/0x104 [ 98.623767][ T8573] el0t_64_sync+0x198/0x19c [ 98.635326][ T8563] loop9: detected capacity change from 0 to 512 [ 98.636582][ T8563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.642236][ T8565] loop6: detected capacity change from 0 to 2048 [ 98.647832][ T8563] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 98.647849][ T8563] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 98.647951][ T8563] EXT4-fs (loop9): orphan cleanup on readonly fs [ 98.656235][ T8563] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.716: bg 0: block 15: invalid block bitmap [ 98.657323][ T8563] loop9: lost filesystem error report for type 5 error -117 [ 98.659036][ T8563] EXT4-fs (loop9): Remounting filesystem read-only [ 98.660729][ T8563] EXT4-fs (loop9): 1 truncate cleaned up [ 98.661251][ T8563] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 98.678872][ T8565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.838233][ T8582] netlink: 'syz.9.716': attribute type 4 has an invalid length. [ 98.857968][ T8582] batadv_slave_0: Caught tx_queue_len zero misconfig [ 98.936399][ T5144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.126859][ T8605] loop8: detected capacity change from 0 to 512 [ 99.188557][ T7761] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.239289][ T8619] FAULT_INJECTION: forcing a failure. [ 99.239289][ T8619] name failslab, interval 1, probability 0, space 0, times 0 [ 99.242882][ T8619] CPU: 1 UID: 0 PID: 8619 Comm: syz.0.725 Tainted: G L syzkaller #0 PREEMPT [ 99.242923][ T8619] Tainted: [L]=SOFTLOCKUP [ 99.242927][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.242934][ T8619] Call trace: [ 99.242938][ T8619] show_stack+0x2c/0x3c (C) [ 99.242959][ T8619] __dump_stack+0x30/0x40 [ 99.242971][ T8619] dump_stack_lvl+0xd8/0x12c [ 99.242983][ T8619] dump_stack+0x1c/0x28 [ 99.242994][ T8619] should_fail_ex+0x41c/0x590 [ 99.243006][ T8619] should_failslab+0xc4/0x120 [ 99.243017][ T8619] kmem_cache_alloc_node_noprof+0x98/0x604 [ 99.243031][ T8619] __alloc_skb+0x1f0/0x610 [ 99.243041][ T8619] netlink_alloc_large_skb+0xd4/0x114 [ 99.243050][ T8619] netlink_sendmsg+0x4c4/0x948 [ 99.243059][ T8619] __sock_sendmsg+0xc8/0x17c [ 99.243067][ T8619] ____sys_sendmsg+0x3d0/0x6c8 [ 99.243076][ T8619] ___sys_sendmsg+0x198/0x224 [ 99.243084][ T8619] __sys_sendmsg+0x158/0x204 [ 99.243092][ T8619] __arm64_sys_sendmsg+0x88/0x9c [ 99.243100][ T8619] invoke_syscall+0x98/0x244 [ 99.243110][ T8619] el0_svc_common+0xec/0x23c [ 99.243120][ T8619] do_el0_svc+0x4c/0x5c [ 99.243129][ T8619] el0_svc+0x64/0x260 [ 99.243139][ T8619] el0t_64_sync_handler+0x44/0x104 [ 99.243147][ T8619] el0t_64_sync+0x198/0x19c [ 99.476588][ T8621] loop6: detected capacity change from 0 to 128 [ 99.477379][ T8621] FAT-fs (loop6): data area starts beyond volume (414 > 128) [ 99.477399][ T8621] FAT-fs (loop6): Can't find a valid FAT filesystem [ 99.520630][ T8605] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.661407][ T6695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.744537][ T8644] FAULT_INJECTION: forcing a failure. [ 99.744537][ T8644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.744579][ T8644] CPU: 0 UID: 0 PID: 8644 Comm: syz.0.730 Tainted: G L syzkaller #0 PREEMPT [ 99.744594][ T8644] Tainted: [L]=SOFTLOCKUP [ 99.744598][ T8644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.744604][ T8644] Call trace: [ 99.744607][ T8644] show_stack+0x2c/0x3c (C) [ 99.744624][ T8644] __dump_stack+0x30/0x40 [ 99.744636][ T8644] dump_stack_lvl+0xd8/0x12c [ 99.744646][ T8644] dump_stack+0x1c/0x28 [ 99.744655][ T8644] should_fail_ex+0x41c/0x590 [ 99.744666][ T8644] should_fail+0x14/0x24 [ 99.744676][ T8644] should_fail_usercopy+0x20/0x30 [ 99.744686][ T8644] simple_read_from_buffer+0xc4/0x238 [ 99.744696][ T8644] proc_fail_nth_read+0x1a8/0x248 [ 99.744705][ T8644] vfs_read+0x230/0x8c8 [ 99.744716][ T8644] ksys_read+0x12c/0x228 [ 99.744725][ T8644] __arm64_sys_read+0x84/0x98 [ 99.744736][ T8644] invoke_syscall+0x98/0x244 [ 99.744746][ T8644] el0_svc_common+0xec/0x23c [ 99.744755][ T8644] do_el0_svc+0x4c/0x5c [ 99.744765][ T8644] el0_svc+0x64/0x260 [ 99.744774][ T8644] el0t_64_sync_handler+0x44/0x104 [ 99.744782][ T8644] el0t_64_sync+0x198/0x19c [ 99.764186][ T8534] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 99.896300][ T8656] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 99.898572][ T8656] syzkaller0: entered promiscuous mode [ 99.899885][ T8656] syzkaller0: entered allmulticast mode [ 99.950909][ T8254] syz.0.645 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 99.957140][ T8254] CPU: 1 UID: 0 PID: 8254 Comm: syz.0.645 Tainted: G L syzkaller #0 PREEMPT [ 99.957183][ T8254] Tainted: [L]=SOFTLOCKUP [ 99.957187][ T8254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.957201][ T8254] Call trace: [ 99.957205][ T8254] show_stack+0x2c/0x3c (C) [ 99.957228][ T8254] __dump_stack+0x30/0x40 [ 99.957241][ T8254] dump_stack_lvl+0xd8/0x12c [ 99.957253][ T8254] dump_stack+0x1c/0x28 [ 99.957264][ T8254] dump_header+0xbc/0x3f0 [ 99.957275][ T8254] oom_kill_process+0x248/0x8f0 [ 99.957283][ T8254] out_of_memory+0xd24/0x1064 [ 99.957291][ T8254] mem_cgroup_out_of_memory+0xe8/0x170 [ 99.957299][ T8254] try_charge_memcg+0x9bc/0xd38 [ 99.957311][ T8254] charge_memcg+0x19c/0x2a0 [ 99.957322][ T8254] __mem_cgroup_charge+0x38/0x98 [ 99.957333][ T8254] shmem_alloc_and_add_folio+0x61c/0xed8 [ 99.957343][ T8254] shmem_get_folio_gfp+0x4a8/0x1464 [ 99.957353][ T8254] shmem_fault+0x15c/0x32c [ 99.957362][ T8254] __do_fault+0xf4/0x4a8 [ 99.957373][ T8254] do_pte_missing+0x1764/0x2a28 [ 99.957384][ T8254] handle_mm_fault+0x1534/0x2bec [ 99.957393][ T8254] __get_user_pages+0x82c/0x13b0 [ 99.957401][ T8254] get_dump_page+0x16c/0x374 [ 99.957409][ T8254] dump_user_range+0x158/0x7a0 [ 99.957418][ T8254] elf_core_dump+0x2c74/0x31e8 [ 99.957429][ T8254] coredump_write+0x10dc/0x17fc [ 99.957437][ T8254] vfs_coredump+0x2adc/0x3994 [ 99.957445][ T8254] get_signal+0xd88/0x1094 [ 99.957454][ T8254] arch_do_signal_or_restart+0x1c8/0x444c [ 99.957464][ T8254] exit_to_user_mode_loop+0x70/0x17c [ 99.957474][ T8254] el0_da+0x1a4/0x254 [ 99.957483][ T8254] el0t_64_sync_handler+0xd8/0x104 [ 99.957492][ T8254] el0t_64_sync+0x198/0x19c [ 99.991363][ T8254] memory: usage 307200kB, limit 307200kB, failcnt 80461 [ 99.992661][ T8254] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 100.003172][ T8254] kmem: usage 4100kB, limit 9007199254740988kB, failcnt 0 [ 100.003230][ T8254] Memory cgroup stats for /syz0: [ 100.003336][ T8254] cache 310104064 [ 100.003348][ T8254] rss 245760 [ 100.003357][ T8254] rss_huge 0 [ 100.003365][ T8254] shmem 310099968 [ 100.003372][ T8254] mapped_file 174190592 [ 100.003380][ T8254] dirty 0 [ 100.003387][ T8254] writeback 0 [ 100.003394][ T8254] workingset_refault_anon 72 [ 100.003401][ T8254] workingset_refault_file 402 [ 100.003408][ T8254] swap 127995904 [ 100.003415][ T8254] swapcached 300879872 [ 100.003422][ T8254] pgpgin 325933 [ 100.003429][ T8254] pgpgout 250164 [ 100.003436][ T8254] pgfault 178016 [ 100.003442][ T8254] pgmajfault 118 [ 100.003449][ T8254] inactive_anon 292900864 [ 100.003456][ T8254] active_anon 17399808 [ 100.003463][ T8254] inactive_file 0 [ 100.003470][ T8254] active_file 4096 [ 100.003476][ T8254] unevictable 0 [ 100.003483][ T8254] hierarchical_memory_limit 314572800 [ 100.003490][ T8254] hierarchical_memsw_limit 9223372036854771712 [ 100.003498][ T8254] total_cache 310104064 [ 100.003504][ T8254] total_rss 245760 [ 100.003511][ T8254] total_rss_huge 0 [ 100.003518][ T8254] total_shmem 310099968 [ 100.003525][ T8254] total_mapped_file 174190592 [ 100.003532][ T8254] total_dirty 0 [ 100.003538][ T8254] total_writeback 0 [ 100.003545][ T8254] total_workingset_refault_anon 72 [ 100.003552][ T8254] total_workingset_refault_file 402 [ 100.003559][ T8254] total_swap 127995904 [ 100.003567][ T8254] total_swapcached 300879872 [ 100.003573][ T8254] total_pgpgin 325933 [ 100.003580][ T8254] total_pgpgout 250164 [ 100.003587][ T8254] total_pgfault 178016 [ 100.003594][ T8254] total_pgmajfault 118 [ 100.003600][ T8254] total_inactive_anon 292900864 [ 100.003607][ T8254] total_active_anon 17399808 [ 100.003614][ T8254] total_inactive_file 0 [ 100.003621][ T8254] total_active_file 4096 [ 100.003628][ T8254] total_unevictable 0 [ 100.003635][ T8254] anon_cost 10442 [ 100.003641][ T8254] file_cost 33 [ 100.003649][ T8254] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8254,uid=0 [ 100.003863][ T8254] Memory cgroup out of memory: Killed process 8254 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:54708kB, UID:0 pgtables:304kB oom_score_adj:1000 [ 100.478362][ T8669] FAULT_INJECTION: forcing a failure. [ 100.478362][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 100.478407][ T8669] CPU: 0 UID: 0 PID: 8669 Comm: syz.9.736 Tainted: G L syzkaller #0 PREEMPT [ 100.478426][ T8669] Tainted: [L]=SOFTLOCKUP [ 100.478431][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.478437][ T8669] Call trace: [ 100.478440][ T8669] show_stack+0x2c/0x3c (C) [ 100.478459][ T8669] __dump_stack+0x30/0x40 [ 100.478472][ T8669] dump_stack_lvl+0xd8/0x12c [ 100.478484][ T8669] dump_stack+0x1c/0x28 [ 100.478495][ T8669] should_fail_ex+0x41c/0x590 [ 100.478508][ T8669] should_failslab+0xc4/0x120 [ 100.478521][ T8669] kmem_cache_alloc_node_noprof+0x98/0x604 [ 100.478535][ T8669] __alloc_skb+0x1f0/0x610 [ 100.478545][ T8669] tcp_stream_alloc_skb+0x44/0x2dc [ 100.478560][ T8669] tcp_connect+0xbbc/0x3310 [ 100.478572][ T8669] tcp_v4_connect+0xc9c/0x1478 [ 100.478581][ T8669] __inet_stream_connect+0x1f4/0xc14 [ 100.478590][ T8669] inet_stream_connect+0x74/0xb0 [ 100.478599][ T8669] __sys_connect_file+0x13c/0x184 [ 100.478608][ T8669] __sys_connect+0x114/0x194 [ 100.478617][ T8669] __arm64_sys_connect+0x84/0x9c [ 100.478626][ T8669] invoke_syscall+0x98/0x244 [ 100.478638][ T8669] el0_svc_common+0xec/0x23c [ 100.478650][ T8669] do_el0_svc+0x4c/0x5c [ 100.478662][ T8669] el0_svc+0x64/0x260 [ 100.478673][ T8669] el0t_64_sync_handler+0x44/0x104 [ 100.478683][ T8669] el0t_64_sync+0x198/0x19c [ 100.478937][ T8670] loop7: detected capacity change from 0 to 512 [ 100.479411][ T8670] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.540574][ T8670] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 100.540613][ T8670] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 100.540727][ T8670] EXT4-fs (loop7): orphan cleanup on readonly fs [ 100.542902][ T8670] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.735: bg 0: block 15: invalid block bitmap [ 100.542916][ T8670] loop7: lost filesystem error report for type 5 error -117 [ 100.543014][ T8670] EXT4-fs (loop7): Remounting filesystem read-only [ 100.543064][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 100.543074][ C1] EXT4-fs (loop7): initial error at time 101: ext4_validate_block_bitmap:436 [ 100.543089][ C1] EXT4-fs (loop7): last error at time 101: ext4_validate_block_bitmap:436 [ 100.543267][ T8670] EXT4-fs (loop7): 1 truncate cleaned up [ 100.543730][ T8670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 100.858264][ T8677] loop9: detected capacity change from 0 to 128 [ 100.927900][ T8677] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.941244][ T8677] EXT4-fs (loop9): shut down requested (1) [ 100.978459][ T8678] netlink: 'syz.7.735': attribute type 4 has an invalid length. [ 101.116853][ T8687] ptrace attach of ""[8688] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8687] [ 101.118057][ T8687] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 101.160986][ T8688] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 101.163662][ T8688] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 101.372259][ T8691] loop6: detected capacity change from 0 to 1024 [ 101.375010][ T5355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.419811][ T8691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.509465][ T8691] EXT4-fs error (device loop6): __ext4_new_inode:1083: comm syz.6.740: reserved inode found cleared - inode=18 [ 101.536328][ T8701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.612702][ T8711] EXT4-fs: Ignoring removed orlov option [ 101.631564][ T8711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.669286][ T5355] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.670473][ T6695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.717162][ T5491] wlan0 speed is unknown, defaulting to 1000 [ 101.724296][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.724320][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.728725][ T1154] wlan0 speed is unknown, defaulting to 1000 [ 101.728768][ T1154] syz2: Port: 1 Link ACTIVE [ 101.733782][ T7761] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.755082][ T8718] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 101.755133][ T8718] overlayfs: failed to set xattr on upper [ 101.755139][ T8718] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.755145][ T8718] overlayfs: ...falling back to uuid=null. [ 101.864463][ T5144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.410855][ T8742] FAULT_INJECTION: forcing a failure. [ 102.410855][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.415104][ T8742] CPU: 0 UID: 0 PID: 8742 Comm: syz.7.755 Tainted: G L syzkaller #0 PREEMPT [ 102.415133][ T8742] Tainted: [L]=SOFTLOCKUP [ 102.415137][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.415144][ T8742] Call trace: [ 102.415148][ T8742] show_stack+0x2c/0x3c (C) [ 102.415172][ T8742] __dump_stack+0x30/0x40 [ 102.415189][ T8742] dump_stack_lvl+0xd8/0x12c [ 102.415199][ T8742] dump_stack+0x1c/0x28 [ 102.415210][ T8742] should_fail_ex+0x41c/0x590 [ 102.415222][ T8742] should_fail+0x14/0x24 [ 102.415231][ T8742] should_fail_usercopy+0x20/0x30 [ 102.415242][ T8742] _copy_from_iter+0x188/0x1064 [ 102.415253][ T8742] netlink_sendmsg+0x570/0x948 [ 102.415263][ T8742] __sock_sendmsg+0xc8/0x17c [ 102.415272][ T8742] ____sys_sendmsg+0x3d0/0x6c8 [ 102.415280][ T8742] ___sys_sendmsg+0x198/0x224 [ 102.415288][ T8742] __sys_sendmsg+0x158/0x204 [ 102.415297][ T8742] __arm64_sys_sendmsg+0x88/0x9c [ 102.415305][ T8742] invoke_syscall+0x98/0x244 [ 102.415315][ T8742] el0_svc_common+0xec/0x23c [ 102.415325][ T8742] do_el0_svc+0x4c/0x5c [ 102.415334][ T8742] el0_svc+0x64/0x260 [ 102.415344][ T8742] el0t_64_sync_handler+0x44/0x104 [ 102.415352][ T8742] el0t_64_sync+0x198/0x19c [ 102.473114][ T4719] Bluetooth: hci3: command tx timeout [ 102.882830][ T8783] dvmrp8: entered allmulticast mode [ 102.887132][ T8783] dvmrp8: left allmulticast mode [ 103.015187][ T8796] netlink: 'syz.9.767': attribute type 3 has an invalid length. [ 103.015234][ T8796] netlink: 'syz.9.767': attribute type 1 has an invalid length. [ 103.051585][ T8795] syz.0.768 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 103.051631][ T8795] CPU: 1 UID: 0 PID: 8795 Comm: syz.0.768 Tainted: G L syzkaller #0 PREEMPT [ 103.051644][ T8795] Tainted: [L]=SOFTLOCKUP [ 103.051647][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.051652][ T8795] Call trace: [ 103.051655][ T8795] show_stack+0x2c/0x3c (C) [ 103.051673][ T8795] __dump_stack+0x30/0x40 [ 103.051687][ T8795] dump_stack_lvl+0xd8/0x12c [ 103.051697][ T8795] dump_stack+0x1c/0x28 [ 103.051706][ T8795] dump_header+0xbc/0x3f0 [ 103.051718][ T8795] oom_kill_process+0x248/0x8f0 [ 103.051727][ T8795] out_of_memory+0xd24/0x1064 [ 103.051734][ T8795] mem_cgroup_out_of_memory+0xe8/0x170 [ 103.051743][ T8795] try_charge_memcg+0x9bc/0xd38 [ 103.051754][ T8795] obj_cgroup_charge_pages+0x30/0xb0 [ 103.051764][ T8795] __memcg_slab_post_alloc_hook+0x4fc/0x8c0 [ 103.051775][ T8795] kmem_cache_alloc_node_noprof+0x3d8/0x604 [ 103.051788][ T8795] dup_task_struct+0x74/0x850 [ 103.051796][ T8795] copy_process+0x600/0x332c [ 103.051803][ T8795] kernel_clone+0x234/0x9fc [ 103.051811][ T8795] __arm64_sys_clone3+0x35c/0x390 [ 103.051819][ T8795] invoke_syscall+0x98/0x244 [ 103.051830][ T8795] el0_svc_common+0xec/0x23c [ 103.051840][ T8795] do_el0_svc+0x4c/0x5c [ 103.051849][ T8795] el0_svc+0x64/0x260 [ 103.051859][ T8795] el0t_64_sync_handler+0x44/0x104 [ 103.051868][ T8795] el0t_64_sync+0x198/0x19c [ 103.051878][ T8795] memory: usage 307200kB, limit 307200kB, failcnt 91476 [ 103.051884][ T8795] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 103.051891][ T8795] kmem: usage 3748kB, limit 9007199254740988kB, failcnt 0 [ 103.051896][ T8795] Memory cgroup stats for /syz0: [ 103.051972][ T8795] cache 310542336 [ 103.051976][ T8795] rss 192512 [ 103.051980][ T8795] rss_huge 0 [ 103.051983][ T8795] shmem 310542336 [ 103.051986][ T8795] mapped_file 184168448 [ 103.051990][ T8795] dirty 0 [ 103.051993][ T8795] writeback 0 [ 103.051996][ T8795] workingset_refault_anon 72 [ 103.052000][ T8795] workingset_refault_file 504 [ 103.052003][ T8795] swap 127995904 [ 103.052006][ T8795] swapcached 336150528 [ 103.052010][ T8795] pgpgin 376348 [ 103.052013][ T8795] pgpgout 300485 [ 103.052016][ T8795] pgfault 206813 [ 103.052020][ T8795] pgmajfault 123 [ 103.052023][ T8795] inactive_anon 299495424 [ 103.052027][ T8795] active_anon 11182080 [ 103.052030][ T8795] inactive_file 0 [ 103.052033][ T8795] active_file 0 [ 103.052036][ T8795] unevictable 0 [ 103.052040][ T8795] hierarchical_memory_limit 314572800 [ 103.052043][ T8795] hierarchical_memsw_limit 9223372036854771712 [ 103.052047][ T8795] total_cache 310542336 [ 103.052050][ T8795] total_rss 192512 [ 103.052054][ T8795] total_rss_huge 0 [ 103.052057][ T8795] total_shmem 310542336 [ 103.052060][ T8795] total_mapped_file 184168448 [ 103.052064][ T8795] total_dirty 0 [ 103.052067][ T8795] total_writeback 0 [ 103.052070][ T8795] total_workingset_refault_anon 72 [ 103.052074][ T8795] total_workingset_refault_file 504 [ 103.052077][ T8795] total_swap 127995904 [ 103.052081][ T8795] total_swapcached 336150528 [ 103.052084][ T8795] total_pgpgin 376348 [ 103.052088][ T8795] total_pgpgout 300485 [ 103.052091][ T8795] total_pgfault 206813 [ 103.052094][ T8795] total_pgmajfault 123 [ 103.052097][ T8795] total_inactive_anon 299495424 [ 103.052101][ T8795] total_active_anon 11182080 [ 103.052104][ T8795] total_inactive_file 0 [ 103.052108][ T8795] total_active_file 0 [ 103.052111][ T8795] total_unevictable 0 [ 103.052114][ T8795] anon_cost 17120 [ 103.052117][ T8795] file_cost 553 [ 103.052121][ T8795] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.645,pid=8256,uid=0 [ 103.052257][ T8795] Memory cgroup out of memory: Killed process 8256 (syz.0.645) total-vm:197808kB, anon-rss:1244kB, file-rss:20612kB, shmem-rss:67444kB, UID:0 pgtables:284kB oom_score_adj:1000 [ 103.147181][ T8803] tipc: Started in network mode [ 103.147228][ T8803] tipc: Node identity 4a0d23b35b1a, cluster identity 4711 [ 103.147374][ T8803] tipc: Enabled bearer , priority 0 [ 103.147688][ T8803] syzkaller0: entered promiscuous mode [ 103.147700][ T8803] syzkaller0: entered allmulticast mode [ 103.156506][ T8803] tipc: Resetting bearer [ 103.158420][ T8802] tipc: Resetting bearer [ 103.177568][ T8802] tipc: Disabling bearer [ 103.189435][ T8801] FAULT_INJECTION: forcing a failure. [ 103.189435][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 103.189480][ T8801] CPU: 1 UID: 0 PID: 8801 Comm: syz.6.769 Tainted: G L syzkaller #0 PREEMPT [ 103.189494][ T8801] Tainted: [L]=SOFTLOCKUP [ 103.189498][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.189503][ T8801] Call trace: [ 103.189506][ T8801] show_stack+0x2c/0x3c (C) [ 103.189524][ T8801] __dump_stack+0x30/0x40 [ 103.189535][ T8801] dump_stack_lvl+0xd8/0x12c [ 103.189544][ T8801] dump_stack+0x1c/0x28 [ 103.189554][ T8801] should_fail_ex+0x41c/0x590 [ 103.189565][ T8801] should_failslab+0xc4/0x120 [ 103.189576][ T8801] kmem_cache_alloc_noprof+0x94/0x5d4 [ 103.189587][ T8801] skb_clone+0x1ac/0x320 [ 103.189597][ T8801] __netlink_deliver_tap+0x364/0x6f4 [ 103.189606][ T8801] netlink_deliver_tap+0x1d8/0x1dc [ 103.189614][ T8801] netlink_unicast+0x5dc/0x7f8 [ 103.189622][ T8801] netlink_sendmsg+0x648/0x948 [ 103.189630][ T8801] __sock_sendmsg+0xc8/0x17c [ 103.189637][ T8801] ____sys_sendmsg+0x3d0/0x6c8 [ 103.189645][ T8801] ___sys_sendmsg+0x198/0x224 [ 103.189654][ T8801] __sys_sendmsg+0x158/0x204 [ 103.189662][ T8801] __arm64_sys_sendmsg+0x88/0x9c [ 103.189670][ T8801] invoke_syscall+0x98/0x244 [ 103.189680][ T8801] el0_svc_common+0xec/0x23c [ 103.189690][ T8801] do_el0_svc+0x4c/0x5c [ 103.189699][ T8801] el0_svc+0x64/0x260 [ 103.189709][ T8801] el0t_64_sync_handler+0x44/0x104 [ 103.189717][ T8801] el0t_64_sync+0x198/0x19c [ 103.627988][ T8818] vhci_hcd vhci_hcd.2: invalid port number 253 [ 103.629450][ T8818] vhci_hcd vhci_hcd.2: invalid port number 253 [ 103.638978][ T8816] netlink: 48 bytes leftover after parsing attributes in process `syz.0.773'. [ 103.877094][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 103.877149][ T30] audit: type=1326 audit(104.816:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 103.877273][ T30] audit: type=1326 audit(104.826:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 103.877364][ T30] audit: type=1326 audit(104.826:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 103.877501][ T30] audit: type=1326 audit(104.826:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 103.877649][ T30] audit: type=1326 audit(104.826:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 103.877753][ T30] audit: type=1326 audit(104.826:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 103.877826][ T30] audit: type=1326 audit(104.826:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 103.877906][ T30] audit: type=1326 audit(104.826:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=432 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 103.877989][ T30] audit: type=1326 audit(104.836:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 103.904438][ T30] audit: type=1326 audit(104.886:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8824 comm="syz.7.777" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89379368 code=0x7ffc0000 [ 104.152203][ T8832] set_capacity_and_notify: 2 callbacks suppressed [ 104.152249][ T8832] loop7: detected capacity change from 0 to 256 [ 104.192373][ T8841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.214032][ T8832] netlink: 28 bytes leftover after parsing attributes in process `syz.7.779'. [ 104.224537][ T8838] syzkaller0: entered promiscuous mode [ 104.224578][ T8838] syzkaller0: entered allmulticast mode [ 104.246138][ T8840] netlink: 'syz.8.782': attribute type 3 has an invalid length. [ 104.246182][ T8840] netlink: 'syz.8.782': attribute type 1 has an invalid length. [ 104.448476][ T8846] FAULT_INJECTION: forcing a failure. [ 104.448476][ T8846] name failslab, interval 1, probability 100, space 1, times 0 [ 104.451822][ T8846] CPU: 0 UID: 0 PID: 8846 Comm: syz.8.785 Tainted: G L syzkaller #0 PREEMPT [ 104.451859][ T8846] Tainted: [L]=SOFTLOCKUP [ 104.451866][ T8846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.451874][ T8846] Call trace: [ 104.451878][ T8846] show_stack+0x2c/0x3c (C) [ 104.451898][ T8846] __dump_stack+0x30/0x40 [ 104.451912][ T8846] dump_stack_lvl+0xd8/0x12c [ 104.451922][ T8846] dump_stack+0x1c/0x28 [ 104.451931][ T8846] should_fail_ex+0x41c/0x590 [ 104.451945][ T8846] should_failslab+0xc4/0x120 [ 104.451958][ T8846] kmem_cache_alloc_node_noprof+0x98/0x604 [ 104.451969][ T8846] __alloc_skb+0x1f0/0x610 [ 104.451979][ T8846] netlink_ack+0x11c/0x890 [ 104.451987][ T8846] netlink_rcv_skb+0x21c/0x414 [ 104.451995][ T8846] rtnetlink_rcv+0x28/0x38 [ 104.452006][ T8846] netlink_unicast+0x600/0x7f8 [ 104.452014][ T8846] netlink_sendmsg+0x648/0x948 [ 104.452022][ T8846] __sock_sendmsg+0xc8/0x17c [ 104.452030][ T8846] ____sys_sendmsg+0x3d0/0x6c8 [ 104.452038][ T8846] ___sys_sendmsg+0x198/0x224 [ 104.452047][ T8846] __sys_sendmsg+0x158/0x204 [ 104.452055][ T8846] __arm64_sys_sendmsg+0x88/0x9c [ 104.452063][ T8846] invoke_syscall+0x98/0x244 [ 104.452073][ T8846] el0_svc_common+0xec/0x23c [ 104.452083][ T8846] do_el0_svc+0x4c/0x5c [ 104.452093][ T8846] el0_svc+0x64/0x260 [ 104.452102][ T8846] el0t_64_sync_handler+0x44/0x104 [ 104.452111][ T8846] el0t_64_sync+0x198/0x19c [ 104.503319][ T8849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.503532][ T8849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.614031][ T8851] loop8: detected capacity change from 0 to 4096 [ 104.619162][ T8851] EXT4-fs (loop8): Test dummy encryption mode enabled [ 104.637104][ T8851] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.420788][ T6695] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.468197][ T8874] netlink: 60 bytes leftover after parsing attributes in process `syz.6.794'. [ 105.479101][ T8874] FAULT_INJECTION: forcing a failure. [ 105.479101][ T8874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.482009][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.6.794 Tainted: G L syzkaller #0 PREEMPT [ 105.482032][ T8874] Tainted: [L]=SOFTLOCKUP [ 105.482037][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 105.482044][ T8874] Call trace: [ 105.482049][ T8874] show_stack+0x2c/0x3c (C) [ 105.482071][ T8874] __dump_stack+0x30/0x40 [ 105.482085][ T8874] dump_stack_lvl+0xd8/0x12c [ 105.482097][ T8874] dump_stack+0x1c/0x28 [ 105.482108][ T8874] should_fail_ex+0x41c/0x590 [ 105.482122][ T8874] should_fail+0x14/0x24 [ 105.482133][ T8874] should_fail_usercopy+0x20/0x30 [ 105.482146][ T8874] _inline_copy_from_user+0x3c/0x174 [ 105.482157][ T8874] __sys_bpf+0x1b4/0x82c [ 105.482166][ T8874] __arm64_sys_bpf+0xd0/0xec [ 105.482175][ T8874] invoke_syscall+0x98/0x244 [ 105.482191][ T8874] el0_svc_common+0xec/0x23c [ 105.482203][ T8874] do_el0_svc+0x4c/0x5c [ 105.482215][ T8874] el0_svc+0x64/0x260 [ 105.482226][ T8874] el0t_64_sync_handler+0x44/0x104 [ 105.482236][ T8874] el0t_64_sync+0x198/0x19c [ 105.512125][ T8876] syzkaller0: entered promiscuous mode [ 105.516110][ T8876] syzkaller0: entered allmulticast mode [ 105.522117][ T4719] Bluetooth: hci4: unexpected event for opcode 0x204e [ 105.529340][ T8876] loop8: detected capacity change from 0 to 128 [ 105.537570][ T8877] team0: entered promiscuous mode [ 105.537605][ T8877] team_slave_0: entered promiscuous mode [ 105.537701][ T8877] team_slave_1: entered promiscuous mode [ 105.544239][ T8876] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.547641][ T8877] input: syz0 as /devices/virtual/input/input12 [ 105.588061][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.791'. [ 105.590109][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.791'. [ 105.666360][ T6695] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.790533][ T8887] netlink: 'syz.0.796': attribute type 3 has an invalid length. [ 105.790574][ T8887] netlink: 'syz.0.796': attribute type 1 has an invalid length. [ 105.833796][ T8892] loop9: detected capacity change from 0 to 256 [ 105.859640][ T8894] FAULT_INJECTION: forcing a failure. [ 105.859640][ T8894] name failslab, interval 1, probability 100, space 1, times 0 [ 105.859682][ T8894] CPU: 1 UID: 0 PID: 8894 Comm: syz.0.798 Tainted: G L syzkaller #0 PREEMPT [ 105.859701][ T8894] Tainted: [L]=SOFTLOCKUP [ 105.859705][ T8894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 105.859710][ T8894] Call trace: [ 105.859713][ T8894] show_stack+0x2c/0x3c (C) [ 105.859731][ T8894] __dump_stack+0x30/0x40 [ 105.859743][ T8894] dump_stack_lvl+0xd8/0x12c [ 105.859753][ T8894] dump_stack+0x1c/0x28 [ 105.859762][ T8894] should_fail_ex+0x41c/0x590 [ 105.859774][ T8894] should_failslab+0xc4/0x120 [ 105.859786][ T8894] __kmalloc_cache_noprof+0x94/0x5fc [ 105.859794][ T8894] tcf_proto_create+0x78/0x2e8 [ 105.859803][ T8894] tc_new_tfilter+0xf34/0x1320 [ 105.859810][ T8894] rtnetlink_rcv_msg+0x66c/0x9bc [ 105.859821][ T8894] netlink_rcv_skb+0x238/0x414 [ 105.859830][ T8894] rtnetlink_rcv+0x28/0x38 [ 105.859840][ T8894] netlink_unicast+0x600/0x7f8 [ 105.859848][ T8894] netlink_sendmsg+0x648/0x948 [ 105.859856][ T8894] __sock_sendmsg+0xc8/0x17c [ 105.859864][ T8894] ____sys_sendmsg+0x3d0/0x6c8 [ 105.859872][ T8894] ___sys_sendmsg+0x198/0x224 [ 105.859880][ T8894] __sys_sendmsg+0x158/0x204 [ 105.859889][ T8894] __arm64_sys_sendmsg+0x88/0x9c [ 105.859897][ T8894] invoke_syscall+0x98/0x244 [ 105.859907][ T8894] el0_svc_common+0xec/0x23c [ 105.859917][ T8894] do_el0_svc+0x4c/0x5c [ 105.859926][ T8894] el0_svc+0x64/0x260 [ 105.859936][ T8894] el0t_64_sync_handler+0x44/0x104 [ 105.859944][ T8894] el0t_64_sync+0x198/0x19c [ 106.456521][ T8870] team0: left promiscuous mode [ 106.456555][ T8870] team_slave_0: left promiscuous mode [ 106.456725][ T8870] team_slave_1: left promiscuous mode [ 106.673128][ T8919] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20a07000 [ 106.685696][ T8919] Memory failure: 0x2190ff: unhandlable page. [ 106.685733][ T8919] Memory failure: 0x2190ff: recovery action for reserved kernel page: Ignored [ 106.754101][ T8924] loop8: detected capacity change from 0 to 256 [ 107.203951][ T8934] netlink: 'syz.8.809': attribute type 3 has an invalid length. [ 107.203989][ T8934] netlink: 'syz.8.809': attribute type 1 has an invalid length. [ 107.210982][ T8935] FAULT_INJECTION: forcing a failure. [ 107.210982][ T8935] name failslab, interval 1, probability 100, space 1, times 0 [ 107.218102][ T8937] ip_tables: iptables: counters copy to user failed while replacing table [ 107.220006][ T8935] CPU: 0 UID: 0 PID: 8935 Comm: syz.9.811 Tainted: G L syzkaller #0 PREEMPT [ 107.220036][ T8935] Tainted: [L]=SOFTLOCKUP [ 107.220041][ T8935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.220048][ T8935] Call trace: [ 107.220053][ T8935] show_stack+0x2c/0x3c (C) [ 107.220075][ T8935] __dump_stack+0x30/0x40 [ 107.220090][ T8935] dump_stack_lvl+0xd8/0x12c [ 107.220101][ T8935] dump_stack+0x1c/0x28 [ 107.220113][ T8935] should_fail_ex+0x41c/0x590 [ 107.220126][ T8935] should_failslab+0xc4/0x120 [ 107.220138][ T8935] __kmalloc_cache_noprof+0x94/0x5fc [ 107.220146][ T8935] basic_change+0x2a4/0xbcc [ 107.220155][ T8935] tc_new_tfilter+0xda4/0x1320 [ 107.220163][ T8935] rtnetlink_rcv_msg+0x66c/0x9bc [ 107.220175][ T8935] netlink_rcv_skb+0x238/0x414 [ 107.220187][ T8935] rtnetlink_rcv+0x28/0x38 [ 107.220200][ T8935] netlink_unicast+0x600/0x7f8 [ 107.220207][ T8935] netlink_sendmsg+0x648/0x948 [ 107.220216][ T8935] __sock_sendmsg+0xc8/0x17c [ 107.220224][ T8935] ____sys_sendmsg+0x3d0/0x6c8 [ 107.220232][ T8935] ___sys_sendmsg+0x198/0x224 [ 107.220240][ T8935] __sys_sendmsg+0x158/0x204 [ 107.220249][ T8935] __arm64_sys_sendmsg+0x88/0x9c [ 107.220257][ T8935] invoke_syscall+0x98/0x244 [ 107.220267][ T8935] el0_svc_common+0xec/0x23c [ 107.220277][ T8935] do_el0_svc+0x4c/0x5c [ 107.220286][ T8935] el0_svc+0x64/0x260 [ 107.220296][ T8935] el0t_64_sync_handler+0x44/0x104 [ 107.220304][ T8935] el0t_64_sync+0x198/0x19c [ 107.558694][ T8949] usb usb7: check_ctrlrecip: process 8949 (syz.7.812) requesting ep 01 but needs 81 [ 107.558977][ T8949] vhci_hcd vhci_hcd.2: default hub control req: 0211 v0087 i0001 l0 [ 107.729263][ T8962] loop9: detected capacity change from 0 to 128 [ 107.735163][ T8962] EXT4-fs (loop9): Test dummy encryption mode enabled [ 107.746971][ T8962] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.789116][ T8962] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[8963] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8962] [ 107.813856][ T7761] EXT4-fs error (device loop9): ext4_readdir:226: inode #11: comm syz-executor: path /44/mnt/lost+found: directory fails checksum at offset 6144 [ 107.824239][ T7761] EXT4-fs error (device loop9): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 107.829122][ T7761] EXT4-fs error (device loop9): ext4_readdir:226: inode #11: comm syz-executor: path /44/mnt/lost+found: directory fails checksum at offset 6144 [ 107.837233][ T7761] EXT4-fs error (device loop9): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 107.838549][ T7761] EXT4-fs error (device loop9): ext4_readdir:226: inode #11: comm syz-executor: path /44/mnt/lost+found: directory fails checksum at offset 6144 [ 107.840649][ T7761] EXT4-fs error (device loop9): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 107.842641][ T7761] EXT4-fs error (device loop9): ext4_readdir:226: inode #11: comm syz-executor: path /44/mnt/lost+found: directory fails checksum at offset 6144 [ 107.842929][ T7761] EXT4-fs error (device loop9): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 107.844644][ T7761] EXT4-fs error (device loop9): ext4_readdir:226: inode #11: comm syz-executor: path /44/mnt/lost+found: directory fails checksum at offset 6144 [ 107.847712][ T7761] EXT4-fs error (device loop9): ext4_empty_dir:3116: inode #11: block 6: comm syz-executor: Directory block failed checksum [ 107.969608][ T8978] can0: slcan on pts0. [ 108.134944][ T8977] can0 (unregistered): slcan off pts0. [ 108.165973][ T8984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.169087][ T8984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.224183][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.224396][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.306656][ T8968] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.361422][ T8764] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.400335][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.401972][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.403697][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.404917][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.405209][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.450447][ T8764] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.492586][ T8994] wlan0 speed is unknown, defaulting to 1000 [ 108.504029][ T8764] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.572345][ T8764] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.583818][ T8994] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.585299][ T8994] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.585382][ T8994] bridge_slave_0: entered allmulticast mode [ 108.586266][ T8994] bridge_slave_0: entered promiscuous mode [ 108.587906][ T8994] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.588035][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.588091][ T8994] bridge_slave_1: entered allmulticast mode [ 108.588510][ T8994] bridge_slave_1: entered promiscuous mode [ 108.595487][ T8994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.598356][ T8994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.606754][ T8994] team0: Port device team_slave_0 added [ 108.608119][ T8994] team0: Port device team_slave_1 added [ 108.615425][ T8994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.615451][ T8994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.615467][ T8994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.616007][ T8994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.616014][ T8994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.616027][ T8994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.626769][ T8994] hsr_slave_0: entered promiscuous mode [ 108.627109][ T8994] hsr_slave_1: entered promiscuous mode [ 108.627321][ T8994] debugfs: 'hsr0' already exists in 'hsr' [ 108.627332][ T8994] Cannot create hsr debugfs directory [ 108.745909][ T8764] bridge_slave_1: left allmulticast mode [ 108.745953][ T8764] bridge_slave_1: left promiscuous mode [ 108.746070][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.760411][ T8764] bridge_slave_0: left allmulticast mode [ 108.760450][ T8764] bridge_slave_0: left promiscuous mode [ 108.760533][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.777504][ T9017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.777705][ T9017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.851346][ T8764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.874525][ T8764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.884102][ T8764] bond0 (unregistering): Released all slaves [ 108.941756][ T8764] tipc: Left network mode [ 109.119165][ T8764] hsr_slave_0: left promiscuous mode [ 109.120459][ T8764] hsr_slave_1: left promiscuous mode [ 109.121439][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.121451][ T8764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.124776][ T8764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.124800][ T8764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.128890][ T8764] veth1_macvtap: left promiscuous mode [ 109.129138][ T8764] veth0_macvtap: left promiscuous mode [ 109.129197][ T8764] veth1_vlan: left promiscuous mode [ 109.129270][ T8764] veth0_vlan: left promiscuous mode [ 109.191513][ T8907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.307549][ T8764] team0 (unregistering): Port device team_slave_1 removed [ 109.312604][ T8764] team0 (unregistering): Port device team_slave_0 removed [ 109.482504][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.490740][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.787536][ T9068] [ 109.787995][ T9068] ============================= [ 109.788848][ T9068] WARNING: suspicious RCU usage [ 109.789673][ T9068] syzkaller #0 Tainted: G L [ 109.790712][ T9068] ----------------------------- [ 109.791488][ T9068] lib/maple_tree.c:720 suspicious rcu_dereference_check() usage! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 109.792709][ T9068] [ 109.792709][ T9068] other info that might help us debug this: [ 109.792709][ T9068] [ 109.794650][ T9068] [ 109.794650][ T9068] rcu_scheduler_active = 2, debug_locks = 1 [ 109.796041][ T9068] locks held by syz.0.848/9068: 1, last CPU#1: [ 109.797165][ T9068] #0: ffff0000d00ba0a0 (&ctx->uring_lock){+.+.}-{4:4}, at: tctx_task_work_run+0x288/0xc2c [ 109.798884][ T9068] [ 109.798884][ T9068] stack backtrace: [ 109.799882][ T9068] CPU: 1 UID: 0 PID: 9068 Comm: syz.0.848 Tainted: G L syzkaller #0 PREEMPT [ 109.801598][ T9068] Tainted: [L]=SOFTLOCKUP [ 109.802337][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.804156][ T9068] Call trace: [ 109.804762][ T9068] show_stack+0x2c/0x3c (C) [ 109.805592][ T9068] __dump_stack+0x30/0x40 [ 109.806380][ T9068] dump_stack_lvl+0xd8/0x12c [ 109.807234][ T9068] dump_stack+0x1c/0x28 [ 109.808021][ T9068] lockdep_rcu_suspicious+0x168/0x26c [ 109.809013][ T9068] mas_start+0x3a0/0x5b4 [ 109.809777][ T9068] mas_walk+0x9c/0x2b8 [ 109.810505][ T9068] ublk_init_iod+0x4a4/0xa68 [ 109.811327][ T9068] ublk_setup_iod+0x1e8/0x260 [ 109.812181][ T9068] ublk_dispatch_req+0x94/0x52c [ 109.813045][ T9068] ublk_cmd_tw_cb+0x64/0x78 [ 109.813843][ T9068] tctx_task_work_run+0x5bc/0xc2c [ 109.814739][ T9068] tctx_task_work+0x3c/0x68 [ 109.815556][ T9068] task_work_run+0x1cc/0x25c [ 109.816387][ T9068] io_run_task_work+0x380/0x544 [ 109.817274][ T9068] io_cqring_wait+0xd88/0x1d94 [ 109.818122][ T9068] __arm64_sys_io_uring_enter+0x494/0x16c4 [ 109.819158][ T9068] invoke_syscall+0x98/0x244 [ 109.819975][ T9068] el0_svc_common+0xec/0x23c [ 109.820811][ T9068] do_el0_svc+0x4c/0x5c [ 109.821553][ T9068] el0_svc+0x64/0x260 [ 109.822276][ T9068] el0t_64_sync_handler+0x44/0x104 [ 109.823197][ T9068] el0t_64_sync+0x198/0x19c [ 110.152358][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.297865][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.304831][ T5419] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.304884][ T5419] buffer_io_error: 11531 callbacks suppressed [ 110.304893][ T5419] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306171][ T25] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.306187][ T25] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306257][ T25] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.306268][ T25] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306313][ T25] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.306324][ T25] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306369][ T25] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.306380][ T25] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306428][ T25] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.306438][ T25] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306487][ T25] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.306497][ T25] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306539][ T25] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.306549][ T25] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306567][ T4712] ldm_validate_partition_table(): Disk read failed. [ 110.306599][ T25] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.306609][ T25] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306650][ T25] I/O error, dev ublkb2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 110.306660][ T25] Buffer I/O error on dev ublkb2, logical block 0, async page read [ 110.306752][ T4712] Dev ublkb2: unable to read RDB block 0 [ 110.307044][ T4712] ublkb2: unable to read partition table [ 110.381792][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.468081][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.473189][ T51] Bluetooth: hci3: command tx timeout [ 110.585879][ T12] bridge_slave_1: left allmulticast mode [ 110.585917][ T12] bridge_slave_1: left promiscuous mode [ 110.586012][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.588544][ T12] bridge_slave_0: left allmulticast mode [ 110.588559][ T12] bridge_slave_0: left promiscuous mode [ 110.588627][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.679096][ T12] team0: Port device bridge1 removed [ 110.685767][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.699099][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.715277][ T12] bond0 (unregistering): Released all slaves [ 110.727208][ T4393] 8021q: adding VLAN 0 to HW filter on device eth3 [ 110.899277][ T4393] 8021q: adding VLAN 0 to HW filter on device eth22 [ 110.968458][ T12] hsr_slave_0: left promiscuous mode [ 110.969856][ T12] hsr_slave_1: left promiscuous mode [ 110.971277][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.972711][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.977317][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.978825][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.985374][ T12] veth1_macvtap: left promiscuous mode [ 110.986469][ T12] veth0_macvtap: left promiscuous mode [ 110.987626][ T12] veth1_vlan: left promiscuous mode [ 110.988619][ T12] veth0_vlan: left promiscuous mode [ 111.101553][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.105587][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.160043][ T4393] 8021q: adding VLAN 0 to HW filter on device eth21 [ 111.277472][ T12] IPVS: stop unused estimator thread 0... [ 111.301302][ T4393] 8021q: adding VLAN 0 to HW filter on device eth20 [ 111.368623][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.432582][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.497628][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.547749][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.680274][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.742221][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.820725][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.911353][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.072652][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.072704][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.152755][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.158186][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.219386][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.219436][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.271312][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.271365][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.339562][ T12] bridge_slave_1: left allmulticast mode [ 112.340747][ T12] bridge_slave_1: left promiscuous mode [ 112.342072][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.351465][ T12] bridge_slave_0: left allmulticast mode [ 112.351501][ T12] bridge_slave_0: left promiscuous mode [ 112.351601][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.357872][ T12] bridge_slave_1: left allmulticast mode [ 112.359023][ T12] bridge_slave_1: left promiscuous mode [ 112.360276][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.362707][ T12] bridge_slave_0: left allmulticast mode [ 112.362729][ T12] bridge_slave_0: left promiscuous mode [ 112.366374][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.374830][ T12] bridge_slave_1: left allmulticast mode [ 112.374865][ T12] bridge_slave_1: left promiscuous mode [ 112.374959][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.381360][ T12] bridge_slave_0: left allmulticast mode [ 112.382501][ T12] bridge_slave_0: left promiscuous mode [ 112.387253][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.392217][ T12] bridge_slave_1: left allmulticast mode [ 112.393450][ T12] bridge_slave_1: left promiscuous mode [ 112.395143][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.397637][ T12] bridge_slave_0: left allmulticast mode [ 112.398768][ T12] bridge_slave_0: left promiscuous mode [ 112.399939][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.402993][ T12] pimreg: left allmulticast mode [ 112.488652][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.503434][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.543904][ T12] bond0 (unregistering): Released all slaves [ 112.589791][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.624222][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.635367][ T12] bond0 (unregistering): Released all slaves [ 112.687836][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.704474][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.733855][ T12] bond0 (unregistering): Released all slaves [ 112.788411][ T12] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.795741][ T12] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.804028][ T12] . (unregistering): Released all slaves [ 112.806534][ T12] bond0 (unregistering): Released all slaves [ 112.810663][ T4393] 8021q: adding VLAN 0 to HW filter on device eth0 [ 112.958130][ T4393] 8021q: adding VLAN 0 to HW filter on device eth1 [ 113.089115][ T4393] 8021q: adding VLAN 0 to HW filter on device eth23 [ 113.172005][ T4712] wlan0 speed is unknown, defaulting to 1000 [ 113.172041][ T4712] infiniband syz2: ib_query_port failed (-19) [ 113.223015][ T4393] 8021q: adding VLAN 0 to HW filter on device eth2 [ 113.411366][ T4393] 8021q: adding VLAN 0 to HW filter on device eth25 [ 113.568624][ T4393] 8021q: adding VLAN 0 to HW filter on device eth24 [ 113.571415][ T12] hsr_slave_0: left promiscuous mode [ 113.572497][ T12] hsr_slave_1: left promiscuous mode [ 113.572737][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.575891][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.578995][ T12] hsr_slave_0: left promiscuous mode [ 113.580463][ T12] hsr_slave_1: left promiscuous mode [ 113.581848][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.581951][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.585010][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.585034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.589817][ T12] hsr_slave_0: left promiscuous mode [ 113.590940][ T12] hsr_slave_1: left promiscuous mode [ 113.591213][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.591225][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.592178][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.592187][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.599455][ T12] hsr_slave_0: left promiscuous mode [ 113.600506][ T12] hsr_slave_1: left promiscuous mode [ 113.600760][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.600770][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.601753][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.601763][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.616541][ T12] veth1_macvtap: left promiscuous mode [ 113.616586][ T12] veth0_macvtap: left promiscuous mode [ 113.616636][ T12] veth1_vlan: left promiscuous mode [ 113.616656][ T12] veth0_vlan: left promiscuous mode [ 113.620745][ T12] veth1_macvtap: left promiscuous mode [ 113.621079][ T12] veth0_macvtap: left promiscuous mode [ 113.621130][ T12] veth1_vlan: left promiscuous mode [ 113.621165][ T12] veth0_vlan: left promiscuous mode [ 113.625296][ T12] veth1_macvtap: left promiscuous mode [ 113.625325][ T12] veth0_macvtap: left promiscuous mode [ 113.625368][ T12] veth1_vlan: left promiscuous mode [ 113.625409][ T12] veth0_vlan: left promiscuous mode [ 113.784555][ T12] team0 (unregistering): Port device team_slave_1 removed [ 113.788207][ T12] team0 (unregistering): Port device team_slave_0 removed [ 113.910543][ T12] team0 (unregistering): Port device team_slave_1 removed [ 113.918081][ T12] team0 (unregistering): Port device team_slave_0 removed [ 114.040201][ T12] team0 (unregistering): Port device team_slave_1 removed [ 114.044125][ T12] team0 (unregistering): Port device team_slave_0 removed [ 114.184119][ T12] team0 (unregistering): Port device team_slave_1 removed [ 114.187841][ T12] team0 (unregistering): Port device team_slave_0 removed [ 114.375239][ T4393] 8021q: adding VLAN 0 to HW filter on device eth27 [ 114.513661][ T4393] 8021q: adding VLAN 0 to HW filter on device eth26 [ 114.655596][ T4393] 8021q: adding VLAN 0 to HW filter on device eth28 [ 114.799172][ T4393] 8021q: adding VLAN 0 to HW filter on device eth30 [ 114.922480][ T4393] 8021q: adding VLAN 0 to HW filter on device eth29 [ 114.966491][ T12] IPVS: stop unused estimator thread 0... [ 114.966719][ T12] IPVS: stop unused estimator thread 0... [ 115.068098][ T4393] 8021q: adding VLAN 0 to HW filter on device eth31 [ 115.190572][ T4393] 8021q: adding VLAN 0 to HW filter on device eth32 [ 115.313493][ T4393] 8021q: adding VLAN 0 to HW filter on device eth33 [ 115.436534][ T4393] 8021q: adding VLAN 0 to HW filter on device eth34 [ 115.556387][ T4393] 8021q: adding VLAN 0 to HW filter on device eth35