last executing test programs:

3.867820048s ago: executing program 3 (id=341):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b33, 0xffffffffffffffff)
getsockopt$inet6_opts(r0, 0x3a, 0x36, 0x0, 0x0)
r2 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x10000, 0x0, 0x10000001})
io_uring_enter(r2, 0x0, 0xffefffff, 0x21, &(0x7f0000000000)={[0xffffffffffffffff]}, 0x8)

3.866970317s ago: executing program 3 (id=343):
r0 = socket$inet6(0xa, 0x5, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
listen(r0, 0x10000)
unshare(0x400)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080), 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0000000028120700080004008100000008001b00"], 0x30}}, 0x4004090)

3.818847493s ago: executing program 3 (id=346):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05d90700000004000000000001"], 0x48)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r0 = fsopen(&(0x7f00000000c0)='pstore\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xf)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x1, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0x0, 0xffff}, {0x3, 0xfff3}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xaa, 0xf8, 0x4, 0x4, 0x2, 0x1, 0x2}}, {0x0, 0x2, [0x8, 0x3, 0x7, 0x2]}}, {{0x0, 0x1, {0x3, 0x2b, 0x6, 0x5, 0x0, 0x562, 0x379}}, {0x0, 0x2, [0x424, 0x7ff, 0x6]}}, {{0x0, 0x1, {0xa3, 0x31, 0x0, 0x80000000, 0x0, 0xcb0f, 0xfa}}, {0x0, 0x2, [0x8, 0xf, 0xfff9, 0x42, 0x4]}}, {{0x0, 0x1, {0x2f, 0x3, 0x6, 0xf, 0x2, 0x4}}, {0x0, 0x2, [0x8]}}, {{0x0, 0x1, {0x56, 0x7, 0x46f9, 0xffffffff, 0x1, 0x9}}, {0x0, 0x2, [0xe9, 0xc2, 0xb, 0x1d]}}, {{0x0, 0x1, {0x2, 0xf1, 0x3, 0x7, 0x1, 0xe85c, 0x7}}, {0x0, 0x2, [0x1000, 0x3]}}, {{0x0, 0x1, {0x5, 0xff, 0x7f, 0x98, 0x2, 0xf30, 0x1}}, {0x0, 0x2, [0x8, 0x61f, 0x1, 0x1]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008400}, 0x24000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
sendmmsg$inet(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@ip_ttl={{0x14, 0x0, 0x34, 0xffff8001}}], 0x18}}], 0x2, 0x20044000)
r6 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x8405, &(0x7f0000000200)={[{@nogrpid}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x8b11, 0x1, 0x5, 0xfffff57c, 0xe0ba, 0x7, 0x4, 0x7}})
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40e8662e, &(0x7f0000000000)={0xc550, 0x40000000000002, 0x10, 0xb, 0x5, 0x1})
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000240)='ro\x00', 0x0, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, <r8=>0xffffffffffffffff})
sched_getparam(r8, &(0x7f00000001c0))
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140))

3.727711308s ago: executing program 4 (id=347):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660800000000010018000000000000000000fffd000000009500000000000000360a000000000000180300002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00e7ff00850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xdd, &(0x7f0000000080)=""/221}, 0x94)

3.727340578s ago: executing program 4 (id=348):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x68242, 0x0)

3.674724081s ago: executing program 4 (id=349):
socket(0x1, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, 0x0, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000070000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)

2.932199143s ago: executing program 3 (id=353):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc0189436, 0x0)
r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x0)
sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@llc={0x1a, 0x18, 0xf1, 0x1, 0x7, 0xd1, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="5d9cc502c136beccf2698babdc2a276ec8f7ddaa0c538ab6eebe2a97243a478a465c9cf72910d79cb7e60b6d5f9617cedf2c740b5f6cfdf5cdeb3422ee6f771a09937dfab5cbc747d65b80d5091dd2f81f5cea813a23765334c224f9b1dc15c02631a844f34afe322d20ef959ece4767a14209f2beea49007d091dcfa0756dcc58ee116ade573fac81121687c3659b341ac14e49e51b5435d2a5bd0ca95bfdbd23e31a5d91994a97aa781666f7c219d7ffba38f421457fad8cd972c5912e1f7ded36f05077a4946c993107eb647a6b4f70a738cf250524a5eca4b74a2183fb1ee6b5697ebd", 0xe5}], 0x1, &(0x7f00000002c0)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xcc61}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x5f3b}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9f}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xf0}, 0x4004800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000840)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r3, 0x0, &(0x7f0000000180)="859abd8cdb", 0x5, 0x8000})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000440)={0x48, 0x7, r0, 0x0, 0x0, <r4=>0x0, 0x4, 0x6})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r2, 0x3ba0, &(0x7f00000004c0)={0x48, 0x6, r3, 0x0, r4})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r3, 0x0, &(0x7f0000a34000/0x1000)=nil, 0x1000})
ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1)
mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f00000000c0), 0x400008, &(0x7f0000000400)=ANY=[@ANYBLOB="75690d2d853d", @ANYRESHEX=0x0, @ANYBLOB=',\x00'])

2.821131861s ago: executing program 2 (id=354):
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x40, 0x5}})
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
r1 = eventfd2(0x9, 0x800)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000080)=r1, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000000c0)=r1, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {r3, 0xee00}}, './file0\x00'})
r5 = syz_io_uring_setup(0x63d2, &(0x7f0000000280)={0x0, 0x13a9, 0x8000, 0x1, 0x148, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380))
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x84)
bind$can_raw(r0, &(0x7f0000000540)={0x1d, r2}, 0x10)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000580)={0x0, 0x3, 0xa4, 0x7})
write(r5, &(0x7f00000005c0)="74353326628154d20842e70fa414c5d69217cd628e249f2e27d24a4bb10f67f100d347bc277e52bba55489e328d12ac38c53eeca27157ba0d302ead32a833b67238f7e7fef7f4f977de833ca84", 0x4d)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000640)={'wg0\x00'})
r8 = accept4$inet(r0, &(0x7f0000000680)={0x2, 0x0, @multicast2}, &(0x7f00000006c0)=0x10, 0x0)
fsetxattr$security_evm(r8, &(0x7f0000000700), &(0x7f0000000740)=@sha1={0x1, "88e9ca7ec979854c047f97f198a3bea4a27c201e"}, 0x15, 0x1)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$int_in(r10, 0x5421, &(0x7f00000007c0)=0x7)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000b40)={&(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00)=[{}, {}], &(0x7f0000000ac0)=[<r11=>0x0], &(0x7f0000000b00)=[0x0], 0x2, 0x1, 0x5})
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000bc0)={&(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], r11, 0x0, '\x00', 0x2, 0x9})
r12 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000c00)={0x0, 0x6, 0x0, 0x400, 0x0, [0x0, <r13=>0x0], [0x9, 0x8, 0x80000000, 0xc], [0xfffffff7, 0x0, 0x10001, 0xa], [0xf1b0, 0x6, 0x9, 0x4]})
ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000c80)={r13})
r14 = syz_open_dev$tty1(0xc, 0x4, 0x3)
writev(r14, &(0x7f0000000e80)=[{&(0x7f0000000cc0)="7f82b9b5a2ed8ff107eab69c02ebb05c2629d576df197bdb68dc6625da2ca1284614c6e77ce0c763880caf6be3fb4b5de1b23b22097609f3dbdda6bf2b34da5ee5c6242be264ba0b026a1457f67426be7233b6e82ef6218be126a0e3685cf93bf55abbd9f04ac28216a67ac30c85f08518901fd291fe8d4c529d92bf1d8ebf53f852f0defe95cb2ea4173d8ec236937a8cd9fb", 0x93}, {&(0x7f0000000d80)="dfc2c3c8edf8b0a2e208f51a2d248fe7a7b2da654da8e15399f9a070a926eb1eb826faf894bd0b4b1e8ec24991b7938b5a92a03b933798e468aa058993677cf17ef47f12d58dff4f926efabdb1d3fca58680eb6a79dc1e3f1330704241ec6aa342691453035b5f8cc58c9f0fe0d2ea9d1b3130795a5639f95dc16eb34fb659aac4353e88dee77f8a272f9da081599c298f04c4325b309e5f78a6a7de055e8a3b8469e0a82ba475845b2408335d64dd87fb3b9502b23b1ebdfeee90d18b541b53bacd58df2d143f", 0xc7}], 0x2)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000000ec0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r15=>0x0}], 0x5, "85ed4c5af89dfa"})
ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f0000001ec0)={{<r16=>0x0, 0x8, 0x3, 0x8, 0x6, 0x6, 0x2f0, 0x9, 0x7, 0x8cd, 0x99, 0x200, 0x2, 0x9, 0xfffffffffffffff8}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f0000002ec0)={r15, r16, "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", "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"})

2.711702453s ago: executing program 2 (id=356):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg1\x00', @link_local})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000100)=0x8001, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="67f88afc9e70bba80d30bdc9db9210cefeae792d01acd137c811b2e3d15c4f412ef2bd25c63779c35f5443d03be2cc72c504fc5b00"/65])
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dvmrp1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)

2.710858484s ago: executing program 4 (id=357):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1000008, &(0x7f0000000440), 0x0, 0x44b, &(0x7f0000001a40)="$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")
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(&(0x7f0000000540), 0x0, 0x322020, 0x0, 0x3, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
syz_clone(0xc2100, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058565d, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x8, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfc, "244cb303"}, 0x0, 0x1, {0x0}, 0x0, 0x0, r1})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="ac1414bb64010102010000000500000affffffffac02d57dd300002758a8e8fa13fa"], 0x24)
pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

2.642478516s ago: executing program 4 (id=359):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000480)={[{@rodir}, {@numtail}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@rodir}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x7ff}}, {@fat=@flush}, {@shortname_winnt}]}, 0x81, 0x2d1, &(0x7f0000000880)="$eJzs3c1qJFUUAOBTneqkWwfSC1ciWKALV2FmniBBIgxmpdRCNzo4PSDdzUAaGvzBntnoXnDlO7jzAXwAN76BD6C4cxZiSXV19U+lk0zG/OjwfZs6XfeeuufeviShoW8+fm00ePBo/PDJl79Gp5NEaz/242kSvWhF7XGs+fpWAAD/Z0+LIv4oKuf13V57lbausi4A4Oo88+//rWsrCQC4Yu9/8OG7B0dHh+9lWSdi9M0kT6K6Vu0HD+PTGEY/bsdu/BVRLFTxrXtHh5FmWf1hwKQbecToo5/nrw9+i5jl34nd6DXz608Uspl4czSd5OXI5bUdLyURB0VSdbkbu/FKRNGO+UOqyzv3jg7vZo38sph8O9564/t5/X/3Yy9245dP4lEM48HsEcv8r+5k2dvFd39+Uc0gj0imk3xn1m+p8BcQAAAAAAAAAAAAAAAAAAAAAACXZi9b6K2ev1OfBri312xP84jfR3X+8nyg/ZidDzQ/4We6cr7O7SzL6mN8Jnk7qvN90ng1jfSm5g0AAAAAAAAAAAAAAAAAAAD/JePPPh/cHw77x2vBT0UZdM/s0wzSlTv11/rPz9ocDH6IuHhWGWyf0ye25qUNkxNDJHVTM6soiuKUB/54ylg7Fym+u2nQaJ22hukwquK/vfj6vL5xgv8qiEiiDHrLUuvdNbhfNc1W/vF8dYf9nZX0zuZNsrLr6m14PE7O2JDdxp1iZenqYOu5t80zb7+Xnze9G5uayhm3F4u5ntWpFnNxp32J72n5fjUkl/uDBwAAAAAAAAAAAAAAAAAAOGH5pd/YPtH45EZKAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBrt/z//4sges07zWA6T57daZ3deed4vGHY3jVPEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBfcPwEAAP//1rdOEQ==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x80047210, 0x4) (async)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9})

2.510221353s ago: executing program 3 (id=361):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d4000000", @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

2.508152878s ago: executing program 2 (id=362):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800f3ff850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.491545028s ago: executing program 2 (id=363):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x2, 0x7f})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000880)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f00000007c0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0, {<r3=>0xee00, 0xee00}}, './file0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2)
r4 = getpid()
sched_setscheduler(r4, 0x3, &(0x7f0000000400)=0x3)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r5, &(0x7f0000001980)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x18, 0x0}}], 0x1, 0x20002040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x24, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x4}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9e8}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x58}, @generic={0x9, 0x0, 0xb, 0x9b26, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0xfe, 0xb2, &(0x7f0000000680)=""/178, 0x41100, 0x2, '\x00', 0x0, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0xd, 0x5, 0x9}, 0x10, 0x28522, 0xffffffffffffffff, 0x1, &(0x7f0000000780)=[r2, r2, r2], &(0x7f0000000800)=[{0x4, 0x3, 0x7, 0x6}], 0x10, 0x9}, 0x94)
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000140)={0x401, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffe0}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000c852bd19fcd74a4900000000000000008000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.397914392s ago: executing program 3 (id=364):
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
fsetxattr$smack_xattr_label(r4, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f00000000c0)={'s.events\x00\x00\x00\x00'}, 0xd, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)

1.961146829s ago: executing program 4 (id=367):
socket(0x1, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, 0x0, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000300000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)

1.880408648s ago: executing program 32 (id=367):
socket(0x1, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r3, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, 0x0, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000300000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)

1.668166102s ago: executing program 1 (id=369):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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")
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_setup(0x6, 0x0)
pipe2(&(0x7f0000000180), 0x80000)
add_key(&(0x7f0000000240)='encrypted\x00', 0x0, &(0x7f0000000780)="836dcc3d381db767ae3086310d74e318de0595f5413cc44dba7aac216bef7463dc5ebb5290db094cc7", 0x29, 0xfffffffffffffffa)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000880), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x41)
fspick(r3, &(0x7f0000000040)='./file0\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x64}}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x1)

1.160076068s ago: executing program 2 (id=370):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)

1.019587537s ago: executing program 0 (id=372):
r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000088}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0xfffffffd}, @mss={0x2, 0xd}], 0x2) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', <r7=>0x0}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@setlink={0x2c, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x800, 0x80}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a3000000000140000001100010000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x15}, 0x0)
syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote={0xac, 0x24}, @remote}}}}}, 0x0)
fadvise64(r0, 0x8, 0xc, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000470001000800000095"], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x60, 0x10, 0x401, 0x400800, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}}, 0x4040)

743.792366ms ago: executing program 1 (id=373):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800001f850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

679.083913ms ago: executing program 0 (id=374):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf252700000005003100030000001400300053e0e85290ceb080fb816d3cdadf198b0a0001007770616e31"], 0xd4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

580.154056ms ago: executing program 1 (id=375):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000100000000000000000002851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000100180000000000000000000000010000009500000000000000360a000000000000180300002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00e7ff00850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xdd, &(0x7f0000000080)=""/221}, 0x94)

579.607013ms ago: executing program 0 (id=376):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x18, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffd4a, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev={0xac, 0x14, 0x14, 0xd}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0)

475.653598ms ago: executing program 1 (id=377):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) (async)
r3 = socket$inet6(0xa, 0x3, 0xfa)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0x400000002000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) (async, rerun: 32)
splice(0xffffffffffffffff, &(0x7f0000000180)=0x5, r1, &(0x7f0000000300)=0xba, 0x7, 0x8) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=ANY=[@ANYRES16=r6, @ANYRES64=r7, @ANYBLOB="2c59a7878886b1c6e3ddc322743bd5db3d7aa70cdaa5ec131534b2e36396b022f9d0882c9b11fc57bd6d4429dada09570f996680bf942d7dfcceadee39be709714a22478a8ec8cd7a322ca7e41aec83912f59a3839580eb8a50d80d9dbf701770c1f8c1dad5b4a1910175edbd7810114e044ecbaef8099147e8257b870"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendto$packet(r5, &(0x7f0000000480)="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", 0x1000, 0x4000480, &(0x7f0000001480)={0x11, 0x1a, r8, 0x1, 0x9, 0x6, @remote}, 0x14)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64=r2, @ANYRES8=r6, @ANYRESDEC=r6, @ANYRESDEC=r7, @ANYRES32, @ANYRES16=r5, @ANYRES16], 0x18) (async, rerun: 64)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) (rerun: 64)
ftruncate(r9, 0x6000000)
r10 = inotify_init1(0x0)
inotify_add_watch(r10, &(0x7f00000001c0)='./file1\x00', 0xa4000161)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) (async, rerun: 64)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64)

397.949796ms ago: executing program 0 (id=378):
unshare(0x400)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nojournal_checksum}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r2, &(0x7f0000000740)='E', 0x1, 0x4fed3)

162.474151ms ago: executing program 2 (id=379):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@gettfilter={0x54, 0x2e, 0x2, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x4, 0x8}, {0xe, 0xf}, {0x6, 0xd}}, [{0x8, 0xb, 0xfffffff9}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x30000000)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00'})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc1400e8034788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fanotify_init(0x10, 0x101000)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221400, 0x76)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)

91.565569ms ago: executing program 0 (id=380):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0)
mount_setattr(r0, &(0x7f0000000180)='./file0\x00', 0x1000, &(0x7f00000001c0)={0x100074, 0x100080, 0x140000, {r2}}, 0x20)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
umount2(&(0x7f0000000240)='./file0\x00', 0x1)

91.427351ms ago: executing program 1 (id=381):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006608000000000100180000000000000000000000000200009500000000000000360a000000000000180300002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff00e7ff00850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0xdd, &(0x7f0000000080)=""/221}, 0x94)

39.127847ms ago: executing program 1 (id=382):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x120, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xd4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3003580}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xfffffffffffffd4a, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev={0xac, 0x14, 0x14, 0xd}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x0)

0s ago: executing program 0 (id=383):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dummy\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffda8, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000, 0x2, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xffff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0)
write(r1, &(0x7f0000000500)='1\n', 0x2) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0)
write(r2, &(0x7f0000001400)='2\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0)
write(r3, &(0x7f0000000700)='1\n', 0x2) (async, rerun: 64)
write(0xffffffffffffffff, &(0x7f0000003400)='2\n', 0x2) (rerun: 64)
r4 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0)
write(r4, &(0x7f0000002700)='1', 0x1)
mount(0x0, &(0x7f0000000800)='./dev\x00', 0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0)
write(r5, &(0x7f0000001000)="53464f5a214e2187", 0x1000) (async)
close(r5) (async)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e20, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x50, {0x2, 0x4e24, @local}, 'veth1_to_hsr\x00'}) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000002a00)='./dev/nullb2\x00', 0x2, 0x0)
write(r7, &(0x7f0000003000)="53464f5adeb1de78", 0x1000) (async)
close(r7) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt1\x00', 0x1ff) (async, rerun: 64)
mount(0x0, 0x0, &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts.
[   27.687890][ T4699] cgroup: Unknown subsys name 'net'
[   27.817641][ T4699] cgroup: Unknown subsys name 'cpuset'
[   27.819689][ T4699] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   27.960011][ T4699] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   28.816515][ T4723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   28.816695][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   28.818409][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   28.819068][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   28.819340][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   28.819709][ T4717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   28.819885][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   28.820028][ T4717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   28.820767][ T4717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   28.820930][ T4717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   28.821189][ T4717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   28.822311][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   28.831888][ T4717] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   28.832326][ T4717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   28.832483][ T4717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   28.832809][ T4717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   28.833016][ T4717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   28.833525][ T4723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   28.833784][ T4723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   28.834128][ T4723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   28.834341][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   28.838300][ T4723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   28.844435][ T4712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   28.847011][ T4712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   28.852014][ T4712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   29.170320][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.171916][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.173242][ T4714] bridge_slave_0: entered allmulticast mode
[   29.174779][ T4714] bridge_slave_0: entered promiscuous mode
[   29.180027][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.181380][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.182693][ T4714] bridge_slave_1: entered allmulticast mode
[   29.184148][ T4714] bridge_slave_1: entered promiscuous mode
[   29.225691][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.225743][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.225881][ T4719] bridge_slave_0: entered allmulticast mode
[   29.227533][ T4719] bridge_slave_0: entered promiscuous mode
[   29.236709][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.242158][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.242351][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.242679][ T4719] bridge_slave_1: entered allmulticast mode
[   29.243107][ T4719] bridge_slave_1: entered promiscuous mode
[   29.253673][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.266035][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.273197][ T4714] team0: Port device team_slave_0 added
[   29.282503][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.286005][ T4714] team0: Port device team_slave_1 added
[   29.304315][ T4719] team0: Port device team_slave_0 added
[   29.305438][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.306889][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.306954][ T4710] bridge_slave_0: entered allmulticast mode
[   29.307398][ T4710] bridge_slave_0: entered promiscuous mode
[   29.320044][ T4719] team0: Port device team_slave_1 added
[   29.323955][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.325244][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.325949][ T4710] bridge_slave_1: entered allmulticast mode
[   29.326471][ T4710] bridge_slave_1: entered promiscuous mode
[   29.330357][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.331646][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.336037][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.338955][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.340190][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.344302][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.360523][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.361858][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.366129][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.379715][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.381364][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.382283][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.382292][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.382305][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.394504][ T4719] hsr_slave_0: entered promiscuous mode
[   29.394890][ T4719] hsr_slave_1: entered promiscuous mode
[   29.395462][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.395523][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.395613][ T4720] bridge_slave_0: entered allmulticast mode
[   29.396046][ T4720] bridge_slave_0: entered promiscuous mode
[   29.397447][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.397469][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.397521][ T4720] bridge_slave_1: entered allmulticast mode
[   29.397947][ T4720] bridge_slave_1: entered promiscuous mode
[   29.405866][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.406565][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.406607][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.406670][ T4709] bridge_slave_0: entered allmulticast mode
[   29.407109][ T4709] bridge_slave_0: entered promiscuous mode
[   29.411306][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.411330][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.411383][ T4709] bridge_slave_1: entered allmulticast mode
[   29.411792][ T4709] bridge_slave_1: entered promiscuous mode
[   29.419881][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   29.421912][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.431519][ T4710] team0: Port device team_slave_0 added
[   29.433455][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   29.445577][ T4709] team0: Port device team_slave_0 added
[   29.449948][ T4709] team0: Port device team_slave_1 added
[   29.451561][ T4710] team0: Port device team_slave_1 added
[   29.457977][ T4720] team0: Port device team_slave_0 added
[   29.458793][ T4720] team0: Port device team_slave_1 added
[   29.463177][ T4714] hsr_slave_0: entered promiscuous mode
[   29.463510][ T4714] hsr_slave_1: entered promiscuous mode
[   29.463711][ T4714] debugfs: 'hsr0' already exists in 'hsr'
[   29.463752][ T4714] Cannot create hsr debugfs directory
[   29.479221][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.480549][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.485364][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.487680][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.487709][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.487723][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.488806][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.488815][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.488826][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.492379][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0
[   29.492388][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.492401][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   29.503031][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.503041][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.503057][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.525014][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1
[   29.526338][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   29.530621][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   29.551951][ T4720] hsr_slave_0: entered promiscuous mode
[   29.552285][ T4720] hsr_slave_1: entered promiscuous mode
[   29.552482][ T4720] debugfs: 'hsr0' already exists in 'hsr'
[   29.552492][ T4720] Cannot create hsr debugfs directory
[   29.561821][ T4709] hsr_slave_0: entered promiscuous mode
[   29.562153][ T4709] hsr_slave_1: entered promiscuous mode
[   29.562385][ T4709] debugfs: 'hsr0' already exists in 'hsr'
[   29.562394][ T4709] Cannot create hsr debugfs directory
[   29.594969][ T4710] hsr_slave_0: entered promiscuous mode
[   29.595306][ T4710] hsr_slave_1: entered promiscuous mode
[   29.595504][ T4710] debugfs: 'hsr0' already exists in 'hsr'
[   29.595514][ T4710] Cannot create hsr debugfs directory
[   29.664858][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   29.668644][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   29.670434][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   29.672640][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   29.674326][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   29.677831][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   29.687250][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   29.688522][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   29.715979][ T4714] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   29.719238][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   29.721031][ T4714] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   29.723166][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   29.725433][ T4714] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   29.727734][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   29.729999][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.730051][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.730195][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.730227][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.736930][ T4714] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   29.739255][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   29.755386][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.755432][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.755511][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.755539][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.771627][ T4709] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   29.774216][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   29.775388][ T4709] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   29.778422][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   29.781257][ T4709] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   29.783263][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   29.783815][ T4709] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   29.785230][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   29.800599][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.810664][ T3352] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.812406][ T3352] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.813931][ T3352] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.816391][ T3352] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.831741][ T4719] 8021q: adding VLAN 0 to HW filter on device team0
[   29.835104][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   29.837761][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   29.840473][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   29.842902][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   29.844494][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   29.847034][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   29.849872][  T130] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.849931][  T130] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.854138][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   29.857614][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   29.864175][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.873523][  T130] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.873560][  T130] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.884693][ T4714] 8021q: adding VLAN 0 to HW filter on device team0
[   29.899836][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   29.902118][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   29.904036][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   29.906000][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   29.911293][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.911331][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.914242][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   29.917875][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   29.918222][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   29.919970][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   29.925552][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.925600][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.971781][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.977024][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.984634][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   29.989614][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   29.999266][ T4709] 8021q: adding VLAN 0 to HW filter on device team0
[   30.006388][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.006430][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.014222][ T4710] 8021q: adding VLAN 0 to HW filter on device team0
[   30.016682][   T15] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.016725][   T15] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.034623][  T655] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.034673][  T655] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.035428][  T655] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.035449][  T655] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.062355][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.062390][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.075912][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0
[   30.090775][ T4720] 8021q: adding VLAN 0 to HW filter on device team0
[   30.093379][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.122823][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.122877][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.131871][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.131907][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.140805][ T4720] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   30.142763][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   30.159358][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.220687][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.236885][ T4714] veth0_vlan: entered promiscuous mode
[   30.242545][ T4714] veth1_vlan: entered promiscuous mode
[   30.257484][ T4714] veth0_macvtap: entered promiscuous mode
[   30.260871][ T4714] veth1_macvtap: entered promiscuous mode
[   30.266013][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.283355][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.289555][ T3352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.289721][ T3352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.289781][ T3352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.289840][ T3352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.334884][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.344468][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.355721][ T4719] veth0_vlan: entered promiscuous mode
[   30.359264][ T4719] veth1_vlan: entered promiscuous mode
[   30.378798][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.378829][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.388274][ T4719] veth0_macvtap: entered promiscuous mode
[   30.392380][ T4719] veth1_macvtap: entered promiscuous mode
[   30.412848][ T4710] veth0_vlan: entered promiscuous mode
[   30.415015][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.420632][   T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.420662][   T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.422767][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.429705][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0
[   30.433313][ T4710] veth1_vlan: entered promiscuous mode
[   30.439668][  T130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.442174][  T130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.443392][ T4709] veth0_vlan: entered promiscuous mode
[   30.461896][ T4710] veth0_macvtap: entered promiscuous mode
[   30.465382][ T4709] veth1_vlan: entered promiscuous mode
[   30.468483][ T4710] veth1_macvtap: entered promiscuous mode
[   30.472130][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.474025][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.477259][ T4714] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   30.497067][   T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.522903][ T4720] veth0_vlan: entered promiscuous mode
[   30.524697][ T4720] veth1_vlan: entered promiscuous mode
[   30.546519][ T3352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.547070][ T3352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.547107][ T3352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.547132][ T3352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.547154][ T3352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.548966][ T4709] veth0_macvtap: entered promiscuous mode
[   30.550793][  T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.550822][  T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.555538][ T4709] veth1_macvtap: entered promiscuous mode
[   30.578749][ T4890] Invalid ELF header len 3
[   30.590958][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.590988][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.601650][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.607439][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.611292][ T4720] veth0_macvtap: entered promiscuous mode
[   30.613438][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.614918][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.619050][ T4720] veth1_macvtap: entered promiscuous mode
[   30.638029][  T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.638062][  T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.651378][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0
[   30.654489][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1
[   30.684669][  T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.684705][  T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.727344][   T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.727511][   T15] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.727715][   T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.727845][   T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.730037][   T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.730058][   T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.740127][ T3503] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   30.740480][ T3503] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   30.740513][ T3503] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   30.744028][ T4897] loop4: detected capacity change from 0 to 8
[   30.755060][ T4897] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored
[   30.755068][ T4897] unable to read xattr id index table
[   30.767434][   T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   30.771327][ T4897] SQUASHFS error: zlib decompression failed, data probably corrupt
[   30.771346][ T4897] SQUASHFS error: Failed to read block 0x9b: -5
[   30.771355][ T4897] SQUASHFS error: Unable to read metadata cache entry [99]
[   30.771363][ T4897] SQUASHFS error: Unable to read inode 0x127
[   30.794148][ T3352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   30.794182][ T3352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   30.799142][ T4897] loop4: detected capacity change from 0 to 256
[   30.997380][ T4715] Bluetooth: hci4: command tx timeout
[   30.997649][ T4715] Bluetooth: hci0: command tx timeout
[   30.997872][ T4715] Bluetooth: hci2: command tx timeout
[   30.999099][ T4711] Bluetooth: hci1: command tx timeout
[   31.004875][ T4712] Bluetooth: hci3: command tx timeout
[   31.089258][ T3352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.089292][ T3352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.097550][ T4897] syzkaller0: entered promiscuous mode
[   31.098763][ T4897] syzkaller0: entered allmulticast mode
[   31.125861][ T4901] loop3: detected capacity change from 0 to 1024
[   31.153578][ T4901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.213847][ T4906] loop2: detected capacity change from 0 to 512
[   31.215150][ T4906] EXT4-fs (loop2): Test dummy encryption mode enabled
[   31.239321][ T4906] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3: inode has both inline data and extents flags
[   31.239535][ T4906] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   31.241470][ T4906] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.3: couldn't read orphan inode 15 (err -117)
[   31.241523][ T4906] loop2: lost filesystem error report for type 5 error -117
[   31.242875][ T4906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.270735][ T4906] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce"
[   31.351928][ T4909] overlayfs: missing 'lowerdir'
[   31.615287][ T4913] syz.4.6 (4913) used obsolete PPPIOCDETACH ioctl
[   31.623783][ T4913] netlink: 'syz.4.6': attribute type 8 has an invalid length.
[   31.623830][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6'.
[   31.634208][ T4913] veth1_to_team: entered promiscuous mode
[   31.638325][ T4913] gretap0: entered promiscuous mode
[   31.640785][ T4913] veth1_to_team: left promiscuous mode
[   31.641739][ T4916] loop1: detected capacity change from 0 to 1024
[   31.644162][ T4913] gretap0: left promiscuous mode
[   31.651512][ T4916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.659035][ T4916] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.710107][ T4916] loop1: detected capacity change from 0 to 2048
[   31.723404][ T4916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   31.780282][ T4924] loop0: detected capacity change from 0 to 1024
[   31.787293][ T4925] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.7: inline data xattr refers to an external xattr inode
[   31.792840][ T4925] EXT4-fs (loop1): Remounting filesystem read-only
[   31.802746][ T4924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   31.811046][ T4924] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   31.816970][ T4929] =======================================================
[   31.816970][ T4929] WARNING: The mand mount option has been deprecated and
[   31.816970][ T4929]          and is ignored by this kernel. Remove the mand
[   31.816970][ T4929]          option from the mount to silence this warning.
[   31.816970][ T4929] =======================================================
[   31.825048][ T4893] kernel read not supported for file /8/status (pid: 4893 comm: kworker/1:6)
[   31.877336][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   31.913792][ T4933] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET)
[   31.924613][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   32.001366][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.041857][ T4944] netlink: 116 bytes leftover after parsing attributes in process `syz.1.18'.
[   32.100829][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.102856][ T4948] loop4: detected capacity change from 0 to 256
[   32.110183][ T4949] loop0: detected capacity change from 0 to 1024
[   32.131705][ T4949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   32.138405][ T4951] loop1: detected capacity change from 0 to 512
[   32.448713][ T4951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   32.454859][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   32.457074][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   32.489385][ T4951] netlink: 116 bytes leftover after parsing attributes in process `syz.1.20'.
[   32.956608][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.976859][ T4968] FAULT_INJECTION: forcing a failure.
[   32.976859][ T4968] name failslab, interval 1, probability 0, space 0, times 1
[   32.979632][ T4968] CPU: 0 UID: 0 PID: 4968 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT 
[   32.979651][ T4968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   32.979657][ T4968] Call trace:
[   32.979661][ T4968]  show_stack+0x2c/0x3c (C)
[   32.979684][ T4968]  __dump_stack+0x30/0x40
[   32.979696][ T4968]  dump_stack_lvl+0xd8/0x12c
[   32.979706][ T4968]  dump_stack+0x1c/0x28
[   32.979716][ T4968]  should_fail_ex+0x41c/0x590
[   32.979729][ T4968]  should_failslab+0xc4/0x120
[   32.979738][ T4968]  kmem_cache_alloc_node_noprof+0x98/0x5f8
[   32.979748][ T4968]  __alloc_skb+0x1f0/0x610
[   32.979758][ T4968]  tcp_stream_alloc_skb+0x44/0x2dc
[   32.979767][ T4968]  tcp_sendmsg_locked+0x1374/0x3298
[   32.979775][ T4968]  tcp_sendmsg+0x40/0x64
[   32.979782][ T4968]  inet_sendmsg+0xb4/0xd8
[   32.979790][ T4968]  __sock_sendmsg+0xc8/0x17c
[   32.979799][ T4968]  __sys_sendto+0x250/0x328
[   32.979808][ T4968]  __arm64_sys_sendto+0xec/0x10c
[   32.979817][ T4968]  invoke_syscall+0x98/0x244
[   32.979827][ T4968]  el0_svc_common+0xec/0x23c
[   32.979837][ T4968]  do_el0_svc+0x4c/0x5c
[   32.979847][ T4968]  el0_svc+0x64/0x260
[   32.979855][ T4968]  el0t_64_sync_handler+0x48/0x148
[   32.979863][ T4968]  el0t_64_sync+0x198/0x19c
[   33.016134][ T4714] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz-executor: corrupted xattr block 33: overlapping e_value 
[   33.019747][ T4714] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz-executor: corrupted xattr block 33: overlapping e_value 
[   33.022856][ T4714] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz-executor: corrupted xattr block 33: overlapping e_value 
[   33.025956][ T4714] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz-executor: corrupted xattr block 33: overlapping e_value 
[   33.026000][ T4714] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   33.027887][ T4714] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117)
[   33.038133][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.076461][ T4723] Bluetooth: hci3: command tx timeout
[   33.076496][ T4723] Bluetooth: hci1: command tx timeout
[   33.076525][ T4723] Bluetooth: hci2: command tx timeout
[   33.076546][ T4723] Bluetooth: hci0: command tx timeout
[   33.076565][ T4723] Bluetooth: hci4: command tx timeout
[   33.189916][ T4981] Zero length message leads to an empty skb
[   33.319560][ T4984] vfat: Unknown parameter 'tSme_offset'
[   34.886714][ T5020] Soft offlining pfn 0x1361e0 at process virtual address 0x20000000
[   34.892396][ T5020] Soft offline: 0x1361e0: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   34.900765][ T5019] block device autoloading is deprecated and will be removed.
[   35.010316][ T5018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   35.011397][ T5018] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.030548][ T5018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   35.085557][ T5025] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #12: comm syz.0.43: inline data xattr refers to an external xattr inode
[   35.086094][ T5025] EXT4-fs (loop0): Remounting filesystem read-only
[   35.113835][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   35.154471][ T4712] Bluetooth: hci4: command tx timeout
[   35.154510][ T4712] Bluetooth: hci2: command tx timeout
[   35.154521][ T4711] Bluetooth: hci1: command tx timeout
[   35.154536][ T4712] Bluetooth: hci3: command tx timeout
[   35.155741][ T4723] Bluetooth: hci0: command tx timeout
[   35.387399][ T5038] input: syz0 as /devices/virtual/input/input3
[   35.579277][ T5038] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   35.633974][ T5038] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002]
[   35.634885][ T5038] EXT4-fs (loop1): orphan cleanup on readonly fs
[   35.648763][ T5038] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.47: bg 0: block 361: padding at end of block bitmap is not set
[   35.648969][ T5038] loop1: lost filesystem error report for type 5 error -117
[   35.656212][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   35.656240][    C1] EXT4-fs (loop1): initial error at time 35: ext4_validate_block_bitmap:441
[   35.656267][    C1] EXT4-fs (loop1): last error at time 35: ext4_validate_block_bitmap:441
[   35.662281][ T5038] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   35.662315][ T5038] loop1: lost filesystem error report for type 5 error -117
[   35.667017][ T5038] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.47: attempt to clear invalid blocks 33619980 len 1
[   35.667089][ T5038] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   35.682329][ T5038] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.47: invalid indirect mapped block 1811939328 (level 0)
[   35.682401][ T5038] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   35.689472][ T5038] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.47: invalid indirect mapped block 2185560079 (level 1)
[   35.689537][ T5038] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   35.697489][ T5038] EXT4-fs (loop1): 1 truncate cleaned up
[   36.036529][ T5038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   36.124503][ T5040] warning: `syz.1.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   36.372153][ T5047] set_capacity_and_notify: 4 callbacks suppressed
[   36.381593][ T5047] loop2: detected capacity change from 0 to 1024
[   36.382303][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   36.727968][ T5055] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x1a
[   36.741452][ T5047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   37.394679][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.527145][ T5072] netlink: 52 bytes leftover after parsing attributes in process `syz.3.57'.
[   37.859639][ T4715] Bluetooth: hci1: command tx timeout
[   37.859679][ T4715] Bluetooth: hci4: command tx timeout
[   37.859708][ T4715] Bluetooth: hci3: command tx timeout
[   37.859729][ T4715] Bluetooth: hci2: command tx timeout
[   37.859766][ T4723] Bluetooth: hci0: command tx timeout
[   38.295590][ T5093] loop0: detected capacity change from 0 to 1024
[   38.454222][ T5097] netlink: 52 bytes leftover after parsing attributes in process `syz.3.63'.
[   39.234073][ T5093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   39.242098][ T5104] input: syz0 as /devices/virtual/input/input4
[   39.337614][ T5104] loop2: detected capacity change from 0 to 512
[   39.344140][ T5104] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   39.369031][ T5104] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002]
[   39.369825][ T5104] EXT4-fs (loop2): orphan cleanup on readonly fs
[   39.374859][ T5104] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.62: bg 0: block 361: padding at end of block bitmap is not set
[   39.374919][ T5104] loop2: lost filesystem error report for type 5 error -117
[   39.377817][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   39.377827][    C0] EXT4-fs (loop2): initial error at time 39: ext4_validate_block_bitmap:441
[   39.377839][    C0] EXT4-fs (loop2): last error at time 39: ext4_validate_block_bitmap:441
[   39.384403][ T5104] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   39.384465][ T5104] loop2: lost filesystem error report for type 5 error -117
[   39.386394][ T5104] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.62: attempt to clear invalid blocks 33619980 len 1
[   39.386461][ T5104] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   39.391106][ T5104] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.62: invalid indirect mapped block 1811939328 (level 0)
[   39.391171][ T5104] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   39.396341][ T5104] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.62: invalid indirect mapped block 2185560079 (level 1)
[   39.396388][ T5104] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   39.401398][ T5104] EXT4-fs (loop2): 1 truncate cleaned up
[   39.406437][ T5104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   39.528311][ T5112] loop4: detected capacity change from 0 to 512
[   39.529742][ T5112] EXT4-fs (loop4): Test dummy encryption mode enabled
[   39.667055][ T5112] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.64: inode has both inline data and extents flags
[   39.667099][ T5112] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   39.667586][ T5112] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.64: couldn't read orphan inode 15 (err -117)
[   39.667617][ T5112] loop4: lost filesystem error report for type 5 error -117
[   39.671821][ T5112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.075424][ T5120] netlink: 88 bytes leftover after parsing attributes in process `syz.3.67'.
[   40.079589][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.106042][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.127951][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   40.191641][ T5128] netlink: 116 bytes leftover after parsing attributes in process `syz.0.66'.
[   40.565324][ T5145] Illegal XDP return value 1884441282 on prog  (id 7) dev N/A, expect packet loss!
[   40.765378][ T5160] Soft offlining pfn 0x11fdab at process virtual address 0x20000000
[   40.768808][ T5160] Soft offline: 0x11fdab: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   40.874006][ T5157] loop3: detected capacity change from 0 to 1024
[   40.878186][ T5161] loop0: detected capacity change from 0 to 128
[   40.880638][ T5161] EXT4-fs (loop0): Test dummy encryption mode enabled
[   40.886030][ T5161] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   40.891192][ T5157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   40.894674][ T5161] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[   40.904345][ T5161] netlink: 'syz.0.73': attribute type 4 has an invalid length.
[   40.904373][ T5161] netlink: 17 bytes leftover after parsing attributes in process `syz.0.73'.
[   41.334983][ T5178] netlink: 52 bytes leftover after parsing attributes in process `syz.2.79'.
[   41.755481][ T5189] input: syz0 as /devices/virtual/input/input5
[   41.829091][ T5190] loop1: detected capacity change from 0 to 512
[   41.850693][ T5190] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   41.868223][ T5190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002]
[   41.868806][ T5190] EXT4-fs (loop1): orphan cleanup on readonly fs
[   41.880116][ T5190] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.80: bg 0: block 361: padding at end of block bitmap is not set
[   41.880187][ T5190] loop1: lost filesystem error report for type 5 error -117
[   41.886223][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   41.886250][    C0] EXT4-fs (loop1): initial error at time 41: ext4_validate_block_bitmap:441
[   41.886275][    C0] EXT4-fs (loop1): last error at time 41: ext4_validate_block_bitmap:441
[   41.894198][ T5190] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   41.894560][ T5190] loop1: lost filesystem error report for type 5 error -117
[   41.896615][ T5190] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.80: attempt to clear invalid blocks 33619980 len 1
[   41.896665][ T5190] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   41.906485][ T5190] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.80: invalid indirect mapped block 1811939328 (level 0)
[   41.906562][ T5190] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   41.914475][ T5190] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.80: invalid indirect mapped block 2185560079 (level 1)
[   41.914544][ T5190] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   41.921863][ T5190] EXT4-fs (loop1): 1 truncate cleaned up
[   41.925473][ T5190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   42.224040][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   42.241715][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.375604][ T5200] netlink: 116 bytes leftover after parsing attributes in process `syz.4.86'.
[   42.679368][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   42.711032][ T5218] loop1: detected capacity change from 0 to 512
[   42.713011][ T5218] EXT4-fs (loop1): Test dummy encryption mode enabled
[   42.724009][ T5218] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.91: inode has both inline data and extents flags
[   42.724036][ T5218] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   42.726465][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   42.726478][    C0] EXT4-fs (loop1): initial error at time 42: ext4_orphan_get:1399: inode 15
[   42.726501][    C0] EXT4-fs (loop1): last error at time 42: ext4_orphan_get:1399: inode 15
[   42.730727][ T5222] loop4: detected capacity change from 0 to 1024
[   42.737949][ T5218] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.91: couldn't read orphan inode 15 (err -117)
[   42.737983][ T5218] loop1: lost filesystem error report for type 5 error -117
[   42.741931][ T5218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.751745][ T5223] FAULT_INJECTION: forcing a failure.
[   42.751745][ T5223] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   42.751774][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT 
[   42.751789][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   42.751795][ T5223] Call trace:
[   42.751799][ T5223]  show_stack+0x2c/0x3c (C)
[   42.751816][ T5223]  __dump_stack+0x30/0x40
[   42.751828][ T5223]  dump_stack_lvl+0xd8/0x12c
[   42.751838][ T5223]  dump_stack+0x1c/0x28
[   42.751848][ T5223]  should_fail_ex+0x41c/0x590
[   42.751860][ T5223]  should_fail_alloc_page+0xec/0x10c
[   42.751869][ T5223]  prepare_alloc_pages+0x194/0x4a4
[   42.751878][ T5223]  __alloc_frozen_pages_noprof+0x134/0x320
[   42.751887][ T5223]  alloc_pages_mpol+0x1ec/0x3c0
[   42.751896][ T5223]  alloc_frozen_pages_noprof+0xc4/0x10c
[   42.751905][ T5223]  alloc_pages_noprof+0x30/0x148
[   42.751914][ T5223]  get_free_pages_noprof+0x1c/0xbc
[   42.751922][ T5223]  __kasan_populate_vmalloc+0x48/0x1d0
[   42.751933][ T5223]  alloc_vmap_area+0xdf4/0x13e8
[   42.751942][ T5223]  __get_vm_area_node+0x210/0x32c
[   42.751951][ T5223]  __vmalloc_node_range_noprof+0x2c8/0x105c
[   42.751961][ T5223]  __vmalloc_node_noprof+0xec/0x14c
[   42.751970][ T5223]  __vmalloc_noprof+0x64/0x8c
[   42.751979][ T5223]  bpf_prog_alloc_no_stats+0x60/0x488
[   42.751988][ T5223]  bpf_prog_alloc+0x48/0x110
[   42.751995][ T5223]  bpf_prog_load+0x5dc/0x15f8
[   42.752002][ T5223]  __sys_bpf+0x870/0x8c8
[   42.752010][ T5223]  __arm64_sys_bpf+0xd0/0xec
[   42.752017][ T5223]  invoke_syscall+0x98/0x244
[   42.752027][ T5223]  el0_svc_common+0xec/0x23c
[   42.752037][ T5223]  do_el0_svc+0x4c/0x5c
[   42.752046][ T5223]  el0_svc+0x64/0x260
[   42.752054][ T5223]  el0t_64_sync_handler+0x48/0x148
[   42.752062][ T5223]  el0t_64_sync+0x198/0x19c
[   42.752147][ T5223] syz.2.93: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0
[   42.752219][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.2.93 Not tainted syzkaller #0 PREEMPT 
[   42.752228][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   42.752232][ T5223] Call trace:
[   42.752234][ T5223]  show_stack+0x2c/0x3c (C)
[   42.752246][ T5223]  __dump_stack+0x30/0x40
[   42.752257][ T5223]  dump_stack_lvl+0xd8/0x12c
[   42.752266][ T5223]  dump_stack+0x1c/0x28
[   42.752276][ T5223]  warn_alloc+0x1bc/0x1d0
[   42.752284][ T5223]  __vmalloc_node_range_noprof+0x2e8/0x105c
[   42.752296][ T5223]  __vmalloc_node_noprof+0xec/0x14c
[   42.752305][ T5223]  __vmalloc_noprof+0x64/0x8c
[   42.752314][ T5223]  bpf_prog_alloc_no_stats+0x60/0x488
[   42.752322][ T5223]  bpf_prog_alloc+0x48/0x110
[   42.752329][ T5223]  bpf_prog_load+0x5dc/0x15f8
[   42.752337][ T5223]  __sys_bpf+0x870/0x8c8
[   42.752344][ T5223]  __arm64_sys_bpf+0xd0/0xec
[   42.752351][ T5223]  invoke_syscall+0x98/0x244
[   42.752361][ T5223]  el0_svc_common+0xec/0x23c
[   42.752371][ T5223]  do_el0_svc+0x4c/0x5c
[   42.752380][ T5223]  el0_svc+0x64/0x260
[   42.752388][ T5223]  el0t_64_sync_handler+0x48/0x148
[   42.752395][ T5223]  el0t_64_sync+0x198/0x19c
[   42.752406][ T5223] Mem-Info:
[   42.752414][ T5223] active_anon:43 inactive_anon:5434 isolated_anon:0
[   42.752414][ T5223]  active_file:2511 inactive_file:4782 isolated_file:0
[   42.752414][ T5223]  unevictable:771 dirty:1659 writeback:0
[   42.752414][ T5223]  slab_reclaimable:8936 slab_unreclaimable:87982
[   42.752414][ T5223]  mapped:29504 shmem:1117 pagetables:1029
[   42.752414][ T5223]  sec_pagetables:0 bounce:0
[   42.752414][ T5223]  kernel_misc_reclaimable:0
[   42.752414][ T5223]  free:1488443 free_pcp:7598 free_cma:7616
[   42.752438][ T5223] Node 0 active_anon:172kB inactive_anon:21736kB active_file:10044kB inactive_file:19128kB unevictable:3084kB isolated(anon):0kB isolated(file):0kB mapped:118016kB dirty:6636kB writeback:0kB shmem:4468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8652kB pagetables:4116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   42.752461][ T5223] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB
[   42.752491][ T5223] lowmem_reserve[]: 0 0 3651 3651 3651
[   42.752534][ T5223] Node 0 Normal free:2875884kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:172kB inactive_anon:21736kB active_file:10044kB inactive_file:19128kB unevictable:3084kB writepending:6636kB zspages:0kB present:5242880kB managed:3739084kB mlocked:12kB bounce:0kB free_pcp:30392kB local_pcp:28952kB free_cma:0kB
[   42.752564][ T5223] lowmem_reserve[]: 0 0 0 0 0
[   42.752605][ T5223] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB
[   42.752974][ T5223] Node 0 Normal: 299*4kB (UM) 901*8kB (UM) 692*16kB (UME) 154*32kB (UME) 71*64kB (UME) 45*128kB (UME) 36*256kB (M) 9*512kB (UM) 5*1024kB (UME) 8*2048kB (UME) 685*4096kB (M) = 2875796kB
[   42.753187][ T5223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   42.753199][ T5223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[   42.753210][ T5223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   42.753220][ T5223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[   42.753230][ T5223] 8380 total pagecache pages
[   42.753237][ T5223] 0 pages in swap cache
[   42.753244][ T5223] Free swap  = 124996kB
[   42.753251][ T5223] Total swap = 124996kB
[   42.753258][ T5223] 2097152 pages RAM
[   42.753265][ T5223] 0 pages HighMem/MovableOnly
[   42.753272][ T5223] 392333 pages reserved
[   42.753278][ T5223] 8192 pages cma reserved
[   42.753286][ T5223] 0 pages hwpoisoned
[   42.845922][ T5222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.608629][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.736437][ T5261] loop2: detected capacity change from 0 to 1024
[   43.758683][ T5261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.764451][ T5261] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.251779][ T5271] Soft offlining pfn 0x139496 at process virtual address 0x20000000
[   44.255526][ T5271] Soft offline: 0x139496: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   44.531472][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.364688][ T5292] loop4: detected capacity change from 0 to 1024
[   45.399972][ T5292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.068533][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.083258][ T5307] loop1: detected capacity change from 0 to 512
[   46.085531][ T5307] EXT4-fs (loop1): Test dummy encryption mode enabled
[   46.098277][ T5307] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.119: inode has both inline data and extents flags
[   46.098311][ T5307] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   46.101058][ T5307] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.119: couldn't read orphan inode 15 (err -117)
[   46.101092][ T5307] loop1: lost filesystem error report for type 5 error -117
[   46.105857][ T5307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.112514][ T5305] netlink: 5 bytes leftover after parsing attributes in process `syz.0.118'.
[   46.192476][ T5310] loop4: detected capacity change from 0 to 4096
[   46.203706][ T5310] EXT4-fs: inline encryption not supported
[   46.207143][ T5312] loop2: detected capacity change from 0 to 256
[   46.211604][ T5310] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   46.211625][ T5310] EXT4-fs (loop4): Test dummy encryption mode enabled
[   46.216571][ T5310] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0023]
[   46.216621][ T5310] System zones: 0-5
[   46.219858][ T5310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.271281][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'.
[   46.305018][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.546542][ T5327] Soft offlining pfn 0x11ec65 at process virtual address 0x20000000
[   46.548240][ T5327] Soft offline: 0x11ec65: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   47.078562][ T5332] loop2: detected capacity change from 0 to 1024
[   47.098922][ T5332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   47.833293][ T5345] loop0: detected capacity change from 0 to 128
[   48.811481][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.863896][ T5349] loop3: detected capacity change from 0 to 512
[   48.954376][ T5349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   48.955883][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.980486][ T5359] fuse: Unknown parameter 'bd'
[   49.053182][ T5362] loop4: detected capacity change from 0 to 128
[   49.913040][ T5364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.136'.
[   49.940164][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   50.012410][ T5370] netlink: 52 bytes leftover after parsing attributes in process `syz.4.139'.
[   50.024282][ T5372] loop0: detected capacity change from 0 to 1024
[   50.084357][ T5372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   50.619432][ T5380] Soft offlining pfn 0x11f360 at process virtual address 0x20000000
[   50.620617][ T5380] Soft offline: 0x11f360: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   50.743877][ T5394] netlink: 164 bytes leftover after parsing attributes in process `syz.1.144'.
[   50.762333][ T5397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.145'.
[   50.828846][ T5400] loop2: detected capacity change from 0 to 128
[   51.831950][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.942046][ T5411] loop2: detected capacity change from 0 to 512
[   51.942376][ T5411] EXT4-fs: Ignoring removed bh option
[   51.947334][ T5411] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   51.969503][ T5411] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[   52.013312][ T5425] loop3: detected capacity change from 0 to 256
[   52.054711][ T5428] loop4: detected capacity change from 0 to 1024
[   52.079133][ T5437] netlink: 52 bytes leftover after parsing attributes in process `syz.0.158'.
[   52.149434][ T5428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.199571][ T5463] netlink: 164 bytes leftover after parsing attributes in process `syz.2.166'.
[   54.205800][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'.
[   54.207648][ T5461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'.
[   54.254764][ T5464] loop3: detected capacity change from 0 to 128
[   54.556016][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.568168][ T5470] loop0: detected capacity change from 0 to 1024
[   54.578991][ T5472] loop1: detected capacity change from 0 to 512
[   54.589277][ T5472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   54.590945][ T5472] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   54.591586][ T5472] EXT4-fs (loop1): corrupt root inode, run e2fsck
[   54.591618][ T5472] EXT4-fs (loop1): mount failed
[   54.598994][ T5470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.601069][ T5470] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.628588][ T5472] loop1: detected capacity change from 0 to 1024
[   54.649423][ T5472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.654553][ T5472] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.691698][ T5486] loop4: detected capacity change from 0 to 1024
[   54.693319][ T5486] EXT4-fs: Ignoring removed oldalloc option
[   54.696079][ T5486] EXT4-fs: Ignoring removed bh option
[   54.701518][ T5470] loop0: detected capacity change from 0 to 2048
[   54.704416][ T5472] loop1: detected capacity change from 0 to 2048
[   54.705594][ T5472] ext4: Unknown parameter 'rootcontext'
[   54.712168][ T5486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   54.719679][ T5486] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.172: Freeing blocks not in datazone - block = 0, count = 16
[   54.740631][ T5486] EXT4-fs (loop4): Remounting filesystem read-only
[   54.970466][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.172'.
[   54.972319][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'.
[   54.974180][ T5486] netlink: 'syz.4.172': attribute type 11 has an invalid length.
[   54.976430][ T5486] netlink: 'syz.4.172': attribute type 12 has an invalid length.
[   54.980165][ T5470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   55.088763][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   55.209098][ T5499] Soft offlining pfn 0x120890 at process virtual address 0x20000000
[   55.214391][ T5499] Soft offline: 0x120890: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   55.396786][ T5470] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   55.401504][ T5470] EXT4-fs (loop0): Remounting filesystem read-only
[   55.451727][ T5504] loop4: detected capacity change from 0 to 128
[   55.484952][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   55.518237][ T5510] netlink: 52 bytes leftover after parsing attributes in process `syz.3.179'.
[   55.556008][ T5513] netlink: 164 bytes leftover after parsing attributes in process `syz.0.177'.
[   55.612792][ T5521] overlayfs: missing 'lowerdir'
[   56.839596][ T5530] loop4: detected capacity change from 0 to 128
[   56.850462][ T5531] loop2: detected capacity change from 0 to 128
[   57.600146][ T5530] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   57.619949][ T5530] overlayfs: missing 'lowerdir'
[   57.743461][ T4719] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   57.806968][ T5544] netlink: 272 bytes leftover after parsing attributes in process `syz.4.189'.
[   57.806999][ T5544] netlink: 72 bytes leftover after parsing attributes in process `syz.4.189'.
[   57.851375][ T5555] netlink: 164 bytes leftover after parsing attributes in process `syz.2.192'.
[   58.117432][ T5570] Soft offlining pfn 0x11db7e at process virtual address 0x20000000
[   58.119971][ T5570] Soft offline: 0x11db7e: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   58.535095][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'.
[   58.538015][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'.
[   58.538449][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'.
[   58.538464][ T5581] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[   58.538473][ T5581] iwpm_mapping_info_cb: Unable to parse nlmsg
[   58.611758][ T5587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.618768][ T5587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.697401][ T5593] netlink: 152 bytes leftover after parsing attributes in process `syz.4.206'.
[   59.221017][ T5613] process 'syz.2.213' launched './file0' with NULL argv: empty string added
[   59.241982][ T5615] FAULT_INJECTION: forcing a failure.
[   59.241982][ T5615] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   59.242015][ T5615] CPU: 1 UID: 0 PID: 5615 Comm: syz.0.214 Not tainted syzkaller #0 PREEMPT 
[   59.242027][ T5615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   59.242033][ T5615] Call trace:
[   59.242036][ T5615]  show_stack+0x2c/0x3c (C)
[   59.242056][ T5615]  __dump_stack+0x30/0x40
[   59.242067][ T5615]  dump_stack_lvl+0xd8/0x12c
[   59.242077][ T5615]  dump_stack+0x1c/0x28
[   59.242087][ T5615]  should_fail_ex+0x41c/0x590
[   59.242098][ T5615]  should_fail+0x14/0x24
[   59.242113][ T5615]  should_fail_usercopy+0x20/0x30
[   59.242121][ T5615]  _inline_copy_from_user+0x3c/0x188
[   59.242132][ T5615]  memdup_user+0x78/0xec
[   59.242140][ T5615]  strndup_user+0x78/0xe0
[   59.242149][ T5615]  __arm64_sys_mount+0xdc/0x388
[   59.242159][ T5615]  invoke_syscall+0x98/0x244
[   59.242169][ T5615]  el0_svc_common+0xec/0x23c
[   59.242179][ T5615]  do_el0_svc+0x4c/0x5c
[   59.242188][ T5615]  el0_svc+0x64/0x260
[   59.242197][ T5615]  el0t_64_sync_handler+0x48/0x148
[   59.242204][ T5615]  el0t_64_sync+0x198/0x19c
[   59.244151][ T5613] netlink: 'syz.2.213': attribute type 3 has an invalid length.
[   59.244163][ T5613] netlink: 224 bytes leftover after parsing attributes in process `syz.2.213'.
[   59.331228][ T5622] netlink: 152 bytes leftover after parsing attributes in process `syz.2.218'.
[   59.413176][ T5630] FAULT_INJECTION: forcing a failure.
[   59.413176][ T5630] name failslab, interval 1, probability 0, space 0, times 0
[   59.413215][ T5630] CPU: 1 UID: 0 PID: 5630 Comm: syz.0.220 Not tainted syzkaller #0 PREEMPT 
[   59.413225][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   59.413232][ T5630] Call trace:
[   59.413236][ T5630]  show_stack+0x2c/0x3c (C)
[   59.413257][ T5630]  __dump_stack+0x30/0x40
[   59.413268][ T5630]  dump_stack_lvl+0xd8/0x12c
[   59.413278][ T5630]  dump_stack+0x1c/0x28
[   59.413287][ T5630]  should_fail_ex+0x41c/0x590
[   59.413299][ T5630]  should_failslab+0xc4/0x120
[   59.413307][ T5630]  kmem_cache_alloc_noprof+0x94/0x5d8
[   59.413316][ T5630]  skb_clone+0x1ac/0x320
[   59.413327][ T5630]  __netlink_deliver_tap+0x364/0x6f4
[   59.413337][ T5630]  netlink_deliver_tap+0x1d8/0x1dc
[   59.413346][ T5630]  __netlink_sendskb+0x78/0xd0
[   59.413354][ T5630]  netlink_dump+0x6d8/0xb6c
[   59.413363][ T5630]  netlink_recvmsg+0x4f0/0x868
[   59.413372][ T5630]  sock_recvmsg+0xd4/0x170
[   59.413380][ T5630]  ____sys_recvmsg+0x1b8/0x608
[   59.413390][ T5630]  ___sys_recvmsg+0x16c/0x1f4
[   59.413399][ T5630]  do_recvmmsg+0x288/0x7d4
[   59.413408][ T5630]  __sys_recvmmsg+0x1e0/0x270
[   59.413417][ T5630]  __arm64_sys_recvmmsg+0xe0/0x108
[   59.413427][ T5630]  invoke_syscall+0x98/0x244
[   59.413437][ T5630]  el0_svc_common+0xec/0x23c
[   59.413447][ T5630]  do_el0_svc+0x4c/0x5c
[   59.413456][ T5630]  el0_svc+0x64/0x260
[   59.413465][ T5630]  el0t_64_sync_handler+0x48/0x148
[   59.413472][ T5630]  el0t_64_sync+0x198/0x19c
[   59.625004][ T5637] Soft offlining pfn 0x122ccd at process virtual address 0x20000000
[   59.627804][ T5637] Soft offline: 0x122ccd: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   60.189432][ T5656] overlayfs: missing 'lowerdir'
[   60.266012][ T5666] FAULT_INJECTION: forcing a failure.
[   60.266012][ T5666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   60.266047][ T5666] CPU: 0 UID: 0 PID: 5666 Comm: syz.4.234 Not tainted syzkaller #0 PREEMPT 
[   60.266062][ T5666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   60.266069][ T5666] Call trace:
[   60.266073][ T5666]  show_stack+0x2c/0x3c (C)
[   60.266103][ T5666]  __dump_stack+0x30/0x40
[   60.266115][ T5666]  dump_stack_lvl+0xd8/0x12c
[   60.266126][ T5666]  dump_stack+0x1c/0x28
[   60.266135][ T5666]  should_fail_ex+0x41c/0x590
[   60.266147][ T5666]  should_fail+0x14/0x24
[   60.266157][ T5666]  should_fail_usercopy+0x20/0x30
[   60.266164][ T5666]  _inline_copy_from_user+0x3c/0x174
[   60.266173][ T5666]  copy_from_bpfptr+0x70/0xb0
[   60.266183][ T5666]  bpf_prog_load+0x880/0x15f8
[   60.266191][ T5666]  __sys_bpf+0x870/0x8c8
[   60.266198][ T5666]  __arm64_sys_bpf+0xd0/0xec
[   60.266205][ T5666]  invoke_syscall+0x98/0x244
[   60.266216][ T5666]  el0_svc_common+0xec/0x23c
[   60.266226][ T5666]  do_el0_svc+0x4c/0x5c
[   60.266235][ T5666]  el0_svc+0x64/0x260
[   60.266243][ T5666]  el0t_64_sync_handler+0x48/0x148
[   60.266251][ T5666]  el0t_64_sync+0x198/0x19c
[   60.339952][ T5668] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[   60.339984][ T5668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.235'.
[   60.396606][ T5676] set_capacity_and_notify: 1 callbacks suppressed
[   60.398110][ T5676] loop1: detected capacity change from 0 to 512
[   60.399414][ T5670] loop4: detected capacity change from 0 to 1024
[   60.399760][ T5670] EXT4-fs: Ignoring removed orlov option
[   60.399791][ T5670] EXT4-fs: Ignoring removed orlov option
[   60.400757][ T5676] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   60.402538][ T5676] EXT4-fs (loop1): 1 truncate cleaned up
[   60.402988][ T5676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.419345][ T5670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.427324][ T5670] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   60.466740][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.659241][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.761911][ T5708] loop3: detected capacity change from 0 to 1024
[   60.771206][ T5708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.776546][ T5708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.797245][ T5708] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   60.797283][ T5708] vhci_hcd vhci_hcd.2: invalid port number 96
[   60.797304][ T5708] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7
[   60.898232][ T5714] overlayfs: missing 'lowerdir'
[   61.523892][ T5732] Soft offlining pfn 0x122ccf at process virtual address 0x20000000
[   61.525949][ T5732] Soft offline: 0x122ccf: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff)
[   61.563923][ T5733] FAULT_INJECTION: forcing a failure.
[   61.563923][ T5733] name failslab, interval 1, probability 0, space 0, times 0
[   61.563956][ T5733] CPU: 0 UID: 0 PID: 5733 Comm: syz.2.249 Not tainted syzkaller #0 PREEMPT 
[   61.563970][ T5733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   61.563977][ T5733] Call trace:
[   61.563981][ T5733]  show_stack+0x2c/0x3c (C)
[   61.564002][ T5733]  __dump_stack+0x30/0x40
[   61.564016][ T5733]  dump_stack_lvl+0xd8/0x12c
[   61.564026][ T5733]  dump_stack+0x1c/0x28
[   61.564036][ T5733]  should_fail_ex+0x41c/0x590
[   61.564050][ T5733]  should_failslab+0xc4/0x120
[   61.564059][ T5733]  __kmalloc_cache_noprof+0x94/0x5ec
[   61.564068][ T5733]  __arm64_sys_mount+0x188/0x388
[   61.564078][ T5733]  invoke_syscall+0x98/0x244
[   61.564095][ T5733]  el0_svc_common+0xec/0x23c
[   61.564105][ T5733]  do_el0_svc+0x4c/0x5c
[   61.564115][ T5733]  el0_svc+0x64/0x260
[   61.564124][ T5733]  el0t_64_sync_handler+0x48/0x148
[   61.564132][ T5733]  el0t_64_sync+0x198/0x19c
[   61.659757][ T5741] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[   61.659791][ T5741] PKCS7: Only support pkcs7_signedData type
[   62.136655][ T5748] loop3: detected capacity change from 0 to 2048
[   62.289683][ T5748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.297065][ T5748] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   62.368292][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.378113][ T5756] FAULT_INJECTION: forcing a failure.
[   62.378113][ T5756] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   62.380778][ T5756] CPU: 1 UID: 0 PID: 5756 Comm: syz.4.257 Not tainted syzkaller #0 PREEMPT 
[   62.380812][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   62.380822][ T5756] Call trace:
[   62.380826][ T5756]  show_stack+0x2c/0x3c (C)
[   62.380845][ T5756]  __dump_stack+0x30/0x40
[   62.380858][ T5756]  dump_stack_lvl+0xd8/0x12c
[   62.380868][ T5756]  dump_stack+0x1c/0x28
[   62.380877][ T5756]  should_fail_ex+0x41c/0x590
[   62.380891][ T5756]  should_fail+0x14/0x24
[   62.380901][ T5756]  should_fail_usercopy+0x20/0x30
[   62.380908][ T5756]  _inline_copy_from_user+0x3c/0x174
[   62.380917][ T5756]  copy_from_bpfptr+0x70/0xb0
[   62.380924][ T5756]  bpf_prog_load+0x880/0x15f8
[   62.380932][ T5756]  __sys_bpf+0x870/0x8c8
[   62.380939][ T5756]  __arm64_sys_bpf+0xd0/0xec
[   62.380946][ T5756]  invoke_syscall+0x98/0x244
[   62.380956][ T5756]  el0_svc_common+0xec/0x23c
[   62.380966][ T5756]  do_el0_svc+0x4c/0x5c
[   62.380976][ T5756]  el0_svc+0x64/0x260
[   62.380984][ T5756]  el0t_64_sync_handler+0x48/0x148
[   62.380992][ T5756]  el0t_64_sync+0x198/0x19c
[   62.802058][ T5773] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03
[   62.823257][ T5775] tipc: Started in network mode
[   62.823301][ T5775] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711
[   62.823327][ T5775] tipc: Enabling of bearer <udp:é> rejected, failed to enable media
[   62.919157][ T5781] loop4: detected capacity change from 0 to 512
[   62.950476][ T5783] __nla_validate_parse: 2 callbacks suppressed
[   62.950707][ T5781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   62.954525][ T5783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'.
[   63.064220][ T5781] macsec1: entered promiscuous mode
[   63.065444][ T5781] bridge0: entered promiscuous mode
[   63.117561][ T5800] netlink: 152 bytes leftover after parsing attributes in process `syz.1.272'.
[   63.200770][ T4719] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.220819][ T5807] FAULT_INJECTION: forcing a failure.
[   63.220819][ T5807] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   63.220856][ T5807] CPU: 1 UID: 0 PID: 5807 Comm: syz.0.275 Not tainted syzkaller #0 PREEMPT 
[   63.220870][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   63.220877][ T5807] Call trace:
[   63.220881][ T5807]  show_stack+0x2c/0x3c (C)
[   63.220900][ T5807]  __dump_stack+0x30/0x40
[   63.220911][ T5807]  dump_stack_lvl+0xd8/0x12c
[   63.220922][ T5807]  dump_stack+0x1c/0x28
[   63.220931][ T5807]  should_fail_ex+0x41c/0x590
[   63.220943][ T5807]  should_fail+0x14/0x24
[   63.220952][ T5807]  should_fail_usercopy+0x20/0x30
[   63.220960][ T5807]  strncpy_from_user+0x48/0x388
[   63.220968][ T5807]  strncpy_from_bpfptr+0x54/0x68
[   63.220977][ T5807]  bpf_prog_load+0x9a0/0x15f8
[   63.220985][ T5807]  __sys_bpf+0x870/0x8c8
[   63.220992][ T5807]  __arm64_sys_bpf+0xd0/0xec
[   63.220998][ T5807]  invoke_syscall+0x98/0x244
[   63.221009][ T5807]  el0_svc_common+0xec/0x23c
[   63.221019][ T5807]  do_el0_svc+0x4c/0x5c
[   63.221028][ T5807]  el0_svc+0x64/0x260
[   63.221037][ T5807]  el0t_64_sync_handler+0x48/0x148
[   63.221044][ T5807]  el0t_64_sync+0x198/0x19c
[   63.530869][ T5834] tipc: Started in network mode
[   63.532113][ T5834] tipc: Node identity ac1414aa, cluster identity 4711
[   63.534128][ T5834] tipc: Enabled bearer <udp:s>, priority 10
[   63.548515][ T5838] netlink: 152 bytes leftover after parsing attributes in process `syz.0.283'.
[   63.803581][ T5860] netlink: 'syz.0.293': attribute type 3 has an invalid length.
[   63.887478][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'.
[   63.892160][ T5867] vlan2: entered allmulticast mode
[   63.893169][ T5867] dummy0: entered allmulticast mode
[   63.894629][ T5867] bridge0: port 3(vlan2) entered blocking state
[   63.895977][ T5867] bridge0: port 3(vlan2) entered disabled state
[   63.899098][ T5867] vlan2: entered promiscuous mode
[   63.900184][ T5867] dummy0: entered promiscuous mode
[   63.981675][ T5873] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.297'.
[   64.003340][ T5878] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   64.009520][ T5877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.299'.
[   64.026068][ T5873] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.297'.
[   64.113960][ T5873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'.
[   64.174641][ T5891] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   64.181372][ T5891] gretap1: entered promiscuous mode
[   64.225719][ T5900] FAULT_INJECTION: forcing a failure.
[   64.225719][ T5900] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[   64.225757][ T5900] CPU: 0 UID: 0 PID: 5900 Comm: syz.4.303 Not tainted syzkaller #0 PREEMPT 
[   64.225769][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   64.225776][ T5900] Call trace:
[   64.225779][ T5900]  show_stack+0x2c/0x3c (C)
[   64.225799][ T5900]  __dump_stack+0x30/0x40
[   64.225811][ T5900]  dump_stack_lvl+0xd8/0x12c
[   64.225821][ T5900]  dump_stack+0x1c/0x28
[   64.225831][ T5900]  should_fail_ex+0x41c/0x590
[   64.225842][ T5900]  should_fail_alloc_page+0xec/0x10c
[   64.225851][ T5900]  prepare_alloc_pages+0x194/0x4a4
[   64.225861][ T5900]  __alloc_frozen_pages_noprof+0x134/0x320
[   64.225869][ T5900]  alloc_pages_mpol+0x1ec/0x3c0
[   64.225878][ T5900]  alloc_frozen_pages_noprof+0xc4/0x10c
[   64.225887][ T5900]  alloc_pages_noprof+0x30/0x148
[   64.225896][ T5900]  get_free_pages_noprof+0x1c/0xbc
[   64.225905][ T5900]  __kasan_populate_vmalloc+0x48/0x1d0
[   64.225915][ T5900]  alloc_vmap_area+0xdf4/0x13e8
[   64.225924][ T5900]  __get_vm_area_node+0x210/0x32c
[   64.225933][ T5900]  __vmalloc_node_range_noprof+0x2c8/0x105c
[   64.225943][ T5900]  __vmalloc_node_noprof+0xec/0x14c
[   64.225952][ T5900]  vzalloc_noprof+0x3c/0x4c
[   64.225961][ T5900]  bpf_check+0x13c/0x40dc
[   64.225971][ T5900]  bpf_prog_load+0x1050/0x15f8
[   64.225979][ T5900]  __sys_bpf+0x870/0x8c8
[   64.225986][ T5900]  __arm64_sys_bpf+0xd0/0xec
[   64.225992][ T5900]  invoke_syscall+0x98/0x244
[   64.226002][ T5900]  el0_svc_common+0xec/0x23c
[   64.226012][ T5900]  do_el0_svc+0x4c/0x5c
[   64.226022][ T5900]  el0_svc+0x64/0x260
[   64.226030][ T5900]  el0t_64_sync_handler+0x48/0x148
[   64.226037][ T5900]  el0t_64_sync+0x198/0x19c
[   64.226057][ T5900] syz.4.303: vmalloc error: size 2584, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0
[   64.226084][ T5900] CPU: 0 UID: 0 PID: 5900 Comm: syz.4.303 Not tainted syzkaller #0 PREEMPT 
[   64.226098][ T5900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   64.226103][ T5900] Call trace:
[   64.226105][ T5900]  show_stack+0x2c/0x3c (C)
[   64.226118][ T5900]  __dump_stack+0x30/0x40
[   64.226131][ T5900]  dump_stack_lvl+0xd8/0x12c
[   64.226141][ T5900]  dump_stack+0x1c/0x28
[   64.226151][ T5900]  warn_alloc+0x1bc/0x1d0
[   64.226159][ T5900]  __vmalloc_node_range_noprof+0x2e8/0x105c
[   64.226168][ T5900]  __vmalloc_node_noprof+0xec/0x14c
[   64.226178][ T5900]  vzalloc_noprof+0x3c/0x4c
[   64.226187][ T5900]  bpf_check+0x13c/0x40dc
[   64.226195][ T5900]  bpf_prog_load+0x1050/0x15f8
[   64.226203][ T5900]  __sys_bpf+0x870/0x8c8
[   64.226210][ T5900]  __arm64_sys_bpf+0xd0/0xec
[   64.226216][ T5900]  invoke_syscall+0x98/0x244
[   64.226226][ T5900]  el0_svc_common+0xec/0x23c
[   64.226236][ T5900]  do_el0_svc+0x4c/0x5c
[   64.226245][ T5900]  el0_svc+0x64/0x260
[   64.226252][ T5900]  el0t_64_sync_handler+0x48/0x148
[   64.226260][ T5900]  el0t_64_sync+0x198/0x19c
[   64.235868][ T5900] Mem-Info:
[   64.235884][ T5900] active_anon:22 inactive_anon:8186 isolated_anon:0
[   64.235884][ T5900]  active_file:2623 inactive_file:4693 isolated_file:0
[   64.235884][ T5900]  unevictable:768 dirty:99 writeback:0
[   64.235884][ T5900]  slab_reclaimable:8913 slab_unreclaimable:88339
[   64.235884][ T5900]  mapped:32374 shmem:3813 pagetables:1135
[   64.235884][ T5900]  sec_pagetables:0 bounce:0
[   64.235884][ T5900]  kernel_misc_reclaimable:0
[   64.235884][ T5900]  free:1472459 free_pcp:19847 free_cma:7616
[   64.235914][ T5900] Node 0 active_anon:88kB inactive_anon:32744kB active_file:10492kB inactive_file:18772kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:129496kB dirty:396kB writeback:0kB shmem:15252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8712kB pagetables:4540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   64.235935][ T5900] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB
[   64.235958][ T5900] lowmem_reserve[]: 0 0 3651 3651 3651
[   64.235978][ T5900] Node 0 Normal free:2811948kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88kB inactive_anon:32744kB active_file:10492kB inactive_file:18772kB unevictable:3072kB writepending:396kB zspages:0kB present:5242880kB managed:3739084kB mlocked:0kB bounce:0kB free_pcp:79388kB local_pcp:25460kB free_cma:0kB
[   64.236000][ T5900] lowmem_reserve[]: 0 0 0 0 0
[   64.236018][ T5900] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB
[   64.236076][ T5900] Node 0 Normal: 635*4kB (UM) 736*8kB (UE) 654*16kB (UME) 1*32kB (E) 15*64kB (UE) 6*128kB (UME) 1*256kB (U) 1*512kB (U) 3*1024kB (UME) 5*2048kB (UME) 678*4096kB (ME) = 2811820kB
[   64.236162][ T5900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[   64.236170][ T5900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB
[   64.244137][ T5900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[   64.244152][ T5900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB
[   64.244160][ T5900] 11122 total pagecache pages
[   64.244164][ T5900] 0 pages in swap cache
[   64.244168][ T5900] Free swap  = 124996kB
[   64.244171][ T5900] Total swap = 124996kB
[   64.244175][ T5900] 2097152 pages RAM
[   64.244178][ T5900] 0 pages HighMem/MovableOnly
[   64.244181][ T5900] 392333 pages reserved
[   64.244184][ T5900] 8192 pages cma reserved
[   64.244188][ T5900] 0 pages hwpoisoned
[   64.277342][ T5902] syzkaller0: entered promiscuous mode
[   64.277357][ T5902] syzkaller0: entered allmulticast mode
[   64.343070][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'.
[   64.343110][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'.
[   64.344154][ T5909] netlink: 'syz.0.305': attribute type 7 has an invalid length.
[   64.355840][ T5909] loop0: detected capacity change from 0 to 512
[   64.365455][ T5909] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   64.370170][ T5909] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[   64.370214][ T5909] System zones: 0-2, 18-18, 34-34
[   64.372933][ T5909] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.305: bad orphan inode 15
[   64.372968][ T5909] loop0: lost filesystem error report for type 5 error -117
[   64.373139][ T5909] ext4_test_bit(bit=14, block=18) = 1
[   64.373153][ T5909] is_bad_inode(inode)=0
[   64.373162][ T5909] NEXT_ORPHAN(inode)=2264924160
[   64.373171][ T5909] max_ino=32
[   64.373179][ T5909] i_nlink=0
[   64.376227][    C0] EXT4-fs (loop0): error count since last fsck: 1
[   64.376241][    C0] EXT4-fs (loop0): initial error at time 64: ext4_orphan_get:1425
[   64.376254][    C0] EXT4-fs (loop0): last error at time 64: ext4_orphan_get:1425
[   64.378433][ T5909] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.305: corrupted xattr block 19: e_value out of bounds
[   64.378746][ T5909] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   64.379043][ T5909] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117)
[   64.379526][ T5909] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.384175][ T5909] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 3: comm syz.0.305: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0
[   64.406385][ T5916] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 3: comm syz.0.305: bad entry in directory: directory entry overrun - offset=44, inode=262156, rec_len=4096, size=4096 fake=0
[   64.506952][   T39] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   64.507990][   T39] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   64.508013][   T39] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   64.508029][   T39] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   64.510569][    T9] cfg80211: failed to load regulatory.db
[   64.514772][ T1594] ieee802154 phy0 wpan0: encryption failed: -22
[   64.517454][ T1594] ieee802154 phy1 wpan1: encryption failed: -22
[   64.647178][ T4804] tipc: Node number set to 2886997162
[   64.842032][ T5925] Bluetooth: MGMT ver 1.23
[   65.027321][ T5932] loop1: detected capacity change from 0 to 512
[   65.032215][ T5932] EXT4-fs: Ignoring removed bh option
[   65.033581][ T5932] EXT4-fs: inline encryption not supported
[   65.034925][ T5932] EXT4-fs: inline encryption not supported
[   65.038679][ T5932] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   65.051442][ T5932] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   65.056775][ T5932] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.313: bg 0: block 248: padding at end of block bitmap is not set
[   65.056814][ T5932] loop1: lost filesystem error report for type 5 error -117
[   65.066210][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   65.066226][    C0] EXT4-fs (loop1): last error at time 65: ext4_validate_block_bitmap:441
[   65.185176][ T5932] Quota error (device loop1): write_blk: dquota write failed
[   65.185234][ T5932] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   65.185275][ T5932] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.313: Failed to acquire dquot type 1
[   65.185294][ T5932] loop1: lost filesystem error report for type 5 error -28
[   65.208384][ T5932] EXT4-fs (loop1): 1 truncate cleaned up
[   65.208893][ T5932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[   65.220494][ T5932] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2
[   65.220556][ T5932] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 131074
[   65.220987][ T5932] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.313: Failed to acquire dquot type 1
[   65.234201][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[   65.401989][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.402371][ T5950] FAULT_INJECTION: forcing a failure.
[   65.402371][ T5950] name failslab, interval 1, probability 0, space 0, times 0
[   65.402386][ T5950] CPU: 1 UID: 0 PID: 5950 Comm: syz.1.316 Tainted: G             L      syzkaller #0 PREEMPT 
[   65.402398][ T5950] Tainted: [L]=SOFTLOCKUP
[   65.402401][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   65.402406][ T5950] Call trace:
[   65.402409][ T5950]  show_stack+0x2c/0x3c (C)
[   65.402428][ T5950]  __dump_stack+0x30/0x40
[   65.402441][ T5950]  dump_stack_lvl+0xd8/0x12c
[   65.402451][ T5950]  dump_stack+0x1c/0x28
[   65.402461][ T5950]  should_fail_ex+0x41c/0x590
[   65.402477][ T5950]  should_failslab+0xc4/0x120
[   65.402486][ T5950]  kmem_cache_alloc_node_noprof+0x98/0x5f8
[   65.402495][ T5950]  alloc_vmap_area+0x208/0x13e8
[   65.402505][ T5950]  __get_vm_area_node+0x210/0x32c
[   65.402514][ T5950]  __vmalloc_node_range_noprof+0x2c8/0x105c
[   65.402524][ T5950]  __vmalloc_node_noprof+0xec/0x14c
[   65.402533][ T5950]  vzalloc_noprof+0x3c/0x4c
[   65.402543][ T5950]  bpf_check+0x13c/0x40dc
[   65.402552][ T5950]  bpf_prog_load+0x1050/0x15f8
[   65.402560][ T5950]  __sys_bpf+0x870/0x8c8
[   65.402567][ T5950]  __arm64_sys_bpf+0xd0/0xec
[   65.402574][ T5950]  invoke_syscall+0x98/0x244
[   65.402584][ T5950]  el0_svc_common+0xec/0x23c
[   65.402594][ T5950]  do_el0_svc+0x4c/0x5c
[   65.402603][ T5950]  el0_svc+0x64/0x260
[   65.402611][ T5950]  el0t_64_sync_handler+0x48/0x148
[   65.402619][ T5950]  el0t_64_sync+0x198/0x19c
[   65.511466][   T30] audit: type=1326 audit(65.480:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5951 comm="syz.1.319" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffac5781a8 code=0x0
[   65.901865][ T5967] IPv6: sit1: Disabled Multicast RS
[   66.632456][ T5990] binder: 5989:5990 ioctl c00c620f 200001c0 returned -22
[   66.699487][ T5993] loop0: detected capacity change from 0 to 256
[   67.218444][ T6025] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[   67.397296][ T6105] loop3: detected capacity change from 0 to 128
[   67.454063][ T6105] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[   68.081184][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   68.328375][ T6127] loop4: detected capacity change from 0 to 512
[   68.333716][ T6127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   68.337393][ T6127] EXT4-fs (loop4): 1 truncate cleaned up
[   68.337859][ T6127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.376519][ T4719] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt.
[   68.377790][ T4719] EXT4-fs error (device loop4): __ext4_iget:5533: inode #13: block 8192: comm syz-executor: invalid block
[   68.378821][ T4719] EXT4-fs error (device loop4): __ext4_iget:5533: inode #13: block 8192: comm syz-executor: invalid block
[   68.466019][ T6139] loop1: detected capacity change from 0 to 512
[   68.470578][ T6139] EXT4-fs (loop1): Test dummy encryption mode enabled
[   68.479000][ T6139] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.360: inode has both inline data and extents flags
[   68.479034][ T6139] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   68.486947][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   68.486962][    C1] EXT4-fs (loop1): initial error at time 68: ext4_orphan_get:1399: inode 15
[   68.486981][    C1] EXT4-fs (loop1): last error at time 68: ext4_orphan_get:1399: inode 15
[   68.495042][ T6139] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.360: couldn't read orphan inode 15 (err -117)
[   68.495078][ T6139] loop1: lost filesystem error report for type 5 error -117
[   68.508183][ T6139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.038311][ T6134] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.073648][ T6024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.158116][ T6024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.191670][ T4723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   69.193533][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   69.195773][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   69.196486][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   69.196802][ T4723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.263639][ T6024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.347773][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.356022][ T6024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.381896][ T6176] loop1: detected capacity change from 0 to 1024
[   69.420672][ T6176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.925058][ T6024] bridge_slave_1: left allmulticast mode
[   69.928682][ T6024] bridge_slave_1: left promiscuous mode
[   69.929232][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.942906][ T6024] bridge_slave_0: left allmulticast mode
[   69.944191][ T6024] bridge_slave_0: left promiscuous mode
[   69.947510][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.984644][ T6192] loop0: detected capacity change from 0 to 128
[   70.015925][ T6192] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   70.341443][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.342421][ T4710] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.353317][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.417262][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.458154][ T6024] bond0 (unregistering): Released all slaves
[   70.529338][ T6165] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.530818][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.532216][ T6165] bridge_slave_0: entered allmulticast mode
[   70.533774][ T6165] bridge_slave_0: entered promiscuous mode
[   70.535778][ T6165] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.537523][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.538876][ T6165] bridge_slave_1: entered allmulticast mode
[   70.540669][ T6165] bridge_slave_1: entered promiscuous mode
[   70.553984][ T6165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.569041][ T6165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.621086][ T6165] team0: Port device team_slave_0 added
[   70.629463][ T6165] team0: Port device team_slave_1 added
[   70.674728][ T6220] loop0: detected capacity change from 0 to 512
[   70.679998][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.680030][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.680043][ T6165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.690437][ T6220] EXT4-fs: inline encryption not supported
[   70.698903][ T6220] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   70.705315][ T6220] EXT4-fs (loop0): 1 truncate cleaned up
[   70.705803][ T6220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.733476][ T6220] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6455: inode #15: comm syz.0.378: bad extra_isize 62 (inode size 256)
[   70.737190][ T6220] EXT4-fs (loop0): Remounting filesystem read-only
[   70.740189][ T6220] EXT4-fs (loop0): pa 000000003ea5e6ac: logic 296, phys. 39, len 216
[   70.860371][ T6165] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.860411][ T6165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.860428][ T6165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.886493][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.909295][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0
[   70.953855][ T6165] hsr_slave_0: entered promiscuous mode
[   70.963212][ T6165] hsr_slave_1: entered promiscuous mode
[   70.964140][ T6165] debugfs: 'hsr0' already exists in 'hsr'
[   70.964155][ T6165] Cannot create hsr debugfs directory
[   71.061471][ T6248] __nla_validate_parse: 4 callbacks suppressed
[   71.061525][ T6248] netlink: 68 bytes leftover after parsing attributes in process `syz.0.383'.
[   71.061548][ T6248] netlink: 68 bytes leftover after parsing attributes in process `syz.0.383'.
[   71.094575][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'.
[   71.098627][ T6248] ------------[ cut here ]------------
[   71.098636][ T6248] UBSAN: shift-out-of-bounds in drivers/block/null_blk/zoned.c:21:14
[   71.098646][ T6248] shift exponent -1 is negative
[   71.098655][ T6248] CPU: 0 UID: 0 PID: 6248 Comm: syz.0.383 Tainted: G             L      syzkaller #0 PREEMPT 
[   71.098666][ T6248] Tainted: [L]=SOFTLOCKUP
[   71.098669][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   71.098673][ T6248] Call trace:
[   71.098676][ T6248]  show_stack+0x2c/0x3c (C)
[   71.098695][ T6248]  __dump_stack+0x30/0x40
[   71.098706][ T6248]  dump_stack_lvl+0xd8/0x12c
[   71.098716][ T6248]  dump_stack+0x1c/0x28
[   71.098726][ T6248]  ubsan_epilogue+0x14/0x48
[   71.098735][ T6248]  __ubsan_handle_shift_out_of_bounds+0x224/0x264
[   71.098749][ T6248]  null_process_zoned_cmd+0x5fc/0xd48
[   71.098758][ T6248]  null_queue_rq+0x6b4/0xa88
[   71.098765][ T6248]  __blk_mq_issue_directly+0xfc/0x298
[   71.098775][ T6248]  blk_mq_try_issue_directly+0xe0/0x22c
[   71.098784][ T6248]  blk_mq_submit_bio+0x19d0/0x24c0
[   71.098792][ T6248]  __submit_bio+0x94/0x2dc
[   71.098801][ T6248]  submit_bio_noacct_nocheck+0x288/0xaac
[   71.098809][ T6248]  submit_bio_noacct+0xd7c/0x17f0
[   71.098817][ T6248]  submit_bio+0x38c/0x528
[   71.098825][ T6248]  __bh_submit+0x4ac/0x588
[   71.098835][ T6248]  block_read_full_folio+0x6a8/0x740
[   71.098846][ T6248]  blkdev_read_folio+0x28/0x38
[   71.098854][ T6248]  filemap_read_folio+0xf0/0x2fc
[   71.098862][ T6248]  do_read_cache_folio+0x35c/0x5a8
[   71.098870][ T6248]  read_cache_folio+0x68/0x88
[   71.098877][ T6248]  read_part_sector+0xcc/0x708
[   71.098885][ T6248]  adfspart_check_ICS+0xa4/0x720
[   71.098894][ T6248]  bdev_disk_changed+0x6e4/0x1224
[   71.098903][ T6248]  blkdev_get_whole+0x15c/0x240
[   71.098911][ T6248]  bdev_open+0x2b4/0x880
[   71.098919][ T6248]  bdev_file_open_by_dev+0x180/0x1d8
[   71.098927][ T6248]  disk_scan_partitions+0x1b4/0x2d4
[   71.098935][ T6248]  add_disk_fwnode+0x1dc/0x340
[   71.098942][ T6248]  device_add_disk+0x38/0x4c
[   71.098949][ T6248]  null_add_dev+0xef8/0x1800
[   71.098957][ T6248]  nullb_device_power_store+0x160/0x398
[   71.098964][ T6248]  configfs_write_iter+0x27c/0x354
[   71.098975][ T6248]  vfs_write+0x51c/0xa0c
[   71.098982][ T6248]  ksys_write+0x12c/0x228
[   71.098989][ T6248]  __arm64_sys_write+0x84/0x98
[   71.098996][ T6248]  invoke_syscall+0x98/0x244
[   71.099007][ T6248]  el0_svc_common+0xec/0x23c
[   71.099017][ T6248]  do_el0_svc+0x4c/0x5c
[   71.099026][ T6248]  el0_svc+0x64/0x260
[   71.099034][ T6248]  el0t_64_sync_handler+0x48/0x148
[   71.099042][ T6248]  el0t_64_sync+0x198/0x19c
[   71.099051][ T6248] ---[ end trace ]---
[   71.099072][ T6248] Unable to handle kernel paging request at virtual address dfff800000000011
[   71.099078][ T6248] KASAN: null-ptr-deref in range [0x0000000000000088-0x000000000000008f]
[   71.099084][ T6248] Mem abort info:
[   71.099087][ T6248]   ESR = 0x0000000096000005
[   71.099098][ T6248]   EC = 0x25: DABT (current EL), IL = 32 bits
[   71.099104][ T6248]   SET = 0, FnV = 0
[   71.099108][ T6248]   EA = 0, S1PTW = 0
[   71.099113][ T6248]   FSC = 0x05: level 1 translation fault
[   71.099118][ T6248] Data abort info:
[   71.099120][ T6248]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
[   71.099125][ T6248]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[   71.099130][ T6248]   GCS = 0, Overlay = 0, DirtyBit = 0
[   71.099135][ T6248] [dfff800000000011] address between user and kernel address ranges
[   71.099196][ T6248] Internal error: Oops: 0000000096000005 [#1]  SMP
[   71.154164][ T6248] Modules linked in:
[   71.154794][ T6248] CPU: 0 UID: 0 PID: 6248 Comm: syz.0.383 Tainted: G             L      syzkaller #0 PREEMPT 
[   71.156504][ T6248] Tainted: [L]=SOFTLOCKUP
[   71.157221][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026
[   71.158964][ T6248] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
[   71.160264][ T6248] pc : null_process_zoned_cmd+0x610/0xd48
[   71.161206][ T6248] lr : null_process_zoned_cmd+0x5fc/0xd48
[   71.162183][ T6248] sp : ffff800094d06ac0
[   71.162891][ T6248] x29: ffff800094d06ae0 x28: ffff0000cc73c910 x27: ffff0000cc73c918
[   71.164237][ T6248] x26: 1fffe000198e7922 x25: ffff0000f3689000 x24: 0000000000000000
[   71.165546][ T6248] x23: 000000000000008c x22: 0000000000000000 x21: 0000000000000000
[   71.166911][ T6248] x20: 0000000000000008 x19: dfff800000000000 x18: 00000000ffffffff
[   71.168233][ T6248] x17: 3a31323a632e6465 x16: 0000000000000001 x15: 0000000000000000
[   71.169568][ T6248] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000004
[   71.170909][ T6248] x11: ffff700011466e68 x10: ffff700011466e68 x9 : 00000000000000a8
[   71.172249][ T6248] x8 : 0000000000000011 x7 : ffff80008048ea5c x6 : 0000000000000000
[   71.173612][ T6248] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f7cb4
[   71.174962][ T6248] x2 : 0000000000000001 x1 : ffff0000f3a11d40 x0 : 0000000000000000
[   71.176261][ T6248] Call trace:
[   71.176778][ T6248]  null_process_zoned_cmd+0x610/0xd48 (P)
[   71.177707][ T6248]  null_queue_rq+0x6b4/0xa88
[   71.178447][ T6248]  __blk_mq_issue_directly+0xfc/0x298
[   71.179312][ T6248]  blk_mq_try_issue_directly+0xe0/0x22c
[   71.180197][ T6248]  blk_mq_submit_bio+0x19d0/0x24c0
[   71.181092][ T6248]  __submit_bio+0x94/0x2dc
[   71.181824][ T6248]  submit_bio_noacct_nocheck+0x288/0xaac
[   71.182775][ T6248]  submit_bio_noacct+0xd7c/0x17f0
[   71.183659][ T6248]  submit_bio+0x38c/0x528
[   71.184374][ T6248]  __bh_submit+0x4ac/0x588
[   71.185139][ T6248]  block_read_full_folio+0x6a8/0x740
[   71.186011][ T6248]  blkdev_read_folio+0x28/0x38
[   71.186825][ T6248]  filemap_read_folio+0xf0/0x2fc
[   71.187676][ T6248]  do_read_cache_folio+0x35c/0x5a8
[   71.188541][ T6248]  read_cache_folio+0x68/0x88
[   71.189357][ T6248]  read_part_sector+0xcc/0x708
[   71.190132][ T6248]  adfspart_check_ICS+0xa4/0x720
[   71.190969][ T6248]  bdev_disk_changed+0x6e4/0x1224
[   71.191794][ T6248]  blkdev_get_whole+0x15c/0x240
[   71.192606][ T6248]  bdev_open+0x2b4/0x880
[   71.193337][ T6248]  bdev_file_open_by_dev+0x180/0x1d8
[   71.194261][ T6248]  disk_scan_partitions+0x1b4/0x2d4
[   71.195130][ T6248]  add_disk_fwnode+0x1dc/0x340
[   71.195918][ T6248]  device_add_disk+0x38/0x4c
[   71.196684][ T6248]  null_add_dev+0xef8/0x1800
[   71.197454][ T6248]  nullb_device_power_store+0x160/0x398
[   71.198329][ T6248]  configfs_write_iter+0x27c/0x354
[   71.199215][ T6248]  vfs_write+0x51c/0xa0c
[   71.199960][ T6248]  ksys_write+0x12c/0x228
[   71.200663][ T6248]  __arm64_sys_write+0x84/0x98
[   71.201448][ T6248]  invoke_syscall+0x98/0x244
[   71.202228][ T6248]  el0_svc_common+0xec/0x23c
[   71.202990][ T6248]  do_el0_svc+0x4c/0x5c
[   71.203678][ T6248]  el0_svc+0x64/0x260
[   71.204343][ T6248]  el0t_64_sync_handler+0x48/0x148
[   71.205183][ T6248]  el0t_64_sync+0x198/0x19c
[   71.205982][ T6248] Code: 52801509 9ba95d16 910232d7 d343fee8 (38f36908) 
[   71.207147][ T6248] ---[ end trace 0000000000000000 ]---
[   71.498690][ T6248] Kernel panic - not syncing: Oops: Fatal exception
[   71.499825][ T6248] SMP: stopping secondary CPUs
[   71.500617][ T6248] Kernel Offset: disabled
[   71.501325][ T6248] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7
[   71.502476][ T6248] Memory Limit: none
[   71.797149][ T6248] Rebooting in 86400 seconds..