last executing test programs: 46.25724936s ago: executing program 2 (id=252): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x144) mount(0x0, &(0x7f0000000380)='./proc\x00', &(0x7f00000003c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000440)='3', 0x3e) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000000)=0x40049, 0x4) 46.144974212s ago: executing program 2 (id=254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000940)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000140007800800114000000000050015000c000000050005000a000000050001000700000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/mnt\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="0af0fce4", @ANYRES16=r3, @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x24004890}, 0x404c845) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000000f0601010000000000000000020000000500010007000000056d9d0001000700000006000b00030000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r5, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="93", 0x1}], 0x1}}], 0x1, 0x4040040) r6 = socket$inet(0x2, 0x3, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) close(r8) r9 = socket(0x1e, 0x80003, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000009c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x675f, 0x9, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000a40)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) r13 = socket$kcm(0x11, 0x3, 0x0) r14 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000ac0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newtfilter={0x88, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0x2cfee8fc}, 0x2, r15}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 45.957009478s ago: executing program 2 (id=258): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f00000000c0)) write$cgroup_int(r1, &(0x7f0000000080)=0x7ffffffffff80000, 0x12) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 45.934923747s ago: executing program 2 (id=260): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0xe, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x450, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x0, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) listns(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x40000, &(0x7f00000008c0)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x143041, 0x84) syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa030490720100000047000000000000000011000000000000e000000244448a83e0000002000003ffac1414bb00010000ac1414aa000000030000000000000080e0000001000006b00000000000000001ac1414aa00010001e0000001000008de00000000"], 0x0) 45.791045428s ago: executing program 2 (id=263): r0 = socket$kcm(0x10, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r1, &(0x7f00000015c0)=[{&(0x7f00000001c0)='\x00', 0x1}, {&(0x7f0000001600)="4bff7ae1de05ff83c7e2d76d1be3526b25c211c7591bfdbb2fda5c0b9b47f9245161fdd05e31bddeda55427558089fd4334666a6ea71462e046dd6cd0843d8f316f11f7aeb205c94e2c7ae7731973fb0fc920553db3e2fb247b311323803ec234d1c34df0bd4bfa4f20c1937aef564576ede46f0f8c1faa2862e2d017949b2bae6700242f430bb83fcd5dfd2d4183a55fce37f7c144e8f2df637d3d16fc349de17479218df6be49657079b87fd5e1520174911c7f204da1d0cd8705f56db8700b4d6fbdde36814d0ec02b99054112b4c260691f5571df88015205f98d7a4b72697e090", 0xe3}, {&(0x7f0000001500)="09a5ba41b42bcba8b1121cbcbf55a12d85ce01755c92ec7f08b66b078fbde99a64b9b518e2430387981b6df9ec18da2a20d23522491e6e2edf843f70ba017ef0040c11636b7ae1a7d136bdec44916a8a666e7fa7ba5eca6ff2deca52fcbbd29d57d440250e26eea683257cd19cd682f476de03ad3b3adc11464af7e68037985d3ddf007002979a6ecf0d9025c940c54ee72ee4ad2e165d4ce75f40e76444098da1", 0xa1}], 0x3) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) mknodat$loop(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x10, 0x1) connect$inet6(r3, &(0x7f0000000c40)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) recvfrom$inet6(r2, &(0x7f0000001340)=""/78, 0x4e, 0x40000000, &(0x7f00000013c0)={0xa, 0x4e24, 0x2, @mcast1, 0x11}, 0x1c) sendmsg(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="84", 0x1}, {&(0x7f0000000d40)="aeffa69a6050fbb8ba8076101a8e4d9cc28a3097e6fb4caba9c3e811088cb0db72f419a2f4283f58e74e68200e10a43e14aad40315d74c2ae68591de27c540e4b3cca898051d45fa1aeade5cf8b4ad662357b696b4ce288b4ff23debaf763bdc0239df182067d752785afb51b74348ef7960a62744d79d9c3e4c8664e961f6812dcc00d2d06bc52b1bdab5c28416d0d5a4ad5fd7fb700333aec1498fcd9a8ea6493b6d3331100da4751dfa714fec543c148b65836aef6b79acdd8ff7720daaa561827380fdac39999f0fe5b71c753c7259b44dd8a6a07e61a3d62100a2d74138711487d888103b70f3543a277620a51afd4ebd397f16fe44fce5753e72594ef65208e889bdfe89081959f2335319f091e2a6be8d7ac1f69c8e4e8715f4d672bb69a71c8e2d46db820fc6f925cb1eed818f003f93b6d958742705457ad18b48d4b4725fe21f5a5c2f1057ee9f7f5923bad621b4675af6c504dd167e41a132e95e4995c969f3fdb325a878f00ba8cf696488fa09d7bebcf4225b3fa1d8a8756eeb104808da2aa07c226f73dfcbbe29ab7808b5b16495b279c7d118df654742e4f5e5bc2d3d3e09af23da6367e49e7c5b40bc4f94ede9a1d105011cd91dea698a195101da1f6b9a9f56087f75fc8e2341bbad7ab9cd8b4bad485363b074dea0a1c2cee5300fd5cebb32884dc3bbb97a9bab27f842172b727df2f6a92725d84258490bd47a2ebc0ab9b804ecf4db80f972991f7c3bce86f4c7081a8277b012ff8f77056fa8b8d51759502f8ffefe1e41477318fa2771a572efa6339bc06348df29d138de77eed01e1c5720b7d2d06799a69c8f2a85e7e786db32f30d13e2ff5f4fd2b97cbc15b856ae8085532799d0efceabe87a2db06540a85ce99189f99859aadc58a29dfefffd14dc70c35fafe94cb38295e54c1eb177ca63a701510791fe0d5e44b14db682daad94b2b075d719f4a9084c9b53e20c6695fe16184e165bd9585e7a9c67b555c1f34a60fc6e90613358047af8281ff60937dea38fe45e5e84a46e88ad4d89395076c9230826358aaf76466f2ebc2b7fd8016af4d2dc90554821e5e7952c74273817f210f01b76122c7f6dd57158e51d2884669693e466e82a9ed41b92fd397bc08d6717003a93254e72e82b53474f595478fc275190a1d55f7ab9889fd3b081e1e3e3fb6dc33783edf92620f617f605cf62193c96f54429b690f9a478b343e6718ff48ce64167fbeff03278780936d7aef33dcf0c681b6f43aa375305085af640c2b723e2b7551785da39dc973653d857723ce2b63e313b322168f5f4c76b780ea6dbba96a0d160b5b8e480f918a8ad48df8aaa30f216090253f29e160546dfbf8c3e770624f7e5c43ee159837325714ae34f8901d41605cf1f694d82d253bf732ba651825ba28709fdad243a12e23cb31847e1026e6d776fa45b029d6bfb352efbdccd5bb67b0cb188de347c831516f93d180fe90e06df9c45d06eaf90c37fbd7f8de60b90728929e64b4ed56088842908e1cac8751834c71040ce5b621c1d15870149ea0c491c700ba2b2cab7fe23ffd4d98c22939b7adc3705fb9a24d401be8867063072753e9c4fb075e0463a37ad79a976039653668a66f6a12130df4d30ff23ccce0b865db7b6c2327a76aecde5e7f653e446ff344157131853860672f5af93f3b486a6cae1ceb1927bdcaff2534099e8ce78a031af8771613c0fd1ff5cc965ddd1cac205d8ae3b6dcbc66a86871c75cf0000bc5190a19683f782732386275413e8b0be63b952b44e99a184ca89d6d2a7a389eca19568425e71f095bde947caf856da87622078f0f6557f7862ca2d11f41c7212556510027a9c31d8d609439d147d79703938a0bfc897cf87ccb69b221cca69eff62d986ff99b5e99d8fbf22ce9f1fdffc8aa0d806e8b87e2f41f7f7bd3267a62923e55f237de3fdf373af2e4caa898a5c7f9490c77547f42fd85251efbea965ba0dd706b427319", 0x583}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1) mount(0x0, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='tmpfs\x00', 0x2, &(0x7f0000000640)='usrquota') recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001980)=""/4123, 0x101b}, {&(0x7f0000002a40)=""/4074, 0xfea}, {&(0x7f0000000240)=""/256, 0x100}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5}, 0x120) 44.71698654s ago: executing program 2 (id=273): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x4, @local, 0xa, 0xfffffffd}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1f, 0x5, 0xfffffffd) add_key$user(0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffd) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="ffffffffffff0211223344550806000108000604000243054305123400123400ff4305029afe00000000", 0x2a, 0x1, &(0x7f0000000dc0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="34000000110100000000000000000000000000004990f7b02886a23ab7324446ec82791d3740b400000e12acc2c5da25bd4a3a8adc70a1c86f019cbc7a19b3b4ca5602c0031aeceb6c48b9a1dfcd92fcbd6ddb493730c9eca52674d5d532e9e6f0e8e2014278256d35d65f922feda498f59c5cbb007ff136503a0a819079e88791e2a5f3859b25ccd9b2b6674b", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000000000000000"], 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000340)={0x2, 0x4e20, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x23}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c8000000000000000000000007000000891b3d64000101e0000002ac1414aaffffffffac1e0101e00000020094040100862200000001050a733843486e1b52dd070c34b5978b4e7ca7a9dc85070605608e209404000044240a01ac1e010100000016ac1e010180000000e000000200000005640101020000024589176264010102ac141434ac1414aa0a010102ffffffff863400000000000adcc06e471f9c47d3000350051102418bc040c97345a2752c9f75189206104ed644b5d75687154913bc767919000000388990b77a9beeb41d0f040f7e37ce625e"], 0xc8}}], 0x2, 0x44010) unshare(0x22020600) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/features/freeze_notification\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x401, &(0x7f0000000280)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000380)="$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") r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000800)=0x8000, 0x4) bind$inet6(r3, &(0x7f0000000840)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000880)=ANY=[], 0x8) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r10 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'bond0\x00'}) 44.682206968s ago: executing program 32 (id=273): connect$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x4, @local, 0xa, 0xfffffffd}, 0x20) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1f, 0x5, 0xfffffffd) add_key$user(0x0, 0x0, &(0x7f0000000300), 0x0, 0xfffffffffffffffd) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000880)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="ffffffffffff0211223344550806000108000604000243054305123400123400ff4305029afe00000000", 0x2a, 0x1, &(0x7f0000000dc0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="34000000110100000000000000000000000000004990f7b02886a23ab7324446ec82791d3740b400000e12acc2c5da25bd4a3a8adc70a1c86f019cbc7a19b3b4ca5602c0031aeceb6c48b9a1dfcd92fcbd6ddb493730c9eca52674d5d532e9e6f0e8e2014278256d35d65f922feda498f59c5cbb007ff136503a0a819079e88791e2a5f3859b25ccd9b2b6674b", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030062617461647630000000000000000000"], 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000340)={0x2, 0x4e20, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0, 0x23}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c8000000000000000000000007000000891b3d64000101e0000002ac1414aaffffffffac1e0101e00000020094040100862200000001050a733843486e1b52dd070c34b5978b4e7ca7a9dc85070605608e209404000044240a01ac1e010100000016ac1e010180000000e000000200000005640101020000024589176264010102ac141434ac1414aa0a010102ffffffff863400000000000adcc06e471f9c47d3000350051102418bc040c97345a2752c9f75189206104ed644b5d75687154913bc767919000000388990b77a9beeb41d0f040f7e37ce625e"], 0xc8}}], 0x2, 0x44010) unshare(0x22020600) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r4, 0xe503, 0x0) openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/features/freeze_notification\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x401, &(0x7f0000000280)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000380)="$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") r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000800)=0x8000, 0x4) bind$inet6(r3, &(0x7f0000000840)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000880)=ANY=[], 0x8) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r8, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000000000000000800090001"], 0x44}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r10 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'bond0\x00'}) 4.768154523s ago: executing program 0 (id=756): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x7fffffff}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000a80)={0x0, 0x1, 0x0, &(0x7f0000000ac0)=""/122, 0x0, 0xffff1000}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, 0x0) r8 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000b40)={0x0, r8}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) waitid(0x1, 0x0, 0x0, 0xb, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='.\x02\x00', 0x22000402, &(0x7f0000000180)={[{@noinit_itable}, {@init_itable}, {@noinit_itable}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@usrquota}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@resgid}, {@nolazytime}], [], 0x2c}, 0x1, 0x4ef, &(0x7f0000000280)="$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") r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000980), 0x121001, 0x0) writev(r10, &(0x7f00000009c0)=[{&(0x7f0000000a00)='Z', 0x1}], 0x1) setsockopt$inet_int(r9, 0x0, 0x2, &(0x7f0000001600)=0x9, 0x4) connect$inet(r9, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10) 3.520990223s ago: executing program 5 (id=760): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff72, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) syz_genetlink_get_family_id$ethtool(0x0, r3) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x138}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r5, 0x5452, 0x0) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000740)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800), 0x1}}], 0x3, 0x1c000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)={0x2, 0x0, [{0xdddd0000, 0x2f, &(0x7f0000000280)=""/47}, {0xd100828e98ba2273, 0xef, &(0x7f00000003c0)=""/239}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 3.110892299s ago: executing program 0 (id=765): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=[@acquire], 0xffffffffffffff47}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x3, 0x0, &(0x7f0000000740)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, r1, r1, r2, r0, r0, r0, r2], 0x20}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0xfffffffffffffffd}, @child_ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000900)={0x0, 0x28, 0x40}}, 0x40}]}) 2.991160305s ago: executing program 0 (id=767): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) (async) timerfd_create(0x6, 0x80800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x7) 2.92085372s ago: executing program 0 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f0000000e40), 0x8) (async, rerun: 64) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r1, &(0x7f0000000980)='lz4hc', 0x5) (async, rerun: 64) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72f, 0x20101, 0x8, 0x3b5}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000004c0)=0x0) (async) r5 = socket$inet(0x2, 0x3, 0x6) (async) syz_open_dev$dri(&(0x7f0000000ac0), 0x1, 0x20801) (async, rerun: 32) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) (rerun: 32) capset(0x0, 0x0) (async) syz_open_dev$media(&(0x7f0000000b40), 0x3, 0x0) (async, rerun: 32) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000b80)={0x0, 0x5961, 0x10000, 0x0, 0x51}, &(0x7f0000000c00)=0x0, &(0x7f0000000c40)=0x0, &(0x7f0000000c80)=0x0) (rerun: 32) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000cc0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000000d40)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r6, 0x7c65, 0xa334, 0x1, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x200, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}}}}) (async) ioctl$DVB_DVR_DMX_EXPBUF(r1, 0xc00c6f3e, &(0x7f0000000d80)={0x0, 0x0, r5}) ioctl$TCSETS(r11, 0x5402, &(0x7f0000000dc0)={0x6, 0x65c, 0x3, 0x7, 0x19, "e0f0f4e3fc75a854886c3b8652e81a598ff619"}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000a40)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl2\x00', r10, 0x1, 0x1, 0x5, 0x2, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @local, @broadcast}}}}) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x146b, 0x902, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xa0, 0xf5, "", [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x0, 0x5, {0x9, 0x21, 0x9, 0x7, 0x1, {0x22, 0x791}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x92, 0x2, 0x1}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x340, 0x0, 0x5, 0x7, 0x40, 0x7}, 0x11, &(0x7f00000001c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x85, 0x0, 0x1, 0x0, 0x3}]}, 0x4, [{0x56, &(0x7f0000000340)=@string={0x56, 0x3, "e5c7cc6a70a38e9bd2401500007b543d0b4754baaa308ace892ca52765b9cec89608ef86459163135e1801df245d633f1c983684fbb2b5db143b34527ca62de575af64912635d750dffffe1939c2600a0f19c7d2"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x409}}]}) (async, rerun: 64) r14 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000002b9078ac1414bbac1414ff0800907800060000fa1487e6e9d91e0a19513c3a314bb8e93ae0e8b9860731f8f842790c2ae3eb770f826ff63399c4ae20814a0f63978635be6b6180aad484687be477b2692b56cd921e0288a581941723a459e7e988c5ab0efb0ca45a84061860f53a941346b5f0cc4f2f8a53739f622e178babf73f1fbf590cdc5ce167948bb8959a204a7c26606943ffb05e20ea77c462556997661796a9235f8b8fbcf0db977d8d0f9bc1aac7d2bc297c370155cffbc7e61d7475e0c908e9507914dbdb4a7cee55b2ea81254fcbe6d3a47d2da677c7daa5a1e559101dd72d2a6569d8f10dc3d16e4ac7cd4f448cc61183a43183d8739562df7dc9c3d73993792d9c5d8080e89f4259349f90772f83aa4607b09279e9d6bfc9534538427d2fba2454a5d778ded9bad80251656ab95aead6bb36516f4b9a9e76a8aa78588f57925779cce3f181c575"], 0x0) syz_ublk_setup_queues(r14, r13, &(0x7f0000001000)={0x0, 0x0, 0x10, 0x1, 0x2e6}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0xffffff, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x80000, 0x0, 0x229}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x5, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed7a, 0x4020, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x12, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r12, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) (async) r15 = syz_clone(0xc0000, 0x0, 0x19, 0x0, 0x0, 0x0) wait4(r15, &(0x7f0000000000), 0x1, &(0x7f0000001080)) 2.504931965s ago: executing program 5 (id=770): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000400, &(0x7f0000000140)={[{@nolazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@jqfmt_vfsv1}, {@nolazytime}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000400)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="940000000208006d000000050003003a0000000c00048008000240000000060900010073797a310000000006000240888e00009a1a04800800064000000000080000000608000840ffffd0770800400000000108000640000001ff08000640000000090800e74000000101050003000e00000006000240001c000009000186b5170073797a3100"/148], 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x44080) 2.358586023s ago: executing program 5 (id=772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x4000840) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000440)) lseek(r3, 0x7ffffffffffffffe, 0x1) sendfile(r3, r3, 0x0, 0x6) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000002000010007000000fedbdf25020000000900000200000000080004"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.055809252s ago: executing program 0 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x5a) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x5a) io_setup(0x8, &(0x7f0000000600)=0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x108, 0x0, 0x108, 0xffffffff, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x2, 0x6, 0x3, 0x0, 0x6], 0x3, 0x2}, {0x3, [0x3, 0x2, 0x2, 0x4, 0x4], 0x6, 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x2f8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000940)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000000980)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r3, &(0x7f0000000980)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f0000000a40)=@ieee802154, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/78}, 0x2f331ec2}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c00)=""/12}, {&(0x7f0000000c40)=""/143}, {&(0x7f0000000d00)=""/169}, {&(0x7f0000000dc0)=""/100}, {&(0x7f0000001200)=""/4096}, {&(0x7f0000002200)=""/167}, {&(0x7f00000022c0)=""/225}, {&(0x7f00000023c0)=""/4096}], 0x0, &(0x7f00000033c0)=""/39}, 0xa}], 0x56b, 0x40000022, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000003400)=0xe7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000003440)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000003480)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000003480)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000fa8d92030000000000000000"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000fa8d92030000000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0x37, 0x0, &(0x7f0000000400)="d2ff03076003008cb89e08f086dd", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) io_submit(r2, 0x1, &(0x7f00000011c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x40, r0, 0x0, 0x0, 0x7, 0x0, 0x5, r1}]) 2.048644821s ago: executing program 5 (id=779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x804) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x2) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21}, &(0x7f0000000600)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000640)={0x0, 0x0, 0x10001, 0x4}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000680), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) syz_emit_ethernet(0x35, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) write$tun(0xffffffffffffffff, 0x0, 0x6a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1c, &(0x7f0000000180)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1f}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000017c0)='syz_tun\x00', 0x8) 1.913024071s ago: executing program 1 (id=782): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f00000003c0)=0xbbce, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x25e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x6, 0x6, "d3139c", 0x228, 0x11, 0x1, @private2, @remote, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x81, 0x0, 0x101, [@empty, @empty, @local, @loopback, @dev={0xfe, 0x80, '\x00', 0x17}]}, @dstopts={0x2e, 0xa, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0xce, 0x2, [0x1, 0x7, 0x8, 0x80000001, 0x6, 0xe9, 0x1]}}, @pad1, @hao={0xc9, 0x10, @local}]}, @dstopts={0x32, 0x9, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0xba, 0x7f, [0x8, 0xfffffffffffffffc]}}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x28, {0x2, 0x8, 0xc, 0x4, [0x0, 0x0, 0x6, 0x6]}}, @enc_lim={0x4, 0x1, 0x3}]}, @srh={0x3a, 0x8, 0x4, 0x4, 0x0, 0x40, 0x7, [@private0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00']}, @dstopts={0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x5}]}], {0x4e24, 0x5, 0xc0, 0x0, @opaque="33189740415a7f84bbd37b9aff7132e085a7b5bd804fbe49f37c38b3843d30a32134fc0f32cc8a882b3cd01569ccd910b8e1af70f5f300e2a2599d9127ea67c675778792e0b87b838b0dc4952e1538088e19c251e5455d4d016b89f282bfbab6daf52a2a38299a4e92ac35d1e1344c17fda0ab9bf24d61d1776a52ed35903abbd06fb702fd82e81c1aac04cc175ef5108896ae198fb5c46fbf423ae0dfac687e811bff5247057c20c75bdad876b6ac342b2aaf64153cdda1"}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x442, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f00000006c0)={0x19980330}, &(0x7f0000000700)={0x0, 0xd, 0x0, 0x2, 0xffffffff, 0xfffffffd}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000740), 0x0, 0x0, 0x2) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000580)=0x6945, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f00000005c0)=0x800000, 0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) pipe2(&(0x7f0000000300)={0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c0050014260360ab1208000f0000000401a80016001100014003000300036010faccfdeb1d40696d936980b925b35381df6486338260de280e900094007134cf6ee08000a0e408e858ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0x0) splice(r1, &(0x7f0000000340)=0xffffffffffffffef, r4, 0x0, 0x808, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000380)={0x0, 0xff, 0x3}) 1.845261236s ago: executing program 3 (id=783): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x207, &(0x7f0000000200), 0x1, 0x47b, &(0x7f0000001440)="$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") r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000001c0)=[0x0], 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000003c0)={r2, 0x0, r5, 0x6, 0xcb8, 0x0, 0x7f, 0x1f, 0x0, 0x400, 0x3, 0x7}) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r6, 0x540b, 0x200000000000002) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 1.778009283s ago: executing program 1 (id=785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8a1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0xe3}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}]}}}]}, 0x48}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) (async) syz_open_dev$video(&(0x7f0000000300), 0x8, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') (async, rerun: 32) r2 = eventfd2(0x50, 0x0) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@flushsa={0x48, 0x1c, 0x4, 0x70bd26, 0x25dfdbfb, {0x2b}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0x5}}, @lifetime_val={0x24, 0x9, {0x5, 0x1, 0x7, 0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x40) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) (async) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r5], 0x15) 1.692069769s ago: executing program 3 (id=787): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000340)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x11, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000850000002a000000b7080000000000007b8af8ff00000000b7080000ff0300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000700000085000000a500000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x83) fchdir(r3) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000100)=0x8, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c0000000906010200000000000000000200fdff240007800c0001800800014000000000140217006261746164765f736c6176655f3100000900020073797a32000000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24008090}, 0x40c0080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x1, {0x7, r8}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c844}, 0x20000110) 1.626210445s ago: executing program 3 (id=788): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000000)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 1.554685377s ago: executing program 1 (id=790): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x3, 0x0, &(0x7f0000000740)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, r1, r1, r2, r0, r0, r0, r2], 0x20}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0xfffffffffffffffd}, @child_ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000900)={0x0, 0x28, 0x40}}, 0x40}]}) 1.551654626s ago: executing program 1 (id=792): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x19f, &(0x7f00000000c0)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000180)="$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") ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001e80)={0x3, &(0x7f0000001e40)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000001ec0)={r1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000980)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4000011) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=@newqdisc={0x3c, 0x24, 0x2, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x17}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000001d00), 0x40000000000009f, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000880), 0x31, 0x1) recvmmsg(r4, &(0x7f00000008c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/ip_mr_vif\x00') pread64(r6, &(0x7f0000000a00)=""/4077, 0xfed, 0x19cb) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001a00)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x7fff, 0xa68d7c51bdc00fb9, 0xffbc, 0x6, 0x1d45, 0x20008, 0x0, 0x0, 0x80, 0x4000001}}, 0x50) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001d00)='./binderfs2/binder1\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000001ac0)=ANY=[@ANYBLOB="040ec5880514"], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) 1.476750786s ago: executing program 3 (id=793): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002a80), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325e671, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000140)=0x6, 0x8) syz_genetlink_get_family_id$nfc(&(0x7f0000002ac0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000002b00)) socketpair(0x15, 0xa, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r5, 0x0, &(0x7f0000000240)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r5, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000300)="ca", 0x1, 0xc97c}) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000700)={0x28, 0x2, r5, 0x0, &(0x7f0000000740)='U', 0x1, 0x10001}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f0000000780)={0x18, r5, 0x1780, 0x280000000}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x9d, 0x3, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x34}, 0x0, 0x7800, 0x7ff, 0xf8eb}}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r6}, 0x14) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000340)=ANY=[@ANYBLOB="d11de0cc2bb82d8e75e4d880982796d0ed426f53c80267139ad8c13eba7b3e1253e02631c9631276a9f278cdf6a51665116e1ee2faea5b66449529eedc5af0997a422dec126b760d7e6295e55301714898a7bb7c323ea8da1270e794180c48e4fdcd51492a5cd3e9a5e8df629416583ff0911a6b9765c9f3abfb9e5af610756ed8c38c0334b938fab97fef5c712fe4cf8dbc1ca76afc655fe36b5e362b50759ea24c671a0c64bc407326977da974eaff19f6829ebf35129c96b7afb82b02ffe3cacee1061b47323509823e6a53e3055dbe5b64dca809efc4d4097f5970267328a1aa79e7f246e7ccfb4707a2a27246c0e2", @ANYBLOB="5a32f4cc423f54", @ANYBLOB="ffb1d32685fec8978a92447cbe61a925582e8c18a89bcd368ca87477cfcfcc224eb3e23cb0481b14d78965a7d984bd2b366e1c4d414c13cf5b58ecb7b7830cb774ab1d6466ebd3b9b96c045a2ecf7e75c460db101596ce251f493735520c64874d12ce95032e704d155aaa69024d079b1a355720a09572ed4cb9ec0945c92b191ec7fa3b2af9392741"], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="61054009030501013f05e3776be1c45be41d62e7481380cf58ec96956681dadded83106848be14f678c8917961573c7f000000a743c311e261d8d95e5f4f6cf2339ce3c9b904a20c642f0a97b3978c67161c04d707db47d41cf9052ad29daf652463334472a67b21b0b11fd039c92ce9e1cedd53589523d4885bae7cc98fc756bbdbc3d7b7cdec53eb87b1fd4baad612acd7c622efd2474af7d8962cd806b1d65846cb13bc4a20c233c18ee395b757bb9fe54366bf7fcb3514b01f2339d3284ae4775f6d0d97acebb6eb2f57995321e2bfcbd725880200000000000000a96675d49fc1f19ee52abf67c0842e85837e07074148677237510f34a218930a560144feaac386930c97407f3f17de491d8c1ef45fcd368d58cb3ce3f62b4c8e3c775170fb3f44d144b62ddbcda3420b1152a2fb17c5d4fea636e56724df14565fa0ea484d1bf1e018d1686edd38ad1745434f4ed0aab082bc06d5cb73dc4f7da26d1e4389e960028d8bc41ae47daf112f72268ae017417c5d4fe73c92dff1057ccece964c3deb38e21aed9978f9123b810f104e0b3a2dfd00c8cf3d7ae20e16bd731568b45783fd59c492bc0e0e9f29306de45eda5bb7b62fb608e7eb7e8d6baa911436a35475e8d7e21f23a8c0fb5e321efdef36a52edefa4e30"], 0x13b) 1.475329409s ago: executing program 3 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$netlink(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d0001082dbd7000ffdbdf250400cb00050011"], 0x1c}], 0x1}, 0x4000000) 1.367945999s ago: executing program 3 (id=795): r0 = open$dir(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x60c202, 0x1) mknodat(r0, &(0x7f0000000b80)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4, 0x103) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8000, 0x0, 0x2, 0x0, 0x5}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x0) syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f00008d0000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0xdea2d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2, 0x50, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f00000002c0)="$eJzs08FLbGUUAPBzp4bp9d5zHvGgRe3e8CCwhCQSciCRYXCjYmUuWgsuaiG4cDEo46zN/oHCVDA30t6laSAKuhJpJfMPKG1mETdG7zgQtal8ovx+i/nuPZx7vvPxnQnutVwUn1w/pYWI+OPvcp5FROHm7afOQ+FxfLH1ZWWyPj408Xl8lMRXEVF597pcEt2qSff7tFNn5FEcrx4MX+bj8MXJfmktl8V3chGLEfH1+Xrx0T81nf9vZ+bh2C7vFZcas9Xl+XIhqrVm/3Rn8mIwiVicygZr52p9rf3zxv+7f3uir/afOa3WmqXjgY2jdOzi+6cf5PePWx/+epXVc/N/4GH5tD1Sje79//C8flZvjb7cnOvrfT12F1ayi/89Wz/5redO+wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6u7fJeKxqz1eX58sxptdbsn36/8s63lW+++/jHwYXJtwencu2s5Db3Ly418tlbrVkqDGwcpWMX8XS2HXizk9d7ey1wh957HLHUnr/O/T6vn9Vboy835/p63zrbXVjJ4ulfPyy+4kYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHujEotpOjSRi0jil6QbTwvXayf0c7aOZfGRwmfJ6sHw5dazwxcn+6W18Sy+8yRLPF8vdqv13PYx+Jf+DAAA//84pm1S") r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x7c9}) ppoll(&(0x7f0000000280)=[{r5, 0x224}], 0x1, &(0x7f0000000b40)={0x0, 0x989680}, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000008c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x1c1) syz_open_dev$video4linux(0x0, 0x20f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 616.882318ms ago: executing program 5 (id=797): r0 = socket(0x10, 0x3, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000440, &(0x7f0000000140), 0x1, 0x593, &(0x7f0000000180)="$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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000780)={0x6, [0xd53, 0xecd, 0x4, 0x200, 0x3, 0x9]}, &(0x7f00000007c0)=0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_flow={{0x8}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1fb2f}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)={0x18, 0x52, 0x10, 0x0, 0xffffffff, {0xa}, [@nested={0x4, 0x145}]}, 0x18}}, 0x44010) close(r1) 588.279912ms ago: executing program 0 (id=798): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind(0xffffffffffffffff, &(0x7f0000000040)=@llc={0x1a, 0x300, 0x2, 0x3c, 0x7f, 0x3e, @remote}, 0x80) r2 = syz_usb_connect(0x0, 0x54, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002e0010140120a01000000010203010902360002010080000904000003e00101000705810310000107050202000200070582020002"], 0x0) write(0xca, &(0x7f0000000300)="0404e7", 0x3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000001e40)=""/4096, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x68, &(0x7f0000002e40)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x88, &(0x7f0000002e80)={[{0x31, 0x4e00, "a0041e53eae1818da601c71cbe33c7c7d6a8b9597fcfc0be375371b137ddcd86bf8930169ee75dd1b397bdebffe55e7325"}, {0x4b, 0x4e00, "3022b7efe886f9f06dc83d1193099744f579f5e87280b932884da450f208ba8d03ec4ab1fdaa3cc6be0b137364730df21e28d39c91277fa13354b19bf3434bc43c732473a2166053e61ea2"}]}) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000200)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/tty/drivers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x37}, [@jmp={0x5, 0x1, 0x9, 0x7, 0x2, 0x40, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x2, 0x1000, &(0x7f0000000400)=""/4096, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x1, 0x7fff}, 0x8, 0x10, &(0x7f0000001440)={0x3, 0x1, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000014c0)=[r4], &(0x7f0000001500)=[{0x5, 0x4, 0xf, 0x2}], 0x10, 0x8}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000001980)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000001c80)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x80000, 0x0, 0x0, @by_dev={r6}, [@raid={0x3200000000000000, 0x1008, 0x0, 0x70, 'raid\x00', {'raid5_rs', 0x20, '3 64 rebuild 0', 0x20, 0x1, [{0x20, @none, 0x20, @ram_num={'1:', 0x1}}]}}]}) 383.105592ms ago: executing program 4 (id=799): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0xfffffffd, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x70}}, 0x0) 308.813719ms ago: executing program 4 (id=800): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000380)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x1fffffd, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c60d9683dda1af1ea89de2b7fb0a01000000000000000003000000000000000000000f00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) (async) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x591) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xc08700, &(0x7f0000000280)={[{@grpjquota}, {@nodelalloc}, {@bh}, {@noinit_itable}, {@inlinecrypt}, {@minixdf}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@errors_continue}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x3}}, {@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0xff}}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") (async) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xc08700, &(0x7f0000000280)={[{@grpjquota}, {@nodelalloc}, {@bh}, {@noinit_itable}, {@inlinecrypt}, {@minixdf}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@errors_continue}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x3}}, {@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0xff}}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2040649, &(0x7f0000000600)={[{@sb={'sb', 0x3d, 0x9}}, {@test_dummy_encryption_v1}, {@user_xattr}, {@grpjquota}, {@data_writeback}, {@block_validity}, {@minixdf}, {@dioread_lock}]}, 0x0, 0x60d, &(0x7f0000000800)="$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") syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x84406d, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) 308.040744ms ago: executing program 4 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) sendmsg$nl_route_sched_retired(r0, &(0x7f0000002000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000400)=@delchain={0x1b98, 0x65, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x3, 0x5}, {0x0, 0xfff2}, {0x10, 0xfff1}}, [@f_tcindex={{0xc}, {0x1664, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x163}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x6}, @TCA_TCINDEX_ACT={0x12c, 0x7, [@m_skbmod={0x128, 0x1e, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xef, 0x6, "e20216d96b92fe41beeff44fb8ef2c945f43324fe20298338ef38cacc28383338407ddd30128d6aa5438e5b146049e3358c23c5f2db62717e3952dd1c4c27da9dfae107045aeaa3eae091be1ee17966cd081396e0f4436bd9f32982720681024fd823876732bc0f3fc19f5a4609de8693c842b29f90c8b7e7a7c916c9770340f32afaa40d3bde18afdce8f87c410e20e756b2d16afd2d4a151a9ef0acaa67129c9a1ac797308280ed4269bfcad17abdd6da552a422c8a2de301cbba74ecb7cb5ac6a6a3e90c675ef23b46b9fbab50172dbedfbe4d507c63a4317fa2abfad225782896f8abdd851194be13f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_ACT={0x10a8, 0x7, [@m_nat={0x10a4, 0x1d, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x200, 0x10000000, 0x101, 0xffff65f7}, @dev={0xac, 0x14, 0x14, 0x18}, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x4, 0xffffffffffffffff, 0x7, 0x9}, @private=0xa010102, @broadcast, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x76, 0x2b, 0x20000000, 0x1000, 0xc}, @broadcast, @rand_addr=0x64010100}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2400}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x36fe}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x5c32}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x35bb}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xc, 0xf}}, @TCA_TCINDEX_POLICE={0x454, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xdd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf63, 0xff, 0x1, 0x5, 0xb, 0x455e, 0x10000, 0x9, 0x7, 0x1, 0x9, 0x0, 0x9, 0x69d, 0x558, 0x19800000, 0x9a, 0xf1a, 0xf6, 0x3, 0x8, 0x72c62a98, 0x6, 0x80000000, 0x6, 0xff, 0x8001, 0x7, 0x1, 0x0, 0x40, 0x0, 0x7, 0x4431, 0x900000, 0x5, 0x584, 0x9, 0x28a, 0x49ae, 0x9, 0x7, 0x4, 0x8000, 0x200, 0x8, 0x5, 0x5, 0x5, 0x7fff, 0xfffffff7, 0x0, 0x8000, 0x101, 0x10, 0x40000000, 0xa7a, 0xd6f, 0xa4b, 0x8, 0x401, 0x6, 0x6, 0x7, 0x401, 0x4000, 0x1c6644b9, 0xb, 0x3, 0x1, 0x8, 0x2, 0x2, 0xbd15, 0xca3, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x8, 0x4, 0x8243, 0x7, 0x7fff, 0x59d0, 0x7, 0x9, 0xff, 0x2, 0xff, 0x3, 0xfa, 0x3, 0xffffffff, 0x3, 0x3, 0xfff, 0x0, 0x3c38, 0x800, 0x3, 0x1ff, 0x200, 0x5, 0xb, 0x81, 0x5, 0x5, 0x8, 0x8d, 0x3, 0x96e0, 0x2, 0xfffffffc, 0x7, 0x2, 0x9be, 0x4, 0xfb9b, 0x7, 0x92, 0x1, 0x2f, 0x7f, 0x7, 0x100, 0x1, 0x6, 0x1, 0x7, 0x5, 0x3, 0xc, 0x5, 0x1, 0x4, 0x8, 0xfffffffd, 0x13c4, 0x6, 0x8, 0x9, 0x3, 0x4061, 0x1, 0x5, 0x101, 0x800, 0x5, 0xb, 0x2, 0x40000000, 0x1, 0xa, 0x9, 0xffff, 0xd, 0x3, 0x6, 0x8, 0xa, 0xa, 0x2, 0xc, 0x5, 0x9, 0x4, 0x4, 0x2aeebdfa, 0x1ae2, 0x2, 0x5fc20e18, 0x1, 0xd59, 0xa0, 0x2, 0x6, 0x4, 0x3, 0x9, 0x5f8f, 0x9, 0x9eed, 0x1, 0x7f, 0x701, 0x10001, 0x6, 0x8, 0x6, 0x0, 0x80000001, 0x3, 0x2, 0x3ff, 0x8, 0x8, 0xfffffffc, 0xa4d, 0x4, 0x9, 0x4, 0xcb4, 0xfffffffd, 0x31, 0x640, 0x3, 0x9, 0x0, 0x3, 0x8, 0xb9d, 0xdc0, 0xffff, 0xfffffffa, 0x1ff, 0x4, 0x1000, 0x5, 0x4, 0x9d3, 0x8a8, 0x6, 0x1a3, 0x6, 0x4f, 0x9, 0x7fff, 0x1, 0xa, 0xfffffffc, 0x4, 0x0, 0x3, 0xe, 0x5, 0x9, 0xe6, 0x7, 0x0, 0x2, 0x7fff, 0x100, 0xfffffff8, 0x718, 0x0, 0x81, 0x7, 0x3, 0x8, 0x4, 0x3, 0x2, 0x840]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}]}]}}, @f_rsvp={{0x9}, {0x14, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}, @f_rsvp={{0x9}, {0x490, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x4037972662f9722c, 0xf}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xf}}, @TCA_RSVP_POLICE={0x454, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x3, 0x2, 0x47937cc9, {0xb, 0x2, 0xff01, 0x7f, 0x7b10, 0x8}, {0x32, 0x1, 0x7, 0x5f0, 0x7, 0x4}, 0x3, 0x3, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x800, 0xe7e, 0x2, 0x0, 0x9, 0x3, 0x4, 0x6, 0x4, 0x80, 0x2, 0x52d, 0x3, 0x4, 0x8000, 0x6, 0xdff5, 0x3, 0x9, 0x8, 0x3, 0x2, 0x6, 0x8, 0x8, 0x7, 0x92d8, 0x7f, 0x9, 0x80, 0x9, 0x7, 0x1, 0xf, 0x8, 0x2, 0x7fff, 0x3, 0x4, 0x6, 0x100, 0x5, 0xfffffff9, 0x5, 0x65c3, 0x4, 0x4, 0x1, 0x7fb2ad7e, 0x81, 0x9, 0x4, 0x7fffffff, 0x7, 0x101, 0x91000000, 0x3, 0x199, 0x7fff, 0x9, 0x9, 0x9, 0x0, 0x8, 0x24, 0x299800, 0xea, 0x62, 0x8, 0x10001, 0x2, 0x9, 0x0, 0x2, 0xff, 0x7, 0x4, 0x6, 0xf, 0x3, 0x9, 0x400, 0x9, 0x3, 0x1, 0x6, 0x6, 0x9, 0x8001, 0x9, 0x200, 0x6, 0x4, 0x3, 0x7fff, 0x9, 0x0, 0xfff, 0x1ffa9064, 0x3d70, 0x5, 0x596, 0x2, 0xda, 0xff, 0x1, 0xd, 0x8, 0xa9, 0x8, 0x1, 0x80000001, 0x3, 0x200, 0x101, 0xffffffff, 0x6, 0x8000, 0x9, 0x9407, 0x81, 0xfffffffa, 0x0, 0x5, 0xfff, 0x9, 0x9, 0x3, 0x8000, 0x0, 0x0, 0xc, 0xfff, 0x5, 0x10, 0x6, 0xc, 0x233, 0x3, 0x0, 0x4, 0x6, 0x40, 0x5e, 0x80, 0x3, 0x2b, 0x800, 0x6, 0x1, 0x80000001, 0xfffffffb, 0x0, 0x7fffffff, 0x1000, 0x5, 0x8, 0x8, 0x3, 0x3, 0x5, 0x4, 0x0, 0x6, 0x1, 0x6b480000, 0x6, 0x1000, 0x9, 0x4, 0x10000, 0x2, 0x8, 0x1, 0x8, 0x8413, 0x6, 0xf, 0x400, 0x8, 0x7, 0x0, 0x7, 0x35, 0x2, 0x63, 0x3, 0xffffffff, 0x100, 0x5, 0x9, 0x2, 0x7, 0xe, 0x3, 0xffce, 0xc4, 0x0, 0x0, 0x4c, 0x7, 0x100, 0x3, 0xcf, 0xfe000000, 0x10000, 0x800, 0x80000001, 0x4, 0xe8a, 0xa, 0x1, 0x5, 0x3f6, 0x4, 0x43, 0x2, 0x4, 0x0, 0x2, 0x10001, 0x2, 0x10, 0x7, 0x101, 0x7, 0x4, 0xc, 0x6, 0xfffffffb, 0x7, 0x8, 0x48, 0x1, 0x4bc, 0x3, 0xffff7fff, 0x4, 0x1, 0x2, 0x6, 0x10, 0x4, 0x80000000, 0x6, 0x0, 0xfffffffc, 0x80000001, 0x10000, 0x5, 0x7, 0x100, 0xffffff4e, 0x8]}]}, @TCA_RSVP_SRC={0x8, 0x3, @private=0xa010102}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8000, 0x0, 0x4}, {0xc, 0x3, 0x3}, 0x62, 0x0, 0x2}}]}}, @f_rsvp6={{0xa}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xfff3}}]}}, @f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xfff, 0xfffffff8, 0x4}, {0xffffffff, 0x4, 0x10001}, 0x33, 0x9, 0xd}}]}}]}, 0x1b98}, 0x1, 0x0, 0x0, 0x44}, 0x8010) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xa9abe95a2761dbfe) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000240)={0x13, 0x10, 0x8, {0x0, r4, 0x1}}, 0x18) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan1\x00') r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x1, 'vlan1\x00', {}, 0x5832}) ppoll(&(0x7f0000000100)=[{r5, 0x4}, {r6, 0x2144}, {r6, 0xc024}, {0xffffffffffffffff, 0x1}, {r6, 0x50}], 0x5, 0x0, &(0x7f00000003c0)={[0x2]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f0000002000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000000400)=@delchain={0x1b98, 0x65, 0x4, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x3, 0x5}, {0x0, 0xfff2}, {0x10, 0xfff1}}, [@f_tcindex={{0xc}, {0x1664, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x163}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x6}, @TCA_TCINDEX_ACT={0x12c, 0x7, [@m_skbmod={0x128, 0x1e, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xef, 0x6, "e20216d96b92fe41beeff44fb8ef2c945f43324fe20298338ef38cacc28383338407ddd30128d6aa5438e5b146049e3358c23c5f2db62717e3952dd1c4c27da9dfae107045aeaa3eae091be1ee17966cd081396e0f4436bd9f32982720681024fd823876732bc0f3fc19f5a4609de8693c842b29f90c8b7e7a7c916c9770340f32afaa40d3bde18afdce8f87c410e20e756b2d16afd2d4a151a9ef0acaa67129c9a1ac797308280ed4269bfcad17abdd6da552a422c8a2de301cbba74ecb7cb5ac6a6a3e90c675ef23b46b9fbab50172dbedfbe4d507c63a4317fa2abfad225782896f8abdd851194be13f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_TCINDEX_ACT={0x10a8, 0x7, [@m_nat={0x10a4, 0x1d, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x200, 0x10000000, 0x101, 0xffff65f7}, @dev={0xac, 0x14, 0x14, 0x18}, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0x4, 0xffffffffffffffff, 0x7, 0x9}, @private=0xa010102, @broadcast, 0xff0000ff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x76, 0x2b, 0x20000000, 0x1000, 0xc}, @broadcast, @rand_addr=0x64010100}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x2400}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x36fe}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x5c32}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x35bb}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xc, 0xf}}, @TCA_TCINDEX_POLICE={0x454, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xdd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf63, 0xff, 0x1, 0x5, 0xb, 0x455e, 0x10000, 0x9, 0x7, 0x1, 0x9, 0x0, 0x9, 0x69d, 0x558, 0x19800000, 0x9a, 0xf1a, 0xf6, 0x3, 0x8, 0x72c62a98, 0x6, 0x80000000, 0x6, 0xff, 0x8001, 0x7, 0x1, 0x0, 0x40, 0x0, 0x7, 0x4431, 0x900000, 0x5, 0x584, 0x9, 0x28a, 0x49ae, 0x9, 0x7, 0x4, 0x8000, 0x200, 0x8, 0x5, 0x5, 0x5, 0x7fff, 0xfffffff7, 0x0, 0x8000, 0x101, 0x10, 0x40000000, 0xa7a, 0xd6f, 0xa4b, 0x8, 0x401, 0x6, 0x6, 0x7, 0x401, 0x4000, 0x1c6644b9, 0xb, 0x3, 0x1, 0x8, 0x2, 0x2, 0xbd15, 0xca3, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x8, 0x4, 0x8243, 0x7, 0x7fff, 0x59d0, 0x7, 0x9, 0xff, 0x2, 0xff, 0x3, 0xfa, 0x3, 0xffffffff, 0x3, 0x3, 0xfff, 0x0, 0x3c38, 0x800, 0x3, 0x1ff, 0x200, 0x5, 0xb, 0x81, 0x5, 0x5, 0x8, 0x8d, 0x3, 0x96e0, 0x2, 0xfffffffc, 0x7, 0x2, 0x9be, 0x4, 0xfb9b, 0x7, 0x92, 0x1, 0x2f, 0x7f, 0x7, 0x100, 0x1, 0x6, 0x1, 0x7, 0x5, 0x3, 0xc, 0x5, 0x1, 0x4, 0x8, 0xfffffffd, 0x13c4, 0x6, 0x8, 0x9, 0x3, 0x4061, 0x1, 0x5, 0x101, 0x800, 0x5, 0xb, 0x2, 0x40000000, 0x1, 0xa, 0x9, 0xffff, 0xd, 0x3, 0x6, 0x8, 0xa, 0xa, 0x2, 0xc, 0x5, 0x9, 0x4, 0x4, 0x2aeebdfa, 0x1ae2, 0x2, 0x5fc20e18, 0x1, 0xd59, 0xa0, 0x2, 0x6, 0x4, 0x3, 0x9, 0x5f8f, 0x9, 0x9eed, 0x1, 0x7f, 0x701, 0x10001, 0x6, 0x8, 0x6, 0x0, 0x80000001, 0x3, 0x2, 0x3ff, 0x8, 0x8, 0xfffffffc, 0xa4d, 0x4, 0x9, 0x4, 0xcb4, 0xfffffffd, 0x31, 0x640, 0x3, 0x9, 0x0, 0x3, 0x8, 0xb9d, 0xdc0, 0xffff, 0xfffffffa, 0x1ff, 0x4, 0x1000, 0x5, 0x4, 0x9d3, 0x8a8, 0x6, 0x1a3, 0x6, 0x4f, 0x9, 0x7fff, 0x1, 0xa, 0xfffffffc, 0x4, 0x0, 0x3, 0xe, 0x5, 0x9, 0xe6, 0x7, 0x0, 0x2, 0x7fff, 0x100, 0xfffffff8, 0x718, 0x0, 0x81, 0x7, 0x3, 0x8, 0x4, 0x3, 0x2, 0x840]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}]}]}}, @f_rsvp={{0x9}, {0x14, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0x4}}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}, @f_rsvp={{0x9}, {0x490, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x4037972662f9722c, 0xf}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0xf}}, @TCA_RSVP_POLICE={0x454, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x3, 0x2, 0x47937cc9, {0xb, 0x2, 0xff01, 0x7f, 0x7b10, 0x8}, {0x32, 0x1, 0x7, 0x5f0, 0x7, 0x4}, 0x3, 0x3, 0x1}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x800, 0xe7e, 0x2, 0x0, 0x9, 0x3, 0x4, 0x6, 0x4, 0x80, 0x2, 0x52d, 0x3, 0x4, 0x8000, 0x6, 0xdff5, 0x3, 0x9, 0x8, 0x3, 0x2, 0x6, 0x8, 0x8, 0x7, 0x92d8, 0x7f, 0x9, 0x80, 0x9, 0x7, 0x1, 0xf, 0x8, 0x2, 0x7fff, 0x3, 0x4, 0x6, 0x100, 0x5, 0xfffffff9, 0x5, 0x65c3, 0x4, 0x4, 0x1, 0x7fb2ad7e, 0x81, 0x9, 0x4, 0x7fffffff, 0x7, 0x101, 0x91000000, 0x3, 0x199, 0x7fff, 0x9, 0x9, 0x9, 0x0, 0x8, 0x24, 0x299800, 0xea, 0x62, 0x8, 0x10001, 0x2, 0x9, 0x0, 0x2, 0xff, 0x7, 0x4, 0x6, 0xf, 0x3, 0x9, 0x400, 0x9, 0x3, 0x1, 0x6, 0x6, 0x9, 0x8001, 0x9, 0x200, 0x6, 0x4, 0x3, 0x7fff, 0x9, 0x0, 0xfff, 0x1ffa9064, 0x3d70, 0x5, 0x596, 0x2, 0xda, 0xff, 0x1, 0xd, 0x8, 0xa9, 0x8, 0x1, 0x80000001, 0x3, 0x200, 0x101, 0xffffffff, 0x6, 0x8000, 0x9, 0x9407, 0x81, 0xfffffffa, 0x0, 0x5, 0xfff, 0x9, 0x9, 0x3, 0x8000, 0x0, 0x0, 0xc, 0xfff, 0x5, 0x10, 0x6, 0xc, 0x233, 0x3, 0x0, 0x4, 0x6, 0x40, 0x5e, 0x80, 0x3, 0x2b, 0x800, 0x6, 0x1, 0x80000001, 0xfffffffb, 0x0, 0x7fffffff, 0x1000, 0x5, 0x8, 0x8, 0x3, 0x3, 0x5, 0x4, 0x0, 0x6, 0x1, 0x6b480000, 0x6, 0x1000, 0x9, 0x4, 0x10000, 0x2, 0x8, 0x1, 0x8, 0x8413, 0x6, 0xf, 0x400, 0x8, 0x7, 0x0, 0x7, 0x35, 0x2, 0x63, 0x3, 0xffffffff, 0x100, 0x5, 0x9, 0x2, 0x7, 0xe, 0x3, 0xffce, 0xc4, 0x0, 0x0, 0x4c, 0x7, 0x100, 0x3, 0xcf, 0xfe000000, 0x10000, 0x800, 0x80000001, 0x4, 0xe8a, 0xa, 0x1, 0x5, 0x3f6, 0x4, 0x43, 0x2, 0x4, 0x0, 0x2, 0x10001, 0x2, 0x10, 0x7, 0x101, 0x7, 0x4, 0xc, 0x6, 0xfffffffb, 0x7, 0x8, 0x48, 0x1, 0x4bc, 0x3, 0xffff7fff, 0x4, 0x1, 0x2, 0x6, 0x10, 0x4, 0x80000000, 0x6, 0x0, 0xfffffffc, 0x80000001, 0x10000, 0x5, 0x7, 0x100, 0xffffff4e, 0x8]}]}, @TCA_RSVP_SRC={0x8, 0x3, @private=0xa010102}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8000, 0x0, 0x4}, {0xc, 0x3, 0x3}, 0x62, 0x0, 0x2}}]}}, @f_rsvp6={{0xa}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xfff3}}]}}, @f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xfff, 0xfffffff8, 0x4}, {0xffffffff, 0x4, 0x10001}, 0x33, 0x9, 0xd}}]}}]}, 0x1b98}, 0x1, 0x0, 0x0, 0x44}, 0x8010) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xa9abe95a2761dbfe) (async) bind$bt_l2cap(r2, &(0x7f0000000280)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x4) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000240)={0x13, 0x10, 0x8, {0x0, r4, 0x1}}, 0x18) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan1\x00') (async) socket(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000080)={0x1, 'vlan1\x00', {}, 0x5832}) (async) ppoll(&(0x7f0000000100)=[{r5, 0x4}, {r6, 0x2144}, {r6, 0xc024}, {0xffffffffffffffff, 0x1}, {r6, 0x50}], 0x5, 0x0, &(0x7f00000003c0)={[0x2]}, 0x8) (async) 190.800255ms ago: executing program 1 (id=802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x3, 0x0, &(0x7f0000000740)=[@acquire], 0xffffffffffffff67}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, r1, r1, r2, r0, r0, r0, r2], 0x20}, @flat=@weak_binder={0x77622a85, 0x0, 0x3, 0xfffffffffffffffd}, @child_ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000900)={0x0, 0x28, 0x40}}, 0x40}]}) 190.234481ms ago: executing program 5 (id=803): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@journal_async_commit}]}, 0x1, 0xba6, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./gadget\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001240)='./gadget\x00', &(0x7f0000001280)='gadgetfs\x00', 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) (async) r1 = syz_open_procfs(0x0, &(0x7f0000001500)='net/raw\x00') read$FUSE(r1, &(0x7f0000001540)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f00000012c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r2, &(0x7f0000001300)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r3 = openat(r0, &(0x7f0000001340)='./file2\x00', 0x2, 0x0) write(r3, &(0x7f0000001380)="010000000705810240000007", 0xc) (async) syz_mount_image$fuse(0x0, &(0x7f0000000ec0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000040)={0x2, 0x1, 0xffffffffffffffff}) (async) fcntl$lock(r4, 0x26, &(0x7f0000000200)={0x0, 0x0, 0x20006, 0x1}) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/124, 0x7c, 0x7) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./file1\x00', 0x101242, 0x97) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f00000013c0)={0x2, 0x4}, &(0x7f0000001400)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001440)={r7, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000011c0)=0x20) (async) mount$overlay(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x8, &(0x7f0000000f80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001100)={'syzkaller0\x00'}) lseek(r1, 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000001140)={'syzkaller0\x00', 0x1}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000003580)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000003640)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) bind$inet6(r10, &(0x7f0000003700)={0xa, 0xe22, 0x0, @empty}, 0x7d) 134.583992ms ago: executing program 4 (id=804): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x804, &(0x7f0000000200)=ANY=[@ANYBLOB="696f636861727365743d63703935302c696f636861727365743d69736f383835392d31012c7574840ead2d474e4966383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c646d61736b3d30303030303830303030303030303030303030303031302c73686f72746e616d653d77696e39352c757466383d312c726f6469722c636f6465706167653d3934392c73686f72746e616d653d6d697865642c726f6469722c757466383d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e39352c00"], 0x1, 0x2b8, &(0x7f00000003c0)="$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") syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f0000000740)) 48.8647ms ago: executing program 1 (id=805): setns(0xc9, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x3d) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, 0x0, 0x8080) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_timeout(0xf, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 21.688257ms ago: executing program 4 (id=806): capset(&(0x7f000000a8c0)={0x20071026}, &(0x7f000000a900)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x1003d}) r0 = add_key$keyring(&(0x7f000000b600), &(0x7f000000b640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) keyctl$chown(0x4, r0, 0xee01, 0x0) 0s ago: executing program 4 (id=807): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010000504f9fffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0255040004000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r2 = syz_ublk_setup_io_uring(0x5e7e, &(0x7f0000000300)={0x0, 0x462e, 0x2000, 0x3, 0x12a}, &(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x0, 0xa744, 0x8000, 0x6, 0x19a, 0x0, r2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x970b, 0x20, 0x2, 0x71}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x983a, 0x40000, 0x3, 0x27f}, 0xffffffffffffffff, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1849, 0x10000, 0x0, 0x3bc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa768, 0x80000, 0x0, 0xca}}], 0x4, &(0x7f0000002ec0)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfffd}, 0x0, 0x0, '\x00', {0x2, 0xe35, 0x0, &(0x7f0000000780)=@buf_4k="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"}}, &(0x7f0000001800)) r5 = socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_setup(0x3ee8, &(0x7f0000001840)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000018c0)=0x0, &(0x7f0000001900)=0x0, &(0x7f0000001940)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000001a80)={0x1, 0xffffffffffffffff, 0x80000}, &(0x7f0000001ac0)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000001b00)=@assoc_value={0x2, 0xffffffc0}, 0x8) r11 = openat(0xffffffffffffff9c, &(0x7f0000002e00)='./sys/class/net/lo/dev_port\x00', 0x0, 0x0) read(r11, &(0x7f0000002e40)=""/64, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002e80)={&(0x7f0000001c40)="461afbb4277c1362a6f98a95150fcb2c3727714a210ce3fdd25a4fc7176a84feb7d08f640f4d3103a417c0d73417215eade33459810e8042baf769cc2e926df64258d4053f", &(0x7f0000001cc0)=""/4096, &(0x7f0000002cc0)="dc78116587d3f130ae345b8e87e1e8310d712ae5876ce0909d51661f997e0e4947ded101351abe20f4b1a007febe17266ba26a0b1bd91240236944fd7b612a0b76da68c9e7491cfc3186e99b21e165d5caf46e5a0302b4ef4ed6fe768746f1a884a0ead8373a8fc32b2bacddcc22a166fac65daa4ec669eacb68e3cd7103f86f78e0c424f887e2ac", &(0x7f0000002d80)="35503043642be6972b09c18c783cac23fa6c41cc64901babb4fa15c1f36f43372856df809e3fee6e8a649d20edd9f2242772238ff40ae29d651d8d83ba56814ee5d021ae2a714caecc", 0x0, r11, 0x4}, 0x38) syz_io_uring_submit(r6, r7, r8, &(0x7f0000001980)=@IORING_OP_BIND=@ipv4={0x38, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_io_uring_submit(r3, r4, r8, &(0x7f0000001a00)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x20, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000017c0)=0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TCSETS(r12, 0x89f3, &(0x7f0000002f40)={0x7, 0x0, 0x0, 0x800, 0xfd, 'Z\x00'}) r13 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000001bc0)={0x1, 0x1, 0x8, 0x26, r9}, &(0x7f0000001c00)=0x10) r14 = syz_open_dev$mtd(&(0x7f0000001b40), 0x260c, 0xa02) ioctl$MEMWRITEOOB(r14, 0xc0104d03, &(0x7f0000001b80)={0x54, 0x100000, 0x0}) r15 = syz_ublk_setup_io_uring(0x746e, &(0x7f0000000000)={0x0, 0x80d9, 0x200, 0x2, 0x2e4}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) syz_ublk_setup_io_uring(0x4527, &(0x7f0000000180)={0x0, 0xbc65, 0x100, 0x1, 0xd3, 0x0, r15}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) kernel console output (not intermixed with test programs): ved nobh option [ 41.804265][ T5412] overlayfs: failed to resolve './file0': -2 [ 41.805000][ T5411] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 41.805016][ T5411] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.823081][ T5411] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.146: inode has both inline data and extents flags [ 41.823103][ T5411] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.823429][ T5411] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.146: couldn't read orphan inode 15 (err -117) [ 41.823441][ T5411] loop4: lost filesystem error report for type 5 error -117 [ 41.824540][ T5411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.856643][ T5416] Soft offlining pfn 0x216a31 at process virtual address 0x201c0000 [ 41.869525][ T5416] Memory failure: 0x216a31: unhandlable page. [ 41.888122][ T5419] sock: sock_timestamping_bind_phc: sock not bind to device [ 41.929706][ T5426] xt_hashlimit: max too large, truncated to 1048576 [ 41.933241][ T5426] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 42.069340][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 42.069354][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 42.090761][ T4388] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 42.115313][ T5447] vfat: Unknown parameter 'u' [ 42.210654][ T4748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.243673][ T4388] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 42.244263][ T4388] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 42.244279][ T4388] usb 1-1: can't read configurations, error -71 [ 42.371145][ T5481] syz.3.166 uses obsolete (PF_INET,SOCK_PACKET) [ 42.399770][ T5481] netlink: 'syz.3.166': attribute type 2 has an invalid length. [ 42.404326][ T4738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.797305][ T5504] set_capacity_and_notify: 2 callbacks suppressed [ 42.797331][ T5504] loop1: detected capacity change from 0 to 256 [ 42.800531][ T5504] vfat: Unknown parameter 'nonumtDil' [ 42.825465][ T5504] overlayfs: missing 'lowerdir' [ 43.027907][ T5507] loop0: detected capacity change from 0 to 1024 [ 43.028144][ T5508] overlay: ./file1 is not a directory [ 43.028973][ T5507] EXT4-fs: Ignoring removed bh option [ 43.038802][ T5508] loop4: detected capacity change from 0 to 512 [ 43.044888][ T5508] EXT4-fs (loop4): Test dummy encryption mode enabled [ 43.048321][ T5507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.050701][ T5508] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.172: inode has both inline data and extents flags [ 43.050733][ T5508] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.051707][ T5508] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.172: couldn't read orphan inode 15 (err -117) [ 43.051744][ T5508] loop4: lost filesystem error report for type 5 error -117 [ 43.052806][ T5508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.064467][ T5507] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.078327][ T4923] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.089205][ T5510] fscrypt: AES-256-XTS using blk-crypto-fallback [ 43.179137][ T5526] loop2: detected capacity change from 0 to 512 [ 43.183300][ T5526] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 43.183313][ T5526] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.196644][ T5526] EXT4-fs (loop2): 1 truncate cleaned up [ 43.198663][ T5526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.240812][ T4748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.269142][ T5535] loop2: detected capacity change from 0 to 512 [ 43.277937][ T5535] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.294432][ T5535] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.174: corrupted in-inode xattr: e_value size too large [ 43.294450][ T5535] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.294740][ T5535] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.174: couldn't read orphan inode 15 (err -117) [ 43.294753][ T5535] loop2: lost filesystem error report for type 5 error -117 [ 43.296125][ T5535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.949929][ T4743] EXT4-fs error (device loop0): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /31/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 43.953101][ T4743] EXT4-fs (loop0): Remounting filesystem read-only [ 43.970702][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.998452][ T4738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.037847][ T5575] x_tables: duplicate underflow at hook 1 [ 44.039821][ T5575] x_tables: duplicate underflow at hook 1 [ 44.156313][ T5591] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 44.156333][ T5591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.157626][ T5591] vhci_hcd vhci_hcd.0: Device attached [ 44.160376][ T5591] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 44.160389][ T5591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.164857][ T5591] vhci_hcd vhci_hcd.0: Device attached [ 44.169676][ T5591] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(9) [ 44.169694][ T5591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.169743][ T5591] vhci_hcd vhci_hcd.0: Device attached [ 44.173117][ T5591] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(11) [ 44.173135][ T5591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.173168][ T5591] vhci_hcd vhci_hcd.0: Device attached [ 44.181452][ T5591] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(13) [ 44.181466][ T5591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.181505][ T5591] vhci_hcd vhci_hcd.0: Device attached [ 44.186508][ T5591] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(15) [ 44.186523][ T5591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.189713][ T5591] vhci_hcd vhci_hcd.0: Device attached [ 44.191495][ T5591] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(17) [ 44.191508][ T5591] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.192753][ T5591] vhci_hcd vhci_hcd.0: Device attached [ 44.193426][ T5591] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(19) [ 44.193436][ T5591] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 44.193501][ T5591] vhci_hcd vhci_hcd.0: Device attached [ 44.195922][ T5615] vhci_hcd: connection closed [ 44.196376][ T5613] vhci_hcd: connection closed [ 44.196499][ T5594] vhci_hcd: connection closed [ 44.196632][ T5611] vhci_hcd: connection closed [ 44.197157][ T5608] vhci_hcd: connection closed [ 44.197313][ T5603] vhci_hcd: connection closed [ 44.197387][ T5598] vhci_hcd: connection closed [ 44.197457][ T5596] vhci_hcd: connection closed [ 44.198362][ T42] vhci_hcd vhci_hcd.4: stop threads [ 44.198488][ T42] vhci_hcd vhci_hcd.4: release socket [ 44.198508][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 44.198900][ T42] vhci_hcd vhci_hcd.4: stop threads [ 44.198909][ T42] vhci_hcd vhci_hcd.4: release socket [ 44.198920][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 44.199008][ T42] vhci_hcd vhci_hcd.4: stop threads [ 44.199014][ T42] vhci_hcd vhci_hcd.4: release socket [ 44.199024][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 44.199071][ T42] vhci_hcd vhci_hcd.4: stop threads [ 44.199077][ T42] vhci_hcd vhci_hcd.4: release socket [ 44.199087][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 44.199210][ T42] vhci_hcd vhci_hcd.4: stop threads [ 44.199216][ T42] vhci_hcd vhci_hcd.4: release socket [ 44.199226][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 44.199303][ T42] vhci_hcd vhci_hcd.4: stop threads [ 44.199308][ T42] vhci_hcd vhci_hcd.4: release socket [ 44.199318][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 44.199394][ T42] vhci_hcd vhci_hcd.4: stop threads [ 44.199399][ T42] vhci_hcd vhci_hcd.4: release socket [ 44.199409][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 44.200826][ T42] vhci_hcd vhci_hcd.4: stop threads [ 44.200835][ T42] vhci_hcd vhci_hcd.4: release socket [ 44.200850][ T42] vhci_hcd vhci_hcd.4: disconnect device [ 44.239677][ T4748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.256803][ T4388] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 44.290515][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 44.434361][ T4388] usb 1-1: Invalid ep0 maxpacket: 16 [ 44.566842][ T4388] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 44.672187][ T5662] __nla_validate_parse: 6 callbacks suppressed [ 44.672200][ T5662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 44.717082][ T4388] usb 1-1: Invalid ep0 maxpacket: 16 [ 44.717931][ T4388] usb usb1-port1: attempt power cycle [ 44.724294][ T5660] FAULT_INJECTION: forcing a failure. [ 44.724294][ T5660] name failslab, interval 1, probability 0, space 0, times 0 [ 44.724311][ T5660] CPU: 0 UID: 0 PID: 5660 Comm: syz.1.199 Tainted: G L syzkaller #0 PREEMPT [ 44.724322][ T5660] Tainted: [L]=SOFTLOCKUP [ 44.724325][ T5660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.724329][ T5660] Call trace: [ 44.724332][ T5660] show_stack+0x2c/0x3c (C) [ 44.724346][ T5660] __dump_stack+0x30/0x40 [ 44.724354][ T5660] dump_stack_lvl+0xd8/0x12c [ 44.724361][ T5660] dump_stack+0x1c/0x28 [ 44.724368][ T5660] should_fail_ex+0x418/0x58c [ 44.724378][ T5660] should_failslab+0xc4/0x120 [ 44.724386][ T5660] __kmalloc_noprof+0x108/0x6c8 [ 44.724395][ T5660] sk_prot_alloc+0xc4/0x1e8 [ 44.724404][ T5660] sk_alloc+0x44/0x320 [ 44.724412][ T5660] __netlink_create+0x78/0x23c [ 44.724421][ T5660] __netlink_kernel_create+0xfc/0x614 [ 44.724431][ T5660] uevent_net_init+0xe8/0x2a0 [ 44.724440][ T5660] ops_init+0x2cc/0x528 [ 44.724450][ T5660] setup_net+0x118/0x2fc [ 44.724459][ T5660] copy_net_ns+0x454/0x698 [ 44.724468][ T5660] create_new_namespaces+0x304/0x50c [ 44.724479][ T5660] unshare_nsproxy_namespaces+0x120/0x170 [ 44.724489][ T5660] ksys_unshare+0x438/0x6e0 [ 44.724498][ T5660] __arm64_sys_unshare+0x40/0x54 [ 44.724507][ T5660] invoke_syscall+0x98/0x244 [ 44.724515][ T5660] el0_svc_common+0xec/0x23c [ 44.724522][ T5660] do_el0_svc+0x4c/0x5c [ 44.724529][ T5660] el0_svc+0x60/0x1d8 [ 44.724536][ T5660] el0t_64_sync_handler+0x44/0x104 [ 44.724543][ T5660] el0t_64_sync+0x198/0x19c [ 44.724596][ T5660] kobject_uevent: unable to create netlink socket! [ 44.735075][ T30] audit: type=1326 audit(44.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=2 compat=0 ip=0xffff895792e8 code=0x7ffc0000 [ 44.735096][ T30] audit: type=1326 audit(44.710:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff895792e8 code=0x7ffc0000 [ 44.735111][ T30] audit: type=1326 audit(44.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff895792e8 code=0x7ffc0000 [ 44.735251][ T30] audit: type=1326 audit(44.710:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff895792e8 code=0x7ffc0000 [ 44.735268][ T30] audit: type=1326 audit(44.710:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff895792e8 code=0x7ffc0000 [ 44.735282][ T30] audit: type=1326 audit(44.710:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff895792e8 code=0x7ffc0000 [ 44.735526][ T30] audit: type=1326 audit(44.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=99 compat=0 ip=0xffff89557750 code=0x7ffc0000 [ 44.735541][ T30] audit: type=1326 audit(44.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff895577b0 code=0x7ffc0000 [ 44.735555][ T30] audit: type=1326 audit(44.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=470 compat=0 ip=0xffff895792e8 code=0x7ffc0000 [ 44.735569][ T30] audit: type=1326 audit(44.710:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5666 comm="syz.3.201" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff895792e8 code=0x7ffc0000 [ 44.807556][ T5675] x_tables: duplicate underflow at hook 2 [ 44.890092][ T5678] loop4: detected capacity change from 0 to 128 [ 44.893249][ T5678] vfat: Bad value for 'time_offset' [ 44.999135][ T5678] netlink: 'syz.4.203': attribute type 10 has an invalid length. [ 45.001800][ T5678] team0: Device veth0_vlan failed to register rx_handler [ 45.056814][ T4388] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 45.077183][ T4388] usb 1-1: Invalid ep0 maxpacket: 16 [ 45.206820][ T4388] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 45.227101][ T4388] usb 1-1: Invalid ep0 maxpacket: 16 [ 45.227205][ T4388] usb usb1-port1: unable to enumerate USB device [ 45.356017][ T5681] rxe_eth0 speed is unknown, defaulting to 1000 [ 45.439202][ T5691] xt_hashlimit: max too large, truncated to 1048576 [ 45.442738][ T5691] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 45.469832][ T5697] netlink: 48 bytes leftover after parsing attributes in process `syz.2.209'. [ 45.538131][ T5705] loop2: detected capacity change from 0 to 1024 [ 45.539731][ T5705] EXT4-fs: Ignoring removed i_version option [ 45.539743][ T5705] EXT4-fs: Ignoring removed bh option [ 45.540940][ T5705] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.543337][ T5705] EXT4-fs (loop2): stripe (12) is not aligned with cluster size (4096), stripe is disabled [ 45.544455][ T5705] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 45.544564][ T5705] EXT4-fs (loop2): orphan cleanup on readonly fs [ 45.544797][ T5705] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.212: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.544812][ T5705] loop2: lost filesystem error report for type 5 error -117 [ 45.545816][ T5705] EXT4-fs (loop2): 1 orphan inode deleted [ 45.546264][ T5705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.609198][ T4748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.661747][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.217'. [ 45.768903][ T5727] xt_hashlimit: max too large, truncated to 1048576 [ 45.769080][ T5727] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 46.039698][ T5737] Bluetooth: MGMT ver 1.23 [ 46.175396][ T5750] overlayfs: failed to clone upperpath [ 46.231207][ T5759] net_ratelimit: 15 callbacks suppressed [ 46.231222][ T5759] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 46.298403][ T42] IPVS: starting estimator thread 0... [ 46.386852][ T5771] IPVS: using max 59 ests per chain, 141600 per kthread [ 46.391330][ T5772] Bluetooth: MGMT ver 1.23 [ 46.412044][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 46.412126][ T5778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.425483][ T5778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.555991][ T5791] loop2: detected capacity change from 0 to 512 [ 46.562271][ T5792] ip_tables: iptables: counters copy to user failed while replacing table [ 46.601040][ T5791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.661103][ T5804] netlink: 64 bytes leftover after parsing attributes in process `syz.1.242'. [ 46.661343][ T5805] sit0: entered promiscuous mode [ 46.665359][ T5805] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 46.665372][ T5805] netlink: 1 bytes leftover after parsing attributes in process `syz.1.242'. [ 46.665413][ T4748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.817054][ T5828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 46.864894][ T5835] sctp: [Deprecated]: syz.1.248 (pid 5835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.864894][ T5835] Use struct sctp_sack_info instead [ 46.864926][ T5836] sctp: [Deprecated]: syz.1.248 (pid 5836) Use of struct sctp_assoc_value in delayed_ack socket option. [ 46.864926][ T5836] Use struct sctp_sack_info instead [ 46.868854][ T5835] netlink: 'syz.1.248': attribute type 17 has an invalid length. [ 46.869171][ T5835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.869253][ T5836] netlink: 'syz.1.248': attribute type 17 has an invalid length. [ 46.869363][ T5836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.895922][ T5840] netlink: 'syz.2.250': attribute type 1 has an invalid length. [ 46.905982][ T5840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.250'. [ 46.913137][ T5840] veth3: entered allmulticast mode [ 46.914488][ T5840] bond1: (slave veth3): Enslaving as an active interface with a down link [ 46.925309][ T5840] bond1: (slave veth0_to_bond): making interface the new active one [ 46.925748][ T5840] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 46.931092][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 46.932679][ T5840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.963203][ T5845] FAULT_INJECTION: forcing a failure. [ 46.963203][ T5845] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.963225][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz.2.252 Tainted: G L syzkaller #0 PREEMPT [ 46.963241][ T5845] Tainted: [L]=SOFTLOCKUP [ 46.963245][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.963250][ T5845] Call trace: [ 46.963253][ T5845] show_stack+0x2c/0x3c (C) [ 46.963268][ T5845] __dump_stack+0x30/0x40 [ 46.963277][ T5845] dump_stack_lvl+0xd8/0x12c [ 46.963285][ T5845] dump_stack+0x1c/0x28 [ 46.963293][ T5845] should_fail_ex+0x418/0x58c [ 46.963309][ T5845] should_fail+0x14/0x24 [ 46.963318][ T5845] should_fail_usercopy+0x20/0x30 [ 46.963328][ T5845] copy_from_sockptr+0x7c/0x1e0 [ 46.963342][ T5845] packet_setsockopt+0x654/0xeec [ 46.963353][ T5845] do_sock_setsockopt+0x1f0/0x330 [ 46.963366][ T5845] __sys_setsockopt+0x104/0x170 [ 46.963377][ T5845] __arm64_sys_setsockopt+0xc8/0xe4 [ 46.963389][ T5845] invoke_syscall+0x98/0x244 [ 46.963398][ T5845] el0_svc_common+0xec/0x23c [ 46.963406][ T5845] do_el0_svc+0x4c/0x5c [ 46.963414][ T5845] el0_svc+0x60/0x1d8 [ 46.963423][ T5845] el0t_64_sync_handler+0x44/0x104 [ 46.963431][ T5845] el0t_64_sync+0x198/0x19c [ 46.983153][ T5847] netlink: 'syz.1.253': attribute type 2 has an invalid length. [ 47.118918][ T5870] loop0: detected capacity change from 0 to 512 [ 47.148128][ T5870] EXT4-fs (loop0): Test dummy encryption mode enabled [ 47.152037][ T5870] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.256: inode has both inline data and extents flags [ 47.152053][ T5870] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.152269][ T5870] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.256: couldn't read orphan inode 15 (err -117) [ 47.152282][ T5870] loop0: lost filesystem error report for type 5 error -117 [ 47.152805][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.175895][ T5876] FAULT_INJECTION: forcing a failure. [ 47.175895][ T5876] name failslab, interval 1, probability 0, space 0, times 0 [ 47.175913][ T5876] CPU: 1 UID: 0 PID: 5876 Comm: syz.4.257 Tainted: G L syzkaller #0 PREEMPT [ 47.175925][ T5876] Tainted: [L]=SOFTLOCKUP [ 47.175929][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.175934][ T5876] Call trace: [ 47.175937][ T5876] show_stack+0x2c/0x3c (C) [ 47.175952][ T5876] __dump_stack+0x30/0x40 [ 47.175960][ T5876] dump_stack_lvl+0xd8/0x12c [ 47.175967][ T5876] dump_stack+0x1c/0x28 [ 47.175974][ T5876] should_fail_ex+0x418/0x58c [ 47.175984][ T5876] should_failslab+0xc4/0x120 [ 47.175993][ T5876] __kmalloc_cache_noprof+0x94/0x5fc [ 47.176002][ T5876] loop_add+0xf0/0x8e4 [ 47.176010][ T5876] loop_control_ioctl+0x138/0x510 [ 47.176017][ T5876] __arm64_sys_ioctl+0x154/0x1cc [ 47.176025][ T5876] invoke_syscall+0x98/0x244 [ 47.176033][ T5876] el0_svc_common+0xec/0x23c [ 47.176040][ T5876] do_el0_svc+0x4c/0x5c [ 47.176047][ T5876] el0_svc+0x60/0x1d8 [ 47.176056][ T5876] el0t_64_sync_handler+0x44/0x104 [ 47.176063][ T5876] el0t_64_sync+0x198/0x19c [ 47.289102][ T5888] loop2: detected capacity change from 0 to 512 [ 47.293272][ T5890] Option 'äÇ©?oÈ냟W½ÎƒÞ(ödîðÌ›ÔÏpø^ï8Æ ÝõXKÒtÔ..+jXpsízÑÔû¸ÔÿgˆH{“é&·}–(Ú)“eÒÓH/ Ïk;REÁŠ¨ãÂÉ<' to dns_resolver key: bad/missing value [ 47.304957][ T5888] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 47.304975][ T5888] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.308574][ T5888] EXT4-fs (loop2): 1 truncate cleaned up [ 47.309057][ T5888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.330069][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.439223][ T5906] vfat: Unknown parameter '00000000000000000000' [ 47.666481][ T5937] ip_tables: iptables: counters copy to user failed while replacing table [ 47.683558][ T5941] cgroup2: Unknown parameter 'fowner' [ 47.806186][ T4748] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.627540][ T4742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 48.628591][ T4742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 48.628889][ T4742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 48.629228][ T4742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 48.629448][ T4742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 48.632078][ T3480] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.660071][ T5955] set_capacity_and_notify: 1 callbacks suppressed [ 48.660086][ T5955] loop0: detected capacity change from 0 to 512 [ 48.660503][ T5955] EXT4-fs: Ignoring removed oldalloc option [ 48.679009][ T5955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.692342][ T5959] loop4: detected capacity change from 0 to 512 [ 48.692772][ T5959] EXT4-fs: Ignoring removed nobh option [ 48.706107][ T5959] EXT4-fs (loop4): 1 truncate cleaned up [ 48.725315][ T5959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.758644][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.793692][ T3480] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.827939][ T5959] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 48.861214][ T5978] overlayfs: failed to clone upperpath [ 48.868414][ T3480] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.875960][ T4738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.886011][ T5953] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.968245][ T3480] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.984230][ T5981] syzkaller0: entered promiscuous mode [ 48.984244][ T5981] syzkaller0: entered allmulticast mode [ 48.999038][ T5981] loop0: detected capacity change from 0 to 512 [ 48.999440][ T5981] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.001074][ T5981] EXT4-fs (loop0): Test dummy encryption mode enabled [ 49.012356][ T5981] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.012553][ T5981] EXT4-fs error (device loop0): ext4_xattr_inode_iget:473: comm syz.0.281: EA inode 11 has unexpected i_nlink=2 ref_count=0 [ 49.012568][ T5981] loop0: lost filesystem error report for type 5 error -117 [ 49.013565][ T5981] EXT4-fs (loop0): Remounting filesystem read-only [ 49.013814][ T5981] EXT4-fs (loop0): 1 orphan inode deleted [ 49.014441][ T5981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.032781][ T5981] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 49.059367][ T5988] netlink: 32 bytes leftover after parsing attributes in process `syz.3.284'. [ 49.075679][ T5988] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 49.075693][ T5988] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 49.075701][ T5988] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 49.110211][ T6000] syz.3.286 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.139363][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.173379][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.175267][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.175341][ T5953] bridge_slave_0: entered allmulticast mode [ 49.175861][ T5953] bridge_slave_0: entered promiscuous mode [ 49.184797][ T3480] bridge_slave_1: left allmulticast mode [ 49.184819][ T3480] bridge_slave_1: left promiscuous mode [ 49.184925][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.188115][ T6005] vhci_hcd vhci_hcd.1: invalid port number 117 [ 49.194453][ T3480] bridge_slave_0: left allmulticast mode [ 49.194469][ T3480] bridge_slave_0: left promiscuous mode [ 49.194535][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.322854][ T3480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.349569][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.361118][ T3480] bond0 (unregistering): Released all slaves [ 49.364138][ T3480] bond1 (unregistering): (slave veth3): Releasing active interface [ 49.364153][ T3480] veth0_to_bond: entered promiscuous mode [ 49.388488][ T3480] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 49.388505][ T3480] veth0_to_bond: left promiscuous mode [ 49.399370][ T3480] bond1 (unregistering): Released all slaves [ 49.403427][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.403468][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.403544][ T5953] bridge_slave_1: entered allmulticast mode [ 49.404061][ T5953] bridge_slave_1: entered promiscuous mode [ 49.428862][ T5953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.429760][ T5953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.443212][ T5953] team0: Port device team_slave_0 added [ 49.444056][ T5953] team0: Port device team_slave_1 added [ 49.460578][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.460594][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.460606][ T5953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.461231][ T5953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.461239][ T5953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.461251][ T5953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.520943][ T5953] hsr_slave_0: entered promiscuous mode [ 49.521219][ T5953] hsr_slave_1: entered promiscuous mode [ 49.521395][ T5953] debugfs: 'hsr0' already exists in 'hsr' [ 49.521405][ T5953] Cannot create hsr debugfs directory [ 49.543393][ T6040] loop4: detected capacity change from 0 to 256 [ 49.546059][ T6040] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.631071][ T4741] Bluetooth: hci3: unexpected event 0x2f length: 1017 > 255 [ 49.705021][ T4429] 8021q: adding VLAN 0 to HW filter on device eth0 [ 49.831142][ T5953] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.836074][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.851798][ T3480] hsr_slave_0: left promiscuous mode [ 49.852341][ T3480] hsr_slave_1: left promiscuous mode [ 49.852698][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.852715][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.853128][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.853137][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.867218][ T3480] veth1_macvtap: left promiscuous mode [ 49.867255][ T3480] veth0_macvtap: left promiscuous mode [ 49.867304][ T3480] veth1_vlan: left promiscuous mode [ 49.867346][ T3480] veth0_vlan: left promiscuous mode [ 49.985554][ T3480] team0 (unregistering): Port device team_slave_1 removed [ 49.995240][ T3480] team0 (unregistering): Port device team_slave_0 removed [ 50.059182][ T5953] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.060292][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.194594][ T6084] fuse: fd is not a fuse device [ 50.428277][ T4429] 8021q: adding VLAN 0 to HW filter on device eth3 [ 50.442169][ T5953] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.443479][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.445165][ T5953] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.455557][ T5953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.495522][ T6099] loop0: detected capacity change from 0 to 512 [ 50.495892][ T6099] EXT4-fs: Ignoring removed i_version option [ 50.515397][ T5953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.535065][ T5953] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.537071][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.537096][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.542648][ T6099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.548061][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.548086][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.568771][ T6105] loop4: detected capacity change from 0 to 512 [ 50.573128][ T6098] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #12: comm syz.0.303: Directory hole found for htree leaf block 0 [ 50.584560][ T5953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.584573][ T5953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.603647][ T6105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.635074][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.653595][ T4738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.706701][ T6125] binder: 6124:6125 ioctl c0306201 20000480 returned -14 [ 50.711519][ T6125] binder: 6124:6125 ioctl c0306201 20000700 returned -14 [ 50.711653][ T6125] binder: 6124:6125 got transaction to invalid handle, 1 [ 50.711664][ T6125] binder: 6124:6125 cannot find target node [ 50.711678][ T6125] binder: 6124:6125 transaction call to 0:0 failed 13/29201/-22, code 0 size 104-24 line 3253 [ 50.711861][ T4835] binder: undelivered TRANSACTION_ERROR: 29201 [ 50.737058][ T4741] Bluetooth: hci4: command tx timeout [ 50.751960][ T6137] overlayfs: failed to resolve 'work': -2 [ 50.802435][ T5953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.870050][ T4429] 8021q: adding VLAN 0 to HW filter on device eth1 [ 50.922310][ T6168] bpf setsockopt: ignoring program buffer with optlen=65458 (max_optlen=4096) [ 50.938077][ T5953] veth0_vlan: entered promiscuous mode [ 50.945781][ T5953] veth1_vlan: entered promiscuous mode [ 50.960078][ T5953] veth0_macvtap: entered promiscuous mode [ 50.961268][ T5953] veth1_macvtap: entered promiscuous mode [ 50.969346][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.972806][ T5953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.999469][ T3480] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.001759][ T3480] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.001856][ T3480] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.001885][ T3480] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.091279][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.091288][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.137714][ T3246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.137727][ T3246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.208813][ T6188] UBIFS error (pid: 6188): cannot open "ubi0:testvol", error -19 [ 51.245342][ T6192] netlink: 'syz.5.274': attribute type 5 has an invalid length. [ 51.245364][ T6192] __nla_validate_parse: 7 callbacks suppressed [ 51.245372][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.5.274'. [ 51.350597][ T4429] 8021q: adding VLAN 0 to HW filter on device eth2 [ 51.462709][ T6218] netlink: 36 bytes leftover after parsing attributes in process `syz.3.322'. [ 51.538314][ T6200] input: syz0 as /devices/virtual/input/input2 [ 51.574396][ T6231] netlink: 28 bytes leftover after parsing attributes in process `syz.5.325'. [ 51.574422][ T6231] netlink: 'syz.5.325': attribute type 7 has an invalid length. [ 51.574432][ T6231] netlink: 'syz.5.325': attribute type 8 has an invalid length. [ 51.574439][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.325'. [ 51.728123][ T6243] binder: 6242:6243 ioctl c0306201 20000480 returned -14 [ 51.733227][ T6243] binder: 6242:6243 tried to acquire reference to desc 0, got 1 instead [ 51.733250][ T6243] binder: 6242:6243 ioctl c0306201 20000700 returned -14 [ 51.733568][ T6243] binder_alloc: 6242: binder_alloc_buf, no vma [ 51.733577][ T6243] binder: cannot allocate buffer: vma cleared, target dead or dying [ 51.733600][ T6243] binder: 6242:6243 transaction call to 6242:0 failed 18/29189/-3, code 0 size 104-24 line 3409 [ 51.734752][ T4842] binder: undelivered TRANSACTION_ERROR: 29189 [ 51.790931][ T6251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.330'. [ 51.905176][ T6267] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 51.913812][ T6267] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 51.959621][ T6272] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.959691][ T6272] block device autoloading is deprecated and will be removed. [ 52.124354][ T6272] md/raid:md0: device ram0 operational as raid disk 0 [ 52.143464][ T6272] md/raid:md0: raid level 5 active with 1 out of 2 devices, algorithm 2 [ 52.144702][ T6272] md0: detected capacity change from 0 to 4096 [ 52.169459][ T6280] md: recover of RAID array md0 [ 52.197747][ T6280] md: md0: recover done. [ 52.336380][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 52.352548][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 52.733238][ T6329] batman_adv: batadv0: Adding interface: macvtap1 [ 52.733250][ T6329] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.733262][ T6329] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 52.774507][ T6335] binder: 6334:6335 ioctl c0306201 20000480 returned -14 [ 52.775149][ T6335] binder: 6334:6335 tried to acquire reference to desc 0, got 1 instead [ 52.775164][ T6335] binder: 6334:6335 ioctl c0306201 20000700 returned -14 [ 52.775257][ T6335] binder_alloc: 6334: binder_alloc_buf, no vma [ 52.775264][ T6335] binder: cannot allocate buffer: vma cleared, target dead or dying [ 52.775279][ T6335] binder: 6334:6335 transaction call to 6334:0 failed 23/29189/-3, code 0 size 104-24 line 3409 [ 52.775522][ T4835] binder: undelivered TRANSACTION_ERROR: 29189 [ 52.800681][ T6333] syzkaller0: entered promiscuous mode [ 52.800695][ T6333] syzkaller0: entered allmulticast mode [ 52.807104][ T4741] Bluetooth: hci4: command tx timeout [ 53.123735][ T6360] netlink: 'syz.5.362': attribute type 2 has an invalid length. [ 53.123753][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.362'. [ 53.124110][ T6359] loop4: detected capacity change from 0 to 512 [ 53.131241][ T6359] EXT4-fs: Ignoring removed orlov option [ 53.132343][ T6359] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 53.135663][ T6359] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #15: comm syz.4.361: corrupted xattr block 252: invalid header [ 53.135689][ T6359] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.136385][ T6359] EXT4-fs (loop4): Remounting filesystem read-only [ 53.136396][ T6359] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 53.136436][ T6359] EXT4-fs (loop4): 1 orphan inode deleted [ 53.139389][ T6359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.172742][ T4738] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.194544][ T6365] loop4: detected capacity change from 0 to 512 [ 53.194838][ T6367] FAULT_INJECTION: forcing a failure. [ 53.194838][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 53.194855][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.4.364 Tainted: G L syzkaller #0 PREEMPT [ 53.194867][ T6367] Tainted: [L]=SOFTLOCKUP [ 53.194870][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.194874][ T6367] Call trace: [ 53.194877][ T6367] show_stack+0x2c/0x3c (C) [ 53.194892][ T6367] __dump_stack+0x30/0x40 [ 53.194900][ T6367] dump_stack_lvl+0xd8/0x12c [ 53.194907][ T6367] dump_stack+0x1c/0x28 [ 53.194914][ T6367] should_fail_ex+0x418/0x58c [ 53.194927][ T6367] should_failslab+0xc4/0x120 [ 53.194936][ T6367] kmem_cache_alloc_noprof+0x94/0x5d4 [ 53.194945][ T6367] pagetable_pte_ctor+0x7c/0x268 [ 53.194954][ T6367] do_pte_missing+0xed4/0x28bc [ 53.194963][ T6367] handle_mm_fault+0x14d0/0x2b58 [ 53.194971][ T6367] do_page_fault+0x4c4/0xba4 [ 53.194981][ T6367] do_translation_fault+0xc4/0x114 [ 53.194992][ T6367] do_mem_abort+0x70/0x194 [ 53.195001][ T6367] el1_abort+0x50/0x74 [ 53.195012][ T6367] el1h_64_sync_handler+0xdc/0x130 [ 53.195023][ T6367] el1h_64_sync+0x78/0x7c [ 53.195030][ T6367] strncpy_from_user+0x198/0x388 (P) [ 53.195041][ T6367] do_getname+0x84/0x234 [ 53.195050][ T6367] getname_flags+0x2c/0x3c [ 53.195058][ T6367] do_sys_openat2+0xd0/0x1e8 [ 53.195066][ T6367] do_sys_open+0xb0/0xe0 [ 53.195073][ T6367] __arm64_sys_openat+0xa8/0xc4 [ 53.195080][ T6367] invoke_syscall+0x98/0x244 [ 53.195088][ T6367] el0_svc_common+0xec/0x23c [ 53.195095][ T6367] do_el0_svc+0x4c/0x5c [ 53.195102][ T6367] el0_svc+0x60/0x1d8 [ 53.195109][ T6367] el0t_64_sync_handler+0x44/0x104 [ 53.195116][ T6367] el0t_64_sync+0x198/0x19c [ 53.311200][ T6370] loop5: detected capacity change from 0 to 512 [ 53.481947][ T6370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.495716][ T6369] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.363: corrupted xattr block 33: invalid header [ 53.496571][ T6369] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.363: corrupted xattr block 33: invalid header [ 53.502961][ T6369] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.363: corrupted xattr block 33: invalid header [ 53.505083][ T6369] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.363: corrupted xattr block 33: invalid header [ 53.619752][ T6382] binder: 6381:6382 ioctl c0306201 20000480 returned -14 [ 53.621915][ T6382] binder: 6381:6382 ioctl c0306201 20000700 returned -14 [ 53.622059][ T6382] binder: 6381:6382 got transaction to invalid handle, 1 [ 53.622070][ T6382] binder: 6381:6382 cannot find target node [ 53.648773][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.369'. [ 53.693963][ T6376] FAULT_INJECTION: forcing a failure. [ 53.693963][ T6376] name failslab, interval 1, probability 0, space 0, times 0 [ 53.693983][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.4.365 Tainted: G L syzkaller #0 PREEMPT [ 53.693996][ T6376] Tainted: [L]=SOFTLOCKUP [ 53.693999][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.694004][ T6376] Call trace: [ 53.694007][ T6376] show_stack+0x2c/0x3c (C) [ 53.694022][ T6376] __dump_stack+0x30/0x40 [ 53.694031][ T6376] dump_stack_lvl+0xd8/0x12c [ 53.694039][ T6376] dump_stack+0x1c/0x28 [ 53.694047][ T6376] should_fail_ex+0x418/0x58c [ 53.694058][ T6376] should_failslab+0xc4/0x120 [ 53.694068][ T6376] __kmalloc_cache_node_noprof+0x98/0x618 [ 53.694079][ T6376] alloc_cpumask_var_node+0x90/0x138 [ 53.694092][ T6376] alloc_workqueue_attrs_noprof+0x84/0x154 [ 53.694104][ T6376] apply_wqattrs_prepare+0xf4/0xb24 [ 53.694116][ T6376] apply_workqueue_attrs_locked+0x70/0xd4 [ 53.694126][ T6376] __alloc_workqueue+0x9e4/0x11a0 [ 53.694136][ T6376] alloc_workqueue_va+0x5c/0x138 [ 53.694146][ T6376] alloc_workqueue_noprof+0xe0/0x130 [ 53.694156][ T6376] __rds_conn_create+0xe48/0x1920 [ 53.694166][ T6376] rds_conn_create_outgoing+0x60/0x7c [ 53.694174][ T6376] rds_sendmsg+0xd0c/0x1c64 [ 53.694184][ T6376] __sock_sendmsg+0xc8/0x17c [ 53.694195][ T6376] __sys_sendto+0x250/0x328 [ 53.694207][ T6376] __arm64_sys_sendto+0xec/0x10c [ 53.694218][ T6376] invoke_syscall+0x98/0x244 [ 53.694227][ T6376] el0_svc_common+0x19c/0x23c [ 53.694235][ T6376] do_el0_svc+0x4c/0x5c [ 53.694243][ T6376] el0_svc+0x60/0x1d8 [ 53.694251][ T6376] el0t_64_sync_handler+0x44/0x104 [ 53.694259][ T6376] el0t_64_sync+0x198/0x19c [ 53.694269][ T6376] => alloc_cpumask_var: failed! [ 53.694273][ T6376] CPU: 0 UID: 0 PID: 6376 Comm: syz.4.365 Tainted: G L syzkaller #0 PREEMPT [ 53.694284][ T6376] Tainted: [L]=SOFTLOCKUP [ 53.694286][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.694291][ T6376] Call trace: [ 53.694293][ T6376] show_stack+0x2c/0x3c (C) [ 53.694301][ T6376] __dump_stack+0x30/0x40 [ 53.694309][ T6376] dump_stack_lvl+0xd8/0x12c [ 53.694317][ T6376] dump_stack+0x1c/0x28 [ 53.694325][ T6376] alloc_cpumask_var_node+0xfc/0x138 [ 53.694336][ T6376] alloc_workqueue_attrs_noprof+0x84/0x154 [ 53.694347][ T6376] apply_wqattrs_prepare+0xf4/0xb24 [ 53.694358][ T6376] apply_workqueue_attrs_locked+0x70/0xd4 [ 53.694369][ T6376] __alloc_workqueue+0x9e4/0x11a0 [ 53.694379][ T6376] alloc_workqueue_va+0x5c/0x138 [ 53.694389][ T6376] alloc_workqueue_noprof+0xe0/0x130 [ 53.694399][ T6376] __rds_conn_create+0xe48/0x1920 [ 53.694407][ T6376] rds_conn_create_outgoing+0x60/0x7c [ 53.694416][ T6376] rds_sendmsg+0xd0c/0x1c64 [ 53.694425][ T6376] __sock_sendmsg+0xc8/0x17c [ 53.694436][ T6376] __sys_sendto+0x250/0x328 [ 53.694447][ T6376] __arm64_sys_sendto+0xec/0x10c [ 53.694458][ T6376] invoke_syscall+0x98/0x244 [ 53.694466][ T6376] el0_svc_common+0x19c/0x23c [ 53.694475][ T6376] do_el0_svc+0x4c/0x5c [ 53.694482][ T6376] el0_svc+0x60/0x1d8 [ 53.694490][ T6376] el0t_64_sync_handler+0x44/0x104 [ 53.694498][ T6376] el0t_64_sync+0x198/0x19c [ 53.696573][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.365'. [ 53.711358][ T6380] loop0: detected capacity change from 0 to 32768 [ 53.762569][ T6380] loop0: p1 p2 p3 [ 53.828585][ T6397] loop0: detected capacity change from 0 to 256 [ 53.828895][ T6397] vfat: Unknown parameter '' [ 53.837979][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 53.854375][ T4731] udevd[4731]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 53.861019][ T6010] udevd[6010]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 53.861459][ T6401] loop4: detected capacity change from 0 to 512 [ 53.874734][ T6401] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.374: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 53.874758][ T6401] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 53.874903][ T6401] EXT4-fs error (device loop4): ext4_quota_enable:7264: comm syz.4.374: Bad quota inode: 4, type: 1 [ 53.874915][ T6401] loop4: lost filesystem error report for type 5 error -117 [ 53.875020][ T6401] EXT4-fs warning (device loop4): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.876126][ T6401] EXT4-fs (loop4): mount failed [ 53.878204][ T6405] veth1: entered promiscuous mode [ 53.878216][ T6405] veth1: entered allmulticast mode [ 53.878540][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 53.878553][ C0] EXT4-fs (loop4): initial error at time 53: ext4_ext_check_inode:521: inode 4 [ 53.878573][ C0] EXT4-fs (loop4): last error at time 53: ext4_quota_enable:7264 [ 53.951735][ T6412] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 53.951750][ T6412] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 53.951755][ T6412] overlayfs: missing 'lowerdir' [ 53.955778][ T6407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 53.990261][ T6419] binder: 6418:6419 ioctl c0306201 20000480 returned -14 [ 53.990843][ T6419] binder: 6418:6419 ioctl c0306201 20000700 returned -14 [ 53.990932][ T6419] binder: 6418:6419 got transaction to invalid handle, 1 [ 54.033050][ T40] bond0: (slave bond_slave_0): interface is now down [ 54.033068][ T40] bond0: (slave bond_slave_1): interface is now down [ 54.109654][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.137960][ T40] bond0: (slave bond_slave_0): interface is now down [ 54.137978][ T40] bond0: (slave bond_slave_1): interface is now down [ 54.139039][ T40] bond0: now running without any active interface! [ 54.159528][ T6429] device-mapper: table: 248:0: verity: Data device lookup failed (-ENOENT) [ 54.159542][ T6429] device-mapper: ioctl: error adding target to table [ 54.926936][ T4741] Bluetooth: hci4: command tx timeout [ 55.113190][ T6438] netlink: 'syz.4.387': attribute type 15 has an invalid length. [ 55.113207][ T6438] netlink: 'syz.4.387': attribute type 7 has an invalid length. [ 55.116458][ T6439] netlink: 'syz.0.385': attribute type 9 has an invalid length. [ 55.275369][ T6459] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 55.309425][ T6464] xt_hashlimit: max too large, truncated to 1048576 [ 55.309539][ T6464] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.329798][ T6446] binder: 6444:6446 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 55.332853][ T6462] binder: 6444:6462 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 55.356934][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.357107][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.596242][ T6486] bridge0: port 3(batadv0) entered disabled state [ 55.596348][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.596657][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.612421][ T6486] batman_adv: batadv0: Interface deactivated: dummy0 [ 55.643915][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.647933][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.718778][ T3246] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.723254][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.723285][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.723302][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.748740][ T6524] xt_hashlimit: max too large, truncated to 1048576 [ 56.751853][ T6524] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 56.772763][ T6531] loop1: detected capacity change from 0 to 256 [ 56.781338][ T6531] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.835409][ T6534] loop5: detected capacity change from 0 to 1024 [ 56.836398][ T6534] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 56.844557][ T6538] loop0: detected capacity change from 0 to 4096 [ 56.861501][ T6534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.869008][ T6542] bond0: entered promiscuous mode [ 56.869020][ T6542] bond_slave_0: entered promiscuous mode [ 56.869078][ T6542] bond_slave_1: entered promiscuous mode [ 56.879038][ T6538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.888283][ T6534] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 7: comm syz.5.410: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 56.898356][ T6534] EXT4-fs (loop5): Remounting filesystem read-only [ 56.966824][ T4741] Bluetooth: hci4: command tx timeout [ 56.981317][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.989388][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.022070][ T6568] FAULT_INJECTION: forcing a failure. [ 57.022070][ T6568] name failslab, interval 1, probability 0, space 0, times 0 [ 57.022092][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.5.414 Tainted: G L syzkaller #0 PREEMPT [ 57.022105][ T6568] Tainted: [L]=SOFTLOCKUP [ 57.022109][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.022114][ T6568] Call trace: [ 57.022117][ T6568] show_stack+0x2c/0x3c (C) [ 57.022133][ T6568] __dump_stack+0x30/0x40 [ 57.022143][ T6568] dump_stack_lvl+0xd8/0x12c [ 57.022151][ T6568] dump_stack+0x1c/0x28 [ 57.022159][ T6568] should_fail_ex+0x418/0x58c [ 57.022172][ T6568] should_failslab+0xc4/0x120 [ 57.022183][ T6568] kmem_cache_alloc_noprof+0x94/0x5d4 [ 57.022195][ T6568] security_inode_alloc+0x40/0x304 [ 57.022207][ T6568] inode_init_always_gfp+0x704/0xb20 [ 57.022220][ T6568] alloc_inode+0x9c/0x198 [ 57.022232][ T6568] new_inode+0x20/0x50 [ 57.022239][ T6568] gadgetfs_make_inode+0x34/0x18c [ 57.022252][ T6568] gadgetfs_create_file+0x48/0xd8 [ 57.022264][ T6568] gadgetfs_bind+0x3f8/0x75c [ 57.022276][ T6568] gadget_bind_driver+0x274/0x834 [ 57.022288][ T6568] really_probe+0x29c/0x800 [ 57.022301][ T6568] __driver_probe_device+0x1e0/0x350 [ 57.022313][ T6568] driver_probe_device+0x6c/0x19c [ 57.022325][ T6568] __driver_attach+0x168/0x384 [ 57.022336][ T6568] bus_for_each_dev+0x128/0x1b4 [ 57.022347][ T6568] driver_attach+0x50/0x60 [ 57.022358][ T6568] bus_add_driver+0x208/0x500 [ 57.022368][ T6568] driver_register+0x220/0x310 [ 57.022376][ T6568] usb_gadget_register_driver_owner+0xf0/0x25c [ 57.022388][ T6568] dev_config+0x91c/0xcc0 [ 57.022399][ T6568] vfs_write+0x2a4/0xa0c [ 57.022409][ T6568] ksys_write+0x12c/0x228 [ 57.022417][ T6568] __arm64_sys_write+0x84/0x98 [ 57.022427][ T6568] invoke_syscall+0x98/0x244 [ 57.022435][ T6568] el0_svc_common+0xec/0x23c [ 57.022444][ T6568] do_el0_svc+0x4c/0x5c [ 57.022452][ T6568] el0_svc+0x60/0x1d8 [ 57.022460][ T6568] el0t_64_sync_handler+0x44/0x104 [ 57.022468][ T6568] el0t_64_sync+0x198/0x19c [ 57.022994][ T6568] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 57.023006][ T6568] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 57.023197][ T6568] gadgetfs expected dummy_udc controller not usbip-vudc [ 57.023204][ T6568] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 57.024194][ T6568] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 57.279539][ T6594] loop1: detected capacity change from 0 to 512 [ 57.279919][ T6594] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.296508][ T6594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.331739][ T6585] loop5: detected capacity change from 0 to 32768 [ 57.351630][ T6585] loop5: p1 p3 < > [ 57.395845][ T6577] __nla_validate_parse: 5 callbacks suppressed [ 57.395860][ T6577] netlink: 44 bytes leftover after parsing attributes in process `syz.5.420'. [ 57.438027][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 57.476366][ T6619] binder: 6618:6619 ioctl c0306201 20000480 returned -14 [ 57.480581][ T6619] binder: BINDER_SET_CONTEXT_MGR already set [ 57.480589][ T6619] binder: 6618:6619 ioctl 4018620d 20000540 returned -16 [ 57.482751][ T6619] binder: 6618:6619 ioctl c0306201 20000700 returned -14 [ 57.482879][ T6619] binder: 6618:6619 got transaction to invalid handle, 1 [ 57.482889][ T6619] binder_debug: 5 callbacks suppressed [ 57.482895][ T6619] binder: 6618:6619 cannot find target node [ 57.482907][ T6619] binder: 6618:6619 transaction call to 0:0 failed 32/29201/-22, code 0 size 104-24 line 3253 [ 57.483271][ T6503] binder: undelivered TRANSACTION_ERROR: 29201 [ 57.530167][ T6623] loop1: detected capacity change from 0 to 1024 [ 57.658047][ T6010] udevd[6010]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 57.698422][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 57.720128][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 57.758980][ T6651] TCP: TCP_TX_DELAY enabled [ 57.772708][ T6644] ip_tables: iptables: counters copy to user failed while replacing table [ 57.854077][ T6670] netlink: 'syz.1.436': attribute type 3 has an invalid length. [ 58.017589][ T6684] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.022734][ T6683] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 58.057868][ T6694] binder: 6693:6694 ioctl c0306201 20000480 returned -14 [ 58.058441][ T6694] binder: BINDER_SET_CONTEXT_MGR already set [ 58.058447][ T6694] binder: 6693:6694 ioctl 4018620d 20000540 returned -16 [ 58.058549][ T6694] binder: 6693:6694 ioctl c0306201 20000700 returned -14 [ 58.058651][ T6694] binder: 6693:6694 got transaction to invalid handle, 1 [ 58.058662][ T6694] binder: 6693:6694 cannot find target node [ 58.058675][ T6694] binder: 6693:6694 transaction call to 0:0 failed 35/29201/-22, code 0 size 104-24 line 3253 [ 58.059011][ T6491] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.153101][ T6708] loop1: detected capacity change from 0 to 512 [ 58.162632][ T6708] FAT-fs (loop1): Invalid FSINFO signature: 0x00000852, 0x61417272 (sector = 1) [ 58.339353][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.446'. [ 58.647275][ T6754] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.726141][ T6756] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.843495][ T6762] batman_adv: batadv0: Adding interface: macvtap1 [ 58.843508][ T6762] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.843521][ T6762] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 58.871032][ T6762] batman_adv: batadv0: Adding interface: macvtap2 [ 58.871045][ T6762] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.871060][ T6762] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 58.891653][ T6762] batman_adv: batadv0: Adding interface: macvtap3 [ 58.891663][ T6762] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.891677][ T6762] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 58.929438][ T6762] batman_adv: batadv0: Adding interface: macvtap4 [ 58.929451][ T6762] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.929468][ T6762] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active [ 58.938344][ T6762] batman_adv: batadv0: Adding interface: macvtap5 [ 58.938352][ T6762] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.938363][ T6762] batman_adv: batadv0: Not using interface macvtap5 (retrying later): interface not active [ 58.941924][ T6767] binder: 6766:6767 ioctl c0306201 20000700 returned -14 [ 58.942059][ T6767] binder: 6766:6767 got transaction to invalid handle, 1 [ 58.942069][ T6767] binder: 6766:6767 cannot find target node [ 58.942081][ T6767] binder: 6766:6767 transaction call to 0:0 failed 39/29201/-22, code 0 size 104-24 line 3253 [ 58.942282][ T4903] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.949815][ T6762] batman_adv: batadv0: Adding interface: macvtap6 [ 58.949823][ T6762] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.949836][ T6762] batman_adv: batadv0: Not using interface macvtap6 (retrying later): interface not active [ 58.992341][ T6762] batman_adv: batadv0: Adding interface: macvtap7 [ 58.992352][ T6762] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.992367][ T6762] batman_adv: batadv0: Not using interface macvtap7 (retrying later): interface not active [ 58.998198][ T6762] batman_adv: batadv0: Adding interface: macvtap8 [ 58.998206][ T6762] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.998219][ T6762] batman_adv: batadv0: Not using interface macvtap8 (retrying later): interface not active [ 59.018146][ T6762] batman_adv: batadv0: Adding interface: macvtap9 [ 59.018155][ T6762] batman_adv: batadv0: The MTU of interface macvtap9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.018168][ T6762] batman_adv: batadv0: Not using interface macvtap9 (retrying later): interface not active [ 59.024081][ T6773] set_capacity_and_notify: 1 callbacks suppressed [ 59.024091][ T6773] loop5: detected capacity change from 0 to 512 [ 59.024907][ T6773] EXT4-fs (loop5): DAX unsupported by block device. [ 59.104809][ T6762] batman_adv: batadv0: Adding interface: macvtap10 [ 59.104824][ T6762] batman_adv: batadv0: The MTU of interface macvtap10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.104840][ T6762] batman_adv: batadv0: Not using interface macvtap10 (retrying later): interface not active [ 59.108570][ T6778] loop0: detected capacity change from 0 to 256 [ 59.118742][ T6762] batman_adv: batadv0: Adding interface: macvtap11 [ 59.118755][ T6762] batman_adv: batadv0: The MTU of interface macvtap11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.118768][ T6762] batman_adv: batadv0: Not using interface macvtap11 (retrying later): interface not active [ 59.134454][ T6762] batman_adv: batadv0: Adding interface: macvtap12 [ 59.134464][ T6762] batman_adv: batadv0: The MTU of interface macvtap12 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.134478][ T6762] batman_adv: batadv0: Not using interface macvtap12 (retrying later): interface not active [ 59.148279][ T6762] batman_adv: batadv0: Adding interface: macvtap13 [ 59.148288][ T6762] batman_adv: batadv0: The MTU of interface macvtap13 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.148304][ T6762] batman_adv: batadv0: Not using interface macvtap13 (retrying later): interface not active [ 59.173735][ T6762] batman_adv: batadv0: Adding interface: macvtap14 [ 59.173745][ T6762] batman_adv: batadv0: The MTU of interface macvtap14 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.173762][ T6762] batman_adv: batadv0: Not using interface macvtap14 (retrying later): interface not active [ 59.176012][ T6762] batman_adv: batadv0: Adding interface: macvtap15 [ 59.176019][ T6762] batman_adv: batadv0: The MTU of interface macvtap15 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.176034][ T6762] batman_adv: batadv0: Not using interface macvtap15 (retrying later): interface not active [ 59.199621][ T6762] batman_adv: batadv0: Adding interface: macvtap16 [ 59.199631][ T6762] batman_adv: batadv0: The MTU of interface macvtap16 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.199649][ T6762] batman_adv: batadv0: Not using interface macvtap16 (retrying later): interface not active [ 59.201865][ T6762] batman_adv: batadv0: Adding interface: macvtap17 [ 59.201872][ T6762] batman_adv: batadv0: The MTU of interface macvtap17 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.201885][ T6762] batman_adv: batadv0: Not using interface macvtap17 (retrying later): interface not active [ 59.205829][ T6762] batman_adv: batadv0: Adding interface: macvtap18 [ 59.205838][ T6762] batman_adv: batadv0: The MTU of interface macvtap18 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.205856][ T6762] batman_adv: batadv0: Not using interface macvtap18 (retrying later): interface not active [ 59.236782][ T6762] batman_adv: batadv0: Adding interface: macvtap19 [ 59.236789][ T6762] batman_adv: batadv0: The MTU of interface macvtap19 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.236804][ T6762] batman_adv: batadv0: Not using interface macvtap19 (retrying later): interface not active [ 59.238708][ T6762] batman_adv: batadv0: Adding interface: macvtap20 [ 59.238715][ T6762] batman_adv: batadv0: The MTU of interface macvtap20 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.238727][ T6762] batman_adv: batadv0: Not using interface macvtap20 (retrying later): interface not active [ 59.240636][ T6762] batman_adv: batadv0: Adding interface: macvtap21 [ 59.240643][ T6762] batman_adv: batadv0: The MTU of interface macvtap21 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.240657][ T6762] batman_adv: batadv0: Not using interface macvtap21 (retrying later): interface not active [ 59.242522][ T6762] batman_adv: batadv0: Adding interface: macvtap22 [ 59.242529][ T6762] batman_adv: batadv0: The MTU of interface macvtap22 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.242544][ T6762] batman_adv: batadv0: Not using interface macvtap22 (retrying later): interface not active [ 59.244358][ T6762] batman_adv: batadv0: Adding interface: macvtap23 [ 59.244365][ T6762] batman_adv: batadv0: The MTU of interface macvtap23 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.244379][ T6762] batman_adv: batadv0: Not using interface macvtap23 (retrying later): interface not active [ 59.293417][ T6762] batman_adv: batadv0: Adding interface: macvtap24 [ 59.293428][ T6762] batman_adv: batadv0: The MTU of interface macvtap24 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.293450][ T6762] batman_adv: batadv0: Not using interface macvtap24 (retrying later): interface not active [ 59.307943][ T6762] batman_adv: batadv0: Adding interface: macvtap25 [ 59.307951][ T6762] batman_adv: batadv0: The MTU of interface macvtap25 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.307966][ T6762] batman_adv: batadv0: Not using interface macvtap25 (retrying later): interface not active [ 59.310091][ T6762] batman_adv: batadv0: Adding interface: macvtap26 [ 59.310098][ T6762] batman_adv: batadv0: The MTU of interface macvtap26 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.310112][ T6762] batman_adv: batadv0: Not using interface macvtap26 (retrying later): interface not active [ 59.313193][ T6762] batman_adv: batadv0: Adding interface: macvtap27 [ 59.313200][ T6762] batman_adv: batadv0: The MTU of interface macvtap27 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.313215][ T6762] batman_adv: batadv0: Not using interface macvtap27 (retrying later): interface not active [ 59.345797][ T6762] batman_adv: batadv0: Adding interface: macvtap28 [ 59.345808][ T6762] batman_adv: batadv0: The MTU of interface macvtap28 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.345828][ T6762] batman_adv: batadv0: Not using interface macvtap28 (retrying later): interface not active [ 59.349289][ T6762] batman_adv: batadv0: Adding interface: macvtap29 [ 59.349297][ T6762] batman_adv: batadv0: The MTU of interface macvtap29 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.349312][ T6762] batman_adv: batadv0: Not using interface macvtap29 (retrying later): interface not active [ 59.360414][ T6762] batman_adv: batadv0: Adding interface: macvtap30 [ 59.360423][ T6762] batman_adv: batadv0: The MTU of interface macvtap30 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.360442][ T6762] batman_adv: batadv0: Not using interface macvtap30 (retrying later): interface not active [ 59.392128][ T6762] batman_adv: batadv0: Adding interface: macvtap31 [ 59.392140][ T6762] batman_adv: batadv0: The MTU of interface macvtap31 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.392164][ T6762] batman_adv: batadv0: Not using interface macvtap31 (retrying later): interface not active [ 59.427092][ T6762] batman_adv: batadv0: Adding interface: macvtap32 [ 59.427137][ T6762] batman_adv: batadv0: The MTU of interface macvtap32 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.427161][ T6762] batman_adv: batadv0: Not using interface macvtap32 (retrying later): interface not active [ 59.433662][ T6762] batman_adv: batadv0: Adding interface: macvtap33 [ 59.433672][ T6762] batman_adv: batadv0: The MTU of interface macvtap33 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.433692][ T6762] batman_adv: batadv0: Not using interface macvtap33 (retrying later): interface not active [ 59.438952][ T4903] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 59.451509][ T6762] batman_adv: batadv0: Adding interface: macvtap34 [ 59.451517][ T6762] batman_adv: batadv0: The MTU of interface macvtap34 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.451535][ T6762] batman_adv: batadv0: Not using interface macvtap34 (retrying later): interface not active [ 59.459964][ T6762] batman_adv: batadv0: Adding interface: macvtap35 [ 59.459972][ T6762] batman_adv: batadv0: The MTU of interface macvtap35 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.459990][ T6762] batman_adv: batadv0: Not using interface macvtap35 (retrying later): interface not active [ 59.475841][ T6762] batman_adv: batadv0: Adding interface: macvtap36 [ 59.475851][ T6762] batman_adv: batadv0: The MTU of interface macvtap36 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.475871][ T6762] batman_adv: batadv0: Not using interface macvtap36 (retrying later): interface not active [ 59.485038][ T6762] batman_adv: batadv0: Adding interface: macvtap37 [ 59.485047][ T6762] batman_adv: batadv0: The MTU of interface macvtap37 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.485065][ T6762] batman_adv: batadv0: Not using interface macvtap37 (retrying later): interface not active [ 59.491295][ T6762] batman_adv: batadv0: Adding interface: macvtap38 [ 59.491303][ T6762] batman_adv: batadv0: The MTU of interface macvtap38 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.491319][ T6762] batman_adv: batadv0: Not using interface macvtap38 (retrying later): interface not active [ 59.516184][ T6762] batman_adv: batadv0: Adding interface: macvtap39 [ 59.516194][ T6762] batman_adv: batadv0: The MTU of interface macvtap39 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.516214][ T6762] batman_adv: batadv0: Not using interface macvtap39 (retrying later): interface not active [ 59.529152][ T6762] batman_adv: batadv0: Adding interface: macvtap40 [ 59.529161][ T6762] batman_adv: batadv0: The MTU of interface macvtap40 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.529178][ T6762] batman_adv: batadv0: Not using interface macvtap40 (retrying later): interface not active [ 59.531519][ T6762] batman_adv: batadv0: Adding interface: macvtap41 [ 59.531526][ T6762] batman_adv: batadv0: The MTU of interface macvtap41 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.531542][ T6762] batman_adv: batadv0: Not using interface macvtap41 (retrying later): interface not active [ 59.555109][ T6762] batman_adv: batadv0: Adding interface: macvtap42 [ 59.555118][ T6762] batman_adv: batadv0: The MTU of interface macvtap42 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.555140][ T6762] batman_adv: batadv0: Not using interface macvtap42 (retrying later): interface not active [ 59.562431][ T6762] batman_adv: batadv0: Adding interface: macvtap43 [ 59.562440][ T6762] batman_adv: batadv0: The MTU of interface macvtap43 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.562458][ T6762] batman_adv: batadv0: Not using interface macvtap43 (retrying later): interface not active [ 59.566903][ T4903] usb 1-1: device descriptor read/64, error -71 [ 59.575960][ T6762] batman_adv: batadv0: Adding interface: macvtap44 [ 59.576005][ T6762] batman_adv: batadv0: The MTU of interface macvtap44 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.576027][ T6762] batman_adv: batadv0: Not using interface macvtap44 (retrying later): interface not active [ 59.579478][ T6762] batman_adv: batadv0: Adding interface: macvtap45 [ 59.579524][ T6762] batman_adv: batadv0: The MTU of interface macvtap45 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.579541][ T6762] batman_adv: batadv0: Not using interface macvtap45 (retrying later): interface not active [ 59.584696][ T6762] batman_adv: batadv0: Adding interface: macvtap46 [ 59.584704][ T6762] batman_adv: batadv0: The MTU of interface macvtap46 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.584736][ T6762] batman_adv: batadv0: Not using interface macvtap46 (retrying later): interface not active [ 59.588526][ T6762] batman_adv: batadv0: Adding interface: macvtap47 [ 59.588533][ T6762] batman_adv: batadv0: The MTU of interface macvtap47 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.588549][ T6762] batman_adv: batadv0: Not using interface macvtap47 (retrying later): interface not active [ 59.589238][ T6809] rxe_eth0 speed is unknown, defaulting to 1000 [ 59.596834][ T6762] batman_adv: batadv0: Adding interface: macvtap48 [ 59.596845][ T6762] batman_adv: batadv0: The MTU of interface macvtap48 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.596865][ T6762] batman_adv: batadv0: Not using interface macvtap48 (retrying later): interface not active [ 59.614404][ T6762] batman_adv: batadv0: Adding interface: macvtap49 [ 59.614414][ T6762] batman_adv: batadv0: The MTU of interface macvtap49 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.614472][ T6762] batman_adv: batadv0: Not using interface macvtap49 (retrying later): interface not active [ 59.625863][ T6762] batman_adv: batadv0: Adding interface: macvtap50 [ 59.625871][ T6762] batman_adv: batadv0: The MTU of interface macvtap50 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.625890][ T6762] batman_adv: batadv0: Not using interface macvtap50 (retrying later): interface not active [ 59.642899][ T6762] batman_adv: batadv0: Adding interface: macvtap51 [ 59.642911][ T6762] batman_adv: batadv0: The MTU of interface macvtap51 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.642934][ T6762] batman_adv: batadv0: Not using interface macvtap51 (retrying later): interface not active [ 59.659212][ T6762] batman_adv: batadv0: Adding interface: macvtap52 [ 59.659223][ T6762] batman_adv: batadv0: The MTU of interface macvtap52 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.659246][ T6762] batman_adv: batadv0: Not using interface macvtap52 (retrying later): interface not active [ 59.676199][ T6762] batman_adv: batadv0: Adding interface: macvtap53 [ 59.676208][ T6762] batman_adv: batadv0: The MTU of interface macvtap53 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.676231][ T6762] batman_adv: batadv0: Not using interface macvtap53 (retrying later): interface not active [ 59.799864][ T6825] loop1: detected capacity change from 0 to 512 [ 59.806846][ T4903] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 59.937271][ T4903] usb 1-1: device descriptor read/64, error -71 [ 60.047012][ T4903] usb usb1-port1: attempt power cycle [ 60.101041][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.479'. [ 60.130300][ T6861] FAULT_INJECTION: forcing a failure. [ 60.130300][ T6861] name failslab, interval 1, probability 0, space 0, times 0 [ 60.130323][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.4.481 Tainted: G L syzkaller #0 PREEMPT [ 60.130336][ T6861] Tainted: [L]=SOFTLOCKUP [ 60.130340][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.130345][ T6861] Call trace: [ 60.130348][ T6861] show_stack+0x2c/0x3c (C) [ 60.130363][ T6861] __dump_stack+0x30/0x40 [ 60.130372][ T6861] dump_stack_lvl+0xd8/0x12c [ 60.130380][ T6861] dump_stack+0x1c/0x28 [ 60.130388][ T6861] should_fail_ex+0x418/0x58c [ 60.130399][ T6861] should_failslab+0xc4/0x120 [ 60.130409][ T6861] __kmalloc_cache_noprof+0x94/0x5fc [ 60.130419][ T6861] shmem_init_fs_context+0x5c/0x260 [ 60.130428][ T6861] devtmpfs_init_fs_context+0x20/0x80 [ 60.130441][ T6861] alloc_fs_context+0x7d8/0xba4 [ 60.130452][ T6861] fs_context_for_mount+0x34/0x44 [ 60.130462][ T6861] __arm64_sys_fsopen+0xe8/0x1a4 [ 60.130473][ T6861] invoke_syscall+0x98/0x244 [ 60.130482][ T6861] el0_svc_common+0xec/0x23c [ 60.130491][ T6861] do_el0_svc+0x4c/0x5c [ 60.130499][ T6861] el0_svc+0x60/0x1d8 [ 60.130507][ T6861] el0t_64_sync_handler+0x44/0x104 [ 60.130515][ T6861] el0t_64_sync+0x198/0x19c [ 60.136256][ T6861] FAULT_INJECTION: forcing a failure. [ 60.136256][ T6861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.136271][ T6861] CPU: 1 UID: 0 PID: 6861 Comm: syz.4.481 Tainted: G L syzkaller #0 PREEMPT [ 60.136282][ T6861] Tainted: [L]=SOFTLOCKUP [ 60.136285][ T6861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.136290][ T6861] Call trace: [ 60.136293][ T6861] show_stack+0x2c/0x3c (C) [ 60.136304][ T6861] __dump_stack+0x30/0x40 [ 60.136313][ T6861] dump_stack_lvl+0xd8/0x12c [ 60.136321][ T6861] dump_stack+0x1c/0x28 [ 60.136329][ T6861] should_fail_ex+0x418/0x58c [ 60.136340][ T6861] should_fail_alloc_page+0xec/0x10c [ 60.136351][ T6861] prepare_alloc_pages+0x194/0x484 [ 60.136362][ T6861] __alloc_frozen_pages_noprof+0x180/0x578 [ 60.136373][ T6861] alloc_pages_mpol+0x1fc/0x3d0 [ 60.136384][ T6861] folio_alloc_mpol_noprof+0x4c/0x248 [ 60.136396][ T6861] vma_alloc_folio_noprof+0x100/0x1dc [ 60.136407][ T6861] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 60.136421][ T6861] folio_prealloc+0x3c/0x1b0 [ 60.136431][ T6861] do_pte_missing+0x1bd0/0x28bc [ 60.136441][ T6861] handle_mm_fault+0x14d0/0x2b58 [ 60.136450][ T6861] do_page_fault+0x78c/0xba4 [ 60.136462][ T6861] do_translation_fault+0xc4/0x114 [ 60.136475][ T6861] do_mem_abort+0x70/0x194 [ 60.136487][ T6861] el0_da+0x78/0x1d4 [ 60.136495][ T6861] el0t_64_sync_handler+0xd8/0x104 [ 60.136503][ T6861] el0t_64_sync+0x198/0x19c [ 60.136545][ T6861] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 60.163306][ T6859] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.387219][ T4903] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 60.434741][ T4903] usb 1-1: device descriptor read/8, error -71 [ 60.467213][ T6882] loop1: detected capacity change from 0 to 512 [ 60.467554][ T6882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.494328][ T6886] netlink: 44 bytes leftover after parsing attributes in process `syz.5.486'. [ 60.577224][ T6892] netlink: zone id is out of range [ 60.577239][ T6892] netlink: zone id is out of range [ 60.577247][ T6892] netlink: zone id is out of range [ 60.577255][ T6892] netlink: zone id is out of range [ 60.577260][ T6892] netlink: zone id is out of range [ 60.577265][ T6892] netlink: zone id is out of range [ 60.577269][ T6892] netlink: zone id is out of range [ 60.577273][ T6892] netlink: zone id is out of range [ 60.577283][ T6892] netlink: zone id is out of range [ 60.643031][ T6892] loop5: detected capacity change from 0 to 512 [ 60.666908][ T4903] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 60.935056][ T4903] usb 1-1: device descriptor read/8, error -71 [ 60.935371][ T6898] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.935385][ T6898] block device autoloading is deprecated and will be removed. [ 61.015791][ T6901] binder: BINDER_SET_CONTEXT_MGR already set [ 61.015801][ T6901] binder: 6900:6901 ioctl 4018620d 20000540 returned -16 [ 61.015985][ T6901] binder: 6900:6901 got transaction to invalid handle, 1 [ 61.015995][ T6901] binder: 6900:6901 cannot find target node [ 61.037457][ T4903] usb usb1-port1: unable to enumerate USB device [ 61.118405][ T6915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.493'. [ 61.122841][ T6915] fuse: Bad value for 'fd' [ 61.207408][ T6917] Injecting memory failure for pfn 0x11e944 at process virtual address 0x20001000 [ 61.213736][ T6917] Memory failure: 0x11e944: keeping poisoned page in swap cache [ 61.213859][ T6917] Memory failure: 0x11e944: Sending SIGBUS to syz.3.469:6917 due to hardware memory corruption [ 61.213927][ T6917] Memory failure: 0x11e944: recovery action for dirty swapcache page: Delayed [ 61.213956][ T6917] Injecting memory failure for pfn 0x11e945 at process virtual address 0x20002000 [ 61.213986][ T6917] Memory failure: 0x11e945: keeping poisoned page in swap cache [ 61.213997][ T6917] Memory failure: 0x11e945: Sending SIGBUS to syz.3.469:6917 due to hardware memory corruption [ 61.214014][ T6917] Memory failure: 0x11e945: recovery action for dirty swapcache page: Delayed [ 61.214030][ T6917] Injecting memory failure for pfn 0x11e946 at process virtual address 0x20003000 [ 61.214055][ T6917] Memory failure: 0x11e946: keeping poisoned page in swap cache [ 61.214064][ T6917] Memory failure: 0x11e946: Sending SIGBUS to syz.3.469:6917 due to hardware memory corruption [ 61.214080][ T6917] Memory failure: 0x11e946: recovery action for dirty swapcache page: Delayed [ 61.395458][ T6919] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.458929][ T6925] netlink: 'syz.1.495': attribute type 12 has an invalid length. [ 61.458945][ T6925] netlink: 'syz.1.495': attribute type 29 has an invalid length. [ 61.458953][ T6925] netlink: 148 bytes leftover after parsing attributes in process `syz.1.495'. [ 61.458963][ T6925] netlink: 59 bytes leftover after parsing attributes in process `syz.1.495'. [ 61.508996][ T6927] binder: Binderfs stats mode cannot be changed during a remount [ 61.791926][ T6950] cgroup: Invalid name [ 61.798763][ T6952] binder: BINDER_SET_CONTEXT_MGR already set [ 61.798771][ T6952] binder: 6951:6952 ioctl 4018620d 20000540 returned -16 [ 61.799022][ T6952] binder: 6951:6952 got transaction to invalid handle, 1 [ 61.879963][ T6960] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.123371][ T6967] bonding: b is being created... [ 62.233678][ T6973] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.650657][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 62.673013][ T7003] fuse: Unknown parameter '€F' [ 62.810617][ T7020] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.127300][ T4742] Bluetooth: hci0: command 0x2016 tx timeout [ 63.802004][ T7091] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 63.835282][ T7099] net_ratelimit: 39 callbacks suppressed [ 63.835294][ T7099] macsec0: mtu greater than device maximum [ 63.876555][ T7110] veth2: entered allmulticast mode [ 63.981684][ T7110] trusted_key: encrypted_key: insufficient parameters specified [ 63.981886][ T7110] trusted_key: encrypted_key: insufficient parameters specified [ 64.091972][ T6910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.096869][ T6910] FAULT_INJECTION: forcing a failure. [ 64.096869][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 64.096893][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.5.492 Tainted: G L syzkaller #0 PREEMPT [ 64.096909][ T6910] Tainted: [L]=SOFTLOCKUP [ 64.096912][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.096918][ T6910] Call trace: [ 64.096922][ T6910] show_stack+0x2c/0x3c (C) [ 64.096939][ T6910] __dump_stack+0x30/0x40 [ 64.096948][ T6910] dump_stack_lvl+0xd8/0x12c [ 64.096957][ T6910] dump_stack+0x1c/0x28 [ 64.096965][ T6910] should_fail_ex+0x418/0x58c [ 64.096976][ T6910] should_failslab+0xc4/0x120 [ 64.096986][ T6910] __kmalloc_cache_noprof+0x94/0x5fc [ 64.096996][ T6910] nfc_genl_rcv_nl_event+0xa4/0x2bc [ 64.097009][ T6910] notifier_call_chain+0x1a4/0x4cc [ 64.097022][ T6910] blocking_notifier_call_chain+0x70/0xa0 [ 64.097030][ T6910] netlink_release+0xf74/0x182c [ 64.097043][ T6910] __sock_release+0xa0/0x1d4 [ 64.097054][ T6910] sock_close+0x24/0x38 [ 64.097065][ T6910] __fput+0x338/0x74c [ 64.097076][ T6910] ____fput+0x20/0x30 [ 64.097085][ T6910] task_work_run+0x1cc/0x25c [ 64.097094][ T6910] get_signal+0xf30/0x1094 [ 64.097104][ T6910] arch_do_signal_or_restart+0x288/0x444c [ 64.097113][ T6910] exit_to_user_mode_loop+0x70/0x17c [ 64.097126][ T6910] el0_svc+0x12c/0x1d8 [ 64.097134][ T6910] el0t_64_sync_handler+0x44/0x104 [ 64.097142][ T6910] el0t_64_sync+0x198/0x19c [ 64.203669][ T7132] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.265126][ T7137] binder: 7135:7137 Acquire 1 refcount change on invalid ref 0 ret -22 [ 64.265150][ T7137] binder: 7135:7137 ioctl c0306201 20000480 returned -14 [ 64.266201][ T7137] binder: 7135:7137 ioctl c0306201 20000700 returned -14 [ 64.266291][ T7137] binder: 7135:7137 got transaction to invalid handle, 1 [ 64.266300][ T7137] binder_debug: 5 callbacks suppressed [ 64.266305][ T7137] binder: 7135:7137 cannot find target node [ 64.266316][ T7137] binder: 7135:7137 transaction call to 0:0 failed 46/29201/-22, code 0 size 104-24 line 3253 [ 64.266516][ T4843] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.298838][ T7143] tmpfs: Bad value for 'mpol' [ 64.341607][ T7147] tipc: Started in network mode [ 64.341628][ T7147] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 64.342132][ T7147] tipc: Enabled bearer , priority 10 [ 64.365775][ T7158] loop5: detected capacity change from 0 to 256 [ 64.366111][ T7158] vfat: Unknown parameter 'ufi_xlate' [ 64.377208][ T7158] loop5: detected capacity change from 0 to 256 [ 64.377415][ T7158] vfat: Unknown parameter 'ufi_xlate' [ 64.385535][ T7158] loop5: detected capacity change from 0 to 256 [ 64.386052][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.386139][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.406663][ T7158] loop5: detected capacity change from 0 to 256 [ 64.413831][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.413905][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.433273][ T7158] loop5: detected capacity change from 0 to 256 [ 64.433496][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.433560][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.440646][ T7158] loop5: detected capacity change from 0 to 256 [ 64.442584][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.443468][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.480396][ T7158] loop5: detected capacity change from 0 to 256 [ 64.480555][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.481129][ T7158] overlayfs: failed lookup in lower (newroot/47, name='file0', err=-40): overlapping layers [ 64.485191][ T7158] loop5: detected capacity change from 0 to 256 [ 64.496318][ T1611] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.496351][ T1611] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500357][ T875] cfg80211: failed to load regulatory.db [ 64.530952][ T7158] loop5: detected capacity change from 0 to 256 [ 64.536377][ T7158] loop5: detected capacity change from 0 to 256 [ 64.560802][ T7177] fuse: Bad value for 'fd' [ 64.564692][ T7177] overlayfs: failed to clone upperpath [ 64.598778][ T7177] fuse: Bad value for 'fd' [ 64.691204][ T7182] lo speed is unknown, defaulting to 1000 [ 64.691231][ T7182] lo speed is unknown, defaulting to 1000 [ 64.735416][ T7182] lo speed is unknown, defaulting to 1000 [ 64.736562][ T7182] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 64.778854][ T7182] lo speed is unknown, defaulting to 1000 [ 64.779292][ T7182] lo speed is unknown, defaulting to 1000 [ 64.779654][ T7182] lo speed is unknown, defaulting to 1000 [ 64.780133][ T7182] lo speed is unknown, defaulting to 1000 [ 64.780478][ T7182] lo speed is unknown, defaulting to 1000 [ 64.924691][ T7198] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.958438][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.556'. [ 64.958496][ T7210] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 65.017757][ T7198] lo speed is unknown, defaulting to 1000 [ 65.059783][ T7234] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 65.199167][ T7255] netlink: 14 bytes leftover after parsing attributes in process `syz.4.558'. [ 65.200562][ T7255] batman_adv: batadv0: Removing interface: dummy0 [ 65.207022][ T4741] Bluetooth: hci0: command 0x2016 tx timeout [ 65.223164][ T7257] ip_tables: iptables: counters copy to user failed while replacing table [ 65.269502][ T7259] ext4: Bad value for 'max_batch_time' [ 65.273753][ T7257] ip_tables: iptables: counters copy to user failed while replacing table [ 65.285340][ T7262] fuse: Unknown parameter '‡d' [ 65.452357][ T7276] EXT4-fs: Ignoring removed bh option [ 65.457895][ T4843] tipc: Node number set to 4269801488 [ 65.522738][ T7276] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.563: corrupted in-inode xattr: e_value size too large [ 65.522761][ T7276] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 65.522956][ T7276] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.563: couldn't read orphan inode 15 (err -117) [ 65.522969][ T7276] loop5: lost filesystem error report for type 5 error -117 [ 65.523509][ T7276] EXT4-fs mount: 10 callbacks suppressed [ 65.523518][ T7276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.575106][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.611013][ T7284] binder: 7283:7284 Acquire 1 refcount change on invalid ref 0 ret -22 [ 65.611036][ T7284] binder: 7283:7284 ioctl c0306201 20000480 returned -14 [ 65.631002][ T7280] EXT4-fs: Ignoring removed orlov option [ 65.631033][ T7280] EXT4-fs: Ignoring removed oldalloc option [ 65.648430][ T7284] binder: 7283:7284 ioctl c0306201 20000700 returned -14 [ 65.679487][ T7280] EXT4-fs (loop0): failed to initialize system zone (-117) [ 65.679582][ T7280] EXT4-fs (loop0): mount failed [ 66.088465][ T7289] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.241514][ T7289] lo speed is unknown, defaulting to 1000 [ 66.262489][ T7305] could not allocate digest TFM handle hmac(sha256-ce) [ 66.725178][ T7327] fuse: Unknown parameter '‡d' [ 66.745344][ T7327] FAULT_INJECTION: forcing a failure. [ 66.745344][ T7327] name failslab, interval 1, probability 0, space 0, times 0 [ 66.745362][ T7327] CPU: 0 UID: 0 PID: 7327 Comm: syz.0.577 Tainted: G L syzkaller #0 PREEMPT [ 66.745373][ T7327] Tainted: [L]=SOFTLOCKUP [ 66.745377][ T7327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.745382][ T7327] Call trace: [ 66.745385][ T7327] show_stack+0x2c/0x3c (C) [ 66.745399][ T7327] __dump_stack+0x30/0x40 [ 66.745408][ T7327] dump_stack_lvl+0xd8/0x12c [ 66.745416][ T7327] dump_stack+0x1c/0x28 [ 66.745424][ T7327] should_fail_ex+0x418/0x58c [ 66.745434][ T7327] should_failslab+0xc4/0x120 [ 66.745445][ T7327] __kmalloc_cache_noprof+0x94/0x5fc [ 66.745455][ T7327] bpf_is_state_visited+0x2394/0x2bbc [ 66.745467][ T7327] do_check_common+0x1800/0x367c [ 66.745478][ T7327] do_check_main+0x94/0x1b8 [ 66.745486][ T7327] bpf_check+0x1e00/0x2414 [ 66.745495][ T7327] bpf_prog_load+0xf4c/0x1554 [ 66.745506][ T7327] __sys_bpf+0x7d4/0x82c [ 66.745516][ T7327] __arm64_sys_bpf+0xd0/0xec [ 66.745527][ T7327] invoke_syscall+0x98/0x244 [ 66.745536][ T7327] el0_svc_common+0xec/0x23c [ 66.745544][ T7327] do_el0_svc+0x4c/0x5c [ 66.745552][ T7327] el0_svc+0x60/0x1d8 [ 66.745560][ T7327] el0t_64_sync_handler+0x44/0x104 [ 66.745568][ T7327] el0t_64_sync+0x198/0x19c [ 66.995873][ T4742] Bluetooth: Frame is too long (len 10, expected len 4) [ 67.021109][ T4742] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 67.026371][ T7343] netlink: 52 bytes leftover after parsing attributes in process `syz.3.583'. [ 67.188404][ T7362] gretap1: entered promiscuous mode [ 67.993565][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.598'. [ 68.050268][ T7407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 68.466492][ T7407] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 68.612936][ T7420] fuse: Unknown parameter '‡d' [ 68.616414][ T7420] FAULT_INJECTION: forcing a failure. [ 68.616414][ T7420] name failslab, interval 1, probability 0, space 0, times 0 [ 68.616431][ T7420] CPU: 0 UID: 0 PID: 7420 Comm: syz.5.599 Tainted: G L syzkaller #0 PREEMPT [ 68.616442][ T7420] Tainted: [L]=SOFTLOCKUP [ 68.616446][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.616451][ T7420] Call trace: [ 68.616454][ T7420] show_stack+0x2c/0x3c (C) [ 68.616470][ T7420] __dump_stack+0x30/0x40 [ 68.616478][ T7420] dump_stack_lvl+0xd8/0x12c [ 68.616487][ T7420] dump_stack+0x1c/0x28 [ 68.616494][ T7420] should_fail_ex+0x418/0x58c [ 68.616505][ T7420] should_failslab+0xc4/0x120 [ 68.616515][ T7420] __kmalloc_cache_noprof+0x94/0x5fc [ 68.616526][ T7420] bpf_is_state_visited+0x2394/0x2bbc [ 68.616537][ T7420] do_check_common+0x1800/0x367c [ 68.616548][ T7420] do_check_main+0x94/0x1b8 [ 68.616556][ T7420] bpf_check+0x1e00/0x2414 [ 68.616565][ T7420] bpf_prog_load+0xf4c/0x1554 [ 68.616582][ T7420] __sys_bpf+0x7d4/0x82c [ 68.616595][ T7420] __arm64_sys_bpf+0xd0/0xec [ 68.616606][ T7420] invoke_syscall+0x98/0x244 [ 68.616615][ T7420] el0_svc_common+0xec/0x23c [ 68.616623][ T7420] do_el0_svc+0x4c/0x5c [ 68.616631][ T7420] el0_svc+0x60/0x1d8 [ 68.616640][ T7420] el0t_64_sync_handler+0x44/0x104 [ 68.616648][ T7420] el0t_64_sync+0x198/0x19c [ 68.911072][ T7431] FAULT_INJECTION: forcing a failure. [ 68.911072][ T7431] name failslab, interval 1, probability 0, space 0, times 0 [ 68.911096][ T7431] CPU: 0 UID: 0 PID: 7431 Comm: syz.0.606 Tainted: G L syzkaller #0 PREEMPT [ 68.911112][ T7431] Tainted: [L]=SOFTLOCKUP [ 68.911116][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.911122][ T7431] Call trace: [ 68.911125][ T7431] show_stack+0x2c/0x3c (C) [ 68.911141][ T7431] __dump_stack+0x30/0x40 [ 68.911151][ T7431] dump_stack_lvl+0xd8/0x12c [ 68.911159][ T7431] dump_stack+0x1c/0x28 [ 68.911167][ T7431] should_fail_ex+0x418/0x58c [ 68.911180][ T7431] should_failslab+0xc4/0x120 [ 68.911191][ T7431] __kmalloc_cache_noprof+0x94/0x5fc [ 68.911204][ T7431] igmp6_group_dropped+0x3b8/0xc08 [ 68.911215][ T7431] __ipv6_dev_mc_dec+0x280/0x360 [ 68.911223][ T7431] addrconf_leave_solict+0x104/0x190 [ 68.911233][ T7431] __ipv6_dev_ac_dec+0x3ec/0x4b8 [ 68.911244][ T7431] ipv6_dev_ac_dec+0x38/0xe8 [ 68.911254][ T7431] __ipv6_sock_ac_close+0x1dc/0x358 [ 68.911265][ T7431] ipv6_sock_ac_close+0xd4/0x118 [ 68.911276][ T7431] inet6_release+0x54/0x78 [ 68.911286][ T7431] __sock_release+0xa0/0x1d4 [ 68.911297][ T7431] sock_close+0x24/0x38 [ 68.911309][ T7431] __fput+0x338/0x74c [ 68.911320][ T7431] fput_close_sync+0x10c/0x278 [ 68.911331][ T7431] __arm64_sys_close+0x80/0x110 [ 68.911340][ T7431] invoke_syscall+0x98/0x244 [ 68.911349][ T7431] el0_svc_common+0xec/0x23c [ 68.911357][ T7431] do_el0_svc+0x4c/0x5c [ 68.911365][ T7431] el0_svc+0x60/0x1d8 [ 68.911374][ T7431] el0t_64_sync_handler+0x44/0x104 [ 68.911382][ T7431] el0t_64_sync+0x198/0x19c [ 69.106327][ T7442] EXT4-fs: Ignoring removed orlov option [ 69.106359][ T7442] EXT4-fs: Ignoring removed oldalloc option [ 69.172187][ T7442] EXT4-fs (loop0): failed to initialize system zone (-117) [ 69.172242][ T7442] EXT4-fs (loop0): mount failed [ 69.186558][ T7438] ext4: Unknown parameter 'fsuuid' [ 69.194388][ T4742] Bluetooth: hci4: unexpected event for opcode 0x0c46 [ 69.795170][ T7458] trusted_key: encrypted_key: insufficient parameters specified [ 69.808257][ T7458] netlink: 2 bytes leftover after parsing attributes in process `syz.5.612'. [ 69.819756][ T4742] block nbd0: Receive control failed (result -32) [ 69.865711][ T7461] netlink: 60 bytes leftover after parsing attributes in process `syz.5.613'. [ 70.316407][ T7479] gretap1: entered promiscuous mode [ 70.596086][ T7485] fuse: Unknown parameter '‡d' [ 70.622050][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.620'. [ 70.637404][ T7487] bond1: entered promiscuous mode [ 70.637553][ T7487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.265543][ T7505] netlink: 60 bytes leftover after parsing attributes in process `syz.0.626'. [ 71.273969][ T7505] netlink: 60 bytes leftover after parsing attributes in process `syz.0.626'. [ 71.280496][ T7505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.938997][ T7516] xt_hashlimit: max too large, truncated to 1048576 [ 71.941792][ T7516] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 72.229125][ T7528] netlink: 96 bytes leftover after parsing attributes in process `syz.1.633'. [ 72.386510][ T7531] gre1: entered promiscuous mode [ 72.452090][ T7528] vlan0: entered allmulticast mode [ 72.452112][ T7528] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 72.563906][ T7540] netlink: 64 bytes leftover after parsing attributes in process `syz.4.635'. [ 72.804069][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.638'. [ 72.936323][ T7561] xt_hashlimit: max too large, truncated to 1048576 [ 72.945359][ T7561] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 73.613734][ T7594] bond1: option primary_reselect: invalid value (21) [ 73.625344][ T7594] bond1 (unregistering): Released all slaves [ 74.011587][ T7611] set_capacity_and_notify: 25 callbacks suppressed [ 74.011602][ T7611] loop5: detected capacity change from 0 to 512 [ 74.024811][ T7611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.098159][ T7618] __nla_validate_parse: 1 callbacks suppressed [ 74.098176][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.650'. [ 74.099701][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.208356][ T7621] xt_hashlimit: max too large, truncated to 1048576 [ 74.208528][ T7621] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 74.299154][ T7625] overlayfs: failed to clone upperpath [ 75.279770][ T7629] loop0: detected capacity change from 0 to 8 [ 75.399975][ T7628] SQUASHFS error: Unable to read directory block [631:26] [ 75.499659][ T4741] Bluetooth: hci4: unexpected event for opcode 0x0c7c [ 75.557492][ T7632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.557670][ T7632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.840914][ T7632] netlink: 'syz.5.651': attribute type 39 has an invalid length. [ 76.373566][ T7648] loop0: detected capacity change from 0 to 512 [ 76.385306][ T7648] EXT4-fs: Ignoring removed orlov option [ 76.385335][ T7648] EXT4-fs: Ignoring removed oldalloc option [ 76.394134][ T7648] EXT4-fs (loop0): failed to initialize system zone (-117) [ 76.394186][ T7648] EXT4-fs (loop0): mount failed [ 77.156737][ C1] sched: DL replenish lagged too much [ 77.508509][ T7676] xt_hashlimit: max too large, truncated to 1048576 [ 77.515522][ T7676] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 77.638096][ T7681] fuseblk: block size(4608) > page size(4096) not supported by filesystem [ 77.705880][ T7686] overlay: Unknown parameter 'subj_role' [ 78.244926][ T7720] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 78.244944][ T7720] netlink: 224 bytes leftover after parsing attributes in process `syz.4.674'. [ 78.272173][ T7722] FAULT_INJECTION: forcing a failure. [ 78.272173][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 78.272192][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.5.675 Tainted: G L syzkaller #0 PREEMPT [ 78.272204][ T7722] Tainted: [L]=SOFTLOCKUP [ 78.272208][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 78.272213][ T7722] Call trace: [ 78.272216][ T7722] show_stack+0x2c/0x3c (C) [ 78.272232][ T7722] __dump_stack+0x30/0x40 [ 78.272241][ T7722] dump_stack_lvl+0xd8/0x12c [ 78.272249][ T7722] dump_stack+0x1c/0x28 [ 78.272257][ T7722] should_fail_ex+0x418/0x58c [ 78.272268][ T7722] should_failslab+0xc4/0x120 [ 78.272278][ T7722] kmem_cache_alloc_noprof+0x94/0x5d4 [ 78.272288][ T7722] sk_prot_alloc+0x60/0x1e8 [ 78.272298][ T7722] sk_alloc+0x44/0x320 [ 78.272307][ T7722] unix_create1+0xcc/0x5b0 [ 78.272319][ T7722] unix_stream_connect+0x25c/0xca0 [ 78.272331][ T7722] kernel_connect+0x12c/0x1a0 [ 78.272343][ T7722] xs_local_connect+0x50c/0x714 [ 78.272356][ T7722] xprt_connect+0x418/0x6d0 [ 78.272365][ T7722] call_connect+0x168/0x204 [ 78.272374][ T7722] __rpc_execute+0x400/0x14cc [ 78.272385][ T7722] rpc_execute+0x1d4/0x508 [ 78.272396][ T7722] rpc_run_task+0x3f8/0x5ec [ 78.272408][ T7722] rpc_create_xprt+0x30c/0x6e0 [ 78.272419][ T7722] rpc_create+0x4dc/0x734 [ 78.272430][ T7722] set_gssp_clnt+0x134/0x238 [ 78.272442][ T7722] write_gssp+0x348/0x40c [ 78.272454][ T7722] proc_reg_write+0x1cc/0x244 [ 78.272465][ T7722] vfs_write+0x2a4/0xa0c [ 78.272474][ T7722] ksys_write+0x12c/0x228 [ 78.272483][ T7722] __arm64_sys_write+0x84/0x98 [ 78.272492][ T7722] invoke_syscall+0x98/0x244 [ 78.272501][ T7722] el0_svc_common+0xec/0x23c [ 78.272509][ T7722] do_el0_svc+0x4c/0x5c [ 78.272517][ T7722] el0_svc+0x60/0x1d8 [ 78.272526][ T7722] el0t_64_sync_handler+0x44/0x104 [ 78.272534][ T7722] el0t_64_sync+0x198/0x19c [ 78.272544][ T7722] xs_local_setup_socket: unhandled error (12) connecting to /var/run/gssproxy.sock [ 78.613861][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 78.613890][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 78.613906][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 78.613920][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 78.613934][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 78.613948][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 78.613960][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 78.613972][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 78.670062][ T7732] loop0: detected capacity change from 0 to 512 [ 78.674940][ T7732] EXT4-fs: Ignoring removed orlov option [ 78.674968][ T7732] EXT4-fs: Ignoring removed oldalloc option [ 78.688258][ T7732] EXT4-fs (loop0): failed to initialize system zone (-117) [ 78.688304][ T7732] EXT4-fs (loop0): mount failed [ 78.734841][ T7735] xt_hashlimit: max too large, truncated to 1048576 [ 78.744484][ T7735] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.806171][ T7740] netlink: 'syz.1.680': attribute type 10 has an invalid length. [ 78.818306][ T7740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.826548][ T7740] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 78.879903][ T7746] netlink: 'syz.1.680': attribute type 2 has an invalid length. [ 78.949346][ T7749] loop5: detected capacity change from 0 to 256 [ 78.954612][ T7749] vfat: Unknown parameter 'shortnamehortname' [ 79.684548][ T7759] 9p: Bad value for 'rfdno' [ 79.949775][ T7761] __nla_validate_parse: 48 callbacks suppressed [ 79.949789][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.685'. [ 80.037894][ T7771] vhci_hcd vhci_hcd.2: invalid port number 96 [ 80.037911][ T7771] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 80.041479][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.041777][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.045876][ T7773] bridge0: entered allmulticast mode [ 80.087165][ T7773] bridge_slave_1: left allmulticast mode [ 80.087193][ T7773] bridge_slave_1: left promiscuous mode [ 80.087707][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.129732][ T7773] bridge_slave_0: left allmulticast mode [ 80.129753][ T7773] bridge_slave_0: left promiscuous mode [ 80.130221][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.130911][ T7771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 80.182246][ T7781] fuse: Unknown parameter '‡d' [ 80.208562][ T7781] FAULT_INJECTION: forcing a failure. [ 80.208562][ T7781] name failslab, interval 1, probability 0, space 0, times 0 [ 80.208589][ T7781] CPU: 0 UID: 0 PID: 7781 Comm: syz.4.691 Tainted: G L syzkaller #0 PREEMPT [ 80.208602][ T7781] Tainted: [L]=SOFTLOCKUP [ 80.208606][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 80.208612][ T7781] Call trace: [ 80.208617][ T7781] show_stack+0x2c/0x3c (C) [ 80.208635][ T7781] __dump_stack+0x30/0x40 [ 80.208646][ T7781] dump_stack_lvl+0xd8/0x12c [ 80.208655][ T7781] dump_stack+0x1c/0x28 [ 80.208663][ T7781] should_fail_ex+0x418/0x58c [ 80.208676][ T7781] should_failslab+0xc4/0x120 [ 80.208688][ T7781] __kmalloc_cache_noprof+0x94/0x5fc [ 80.208700][ T7781] bpf_is_state_visited+0x2394/0x2bbc [ 80.208713][ T7781] do_check_common+0x1800/0x367c [ 80.208724][ T7781] do_check_main+0x94/0x1b8 [ 80.208733][ T7781] bpf_check+0x1e00/0x2414 [ 80.208741][ T7781] bpf_prog_load+0xf4c/0x1554 [ 80.208753][ T7781] __sys_bpf+0x7d4/0x82c [ 80.208763][ T7781] __arm64_sys_bpf+0xd0/0xec [ 80.208774][ T7781] invoke_syscall+0x98/0x244 [ 80.208783][ T7781] el0_svc_common+0xec/0x23c [ 80.208791][ T7781] do_el0_svc+0x4c/0x5c [ 80.208799][ T7781] el0_svc+0x60/0x1d8 [ 80.208808][ T7781] el0t_64_sync_handler+0x44/0x104 [ 80.208816][ T7781] el0t_64_sync+0x198/0x19c [ 80.255258][ T7776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.685'. [ 80.312483][ T7783] xt_hashlimit: max too large, truncated to 1048576 [ 80.312840][ T7783] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.170488][ T7791] binder: 7790:7791 Acquire 1 refcount change on invalid ref 0 ret -22 [ 81.170521][ T7791] binder: 7790:7791 ioctl c0306201 20000480 returned -14 [ 81.184615][ T7791] binder: 7790:7791 ioctl c0306201 20000700 returned -14 [ 81.284710][ T7797] loop0: detected capacity change from 0 to 512 [ 81.293805][ T7797] EXT4-fs: Ignoring removed orlov option [ 81.293833][ T7797] EXT4-fs: Ignoring removed oldalloc option [ 81.299780][ T7797] EXT4-fs (loop0): failed to initialize system zone (-117) [ 81.299827][ T7797] EXT4-fs (loop0): mount failed [ 81.887473][ T7816] FAULT_INJECTION: forcing a failure. [ 81.887473][ T7816] name fail_futex, interval 1, probability 0, space 0, times 0 [ 81.887499][ T7816] CPU: 0 UID: 0 PID: 7816 Comm: syz.5.701 Tainted: G L syzkaller #0 PREEMPT [ 81.887512][ T7816] Tainted: [L]=SOFTLOCKUP [ 81.887515][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 81.887521][ T7816] Call trace: [ 81.887524][ T7816] show_stack+0x2c/0x3c (C) [ 81.887540][ T7816] __dump_stack+0x30/0x40 [ 81.887549][ T7816] dump_stack_lvl+0xd8/0x12c [ 81.887557][ T7816] dump_stack+0x1c/0x28 [ 81.887565][ T7816] should_fail_ex+0x418/0x58c [ 81.887580][ T7816] should_fail+0x14/0x24 [ 81.887589][ T7816] get_futex_key+0x1ec/0x12b0 [ 81.887602][ T7816] futex_wake+0x10c/0x594 [ 81.887610][ T7816] do_futex+0x2c4/0x378 [ 81.887622][ T7816] __arm64_sys_futex+0x2e4/0x418 [ 81.887634][ T7816] invoke_syscall+0x98/0x244 [ 81.887643][ T7816] el0_svc_common+0xec/0x23c [ 81.887651][ T7816] do_el0_svc+0x4c/0x5c [ 81.887659][ T7816] el0_svc+0x60/0x1d8 [ 81.887668][ T7816] el0t_64_sync_handler+0x44/0x104 [ 81.887676][ T7816] el0t_64_sync+0x198/0x19c [ 81.991193][ T7817] random: crng reseeded on system resumption [ 82.182175][ T7837] overlayfs: failed to clone upperpath [ 82.321115][ T7852] netlink: 'syz.5.711': attribute type 2 has an invalid length. [ 82.352361][ T7847] xt_hashlimit: max too large, truncated to 1048576 [ 82.476927][ T7857] loop5: detected capacity change from 0 to 1024 [ 82.989824][ T7857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.344806][ T7880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.716'. [ 83.377206][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.712'. [ 83.657135][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.674989][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.690507][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.084858][ T7917] fuse: Unknown parameter '‡d' [ 84.094260][ T7917] FAULT_INJECTION: forcing a failure. [ 84.094260][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 84.094277][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.0.724 Tainted: G L syzkaller #0 PREEMPT [ 84.094289][ T7917] Tainted: [L]=SOFTLOCKUP [ 84.094292][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 84.094297][ T7917] Call trace: [ 84.094300][ T7917] show_stack+0x2c/0x3c (C) [ 84.094316][ T7917] __dump_stack+0x30/0x40 [ 84.094325][ T7917] dump_stack_lvl+0xd8/0x12c [ 84.094333][ T7917] dump_stack+0x1c/0x28 [ 84.094341][ T7917] should_fail_ex+0x418/0x58c [ 84.094352][ T7917] should_failslab+0xc4/0x120 [ 84.094362][ T7917] __kmalloc_cache_noprof+0x94/0x5fc [ 84.094373][ T7917] bpf_is_state_visited+0x2394/0x2bbc [ 84.094384][ T7917] do_check_common+0x1800/0x367c [ 84.094395][ T7917] do_check_main+0x94/0x1b8 [ 84.094403][ T7917] bpf_check+0x1e00/0x2414 [ 84.094412][ T7917] bpf_prog_load+0xf4c/0x1554 [ 84.094423][ T7917] __sys_bpf+0x7d4/0x82c [ 84.094433][ T7917] __arm64_sys_bpf+0xd0/0xec [ 84.094444][ T7917] invoke_syscall+0x98/0x244 [ 84.094452][ T7917] el0_svc_common+0xec/0x23c [ 84.094460][ T7917] do_el0_svc+0x4c/0x5c [ 84.094468][ T7917] el0_svc+0x60/0x1d8 [ 84.094477][ T7917] el0t_64_sync_handler+0x44/0x104 [ 84.094485][ T7917] el0t_64_sync+0x198/0x19c [ 84.293409][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.019306][ T7932] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 85.260825][ T7950] loop0: detected capacity change from 0 to 512 [ 85.268306][ T7950] EXT4-fs: Ignoring removed orlov option [ 85.268334][ T7950] EXT4-fs: Ignoring removed oldalloc option [ 85.283725][ T7950] EXT4-fs (loop0): failed to initialize system zone (-117) [ 85.283773][ T7950] EXT4-fs (loop0): mount failed [ 86.091552][ T7960] netlink: 844 bytes leftover after parsing attributes in process `syz.1.736'. [ 86.091570][ T7960] netlink: 844 bytes leftover after parsing attributes in process `syz.1.736'. [ 86.636244][ T7967] overlay: ./file0 is not a directory [ 86.820975][ T7975] fuse: Bad value for 'fd' [ 87.059514][ T7977] overlay: ./file0 is not a directory [ 87.062525][ T7968] syzkaller0: entered promiscuous mode [ 87.062538][ T7968] syzkaller0: entered allmulticast mode [ 87.233624][ T7996] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.233643][ T7996] block device autoloading is deprecated and will be removed. [ 87.996159][ T8019] IPVS: set_ctl: invalid protocol: 4 172.20.20.42:20001 [ 88.154453][ T8035] loop5: detected capacity change from 0 to 512 [ 88.154856][ T8035] EXT4-fs: Ignoring removed orlov option [ 88.154881][ T8035] EXT4-fs: Ignoring removed oldalloc option [ 88.170538][ T8035] EXT4-fs (loop5): failed to initialize system zone (-117) [ 88.170591][ T8035] EXT4-fs (loop5): mount failed [ 88.268591][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.753'. [ 88.272072][ T8041] loop0: detected capacity change from 0 to 512 [ 88.292447][ T8041] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.753: inode has both inline data and extents flags [ 88.292470][ T8041] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.292589][ T8041] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.753: couldn't read orphan inode 15 (err -117) [ 88.292604][ T8041] loop0: lost filesystem error report for type 5 error -117 [ 88.293094][ T8041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.437408][ T4743] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.482456][ T8050] overlayfs: failed to clone upperpath [ 88.787874][ T8056] random: crng reseeded on system resumption [ 89.700028][ T8077] vlan2: entered allmulticast mode [ 89.700045][ T8077] bond0: entered allmulticast mode [ 89.700054][ T8077] bond_slave_0: entered allmulticast mode [ 89.700064][ T8077] bond_slave_1: entered allmulticast mode [ 90.190956][ T8101] binder: BINDER_SET_CONTEXT_MGR already set [ 90.190967][ T8101] binder: 8098:8101 ioctl 4018620d 20000540 returned -16 [ 90.191176][ T8101] binder: 8098:8101 got transaction to invalid handle, 1 [ 90.191186][ T8101] binder: 8098:8101 cannot find target node [ 90.191198][ T8101] binder: 8098:8101 transaction call to 0:0 failed 54/29201/-22, code 0 size 104-24 line 3253 [ 90.202759][ T6503] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.731073][ T8122] loop5: detected capacity change from 0 to 512 [ 90.732032][ T8122] EXT4-fs: Ignoring removed nobh option [ 90.760617][ T8122] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 90.768703][ T8122] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.770: attempt to clear invalid blocks 1 len 1 [ 90.768724][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.770141][ T8122] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 90.774056][ T8122] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.770: invalid indirect mapped block 1819239214 (level 0) [ 90.774080][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.775475][ C0] EXT4-fs (loop5): error count since last fsck: 3 [ 90.775492][ C0] EXT4-fs (loop5): initial error at time 90: ext4_clear_blocks:876: inode 13 [ 90.775507][ C0] EXT4-fs (loop5): last error at time 90: ext4_free_branches:1023: inode 13 [ 90.799057][ T8122] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.770: invalid indirect mapped block 1819239214 (level 1) [ 90.799084][ T8122] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.809520][ T8122] EXT4-fs (loop5): 1 truncate cleaned up [ 90.809994][ T8122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.812393][ T8122] netlink: 132 bytes leftover after parsing attributes in process `syz.5.770'. [ 90.894988][ T5953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.000205][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.772'. [ 91.058164][ T8142] fuse: Bad value for 'fd' [ 91.442461][ T8169] overlayfs: missing 'lowerdir' [ 91.589350][ T8186] 9p: Bad value for 'rfdno' [ 91.815361][ T8199] overlayfs: failed to resolve './file0': -2 [ 92.360955][ T8210] netlink: 'syz.4.796': attribute type 4 has an invalid length. [ 92.566969][ T8214] loop5: detected capacity change from 0 to 512 [ 92.575973][ T8214] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 92.576703][ T8214] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 92.576822][ T8214] EXT4-fs (loop5): mount failed [ 92.872473][ T6502] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 92.952082][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.797'. [ 93.032113][ T6502] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 93.035135][ T6502] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.035147][ T6502] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 93.036657][ T6502] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.036673][ T6502] usb 1-1: Product: syz [ 93.036681][ T6502] usb 1-1: Manufacturer: syz [ 93.036687][ T6502] usb 1-1: SerialNumber: syz [ 93.126647][ T8239] loop5: detected capacity change from 0 to 4096 [ 93.132712][ T8239] EXT4-fs (loop5): Test dummy encryption mode enabled [ 93.132905][ T8239] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 93.295772][ T8239] ================================================================== [ 93.295785][ T8239] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x58/0x70 [ 93.295803][ T8239] Read of size 1 at addr ffff0000d5900018 by task syz.5.803/8239 [ 93.295812][ T8239] [ 93.295818][ T8239] CPU: 0 UID: 0 PID: 8239 Comm: syz.5.803 Tainted: G L syzkaller #0 PREEMPT [ 93.295832][ T8239] Tainted: [L]=SOFTLOCKUP [ 93.295835][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.295840][ T8239] Call trace: [ 93.295842][ T8239] show_stack+0x2c/0x3c (C) [ 93.295855][ T8239] __dump_stack+0x30/0x40 [ 93.295863][ T8239] dump_stack_lvl+0xd8/0x12c [ 93.295870][ T8239] print_address_description+0xb0/0x238 [ 93.295879][ T8239] print_report+0x68/0x84 [ 93.295887][ T8239] kasan_report+0x8c/0xc4 [ 93.295897][ T8239] __kasan_check_byte+0x3c/0x54 [ 93.295906][ T8239] lock_acquire+0xa4/0x320 [ 93.295915][ T8239] _raw_spin_lock_irq+0x58/0x70 [ 93.295922][ T8239] gadget_dev_open+0x50/0x1c4 [ 93.295933][ T8239] do_dentry_open+0x5c4/0xfbc [ 93.295941][ T8239] vfs_open+0x44/0x2dc [ 93.295948][ T8239] path_openat+0x1084/0x18f0 [ 93.295958][ T8239] do_file_open+0x1c8/0x2e8 [ 93.295967][ T8239] do_sys_openat2+0x114/0x1e8 [ 93.295975][ T8239] do_sys_open+0xb0/0xe0 [ 93.295982][ T8239] __arm64_sys_openat+0xa8/0xc4 [ 93.295989][ T8239] invoke_syscall+0x98/0x244 [ 93.295997][ T8239] el0_svc_common+0xec/0x23c [ 93.296004][ T8239] do_el0_svc+0x4c/0x5c [ 93.296011][ T8239] el0_svc+0x60/0x1d8 [ 93.296018][ T8239] el0t_64_sync_handler+0x44/0x104 [ 93.296025][ T8239] el0t_64_sync+0x198/0x19c [ 93.296033][ T8239] [ 93.296035][ T8239] Allocated by task 7758: [ 93.296039][ T8239] kasan_save_track+0x40/0x78 [ 93.296047][ T8239] kasan_save_alloc_info+0x40/0x50 [ 93.296056][ T8239] __kasan_kmalloc+0x9c/0xb4 [ 93.296063][ T8239] __kmalloc_noprof+0x34c/0x6c8 [ 93.296071][ T8239] ieee802_11_parse_elems_full+0x114/0x2208 [ 93.296080][ T8239] ieee80211_inform_bss+0x114/0xd70 [ 93.296086][ T8239] cfg80211_inform_single_bss_data+0xac4/0x17a0 [ 93.296094][ T8239] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 93.296101][ T8239] cfg80211_inform_bss_frame_data+0x348/0x714 [ 93.296108][ T8239] ieee80211_bss_info_update+0x5d0/0x944 [ 93.296114][ T8239] ieee80211_scan_rx+0x450/0x928 [ 93.296119][ T8239] ieee80211_rx_list+0x229c/0x3000 [ 93.296127][ T8239] ieee80211_rx_napi+0x18c/0x370 [ 93.296135][ T8239] ieee80211_handle_queued_frames+0xc8/0x17c [ 93.296143][ T8239] ieee80211_tasklet_handler+0x20/0x30 [ 93.296150][ T8239] tasklet_action_common+0x1dc/0x278 [ 93.296158][ T8239] tasklet_action+0x68/0x8c [ 93.296165][ T8239] handle_softirqs+0x324/0xcbc [ 93.296172][ T8239] __do_softirq+0x14/0x20 [ 93.296177][ T8239] [ 93.296179][ T8239] Freed by task 7758: [ 93.296182][ T8239] kasan_save_track+0x40/0x78 [ 93.296189][ T8239] kasan_save_free_info+0x54/0x6c [ 93.296198][ T8239] __kasan_slab_free+0x74/0xa4 [ 93.296205][ T8239] kfree+0x188/0x658 [ 93.296211][ T8239] ieee80211_inform_bss+0x914/0xd70 [ 93.296217][ T8239] cfg80211_inform_single_bss_data+0xac4/0x17a0 [ 93.296224][ T8239] cfg80211_inform_bss_data+0x1ec/0x2d04 [ 93.296230][ T8239] cfg80211_inform_bss_frame_data+0x348/0x714 [ 93.296237][ T8239] ieee80211_bss_info_update+0x5d0/0x944 [ 93.296243][ T8239] ieee80211_scan_rx+0x450/0x928 [ 93.296249][ T8239] ieee80211_rx_list+0x229c/0x3000 [ 93.296256][ T8239] ieee80211_rx_napi+0x18c/0x370 [ 93.296264][ T8239] ieee80211_handle_queued_frames+0xc8/0x17c [ 93.296271][ T8239] ieee80211_tasklet_handler+0x20/0x30 [ 93.296278][ T8239] tasklet_action_common+0x1dc/0x278 [ 93.296286][ T8239] tasklet_action+0x68/0x8c [ 93.296293][ T8239] handle_softirqs+0x324/0xcbc [ 93.296299][ T8239] __do_softirq+0x14/0x20 [ 93.296305][ T8239] [ 93.296306][ T8239] The buggy address belongs to the object at ffff0000d5900000 [ 93.296306][ T8239] which belongs to the cache kmalloc-1k of size 1024 [ 93.296312][ T8239] The buggy address is located 24 bytes inside of [ 93.296312][ T8239] freed 1024-byte region [ffff0000d5900000, ffff0000d5900400) [ 93.296320][ T8239] [ 93.296322][ T8239] The buggy address belongs to the physical page: [ 93.296326][ T8239] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d5907000 pfn:0x115900 [ 93.296333][ T8239] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 93.296338][ T8239] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 93.296347][ T8239] page_type: f5(slab) [ 93.296354][ T8239] raw: 05ffc00000000240 ffff0000c0001dc0 fffffdffc35b0010 fffffdffc3436c10 [ 93.296360][ T8239] raw: ffff0000d5907000 000000000010000a 00000000f5000000 0000000000000000 [ 93.296365][ T8239] head: 05ffc00000000240 ffff0000c0001dc0 fffffdffc35b0010 fffffdffc3436c10 [ 93.296371][ T8239] head: ffff0000d5907000 000000000010000a 00000000f5000000 0000000000000000 [ 93.296377][ T8239] head: 05ffc00000000003 fffffdffc3564001 00000000ffffffff 00000000ffffffff [ 93.296383][ T8239] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 93.296386][ T8239] page dumped because: kasan: bad access detected [ 93.296389][ T8239] [ 93.296391][ T8239] Memory state around the buggy address: [ 93.296394][ T8239] ffff0000d58fff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 93.296399][ T8239] ffff0000d58fff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 93.296403][ T8239] >ffff0000d5900000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.296406][ T8239] ^ [ 93.296410][ T8239] ffff0000d5900080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.296414][ T8239] ffff0000d5900100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 93.296417][ T8239] ================================================================== [ 93.296421][ T8239] Disabling lock debugging due to kernel taint [ 93.296424][ T8239] ------------[ cut here ]------------ [ 93.296426][ T8239] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9 [ 93.296432][ T8239] index 13667 is out of range for type 'unsigned long[8]' [ 93.296437][ T8239] CPU: 0 UID: 0 PID: 8239 Comm: syz.5.803 Tainted: G B L syzkaller #0 PREEMPT [ 93.296447][ T8239] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 93.296449][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.296453][ T8239] Call trace: [ 93.296455][ T8239] show_stack+0x2c/0x3c (C) [ 93.296462][ T8239] __dump_stack+0x30/0x40 [ 93.296469][ T8239] dump_stack_lvl+0xd8/0x12c [ 93.296476][ T8239] dump_stack+0x1c/0x28 [ 93.296483][ T8239] ubsan_epilogue+0x14/0x48 [ 93.296492][ T8239] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 93.296501][ T8239] queued_spin_lock_slowpath+0x834/0xb5c [ 93.296510][ T8239] do_raw_spin_lock+0x21c/0x2d0 [ 93.296519][ T8239] _raw_spin_lock_irq+0x60/0x70 [ 93.296526][ T8239] gadget_dev_open+0x50/0x1c4 [ 93.296536][ T8239] do_dentry_open+0x5c4/0xfbc [ 93.296543][ T8239] vfs_open+0x44/0x2dc [ 93.296549][ T8239] path_openat+0x1084/0x18f0 [ 93.296559][ T8239] do_file_open+0x1c8/0x2e8 [ 93.296568][ T8239] do_sys_openat2+0x114/0x1e8 [ 93.296575][ T8239] do_sys_open+0xb0/0xe0 [ 93.296587][ T8239] __arm64_sys_openat+0xa8/0xc4 [ 93.296594][ T8239] invoke_syscall+0x98/0x244 [ 93.296601][ T8239] el0_svc_common+0xec/0x23c [ 93.296608][ T8239] do_el0_svc+0x4c/0x5c [ 93.296615][ T8239] el0_svc+0x60/0x1d8 [ 93.296621][ T8239] el0t_64_sync_handler+0x44/0x104 [ 93.296628][ T8239] el0t_64_sync+0x198/0x19c [ 93.296635][ T8239] ---[ end trace ]--- [ 93.296646][ T8239] Unable to handle kernel paging request at virtual address ffff8000897ba140 [ 93.296650][ T8239] KASAN: probably user-memory-access in range [0x000000044bdd0a00-0x000000044bdd0a07] [ 93.296655][ T8239] Mem abort info: [ 93.296657][ T8239] ESR = 0x0000000096000047 [ 93.296660][ T8239] EC = 0x25: DABT (current EL), IL = 32 bits [ 93.296664][ T8239] SET = 0, FnV = 0 [ 93.296667][ T8239] EA = 0, S1PTW = 0 [ 93.296670][ T8239] FSC = 0x07: level 3 translation fault [ 93.296674][ T8239] Data abort info: [ 93.296676][ T8239] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 93.296679][ T8239] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 93.296684][ T8239] GCS = 0, Overlay = 0, DirtyBit = 0 [ 93.296687][ T8239] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000219508000 [ 93.296692][ T8239] [ffff8000897ba140] pgd=0000000000000000, p4d=100000021f82f003, pud=100000021f830003, pmd=100000021f834003, pte=0000000000000000 [ 93.296711][ T8239] Internal error: Oops: 0000000096000047 [#1] SMP [ 93.467449][ T8239] Modules linked in: [ 93.468322][ T8239] CPU: 0 UID: 0 PID: 8239 Comm: syz.5.803 Tainted: G B L syzkaller #0 PREEMPT [ 93.470667][ T8239] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 93.471900][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.474025][ T8239] pstate: 834000c5 (Nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 93.475509][ T8239] pc : queued_spin_lock_slowpath+0x544/0xb5c [ 93.476715][ T8239] lr : queued_spin_lock_slowpath+0x834/0xb5c [ 93.478130][ T8239] sp : ffff800093a87620 [ 93.479116][ T8239] x29: ffff800093a876c0 x28: 1fffe000359ed028 x27: 1fffe00018e0e762 [ 93.480884][ T8239] x26: ffff0001acf68148 x25: ffff8000897ba140 x24: dfff800000000000 [ 93.482658][ T8239] x23: ffff700012750ec8 x22: 1fffe0001ab20000 x21: ffff0001acf68140 [ 93.484410][ T8239] x20: ffff0000c7073b10 x19: ffff0000d5900000 x18: ffff8001237ae000 [ 93.486235][ T8239] x17: 363a682e6b636f6c x16: 0000000000000001 x15: 0000000000000000 [ 93.487948][ T8239] x14: 0000000000001495 x13: 0000000000000001 x12: 0000000000000004 [ 93.489574][ T8239] x11: ffff700011604e68 x10: ffff8000897ba140 x9 : ffff8000897ba140 [ 93.491189][ T8239] x8 : 0000000000000000 x7 : 0000000000000001 x6 : ffff800080484084 [ 93.492877][ T8239] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f41d4 [ 93.494729][ T8239] x2 : 0000000000000002 x1 : 0000000000000004 x0 : ffff0001acf68148 [ 93.496368][ T8239] Call trace: [ 93.497100][ T8239] queued_spin_lock_slowpath+0x544/0xb5c (P) [ 93.498463][ T8239] do_raw_spin_lock+0x21c/0x2d0 [ 93.499441][ T8239] _raw_spin_lock_irq+0x60/0x70 [ 93.500469][ T8239] gadget_dev_open+0x50/0x1c4 [ 93.501448][ T8239] do_dentry_open+0x5c4/0xfbc [ 93.502315][ T8239] vfs_open+0x44/0x2dc [ 93.503041][ T8239] path_openat+0x1084/0x18f0 [ 93.503917][ T8239] do_file_open+0x1c8/0x2e8 [ 93.504748][ T8239] do_sys_openat2+0x114/0x1e8 [ 93.505581][ T8239] do_sys_open+0xb0/0xe0 [ 93.506378][ T8239] __arm64_sys_openat+0xa8/0xc4 [ 93.507278][ T8239] invoke_syscall+0x98/0x244 [ 93.508112][ T8239] el0_svc_common+0xec/0x23c [ 93.508995][ T8239] do_el0_svc+0x4c/0x5c [ 93.509739][ T8239] el0_svc+0x60/0x1d8 [ 93.510423][ T8239] el0t_64_sync_handler+0x44/0x104 [ 93.511353][ T8239] el0t_64_sync+0x198/0x19c [ 93.512126][ T8239] Code: aa1903e0 968adf85 910022a0 52800081 (f9000335) [ 93.513415][ T8239] ---[ end trace 0000000000000000 ]--- [ 93.858740][ T8239] Kernel panic - not syncing: Oops: Fatal exception [ 93.860178][ T8239] SMP: stopping secondary CPUs [ 93.861150][ T8239] Kernel Offset: disabled [ 93.862029][ T8239] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 93.863359][ T8239] Memory Limit: none [ 94.199124][ T8239] Rebooting in 86400 seconds..