last executing test programs: 4.90673747s ago: executing program 4 (id=5): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8480, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000240)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) (fail_nth: 4) sendfile(r1, r0, 0x0, 0x7ffff000) 4.516597302s ago: executing program 4 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x200, 0x8, [{0x80, 0x575e, 0x0, 0x9}, {0x1, 0xf, 0x80, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r9) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)='\'', 0x1}], 0x1}, 0x20000085) 4.041271473s ago: executing program 2 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34096d"], 0xa) socket$netlink(0x10, 0x3, 0x1c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x20000404) 3.960660186s ago: executing program 2 (id=18): r0 = socket$netlink(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000021800058014000180080005000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0) 3.960285613s ago: executing program 2 (id=19): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x6400) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20840, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000200)={r3, 0x80000000, 0x5, 0x2, 0x2, [0x0, 0x0, 0x0], [0x3, 0x0, 0x0, 0x4], [0x8, 0xfffffc1a, 0x4ce, 0x80], [0x7, 0x1ff, 0x9, 0xe9ae448]}) ioctl$TIOCCBRK(r2, 0x5428) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r5, 0x29, 0xd0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000300)={@private0}, &(0x7f0000000340)=0x14) mount(&(0x7f0000000380)=@rnullb, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='devpts\x00', 0x0, &(0x7f0000000440)='/dev/dri/card#\x00') r6 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000480)) recvmmsg$unix(r6, &(0x7f00000020c0)=[{{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/28, 0x1c}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000640)=""/88, 0x58}], 0x4}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, &(0x7f00000017c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001880)=""/71, 0x47}, {&(0x7f0000001900)=""/63, 0x3f}, {&(0x7f0000001940)=""/166, 0xa6}], 0x3, &(0x7f0000001a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001ac0)=""/172, 0xac}, {&(0x7f0000001b80)=""/248, 0xf8}, {&(0x7f0000001c80)=""/70, 0x46}, {&(0x7f0000001d00)=""/186, 0xba}, {&(0x7f0000001dc0)=""/246, 0xf6}, {&(0x7f0000001ec0)=""/65, 0x41}, {&(0x7f0000001f40)=""/142, 0x8e}], 0x7, &(0x7f0000002080)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x4, 0x10010, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r10, 0x111, 0x2, 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000021c0)={{0x1, 0x1, 0x18, r9, {0x4}}, './file0\x00'}) ioctl$XFS_IOC_SWAPEXT(r11, 0xc0c0586d, &(0x7f0000002200)={0x0, r7, r8, 0x1, 0x7fffffff, '\x00', {0xfffffffffffffff8, 0x81, 0x2, 0xe, 0x9, 0x80, 0x8a2, 0x0, {0x2936, 0x7}, {0x6, 0x7}, {0x5, 0x8}, 0x4, 0x7ff, 0x0, 0x7ff, 0x91e8, 0xf53d, 0xfff2, 0x1, 0x0, 0x800, '\x00', 0x1, 0x4, 0x1}}) ioctl$UBLK_U_CMD_GET_FEATURES(r7, 0x80207513, &(0x7f0000002300)={0x0, 0xffff, 0x8, &(0x7f00000022c0)}) ioctl$UBLK_U_CMD_STOP_DEV(r11, 0xc0207507, &(0x7f0000002380)={r12}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000002400)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) write$9p(r11, &(0x7f0000002440)="b44d7d2df48b88c29d2bdd4b8a36a76fff9613c2a8ad67dda2b20aa5e30996ab4fd908961254084aa9824104ffa1387b6a681f2412f149fe5ea8f4ec", 0x3c) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000002480)='veth1_virt_wifi\x00', 0x10) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x64, 0x9, 0x6, 0x467182c2e89b65a3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xb8}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1b}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) getpid() ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000002600)=0x0) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f00000026c0)={0x0, "43ea6f65e8af6c81b67497ad0cf79ffe"}) ioctl$BTRFS_IOC_RM_DEV_V2(r9, 0x5000943a, &(0x7f00000036c0)={{r13}, r14, 0x4, @inherit={0x68, &(0x7f0000002640)={0x0, 0x4, 0x7, 0x270dabbb, {0x22, 0x101, 0x3, 0x1, 0x8f}, [0x4, 0x1ff, 0x8f, 0xb4]}}, @devid=r15}) 3.942770813s ago: executing program 2 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x200, 0x8, [{0x80, 0x575e, 0x0, 0x9}, {0x1, 0xf, 0x80, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r9) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)='\'', 0x1}], 0x1}, 0x20000085) (fail_nth: 2) 2.708512321s ago: executing program 4 (id=31): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) (fail_nth: 1) 2.568607439s ago: executing program 4 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') read$FUSE(r1, &(0x7f0000003fc0)={0x2020}, 0x2020) pread64(r1, &(0x7f0000000000)=""/73, 0x49, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f00000015c0)=""/66, 0x42}, {&(0x7f0000002680)=""/4116, 0x1014}, {&(0x7f0000000040)=""/130, 0x82}, {&(0x7f0000000480)=""/247, 0xf7}, {&(0x7f0000000200)=""/26, 0x1a}], 0x6}, 0x4453d}, {{0x0, 0x0, 0x0}, 0xad}], 0x2, 0x40002000, 0x0) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}, {0x2}}]}}, 0xf) 2.568332436s ago: executing program 4 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) dup(0xffffffffffffffff) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x8, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) openat(0xffffffffffffff9c, 0x0, 0x0, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b70800fff30000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) 2.02475501s ago: executing program 0 (id=36): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x10000}}, 0x18) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) (fail_nth: 2) 1.932620998s ago: executing program 0 (id=39): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x83, &(0x7f0000000100)={0x0, 0x80000200}, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f00000005c0)="943e047401") connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./file1\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r7 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) dup(r0) 1.505380944s ago: executing program 3 (id=41): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (fail_nth: 5) 1.437669219s ago: executing program 3 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x60, 0x10, 0x401, 0x400800, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (fail_nth: 5) 1.372139576s ago: executing program 3 (id=44): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000000c0), 0x8) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) 961.003704ms ago: executing program 0 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000102010800000000000000000200020624000180140001"], 0x38}, 0x1, 0x0, 0x0, 0x24001800}, 0x804) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000070000cc840500000000000095"], &(0x7f00000000c0)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2d, 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x11d, 0x1, 0x0, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100e9527af000000000000000500000a20000000000a010400000000000000000500000a0900010073797a300000000048000000030a010400000000000000000500000a0900010073797a30000000000900030073797a3000000000140004800800014000000000080002400000000108000a4000000002140000001100010000000000000000000500000a"], 0x90}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@nodelalloc}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") 904.550865ms ago: executing program 2 (id=47): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x41) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000280)=0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r5, &(0x7f0000000600), 0x0, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) close(0x3) 904.321785ms ago: executing program 1 (id=48): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x2bd}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x2, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0xc}]}, 0x10) r6 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_emit_ethernet(0x2e, &(0x7f0000000700)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x9c, 0x0, @void}}}}}}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x180, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x1, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@empty, {0x0, 0x40000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x6, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_crypt={0x48, 0x2, {{'cryptd(essiv-cbc-aes-sha256-neon)\x00'}}}]}, 0x180}}, 0x24000058) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000050000000000000f03a2e20000b2578c17c3"], 0x0, 0x2a, 0x0, 0x9}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'team_slave_1\x00', @multicast}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) 861.796809ms ago: executing program 2 (id=49): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000056, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@inlinecrypt}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffc, 0x0, 0x3, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5805, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 786.719034ms ago: executing program 0 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 586.610837ms ago: executing program 1 (id=51): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000002010400000000000000000a0000000400018004000380440002800c00028005000100000000002c00018014000300fc0000000000000004000000000000000e000400fe8000"/86], 0x60}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r2, 0x891f, &(0x7f0000000000)={'bond0\x00', @ifru_addrs=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x2}}}) 584.27542ms ago: executing program 0 (id=52): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x40048d5}, 0x8050) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB="0a000100aa"], 0x48}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@initdev, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="00042dbd7000fcdbdf250d0000001c000180080003000200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000540)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x15}}) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0xb701, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, 0x2, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0xc}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4010) 496.372432ms ago: executing program 1 (id=53): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x2e, &(0x7f0000002080)=""/4102}, 0x94) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @rand_addr=0x64010100}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x254, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x234, 0x3, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x54, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8e}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xfc00}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_SET_ELEM_KEY_END={0x108, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x59, 0x1, "c340819414631e40ee6fb1e24a41d02a0cdf9f70cf6e65e5511fb8ee9088c6c909e749e8aef9f9b48c68d2cce3cd50cba67892fd20388c3307ce4d18c519cf0e31f3120bbe1773c588dac52350ed9e679350824ba3"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3d58}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5ed}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x27c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40000) 243.468809ms ago: executing program 3 (id=54): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd28, 0x1, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000080)}, 0x10}, {{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {&(0x7f0000000940)=""/161, 0xa1}, {0x0}, {&(0x7f0000000100)=""/244, 0xf4}, {&(0x7f0000001b00)=""/55, 0x37}], 0x5}, 0x9}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 173.582713ms ago: executing program 1 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r0, r2, 0xa, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private2, 0x4}, 0x1c) (fail_nth: 1) 119.39322ms ago: executing program 3 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0xec) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)="e35d5d4c73704f72740300000000", 0xe) 60.734972ms ago: executing program 1 (id=57): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 52.258385ms ago: executing program 3 (id=58): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 5) 600.128µs ago: executing program 0 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002280)='./proc/thread-self/fail-nth\x00', 0x8a402, 0xc) r1 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x40000000, &(0x7f00000022c0)) (fail_nth: 1) write(r0, &(0x7f0000000200)='2', 0x1) 0s ago: executing program 1 (id=60): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x2, 0x3, @mcast2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="6797f04cdb6f3395f1c922adb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d3c24", 0x5dc}], 0x1}, 0x30008b08) (fail_nth: 5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 27.796324][ T4699] cgroup: Unknown subsys name 'net' [ 27.946477][ T4699] cgroup: Unknown subsys name 'cpuset' [ 27.948379][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.115746][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.910266][ T4712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.912087][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.924184][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.927472][ T4723] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.929298][ T4723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.930009][ T4725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.930238][ T4725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.933906][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.934205][ T4725] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.934414][ T4725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.937328][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.937468][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.937516][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.937591][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.939545][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.945762][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.945821][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.947550][ T4725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.948277][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.948909][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.949406][ T4723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.949450][ T4723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 28.949489][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.950224][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.966480][ T4712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.302310][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.302522][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.302587][ T4709] bridge_slave_0: entered allmulticast mode [ 29.303094][ T4709] bridge_slave_0: entered promiscuous mode [ 29.319489][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.319538][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.319609][ T4709] bridge_slave_1: entered allmulticast mode [ 29.320045][ T4709] bridge_slave_1: entered promiscuous mode [ 29.340831][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.341907][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.353190][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.353265][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.353598][ T4716] bridge_slave_0: entered allmulticast mode [ 29.354196][ T4716] bridge_slave_0: entered promiscuous mode [ 29.355513][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.355534][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.355634][ T4716] bridge_slave_1: entered allmulticast mode [ 29.356051][ T4716] bridge_slave_1: entered promiscuous mode [ 29.363295][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.364221][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.372859][ T4716] team0: Port device team_slave_0 added [ 29.373671][ T4716] team0: Port device team_slave_1 added [ 29.380381][ T4709] team0: Port device team_slave_0 added [ 29.381326][ T4709] team0: Port device team_slave_1 added [ 29.389292][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.389315][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.389343][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.390067][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.390082][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.390102][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.400977][ T4709] hsr_slave_0: entered promiscuous mode [ 29.401624][ T4709] hsr_slave_1: entered promiscuous mode [ 29.428282][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.428303][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.428319][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.428865][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.428873][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.428888][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.453235][ T4716] hsr_slave_0: entered promiscuous mode [ 29.453547][ T4716] hsr_slave_1: entered promiscuous mode [ 29.453735][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 29.453765][ T4716] Cannot create hsr debugfs directory [ 29.467307][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.468794][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.470344][ T4718] bridge_slave_0: entered allmulticast mode [ 29.471967][ T4718] bridge_slave_0: entered promiscuous mode [ 29.477380][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.478747][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.480216][ T4718] bridge_slave_1: entered allmulticast mode [ 29.481907][ T4718] bridge_slave_1: entered promiscuous mode [ 29.522366][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.523712][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.525329][ T4710] bridge_slave_0: entered allmulticast mode [ 29.526886][ T4710] bridge_slave_0: entered promiscuous mode [ 29.536800][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.541611][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.543180][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.544738][ T4710] bridge_slave_1: entered allmulticast mode [ 29.546623][ T4710] bridge_slave_1: entered promiscuous mode [ 29.553968][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.557834][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.557876][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.557945][ T4717] bridge_slave_0: entered allmulticast mode [ 29.558490][ T4717] bridge_slave_0: entered promiscuous mode [ 29.559565][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.559585][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.559640][ T4717] bridge_slave_1: entered allmulticast mode [ 29.560054][ T4717] bridge_slave_1: entered promiscuous mode [ 29.567605][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.579183][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.591054][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.593467][ T4718] team0: Port device team_slave_0 added [ 29.595778][ T4718] team0: Port device team_slave_1 added [ 29.600821][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.613706][ T4717] team0: Port device team_slave_0 added [ 29.614565][ T4717] team0: Port device team_slave_1 added [ 29.627116][ T4710] team0: Port device team_slave_0 added [ 29.635258][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.636611][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.641382][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.644499][ T4710] team0: Port device team_slave_1 added [ 29.648065][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.648090][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.648103][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.648890][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.648897][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.648910][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.654950][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.654959][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.654973][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.663024][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.663033][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.663048][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.663639][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.663649][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.663662][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.678537][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.686781][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.698606][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.700823][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.707208][ T4718] hsr_slave_0: entered promiscuous mode [ 29.708726][ T4718] hsr_slave_1: entered promiscuous mode [ 29.710020][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 29.711115][ T4718] Cannot create hsr debugfs directory [ 29.719420][ T4717] hsr_slave_0: entered promiscuous mode [ 29.719751][ T4717] hsr_slave_1: entered promiscuous mode [ 29.719955][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 29.719964][ T4717] Cannot create hsr debugfs directory [ 29.723559][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.726170][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.732614][ T4710] hsr_slave_0: entered promiscuous mode [ 29.732951][ T4710] hsr_slave_1: entered promiscuous mode [ 29.733184][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 29.733193][ T4710] Cannot create hsr debugfs directory [ 29.743066][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.745710][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.798134][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.800239][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.800548][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.802612][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.813754][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.816507][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.828473][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.831335][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.840760][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.840816][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.840969][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.840999][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.872951][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.873000][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.873088][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.873120][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.877320][ T4717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.879284][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.879588][ T4717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.881399][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.889818][ T4717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.891922][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.896601][ T4717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.898928][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.914779][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.922417][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.924336][ T4718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.927296][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.930818][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.932577][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.934447][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.937631][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.950238][ T4718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.952557][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.954288][ T4718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.956832][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.957926][ T4718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.959977][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.965959][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.966005][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.972905][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.972946][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.987954][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.997485][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.004964][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.005001][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.008782][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.011021][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.015903][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.017906][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.018215][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.020097][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.021291][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.022572][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.028884][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.028924][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.039992][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.057031][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.069698][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.071631][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.076498][ T1295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.076544][ T1295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.076929][ T1295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.076947][ T1295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.138527][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.151385][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.156904][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.156952][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.157309][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.157328][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.158990][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.162142][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.177143][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.177184][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.180169][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.180209][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.229856][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.229886][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.278700][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.294276][ T4709] veth0_vlan: entered promiscuous mode [ 30.299538][ T4709] veth1_vlan: entered promiscuous mode [ 30.308638][ T4709] veth0_macvtap: entered promiscuous mode [ 30.310908][ T4709] veth1_macvtap: entered promiscuous mode [ 30.321626][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.330525][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.338433][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.338651][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.356476][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.356758][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.375882][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.375916][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.383782][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.403797][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.403829][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.438994][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.454629][ T4716] veth0_vlan: entered promiscuous mode [ 30.458158][ T4709] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.460863][ T4716] veth1_vlan: entered promiscuous mode [ 30.478553][ T4716] veth0_macvtap: entered promiscuous mode [ 30.480929][ T4716] veth1_macvtap: entered promiscuous mode [ 30.492562][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.493932][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.531129][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.536471][ T39] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.536845][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.536877][ T39] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.536892][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.553638][ T4717] veth0_vlan: entered promiscuous mode [ 30.561667][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.563218][ T4717] veth1_vlan: entered promiscuous mode [ 30.579168][ T4717] veth0_macvtap: entered promiscuous mode [ 30.590016][ T4718] veth0_vlan: entered promiscuous mode [ 30.607423][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.609129][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.614534][ T4717] veth1_macvtap: entered promiscuous mode [ 30.629809][ T4718] veth1_vlan: entered promiscuous mode [ 30.634821][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.634855][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.635837][ T4710] veth0_vlan: entered promiscuous mode [ 30.639405][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.640600][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.652730][ T4718] veth0_macvtap: entered promiscuous mode [ 30.653813][ T4718] veth1_macvtap: entered promiscuous mode [ 30.659171][ T4710] veth1_vlan: entered promiscuous mode [ 30.668019][ T4900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 30.668052][ T4900] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 30.670915][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.680802][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.696010][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.703798][ T4710] veth0_macvtap: entered promiscuous mode [ 30.709557][ T4710] veth1_macvtap: entered promiscuous mode [ 30.717890][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.720952][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.724380][ T1191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.724428][ T1191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.724447][ T1191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.728641][ T1191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.729409][ T1191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.729429][ T1191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.729445][ T1191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.735510][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.737171][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.765381][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.767242][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.813954][ T4900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 30.813985][ T4900] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 30.946962][ T4900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 30.946992][ T4900] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 30.981248][ T4903] sctp: [Deprecated]: syz.2.3 (pid 4903) Use of int in max_burst socket option deprecated. [ 30.981248][ T4903] Use struct sctp_assoc_value instead [ 30.985565][ T4722] Bluetooth: hci2: command tx timeout [ 30.985598][ T4712] Bluetooth: hci4: command tx timeout [ 30.985773][ T4722] Bluetooth: hci3: command tx timeout [ 31.105775][ T4900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 31.105804][ T4900] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 31.186161][ T4900] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 31.186191][ T4900] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 31.222850][ T4820] IPVS: starting estimator thread 0... [ 31.223225][ T4910] IPVS: set_ctl: invalid protocol: 92 172.20.20.55:20002 [ 31.229929][ T4910] Zero length message leads to an empty skb [ 31.248051][ T4913] FAULT_INJECTION: forcing a failure. [ 31.248051][ T4913] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.248083][ T4913] CPU: 0 UID: 0 PID: 4913 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT [ 31.248095][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 31.248101][ T4913] Call trace: [ 31.248105][ T4913] show_stack+0x2c/0x3c (C) [ 31.248125][ T4913] __dump_stack+0x30/0x40 [ 31.248139][ T4913] dump_stack_lvl+0xd8/0x12c [ 31.248149][ T4913] dump_stack+0x1c/0x28 [ 31.248159][ T4913] should_fail_ex+0x41c/0x590 [ 31.248170][ T4913] should_fail+0x14/0x24 [ 31.248180][ T4913] should_fail_usercopy+0x20/0x30 [ 31.248187][ T4913] _inline_copy_from_user+0x3c/0x174 [ 31.248199][ T4913] copy_msghdr_from_user+0xb8/0x194 [ 31.248209][ T4913] ___sys_recvmsg+0x11c/0x1f4 [ 31.248218][ T4913] do_recvmmsg+0x288/0x7d4 [ 31.248227][ T4913] __sys_recvmmsg+0x1e0/0x270 [ 31.248237][ T4913] __arm64_sys_recvmmsg+0xe0/0x108 [ 31.248246][ T4913] invoke_syscall+0x98/0x244 [ 31.248257][ T4913] el0_svc_common+0xec/0x23c [ 31.248266][ T4913] do_el0_svc+0x4c/0x5c [ 31.248276][ T4913] el0_svc+0x64/0x260 [ 31.248284][ T4913] el0t_64_sync_handler+0x48/0x148 [ 31.248292][ T4913] el0t_64_sync+0x198/0x19c [ 31.297048][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.298589][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.305656][ T4911] IPVS: using max 59 ests per chain, 141600 per kthread [ 31.317673][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.317705][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.328976][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.330588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.347084][ T4900] loop1: detected capacity change from 0 to 256 [ 31.353662][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.360190][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.369246][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.369273][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.498745][ T4922] Illegal XDP return value 1408965740 on prog (id 1) dev N/A, expect packet loss! [ 32.423784][ T4888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.423813][ T4888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.540488][ T4932] loop4: detected capacity change from 0 to 128 [ 32.752363][ T4937] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 32.861442][ T4940] loop3: detected capacity change from 0 to 128 [ 32.956564][ T4942] syzkaller0: entered promiscuous mode [ 32.957798][ T4942] syzkaller0: entered allmulticast mode [ 33.536900][ T4956] syzkaller0: entered promiscuous mode [ 33.536929][ T4956] syzkaller0: entered allmulticast mode [ 33.538212][ T4956] FAULT_INJECTION: forcing a failure. [ 33.538212][ T4956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.538238][ T4956] CPU: 1 UID: 0 PID: 4956 Comm: syz.2.20 Not tainted syzkaller #0 PREEMPT [ 33.538253][ T4956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 33.538260][ T4956] Call trace: [ 33.538263][ T4956] show_stack+0x2c/0x3c (C) [ 33.538282][ T4956] __dump_stack+0x30/0x40 [ 33.538293][ T4956] dump_stack_lvl+0xd8/0x12c [ 33.538303][ T4956] dump_stack+0x1c/0x28 [ 33.538313][ T4956] should_fail_ex+0x41c/0x590 [ 33.538325][ T4956] should_fail+0x14/0x24 [ 33.538334][ T4956] should_fail_usercopy+0x20/0x30 [ 33.538344][ T4956] _inline_copy_from_user+0x3c/0x174 [ 33.538355][ T4956] move_addr_to_kernel+0x88/0x168 [ 33.538364][ T4956] __copy_msghdr+0x2e0/0x3d4 [ 33.538373][ T4956] copy_msghdr_from_user+0xe8/0x194 [ 33.538383][ T4956] ___sys_sendmsg+0x14c/0x224 [ 33.538392][ T4956] __sys_sendmsg+0x158/0x204 [ 33.538401][ T4956] __arm64_sys_sendmsg+0x88/0x9c [ 33.538410][ T4956] invoke_syscall+0x98/0x244 [ 33.538421][ T4956] el0_svc_common+0xec/0x23c [ 33.538431][ T4956] do_el0_svc+0x4c/0x5c [ 33.538440][ T4956] el0_svc+0x64/0x260 [ 33.538449][ T4956] el0t_64_sync_handler+0x48/0x148 [ 33.538456][ T4956] el0t_64_sync+0x198/0x19c [ 33.744165][ T4960] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 33.928600][ T4967] FAULT_INJECTION: forcing a failure. [ 33.928600][ T4967] name failslab, interval 1, probability 0, space 0, times 0 [ 33.928636][ T4967] CPU: 0 UID: 0 PID: 4967 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT [ 33.928648][ T4967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 33.928654][ T4967] Call trace: [ 33.928658][ T4967] show_stack+0x2c/0x3c (C) [ 33.928680][ T4967] __dump_stack+0x30/0x40 [ 33.928692][ T4967] dump_stack_lvl+0xd8/0x12c [ 33.928702][ T4967] dump_stack+0x1c/0x28 [ 33.928712][ T4967] should_fail_ex+0x41c/0x590 [ 33.928725][ T4967] should_failslab+0xc4/0x120 [ 33.928733][ T4967] __kmalloc_noprof+0x108/0x6b8 [ 33.928743][ T4967] security_prepare_creds+0x60/0x35c [ 33.928751][ T4967] prepare_creds+0x500/0x7d0 [ 33.928762][ T4967] lookup_user_key+0x284/0xd4c [ 33.928770][ T4967] __arm64_sys_add_key+0x34c/0x43c [ 33.928777][ T4967] invoke_syscall+0x98/0x244 [ 33.928787][ T4967] el0_svc_common+0xec/0x23c [ 33.928797][ T4967] do_el0_svc+0x4c/0x5c [ 33.928807][ T4967] el0_svc+0x64/0x260 [ 33.928815][ T4967] el0t_64_sync_handler+0x48/0x148 [ 33.928822][ T4967] el0t_64_sync+0x198/0x19c [ 33.939389][ T4969] overlayfs: conflicting lowerdir path [ 33.950359][ T4969] loop3: detected capacity change from 0 to 2048 [ 33.963974][ T4969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.986467][ T4974] syzkaller0: entered promiscuous mode [ 33.986501][ T4974] syzkaller0: entered allmulticast mode [ 33.992503][ T4974] tipc: Enabling of bearer rejected, failed to enable media [ 34.000459][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.091920][ T4979] syzkaller0: entered promiscuous mode [ 34.091947][ T4979] syzkaller0: entered allmulticast mode [ 34.794030][ T4996] FAULT_INJECTION: forcing a failure. [ 34.794030][ T4996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.794076][ T4996] CPU: 0 UID: 0 PID: 4996 Comm: syz.4.31 Not tainted syzkaller #0 PREEMPT [ 34.794089][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 34.794095][ T4996] Call trace: [ 34.794099][ T4996] show_stack+0x2c/0x3c (C) [ 34.794117][ T4996] __dump_stack+0x30/0x40 [ 34.794129][ T4996] dump_stack_lvl+0xd8/0x12c [ 34.794139][ T4996] dump_stack+0x1c/0x28 [ 34.794149][ T4996] should_fail_ex+0x41c/0x590 [ 34.794160][ T4996] should_fail+0x14/0x24 [ 34.794170][ T4996] should_fail_usercopy+0x20/0x30 [ 34.794177][ T4996] _inline_copy_from_user+0x3c/0x174 [ 34.794189][ T4996] copy_msghdr_from_user+0xb8/0x194 [ 34.794199][ T4996] ___sys_sendmsg+0x14c/0x224 [ 34.794208][ T4996] __sys_sendmmsg+0x204/0x580 [ 34.794217][ T4996] __arm64_sys_sendmmsg+0xac/0xc8 [ 34.794227][ T4996] invoke_syscall+0x98/0x244 [ 34.794239][ T4996] el0_svc_common+0xec/0x23c [ 34.794249][ T4996] do_el0_svc+0x4c/0x5c [ 34.794259][ T4996] el0_svc+0x64/0x260 [ 34.794267][ T4996] el0t_64_sync_handler+0x48/0x148 [ 34.794274][ T4996] el0t_64_sync+0x198/0x19c [ 34.918877][ T5002] loop3: detected capacity change from 0 to 256 [ 35.360170][ T5020] Option 'dnserror' to dns_resolver key: bad/missing value [ 35.422228][ T5023] FAULT_INJECTION: forcing a failure. [ 35.422228][ T5023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.422260][ T5023] CPU: 0 UID: 0 PID: 5023 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT [ 35.422271][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.422277][ T5023] Call trace: [ 35.422281][ T5023] show_stack+0x2c/0x3c (C) [ 35.422302][ T5023] __dump_stack+0x30/0x40 [ 35.422314][ T5023] dump_stack_lvl+0xd8/0x12c [ 35.422324][ T5023] dump_stack+0x1c/0x28 [ 35.422334][ T5023] should_fail_ex+0x41c/0x590 [ 35.422346][ T5023] should_fail+0x14/0x24 [ 35.422356][ T5023] should_fail_usercopy+0x20/0x30 [ 35.422364][ T5023] simple_read_from_buffer+0xc4/0x238 [ 35.422375][ T5023] proc_fail_nth_read+0x1a8/0x248 [ 35.422383][ T5023] vfs_read+0x230/0x8c8 [ 35.422391][ T5023] ksys_read+0x12c/0x228 [ 35.422397][ T5023] __arm64_sys_read+0x84/0x98 [ 35.422404][ T5023] invoke_syscall+0x98/0x244 [ 35.422415][ T5023] el0_svc_common+0xec/0x23c [ 35.422425][ T5023] do_el0_svc+0x4c/0x5c [ 35.422434][ T5023] el0_svc+0x64/0x260 [ 35.422443][ T5023] el0t_64_sync_handler+0x48/0x148 [ 35.422450][ T5023] el0t_64_sync+0x198/0x19c [ 35.454771][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 35.476139][ T5028] FAULT_INJECTION: forcing a failure. [ 35.476139][ T5028] name failslab, interval 1, probability 0, space 0, times 0 [ 35.478632][ T5028] CPU: 1 UID: 0 PID: 5028 Comm: syz.1.38 Not tainted syzkaller #0 PREEMPT [ 35.478645][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.478651][ T5028] Call trace: [ 35.478654][ T5028] show_stack+0x2c/0x3c (C) [ 35.478673][ T5028] __dump_stack+0x30/0x40 [ 35.478685][ T5028] dump_stack_lvl+0xd8/0x12c [ 35.478695][ T5028] dump_stack+0x1c/0x28 [ 35.478705][ T5028] should_fail_ex+0x41c/0x590 [ 35.478716][ T5028] should_failslab+0xc4/0x120 [ 35.478725][ T5028] __kvmalloc_node_noprof+0x160/0x7d8 [ 35.478734][ T5028] io_alloc_cache_init+0x48/0x154 [ 35.478742][ T5028] io_ring_ctx_alloc+0x3b0/0x934 [ 35.478751][ T5028] io_uring_create+0x6c/0x830 [ 35.478759][ T5028] __arm64_sys_io_uring_setup+0x284/0x290 [ 35.478769][ T5028] invoke_syscall+0x98/0x244 [ 35.478779][ T5028] el0_svc_common+0xec/0x23c [ 35.478789][ T5028] do_el0_svc+0x4c/0x5c [ 35.478798][ T5028] el0_svc+0x64/0x260 [ 35.478806][ T5028] el0t_64_sync_handler+0x48/0x148 [ 35.478813][ T5028] el0t_64_sync+0x198/0x19c [ 35.747350][ T5038] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 35.961910][ T5043] FAULT_INJECTION: forcing a failure. [ 35.961910][ T5043] name failslab, interval 1, probability 0, space 0, times 0 [ 35.961950][ T5043] CPU: 1 UID: 0 PID: 5043 Comm: syz.3.41 Not tainted syzkaller #0 PREEMPT [ 35.961962][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.961968][ T5043] Call trace: [ 35.961972][ T5043] show_stack+0x2c/0x3c (C) [ 35.961994][ T5043] __dump_stack+0x30/0x40 [ 35.962005][ T5043] dump_stack_lvl+0xd8/0x12c [ 35.962016][ T5043] dump_stack+0x1c/0x28 [ 35.962025][ T5043] should_fail_ex+0x41c/0x590 [ 35.962037][ T5043] should_failslab+0xc4/0x120 [ 35.962046][ T5043] kmem_cache_alloc_noprof+0x94/0x5d8 [ 35.962054][ T5043] skb_clone+0x1ac/0x320 [ 35.962065][ T5043] __netlink_deliver_tap+0x364/0x6f4 [ 35.962083][ T5043] netlink_deliver_tap+0x1d8/0x1dc [ 35.962092][ T5043] netlink_unicast+0x5dc/0x7f8 [ 35.962101][ T5043] netlink_sendmsg+0x648/0x948 [ 35.962110][ T5043] __sock_sendmsg+0xc8/0x17c [ 35.962119][ T5043] ____sys_sendmsg+0x3d0/0x6c8 [ 35.962129][ T5043] ___sys_sendmsg+0x198/0x224 [ 35.962138][ T5043] __sys_sendmsg+0x158/0x204 [ 35.962147][ T5043] __arm64_sys_sendmsg+0x88/0x9c [ 35.962156][ T5043] invoke_syscall+0x98/0x244 [ 35.962167][ T5043] el0_svc_common+0xec/0x23c [ 35.962176][ T5043] do_el0_svc+0x4c/0x5c [ 35.962186][ T5043] el0_svc+0x64/0x260 [ 35.962195][ T5043] el0t_64_sync_handler+0x48/0x148 [ 35.962202][ T5043] el0t_64_sync+0x198/0x19c [ 36.017611][ T5047] FAULT_INJECTION: forcing a failure. [ 36.017611][ T5047] name failslab, interval 1, probability 0, space 0, times 0 [ 36.020238][ T5047] CPU: 0 UID: 0 PID: 5047 Comm: syz.3.42 Not tainted syzkaller #0 PREEMPT [ 36.020254][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 36.020260][ T5047] Call trace: [ 36.020263][ T5047] show_stack+0x2c/0x3c (C) [ 36.020281][ T5047] __dump_stack+0x30/0x40 [ 36.020292][ T5047] dump_stack_lvl+0xd8/0x12c [ 36.020302][ T5047] dump_stack+0x1c/0x28 [ 36.020312][ T5047] should_fail_ex+0x41c/0x590 [ 36.020322][ T5047] should_failslab+0xc4/0x120 [ 36.020330][ T5047] __kmalloc_cache_noprof+0x94/0x5ec [ 36.020339][ T5047] rtnl_newlink+0x110/0x1144 [ 36.020349][ T5047] rtnetlink_rcv_msg+0x66c/0x9bc [ 36.020357][ T5047] netlink_rcv_skb+0x238/0x414 [ 36.020366][ T5047] rtnetlink_rcv+0x28/0x38 [ 36.020374][ T5047] netlink_unicast+0x600/0x7f8 [ 36.020382][ T5047] netlink_sendmsg+0x648/0x948 [ 36.020391][ T5047] __sock_sendmsg+0xc8/0x17c [ 36.020400][ T5047] ____sys_sendmsg+0x3d0/0x6c8 [ 36.020409][ T5047] ___sys_sendmsg+0x198/0x224 [ 36.020418][ T5047] __sys_sendmsg+0x158/0x204 [ 36.020427][ T5047] __arm64_sys_sendmsg+0x88/0x9c [ 36.020437][ T5047] invoke_syscall+0x98/0x244 [ 36.020447][ T5047] el0_svc_common+0xec/0x23c [ 36.020456][ T5047] do_el0_svc+0x4c/0x5c [ 36.020466][ T5047] el0_svc+0x64/0x260 [ 36.020473][ T5047] el0t_64_sync_handler+0x48/0x148 [ 36.020481][ T5047] el0t_64_sync+0x198/0x19c [ 36.498970][ T5067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.46'. [ 36.501080][ T5067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.46'. [ 36.523815][ T5070] binder: 5069:5070 Acquire 1 refcount change on invalid ref 0 ret -22 [ 36.523856][ T5070] binder: 5069:5070 ioctl c0306201 20000080 returned -14 [ 36.539636][ T5070] binder: 5069:5070 ioctl c0306201 200003c0 returned -14 [ 36.561356][ T5073] loop0: detected capacity change from 0 to 512 [ 36.582450][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.46: iget: bad extra_isize 58 (inode size 256) [ 36.582523][ T5073] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.585280][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 36.585293][ C1] EXT4-fs (loop0): initial error at time 36: ext4_xattr_inode_iget:441: inode 11 [ 36.585311][ C1] EXT4-fs (loop0): last error at time 36: ext4_xattr_inode_iget:441: inode 11 [ 36.600602][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.46: error while reading EA inode 11 err=-117 [ 36.600673][ T5073] loop0: lost filesystem error report for type 5 error -117 [ 36.603253][ T5073] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.603391][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.46: iget: bad extra_isize 58 (inode size 256) [ 36.603406][ T5073] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.609844][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.46: error while reading EA inode 11 err=-117 [ 36.609877][ T5073] loop0: lost filesystem error report for type 5 error -117 [ 36.610164][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.46: iget: bad extra_isize 58 (inode size 256) [ 36.610184][ T5073] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 36.612107][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.46: error while reading EA inode 18 err=-117 [ 36.612128][ T5073] loop0: lost filesystem error report for type 5 error -117 [ 36.614619][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.46: iget: bad extra_isize 58 (inode size 256) [ 36.614640][ T5073] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 36.618634][ T5073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.46: error while reading EA inode 18 err=-117 [ 36.618650][ T5073] loop0: lost filesystem error report for type 5 error -117 [ 36.619164][ T5073] EXT4-fs (loop0): 1 orphan inode deleted [ 36.619632][ T5073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.643194][ T5080] loop2: detected capacity change from 0 to 1024 [ 36.662823][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.665446][ T5080] ======================================================= [ 36.665446][ T5080] WARNING: The mand mount option has been deprecated and [ 36.665446][ T5080] and is ignored by this kernel. Remove the mand [ 36.665446][ T5080] option from the mount to silence this warning. [ 36.665446][ T5080] ======================================================= [ 36.665513][ T5080] EXT4-fs: inline encryption not supported [ 36.720378][ T5080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.733153][ T5082] syzkaller0: entered promiscuous mode [ 36.733185][ T5082] syzkaller0: entered allmulticast mode [ 36.738864][ T5082] tipc: Enabling of bearer rejected, failed to enable media [ 36.876327][ T5089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 37.231177][ T5100] loop0: detected capacity change from 0 to 2048 [ 37.250519][ T5100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.283693][ T5106] FAULT_INJECTION: forcing a failure. [ 37.283693][ T5106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.288392][ T5106] CPU: 0 UID: 0 PID: 5106 Comm: syz.1.55 Not tainted syzkaller #0 PREEMPT [ 37.288413][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.288419][ T5106] Call trace: [ 37.288423][ T5106] show_stack+0x2c/0x3c (C) [ 37.288442][ T5106] __dump_stack+0x30/0x40 [ 37.288453][ T5106] dump_stack_lvl+0xd8/0x12c [ 37.288464][ T5106] dump_stack+0x1c/0x28 [ 37.288473][ T5106] should_fail_ex+0x41c/0x590 [ 37.288485][ T5106] should_fail+0x14/0x24 [ 37.288495][ T5106] should_fail_usercopy+0x20/0x30 [ 37.288502][ T5106] _inline_copy_from_user+0x3c/0x174 [ 37.288513][ T5106] move_addr_to_kernel+0x88/0x168 [ 37.288521][ T5106] __sys_connect+0xd4/0x194 [ 37.288530][ T5106] __arm64_sys_connect+0x84/0x9c [ 37.288539][ T5106] invoke_syscall+0x98/0x244 [ 37.288549][ T5106] el0_svc_common+0xec/0x23c [ 37.288559][ T5106] do_el0_svc+0x4c/0x5c [ 37.288569][ T5106] el0_svc+0x64/0x260 [ 37.288577][ T5106] el0t_64_sync_handler+0x48/0x148 [ 37.288585][ T5106] el0t_64_sync+0x198/0x19c [ 37.326008][ T5091] macvtap1: entered promiscuous mode [ 37.326034][ T5091] vlan0: entered promiscuous mode [ 37.326213][ T5091] macvtap1: entered allmulticast mode [ 37.326220][ T5091] vlan0: entered allmulticast mode [ 37.326227][ T5091] veth0_vlan: entered allmulticast mode [ 37.420359][ T5112] FAULT_INJECTION: forcing a failure. [ 37.420359][ T5112] name failslab, interval 1, probability 0, space 0, times 0 [ 37.420396][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: syz.3.58 Not tainted syzkaller #0 PREEMPT [ 37.420407][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.420414][ T5112] Call trace: [ 37.420418][ T5112] show_stack+0x2c/0x3c (C) [ 37.420438][ T5112] __dump_stack+0x30/0x40 [ 37.420449][ T5112] dump_stack_lvl+0xd8/0x12c [ 37.420460][ T5112] dump_stack+0x1c/0x28 [ 37.420469][ T5112] should_fail_ex+0x41c/0x590 [ 37.420481][ T5112] sh ** replaying previous printk message ** [ 37.420481][ T5112] should_failslab+0xc4/0x120 [ 37.420489][ T5112] kmem_cache_alloc_noprof+0x94/0x5d8 [ 37.420498][ T5112] skb_clone+0x1ac/0x320 [ 37.420509][ T5112] __netlink_deliver_tap+0x364/0x6f4 [ 37.420519][ T5112] netlink_deliver_tap+0x1d8/0x1dc [ 37.420528][ T5112] netlink_unicast+0x5dc/0x7f8 [ 37.420537][ T5112] netlink_sendmsg+0x648/0x948 [ 37.420546][ T5112] __sock_sendmsg+0xc8/0x17c [ 37.420557][ T5112] ____sys_sendmsg+0x3d0/0x6c8 [ 37.420566][ T5112] ___sys_sendmsg+0x198/0x224 [ 37.420576][ T5112] __sys_sendmsg+0x158/0x204 [ 37.420585][ T5112] __arm64_sys_sendmsg+0x88/0x9c [ 37.420594][ T5112] invoke_syscall+0x98/0x244 [ 37.420604][ T5112] el0_svc_common+0xec/0x23c [ 37.420614][ T5112] do_el0_svc+0x4c/0x5c [ 37.420623][ T5112] el0_svc+0x64/0x260 [ 37.420632][ T5112] el0t_64_sync_handler+0x48/0x148 [ 37.420639][ T5112] el0t_64_sync+0x198/0x19c [ 37.421774][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'. [ 37.421788][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 37.431050][ T12] [ 37.450380][ T12] ====================================================== [ 37.451591][ T12] WARNING: possible circular locking dependency detected [ 37.452740][ T12] syzkaller #0 Not tainted [ 37.453456][ T12] ------------------------------------------------------ [ 37.454632][ T12] kworker/u8:0/12 is trying to acquire lock: [ 37.455649][ T12] ffff0000da6367e0 (&ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x30/0x114 [ 37.457250][ T12] [ 37.457250][ T12] but task is already holding lock: [ 37.458438][ T12] ffff0000d76bec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 37.460117][ T12] [ 37.460117][ T12] which lock already depends on the new lock. [ 37.460117][ T12] [ 37.461849][ T12] [ 37.461849][ T12] the existing dependency chain (in reverse order) is: [ 37.463314][ T12] [ 37.463314][ T12] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 37.464713][ T12] percpu_down_read_internal+0x5c/0x294 [ 37.465761][ T12] ext4_writepages+0x170/0x2dc [ 37.466662][ T12] do_writepages+0x284/0x47c [ 37.467545][ T12] __writeback_single_inode+0x140/0x1880 [ 37.468771][ T12] writeback_single_inode+0x400/0xb20 [ 37.469807][ T12] write_inode_now+0x170/0x208 [ 37.470744][ T12] iput+0x7cc/0xc2c [ 37.471514][ T12] ext4_xattr_block_set+0x1b1c/0x21e8 [ 37.472514][ T12] ext4_expand_extra_isize_ea+0xaf4/0x1384 [ 37.473616][ T12] __ext4_expand_extra_isize+0x2a4/0x378 [ 37.474703][ T12] __ext4_mark_inode_dirty+0x394/0x828 [ 37.475727][ T12] ext4_evict_inode+0x798/0xfb8 [ 37.476645][ T12] evict+0x4c0/0x74c [ 37.477400][ T12] iput+0x8f0/0xc2c [ 37.478166][ T12] ext4_process_orphan+0x24c/0x2c0 [ 37.479054][ T12] ext4_orphan_cleanup+0x7d4/0xd20 [ 37.479981][ T12] ext4_fill_super+0x4628/0x4e14 [ 37.480882][ T12] get_tree_bdev_flags+0x388/0x43c [ 37.481800][ T12] get_tree_bdev+0x2c/0x3c [ 37.482678][ T12] ext4_get_tree+0x28/0x38 [ 37.483527][ T12] vfs_get_tree+0x90/0x28c [ 37.484348][ T12] fc_mount+0x24/0xac [ 37.485075][ T12] do_new_mount+0x2a4/0x538 [ 37.485884][ T12] path_mount+0x5f0/0xa88 [ 37.486663][ T12] do_mount+0xe8/0x148 [ 37.487416][ T12] __arm64_sys_mount+0x33c/0x388 [ 37.488302][ T12] invoke_syscall+0x98/0x244 [ 37.489173][ T12] el0_svc_common+0xec/0x23c [ 37.490027][ T12] do_el0_svc+0x4c/0x5c [ 37.490817][ T12] el0_svc+0x64/0x260 [ 37.491598][ T12] el0t_64_sync_handler+0x48/0x148 [ 37.492576][ T12] el0t_64_sync+0x198/0x19c [ 37.493432][ T12] [ 37.493432][ T12] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 37.494739][ T12] __lock_acquire+0x17c0/0x2ebc [ 37.495698][ T12] lock_acquire+0x140/0x364 [ 37.496536][ T12] down_write+0x50/0xc0 [ 37.497331][ T12] ext4_destroy_inline_data+0x30/0x114 [ 37.498403][ T12] ext4_do_writepages+0x3e4/0x3bc0 [ 37.499409][ T12] ext4_writepages+0x198/0x2dc [ 37.500332][ T12] do_writepages+0x284/0x47c [ 37.501170][ T12] __writeback_single_inode+0x140/0x1880 [ 37.502244][ T12] writeback_sb_inodes+0x798/0x1720 [ 37.503191][ T12] wb_writeback+0x3bc/0x10cc [ 37.504044][ T12] wb_workfn+0x318/0xda8 [ 37.504853][ T12] process_scheduled_works+0x788/0x10b8 [ 37.505857][ T12] worker_thread+0x798/0xbd0 [ 37.506716][ T12] kthread+0x304/0x3d4 [ 37.507477][ T12] ret_from_fork+0x10/0x20 [ 37.508306][ T12] [ 37.508306][ T12] other info that might help us debug this: [ 37.508306][ T12] [ 37.510010][ T12] Possible unsafe locking scenario: [ 37.510010][ T12] [ 37.511288][ T12] CPU0 CPU1 [ 37.512158][ T12] ---- ---- [ 37.513089][ T12] rlock(&sbi->s_writepages_rwsem); [ 37.513945][ T12] lock(&ei->xattr_sem); [ 37.515039][ T12] lock(&sbi->s_writepages_rwsem); [ 37.516299][ T12] lock(&ei->xattr_sem); [ 37.516974][ T12] [ 37.516974][ T12] *** DEADLOCK *** [ 37.516974][ T12] [ 37.518249][ T12] 3 locks held by kworker/u8:0/12: [ 37.518260][ T5112] bridge0: port 3(bond0) entered blocking state [ 37.518342][ T5112] bridge0: port 3(bond0) entered disabled state [ 37.518738][ T5112] bond0: entered allmulticast mode [ 37.518765][ T5112] bond_slave_0: entered allmulticast mode [ 37.518793][ T5112] bond_slave_1: entered allmulticast mode [ 37.519238][ T5112] bond0: entered promiscuous mode [ 37.519262][ T5112] bond_slave_0: entered promiscuous mode [ 37.519325][ T5112] bond_slave_1: entered promiscuous mode [ 37.526571][ T12] #0: ffff0000c1fe7940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x734/0x10b8 [ 37.528587][ T12] #1: ffff80008ec97c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x73c/0x10b8 [ 37.530903][ T12] #2: ffff0000d76bec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x170/0x2dc [ 37.532588][ T12] [ 37.532588][ T12] stack backtrace: [ 37.533571][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT [ 37.535010][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.536675][ T12] Workqueue: writeback wb_workfn (flush-7:0) [ 37.537700][ T12] Call trace: [ 37.538259][ T12] show_stack+0x2c/0x3c (C) [ 37.539029][ T12] __dump_stack+0x30/0x40 [ 37.539768][ T12] dump_stack_lvl+0xd8/0x12c [ 37.540579][ T12] dump_stack+0x1c/0x28 [ 37.541266][ T12] print_circular_bug+0x328/0x330 [ 37.542109][ T12] check_noncircular+0x158/0x174 [ 37.542973][ T12] __lock_acquire+0x17c0/0x2ebc [ 37.543750][ T12] lock_acquire+0x140/0x364 [ 37.544485][ T12] down_write+0x50/0xc0 [ 37.545208][ T12] ext4_destroy_inline_data+0x30/0x114 [ 37.546140][ T12] ext4_do_writepages+0x3e4/0x3bc0 [ 37.546994][ T12] ext4_writepages+0x198/0x2dc [ 37.547777][ T12] do_writepages+0x284/0x47c [ 37.548559][ T12] __writeback_single_inode+0x140/0x1880 [ 37.549490][ T12] writeback_sb_inodes+0x798/0x1720 [ 37.550349][ T12] wb_writeback+0x3bc/0x10cc [ 37.551146][ T12] wb_workfn+0x318/0xda8 [ 37.551886][ T12] process_scheduled_works+0x788/0x10b8 [ 37.552877][ T12] worker_thread+0x798/0xbd0 [ 37.553670][ T12] kthread+0x304/0x3d4 [ 37.554382][ T12] ret_from_fork+0x10/0x20 [ 37.578977][ T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 37.581997][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1024 with error 28 [ 37.584158][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.584158][ T12] [ 37.586315][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 37.587514][ T12] EXT4-fs (loop0): Free/Dirty block details [ 37.588701][ T12] EXT4-fs (loop0): free_blocks=4096 [ 37.589830][ T12] EXT4-fs (loop0): dirty_blocks=1024 [ 37.590871][ T12] EXT4-fs (loop0): Block reservation details [ 37.592062][ T12] EXT4-fs (loop0): i_reserved_data_blocks=64 [ 37.596927][ T4718] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 37.597916][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.613645][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.792288][ T5117] FAULT_INJECTION: forcing a failure. [ 37.792288][ T5117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.792333][ T5117] CPU: 1 UID: 0 PID: 5117 Comm: syz.0.59 Not tainted syzkaller #0 PREEMPT [ 37.792348][ T5117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.792353][ T5117] Call trace: [ 37.792356][ T5117] show_stack+0x2c/0x3c (C) [ 37.792376][ T5117] __dump_stack+0x30/0x40 [ 37.792387][ T5117] dump_stack_lvl+0xd8/0x12c [ 37.792397][ T5117] dump_stack+0x1c/0x28 [ 37.792406][ T5117] should_fail_ex+0x41c/0x590 [ 37.792418][ T5117] should_fail+0x14/0x24 [ 37.792428][ T5117] should_fail_usercopy+0x20/0x30 [ 37.792434][ T5117] __arm64_sys_wait4+0x170/0x2d0 [ 37.792442][ T5117] invoke_syscall+0x98/0x244 [ 37.792452][ T5117] el0_svc_common+0xec/0x23c [ 37.792461][ T5117] do_el0_svc+0x4c/0x5c [ 37.792471][ T5117] el0_svc+0x64/0x260 [ 37.792479][ T5117] el0t_64_sync_handler+0x48/0x148 [ 37.792486][ T5117] el0t_64_sync+0x198/0x19c