last executing test programs: 1m24.279612885s ago: executing program 32 (id=83): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000029c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000002a00)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) 47.801454297s ago: executing program 1 (id=1182): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x10, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES16], 0x1c}}, 0x840) r4 = dup(r0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7103b3", @ANYRESDEC=r8], 0xb6) bind$nfc_llcp(r4, &(0x7f0000000380)={0x27, r8, 0x0, 0x4, 0xa0, 0xf, "c251096881c66464efaa2baf003adfe0684a1daec34a3dd5a601bcca35598b67abc7b97323a8bc766dd809d5e9010d02e06d967424e5b0bd510a1164e4d9c2", 0x25}, 0x60) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="510302"], 0xc) 47.74934422s ago: executing program 2 (id=1185): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@arp={0x8902, @generic={0x101, 0x884c, 0x6, 0x0, 0x2, @random="2daa41df7773", "", @local}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 47.698248002s ago: executing program 2 (id=1187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0xc40) 47.604167044s ago: executing program 2 (id=1191): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000140)=ANY=[], 0x1, 0x1e8, &(0x7f0000000180)="$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") r1 = openat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) lseek(r1, 0x4, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'}) socket$inet(0x2, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x80000, 0x1) open_by_handle_at(r4, &(0x7f0000000f40)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 47.542714103s ago: executing program 2 (id=1193): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(0x0, 0x2, 0x2) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000d40)='27', 0x2) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) add_key(&(0x7f0000000d80)='asymmetric\x00', 0x0, &(0x7f0000000dc0)="3082", 0x2, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@bsdgroups}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000400)="$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") mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000900)='./file0\x00') mount$bind(&(0x7f0000000940)='.\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0/../file0/../file0\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0x10, &(0x7f0000000240)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) memfd_create(&(0x7f0000001040)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xc3\xc6\xdf\x811\xac5\x8a\xf1\x06h\x96\x0e{$)\xd3\x01?\xa3\xdan|!9\t\xf1\xa5\xb9\xb0\xcf\xc57\x12|\xda7X\xcch\x102\xa5\x98\xac\x06B\xff{\xc7\xfd\xf3\xff\x15\xa9O\xe3\xe1\']^\x16\x7f\x15\xe9Y\xb5R!l!m\xc9\x11$T\xb1*>\x04\x95L\b;<\x8c\x1eY2M[\xe2B\xd7\xa7\xd2:3\x8bN7\xe4y\xfd\xb6BA0oe\ta\x85\xd0\xc1w\xf2\x81\x04\xe9B9\xc8\xe2\xb3]\xe6\xf2m\x90L\\;\x0e\x91e\xcc3\xae]\x18\x83\"\xed\xc6R\xb2\'tLnz\x97\xc4\xa3\xd0R\xc3Q\xe0\xf5\xab\x1b|F$\x01\x0f\x02\xbcm\n\xbf\xed\xfa\xdf\xa6\x81\x13\xa6\xa1%\xe8\\\xe9\xcf@\xaf\xb3\x85\xe9*\x9d_\xb9\xe2\xbej2\x18*\x13\xde\x80', 0xc) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="05031620d3fc14031c004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000b40)='ns/net\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="200000005a000d080000000000000000040000800c0003"], 0x20}], 0x1}, 0x0) 47.35294214s ago: executing program 2 (id=1195): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x1]}, 0x8, 0x80800) close_range(r0, 0xffffffffffffffff, 0x2) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x1000, @local}, 0x1c) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x3f, 0x4) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x2000, 0x32}, 0x9c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x100, 0x52) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000801, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="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", 0x390}, {&(0x7f0000000c00)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f03f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x0) 46.968138725s ago: executing program 2 (id=1196): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bond0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005000100060000000800", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) add_key(&(0x7f0000000600)='asymmetric\x00', 0x0, &(0x7f0000002e00)="3082", 0x2, 0xfffffffffffffffe) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000002cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002d00)=0x14) sendmsg$nl_route(r7, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002dc0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r10, 0x905, 0x70bd2c, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xfe, 0x531, &(0x7f0000000640)="$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") r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') read$FUSE(r11, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r13, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r11, 0xc0207511, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, r12}) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r6, 0x84, 0x83, &(0x7f0000002e40)={0x1, 0x1}, &(0x7f0000002e80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000002ec0)={r14, 0x7fff}, &(0x7f0000002f00)=0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r15, 0x0, 0x8}, 0xc) (async) read$qrtrtun(r11, &(0x7f0000000380)=""/229, 0xe5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0xfe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) 46.967158904s ago: executing program 33 (id=1196): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bond0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e64000000001400028005000100060000000800", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) add_key(&(0x7f0000000600)='asymmetric\x00', 0x0, &(0x7f0000002e00)="3082", 0x2, 0xfffffffffffffffe) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000002cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002d00)=0x14) sendmsg$nl_route(r7, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002dc0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) (async) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r10, 0x905, 0x70bd2c, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xfe, 0x531, &(0x7f0000000640)="$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") r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') read$FUSE(r11, &(0x7f0000000b80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r13, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r11, 0xc0207511, &(0x7f0000000300)={0x0, 0xffff, 0x0, 0x0, r12}) getsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r6, 0x84, 0x83, &(0x7f0000002e40)={0x1, 0x1}, &(0x7f0000002e80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000002ec0)={r14, 0x7fff}, &(0x7f0000002f00)=0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r13, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r15, 0x0, 0x8}, 0xc) (async) read$qrtrtun(r11, &(0x7f0000000380)=""/229, 0xe5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0xfe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) 44.52801615s ago: executing program 1 (id=1201): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='.\x00', 0x0) 44.428266886s ago: executing program 1 (id=1202): ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 44.298142024s ago: executing program 1 (id=1206): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(0x0, 0x2, 0x2) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000d40)='27', 0x2) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) add_key(&(0x7f0000000d80)='asymmetric\x00', 0x0, &(0x7f0000000dc0)="3082", 0x2, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@bsdgroups}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000400)="$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") mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000900)='./file0\x00') mount$bind(&(0x7f0000000940)='.\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0/../file0/../file0\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0x10, &(0x7f0000000240)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) memfd_create(&(0x7f0000001040)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xc3\xc6\xdf\x811\xac5\x8a\xf1\x06h\x96\x0e{$)\xd3\x01?\xa3\xdan|!9\t\xf1\xa5\xb9\xb0\xcf\xc57\x12|\xda7X\xcch\x102\xa5\x98\xac\x06B\xff{\xc7\xfd\xf3\xff\x15\xa9O\xe3\xe1\']^\x16\x7f\x15\xe9Y\xb5R!l!m\xc9\x11$T\xb1*>\x04\x95L\b;<\x8c\x1eY2M[\xe2B\xd7\xa7\xd2:3\x8bN7\xe4y\xfd\xb6BA0oe\ta\x85\xd0\xc1w\xf2\x81\x04\xe9B9\xc8\xe2\xb3]\xe6\xf2m\x90L\\;\x0e\x91e\xcc3\xae]\x18\x83\"\xed\xc6R\xb2\'tLnz\x97\xc4\xa3\xd0R\xc3Q\xe0\xf5\xab\x1b|F$\x01\x0f\x02\xbcm\n\xbf\xed\xfa\xdf\xa6\x81\x13\xa6\xa1%\xe8\\\xe9\xcf@\xaf\xb3\x85\xe9*\x9d_\xb9\xe2\xbej2\x18*\x13\xde\x80', 0xc) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="05031620d3fc14031c004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000b40)='ns/net\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="200000005a000d080000000000000000040000800c0003"], 0x20}], 0x1}, 0x0) 44.117837786s ago: executing program 1 (id=1211): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='.\x00', 0x0) 43.469978992s ago: executing program 0 (id=1216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}]}, 0x40}}, 0x0) 43.296448982s ago: executing program 0 (id=1218): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@arp={0x8902, @generic={0x101, 0x884c, 0x6, 0x0, 0x2, @random="2daa41df7773", "", @local}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 43.184379381s ago: executing program 0 (id=1220): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0xc0686611, &(0x7f0000000080)=0x68) 43.183196504s ago: executing program 0 (id=1221): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$vim2m(0x0, 0x2, 0x2) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='./proc\x00', &(0x7f0000000cc0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000d40)='27', 0x2) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) add_key(&(0x7f0000000d80)='asymmetric\x00', 0x0, &(0x7f0000000dc0)="3082", 0x2, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@bsdgroups}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000400)="$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") mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000900)='./file0\x00') mount$bind(&(0x7f0000000940)='.\x00', &(0x7f0000000980)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f00000009c0)='.\x00', &(0x7f0000000a00)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0/../file0/../file0\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0x10, &(0x7f0000000240)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) memfd_create(&(0x7f0000001040)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xc3\xc6\xdf\x811\xac5\x8a\xf1\x06h\x96\x0e{$)\xd3\x01?\xa3\xdan|!9\t\xf1\xa5\xb9\xb0\xcf\xc57\x12|\xda7X\xcch\x102\xa5\x98\xac\x06B\xff{\xc7\xfd\xf3\xff\x15\xa9O\xe3\xe1\']^\x16\x7f\x15\xe9Y\xb5R!l!m\xc9\x11$T\xb1*>\x04\x95L\b;<\x8c\x1eY2M[\xe2B\xd7\xa7\xd2:3\x8bN7\xe4y\xfd\xb6BA0oe\ta\x85\xd0\xc1w\xf2\x81\x04\xe9B9\xc8\xe2\xb3]\xe6\xf2m\x90L\\;\x0e\x91e\xcc3\xae]\x18\x83\"\xed\xc6R\xb2\'tLnz\x97\xc4\xa3\xd0R\xc3Q\xe0\xf5\xab\x1b|F$\x01\x0f\x02\xbcm\n\xbf\xed\xfa\xdf\xa6\x81\x13\xa6\xa1%\xe8\\\xe9\xcf@\xaf\xb3\x85\xe9*\x9d_\xb9\xe2\xbej2\x18*\x13\xde\x80', 0xc) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f00000000c0)="05031620d3fc14031c004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000b40)='ns/net\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=ANY=[@ANYBLOB="200000005a000d080000000000000000040000800c0003"], 0x20}], 0x1}, 0x0) 42.921406561s ago: executing program 0 (id=1225): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000019680)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x2cd, &(0x7f0000000080)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) 42.560928268s ago: executing program 1 (id=1228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}]}, 0x40}}, 0x0) 42.509034831s ago: executing program 34 (id=1228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x1}}]}}]}, 0x40}}, 0x0) 42.483964881s ago: executing program 0 (id=1230): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@arp={0x8902, @generic={0x101, 0x884c, 0x6, 0x0, 0x2, @random="2daa41df7773", "", @local}}}}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1"], 0x47) 42.424512444s ago: executing program 35 (id=1230): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@arp={0x8902, @generic={0x101, 0x884c, 0x6, 0x0, 0x2, @random="2daa41df7773", "", @local}}}}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e4403021002d1"], 0x47) 34.639959843s ago: executing program 7 (id=1396): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000640)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000680)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000006c0)=0x7f) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(0x0, 0x0, &(0x7f00000021c0), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000002340)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x8, 0x0, 0x1, 0x3, 0x6, 0x0, 0x0, 0x63, 0xfd, 0x8, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x4, @private0, 0x6}, {0xa, 0x4e20, 0x6, @private0, 0x9}, 0xffffffffffffffff, 0x2}}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x10000002, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0x3a52, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x0, 0x4, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x6, 0xe, 0x5, 0x7, 0x6, 0x2, 0x2, 0x1, 0xd, 0x7, 0x20200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0xe8, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x2, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x0, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x4001000, 0x7f, 0x2, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x9, 0x2851, 0x3b, 0x20000001, 0x5, 0x101, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0x4, 0xf, 0x135, 0x6]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) ioctl$UI_DEV_CREATE(r6, 0x5501) request_key(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$UHID_INPUT(r7, &(0x7f0000002800)={0x8, {"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", 0x1000}}, 0x1006) 34.117528403s ago: executing program 7 (id=1409): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000002800)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@jqfmt_vfsv0}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noquota}, {@delalloc}, {@noblock_validity}, {@nodioread_nolock}, {@errors_remount}]}, 0x11, 0x5a3, &(0x7f00000002c0)="$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") r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x141442, 0xc0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x42, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) pwrite64(r2, &(0x7f0000000ec0)='\f', 0x1, 0x8000c61) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) fallocate(r1, 0x0, 0xfff, 0x9) 34.043606261s ago: executing program 7 (id=1412): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000140)=ANY=[], 0x1, 0x1e8, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x80000, 0x1) open_by_handle_at(r0, 0x0, 0x0) 33.908151338s ago: executing program 7 (id=1415): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./mnt\x00', 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000e80)='./sys/module/usbcore/parameters/quirks\x00', 0x0, 0x0) write(r0, &(0x7f0000000ec0), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000f00)='./mnt\x00', &(0x7f0000000f40)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f80)='./mnt/trace_marker\x00', 0x1, 0x5a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000fc0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000001000)=""/16384, 0x4000) r2 = io_uring_setup(0x5d38, &(0x7f0000000000)={0x0, 0xcf32, 0x2, 0x3, 0x109}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0x55b6, 0x4) close_range(r2, r2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='syzkaller\x00'}, 0x48) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000c00)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000c80)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000d40)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000e40), &(0x7f0000000e80), 0x0, 0x700}, 0x2c) ptrace$setregset(0x4205, r4, 0x402, 0x0) 32.979873293s ago: executing program 7 (id=1434): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f00000013c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0xffff0000, 0xf0, 0x0, &(0x7f0000001480)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 32.643851697s ago: executing program 7 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r4, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152, 0x0, 0x0, '\x00', r2}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.602217452s ago: executing program 36 (id=1447): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r4, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152, 0x0, 0x0, '\x00', r2}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001340)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.598613728s ago: executing program 6 (id=1562): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000200)={0x5, &(0x7f0000000740)=[{0x1b, '\x00', @st={0x4, [{0x0, @uvalue=0x7}, {0x1, @uvalue=0x3}, {0x3, @svalue=0x2}, {0x1, @svalue=0x10008}]}, 0x2}, {0x27, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x3, @svalue=0x2}, {0x1, @uvalue=0x6}, {0x1, @svalue=0x401}]}, 0x5}, {0x3f, '\x00', @st={0x4, [{0x3, @svalue=0x1ff}, {0x0, @svalue=0x2}, {0x1, @uvalue=0xa}, {0x3, @svalue=0xff}]}, 0x6448}]}) 24.540299091s ago: executing program 6 (id=1563): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x26}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='autogroup\x00') r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0xc0686611, &(0x7f0000000080)=0x68) 24.468323129s ago: executing program 6 (id=1564): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000019680)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x2cd, &(0x7f0000000080)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff20000000050020000000"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) 24.464387567s ago: executing program 6 (id=1565): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r0, r0, r0}, &(0x7f0000000240)=""/72, 0x48, &(0x7f00000002c0)={&(0x7f0000000300)={'xcbc(seed)\x00'}}) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) r1 = geteuid() mount$9p_virtio(&(0x7f0000000140), &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000380)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r1}}, {@fscache}, {@access_any}, {@afid={'afid', 0x3d, 0x7}}]}}) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 24.395889875s ago: executing program 6 (id=1568): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000400)={0x1, 0xd, 0x17, 0x101, 0x0, 0x3, 0x0}) 24.040216664s ago: executing program 6 (id=1569): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x6}}, 0x20) 23.995013712s ago: executing program 37 (id=1569): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x6}}, 0x20) 3.414609825s ago: executing program 4 (id=1974): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x101c0ca, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000001900)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0xd2942, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000980)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a80)=@abs, 0x6e) (async) sendmmsg$unix(r2, 0x0, 0x0, 0x8041) (async) recvmmsg(r2, &(0x7f0000000b00), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000e00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x2, &(0x7f0000000380)=[{0x20, 0x2, 0x81, 0xfffff030}, {0x26}]}, 0x10) (async) io_setup(0x20ff, &(0x7f00000015c0)) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) syz_mount_image$fuse(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x2200008, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d27c6ee004ce9446c6efdf190bf7bfaa7a288aa87d92c7449ec", @ANYRESDEC=0xee01, @ANYBLOB="2c677283af01488f8551", @ANYRESDEC=0xee00, @ANYBLOB=',max_read=0x0000000000000001,blksize=0x0000000000001400,fsmagGc=0x0000000000000003,\x00'], 0x0, 0x0, &(0x7f0000000d00)="1c0d3fd8a84cf92cab0f575b97bd5915c8ed45d520c67f8e410444d08fce746994014db23dc52975954a813d0e3863447ad4464b0e648995971cd6f9c3f4fb0ed6c50a3850c45bda6cf245edb19893f5396ebb34de028445ee3b970b6fcc6785b392b44e829f8bfb3103b625ebd7d7f3fb0c674fc8493608cee8b3dea554eed8ad491772b8cc97531f495a1484ab3f75e6bc6610b829339f054b6f69b93c933cbb39df687f30dca25f5aab6c6350ca61aea8f2a78312459d7919771386c5fdf2c0605a4c57df130adda6e2955e38b20a5b03d4640ccd1a0966829e2040f8cf8002296eb0bb5dc200000000") (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000700000000000000ff018dbb34e769c97442000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mount$fuse(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0xc1404, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB=',audit,pcr=00000000000000000052,appraise_type=imasig,uid>', @ANYRESDEC=r7, @ANYBLOB=',audit,\x00']) read$FUSE(r8, &(0x7f0000003c80)={0x2020}, 0x2020) 2.860427304s ago: executing program 5 (id=1984): mq_getsetattr(0xffffffffffffffff, &(0x7f00000001c0)={0x405, 0x6, 0x3, 0x20000007}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000001000000852000004e9d020095"], &(0x7f0000000340)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r2 = syz_open_dev$dri(&(0x7f00000003c0), 0x4, 0x218000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000400)={&(0x7f0000000440)="b56138f56f986cb6de098a0fdce509921691990f47667cbfdf5693598d457a921face022b79f3a1393296b4eac5220e2cd60f5d3828f5303dd530a2f5bb0a9237a0bc03bc004c569aeb666af5a29dc40eac98b725549287b7c17949bc63021a26d41440061ea64d07c415e0845c5a0cde944ae46bfee10", 0x77, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f00000004c0)={r3}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000500)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000540)={r4, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000006c0)={'hsr0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000700)={0xffffffffffffffff, 0x0, &(0x7f0000000e00)={&(0x7f0000000840)=ANY=[@ANYBLOB="340000006800010030d0a90f22b5e1ed6346048556000000fddbdf25020000000000000006000714040000000c0008800500040001000000080005003b8976d802945eed074b23dc922df2c03635f8fba2b325878825f8877e1f46da1b81bde905854ae7a384d2b752d4c91cfb946cd4e64e6750f02a6858c0f7ce95ccd6a20b49a5758357e21cd861a8cca9e3d5419dc479a04c628d5004948c04e5869f444a052f24814ccaea050fecbf7612ad6d42615bb76a6ba2c45f0807d3e803a7e73447122f7b300c7c0c7a023dee183147de52bebce40dee4d9de3e6733d5a77", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4044c02}, 0x40040) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000580)={r4, 0x8}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0x6, 0x1, 0x2, 0x4}]}) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRESOCT], 0x48}}, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x22080, 0x0) ioctl$SIOCGSTAMP(r8, 0x8906, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000c00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r8, 0xfffffffffffffec1, &(0x7f0000000cc0)}, 0xfffffffffffffe11) r9 = io_uring_setup(0x899, &(0x7f0000000d40)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(r1, 0xc0186445, &(0x7f0000000640)={0x974a, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(r8, 0xc0106450, &(0x7f0000000680)={r10, 0x0, 0x2}) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000dc0)='cgroup2\x00', 0x1) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) 2.452230861s ago: executing program 3 (id=1993): mremap(&(0x7f000021d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00007d7000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1ad5b8c4d0783798, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0xfffe}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000500), &(0x7f0000000540)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x4000000, @mcast2, 0x7ff}, 0x1c) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) ioctl$SNAPSHOT_FREE(r6, 0x3305) socket$phonet_pipe(0x23, 0x5, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.960020029s ago: executing program 4 (id=1997): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x3, 0x428}}}, 0x7) syz_ublk_setup_io_uring(0x485d, &(0x7f0000000540)={0x0, 0x5dd7, 0x400, 0x2, 0x3af}, &(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) r1 = mmap$IORING_OFF_CQ_RING(0x0, 0x5, 0x6, 0x40010, 0xffffffffffffffff, 0x8000000) r2 = mmap$IORING_OFF_SQES(0x0, 0x4, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000880)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {}, {0xff}}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x0, {0x8}}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x23}, @l2cap_cid_signaling={{0x1f}, [@l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x1b3, 0x7}}, @l2cap_conf_req={{0x4, 0xd, 0x13}, {0xb4, 0x800, [@l2cap_conf_mtu={0x1, 0x2, 0x4}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0xf5, 0x0, 0xead, 0x80, 0x8000}}]}}]}}, 0x28) 1.920265636s ago: executing program 5 (id=1998): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0xffff0000, 0xb, 0x0, &(0x7f0000001480)="2b206d074843b397737ea4", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.902797513s ago: executing program 5 (id=1999): mremap(&(0x7f000021d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00007d7000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1ad5b8c4d0783798, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0xfffe}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000500), &(0x7f0000000540)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x4000000, @mcast2, 0x7ff}, 0x1c) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) ioctl$SNAPSHOT_FREE(r6, 0x3305) inotify_init1(0x800) socket$phonet_pipe(0x23, 0x5, 0x2) 1.483786487s ago: executing program 9 (id=2000): ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x2004c090) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 1.440815052s ago: executing program 3 (id=2001): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000140)=ANY=[], 0x1, 0x1e8, &(0x7f0000000180)="$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") r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x38, r1, 0x822, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6a}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x80000, 0x1) open_by_handle_at(r2, &(0x7f0000000f40)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.396152184s ago: executing program 3 (id=2002): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x6}}, 0x20) 1.395022135s ago: executing program 3 (id=2003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x2000c091}, 0x40040c4) 1.360518643s ago: executing program 3 (id=2004): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004840), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000004880), &(0x7f00000048c0)='./file0\x00', 0x0, &(0x7f0000004900)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, &(0x7f0000006ac0)={0xffffffffffffffff, 0x0, 0x1000000}) 1.359203356s ago: executing program 9 (id=2005): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYBLOB="80994dcf9e11575a624df3a677bf91a3a6525de86502f16cc7cc9ef431be8f4777f9b9c9bf8f08469d5d32c21b22bea1251a75166341a0f788bf6651f9cc8c", @ANYRESDEC], 0x10b8}, 0x8000) (async) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000780)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x4e24, 0x200400, @dev={0xfe, 0x80, '\x00', 0x26}, 0xc6}, 0x1c) (async) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_open_dev$vim2m(&(0x7f0000000400), 0x9, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000006c0), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f0000000700), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x6) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x2, 0x8200, 0x1, 0x8}, &(0x7f00000003c0)=0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX=r6], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) file_getattr(r8, 0x0, &(0x7f0000000480), 0x18, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) 1.202787894s ago: executing program 9 (id=2006): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.191584696s ago: executing program 9 (id=2007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x38b06}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0xc090) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x214802, &(0x7f0000000900)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@orlov}, {@noauto_da_alloc}, {@init_itable}, {@init_itable}]}, 0x1, 0x551, &(0x7f00000009c0)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000f40)='./file1\x00', &(0x7f0000000f80), &(0x7f0000000fc0)=ANY=[], 0x361, 0x0) llistxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001000)='ext4\x00', &(0x7f0000001040)='./file1\x00', 0x200000, &(0x7f0000001080)={[{@discard}, {@abort}, {@init_itable}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x55b, &(0x7f00000010c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000001640)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001680)='./file0/file0\x00', 0x2) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000019680)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x2cd, &(0x7f0000000080)="$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") r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000004c0)=[{{&(0x7f0000000500)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000580)="e2", 0x1}], 0x1}}], 0x1, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x400, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffed, 0xb}, {0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x18, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x9}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xfffffff8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4004890) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.events.local\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[], 0x3261e) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'bond0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x7005, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x13a7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) faccessat(r1, &(0x7f0000000fc0)='./file1\x00', 0x4b) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@flushpolicy={0x40, 0x12, 0x105, 0x6, 0x25dfdbff, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010102, @in6=@mcast1, 0xa, 0xd}}]}, 0x40}, 0x1, 0xff80}, 0x20040840) ioctl$F2FS_IOC_DEFRAGMENT(r10, 0xc010f508, &(0x7f0000001780)={0xea4, 0xd9}) 1.120529004s ago: executing program 4 (id=2008): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000200)={0x5, &(0x7f0000000740)=[{0x27, '\x00', @st={0x4, [{0x1, @uvalue=0x5}, {0x3, @svalue=0x2}, {0x1, @uvalue=0x6}, {0x1, @svalue=0x401}]}, 0x5}]}) io_uring_setup(0x1134, &(0x7f0000000000)={0x0, 0xf185, 0x4000, 0x1, 0x369}) 1.110443048s ago: executing program 4 (id=2009): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0xffff0000, 0xb, 0x0, &(0x7f0000001480)="2b206d074843b397737ea4", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.098400361s ago: executing program 8 (id=2010): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./mydev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./mydev/v4l-touch0\x00', 0x2, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x46040) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000005c0)={0x206, 0x3, 0x4, {0x1, @win={{0x7, 0x0, 0x5, 0x2}, 0x5, 0x5, 0x0, 0x3, 0x0, 0x5}}, 0x6}) 1.048256109s ago: executing program 4 (id=2011): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ublk_bdev(&(0x7f0000000080), 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21491c, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@errors_remount}, {@jqfmt_vfsold}, {@abort}, {@noauto_da_alloc}, {@init_itable}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") syz_open_procfs(0x0, &(0x7f00000001c0)='net/udplite6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) sched_setscheduler(r0, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7, 0x0, 0x0, 0x3}, &(0x7f0000000040)=[0x0], 0x1, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) futex(0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x1) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r4, &(0x7f0000000280), 0x400000000000166, 0x1a000, 0x0) 1.046218185s ago: executing program 8 (id=2012): mremap(&(0x7f000021d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00007d7000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x1ad5b8c4d0783798, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0xfffe}}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000500), &(0x7f0000000540)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/163, 0xa3}], 0x1}, 0x2000006}], 0x1, 0x23, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x4000000, @mcast2, 0x7ff}, 0x1c) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) ioctl$SNAPSHOT_FREE(r6, 0x3305) socket$phonet_pipe(0x23, 0x5, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) 631.383536ms ago: executing program 5 (id=2013): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='tahvo 0x02\x00', 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000480), 0x600220, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000140)=ANY=[], 0x1, 0x1e8, &(0x7f0000000180)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000b00)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000b40)={'pim6reg0\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000b80)={'ip6_vti0\x00', 0x400}) r3 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f00000005c0)="$eJzs3MtvVNUfAPDvvX3xbn8/8QGCVjGR+GhpeS7cYDRxoYmJLjCualsIUqjSmgghAV3g0pC4Ny5N/Atc4caoKxMTV7o3JMSwEU1Mxtw7984M0xnowMBQ5vNJBs6Ze4ZzvnPOua8zlwD61nj2RxKxKSJ+i4h11eyNBcarf12/dm7272vnZpOoVN76M8nL/XXt3GxZtPzcxmqmUinyIy3qvfhuxMzCwvzpIj+5fPKDyaUzZ188fnLm2Pyx+VPThw7t27tz+MD0/q7EOZq1dSQWd2x77Z1Lb8weufTej99k7d1UbG+Mo1vGq9/uSgPdrqn3Njekk8EeNoSOZEMx666hfP6PxkCsr20bjVc/7WnjgLuqUqlUWh2fCxcqwAMsiV63AOiN8kCfXf+Wr3t06nFfuHo44sOD1fivF6/qlsFIizJDTde33TQeEUcu/PNl9oq7dB8CAKDR5cMR8UKr8780Hmkot6VYQxmLiP9FxP8j4qGI2BoRD0fkZR+NiMc6rL95hWTl+U965bYCW6Xs/O+lYm2rdv73byWPvzA2UOQ25/EPJUePL8zvKb6T3TE0kuWnblLHd6/88nm7bY3nf9krq788F6xKrww23aCbm1meucOwa65+ErF9sCn+XBLlMk4SEdsiYntH/3L9CuP4c1/vaFeqHv/6iGgV/010YZ2p8lXEs9X+vxBN8ZeStuuTUwcPTO+fXBcL83smy1Gx0k8/X3yzXf237v+7K+v/Dc3jv95757Mhn6yLWDpz9kS+XrvUeR0Xf/+s+Zrmcjk4bnf8Dydv5+nh4r2PZ5aXT09FDCevr3x/uv7ZMl+Wz+LfvavV+E/zfVwU/f94RGSDeGdEPBERTxZ991REPB0Ru24S/w8vP/N+u23N8df2Oi1Xzbsvi3+uRf83jP+xLFXv/84TAye+/7Zd/avr/315anfxzi32f9nleqy2gXf6/QEAAMBakOa/gU/SiVo6TScmqr/h3xob0oXFpeXnjy5+dGqu+lv5sRhKyztdow33Q6eKe8Nlfropv7e4b/zFwPo8PzG7uDDX6+Chz21sM/8zfzyAz6kATTyvBf3L/If+Zf5D/6rP/wM9bQdw7zn+Q/9qNf/P96AdwL3n+A/9y/yH/mX+Q/8y/6Ev3fhI/HDUno1P7+iR/zWb+HXLfdGMNZCItPNPDUYv2zzc09pvOzG46v/MorPEaLELODPSskyPd0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABd8l8AAAD//wcu8Cs=") removexattr(&(0x7f0000000a40)='./file1\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="747275737465642e64617443f9e21c7f18753dec94c81d3c615f6570723d6967546f72657af43acb1e8042bb69fd971ba09fdd34f0e1f60135e1"]) capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000440)={0x200000, 0x200000, 0x0, 0x0, 0x401}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) write$smackfs_cipso(r3, 0x0, 0x2d00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='.\x00', 0x80000, 0x1) open_by_handle_at(r4, &(0x7f0000000f40)=ANY=[@ANYBLOB="080000000200009b0894cc1d3dfcbbf3"], 0x0) 621.611068ms ago: executing program 9 (id=2014): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001082abd62000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x6}}, 0x20) 557.778364ms ago: executing program 5 (id=2015): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x2, 0x7fff0000}]}) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x80) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0xa}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x1000) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000480)=""/222, &(0x7f0000000580)=0x80fe) ioctl$I2C_PEC(r2, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000002c0)={0x0, 0x1, 0x3, &(0x7f0000000300)={0x10, "14a6c62707da000000b100000000000028000000000000000000000000002000"}}) r4 = syz_open_dev$video(&(0x7f0000000080), 0x3, 0x2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000eaee0000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffff4d9ff79419ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff"]}, 0x108) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="30000000030801010000000000000000020000040600024088f50000050003002f0000000c0004"], 0x30}, 0x1, 0x0, 0x0, 0x20008881}, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f00000001c0)}, 0x400000}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000200)=0x2) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x60, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000001000010025bd701efddbdf2548d40000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b00000000000800290003000100080028"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00'}) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./bus\x00', 0x22004006, &(0x7f0000000900)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000980)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x80000, 0x1) r9 = landlock_create_ruleset(&(0x7f0000000e40)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r9, 0xe) open_by_handle_at(r8, &(0x7f0000000e80)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getnexthop={0x18, 0x6a, 0x1, 0x70bd27, 0x25dfdbff}, 0x18}}, 0x10ff7d1905d03e84) 555.991578ms ago: executing program 9 (id=2016): r0 = socket$inet6(0xa, 0x80003, 0xa1) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0x9, 0x4) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 480.326329ms ago: executing program 5 (id=2017): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000000c0)=0x803, 0x4) syz_emit_ethernet(0x96, &(0x7f0000000100)={@link_local, @random=' u\b\x00', @void, {@ipv4={0x800, @udp={{0x9, 0x4, 0x0, 0x0, 0x88, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0xf, 0xb, [@private=0xa010102, @multicast1, @multicast2]}]}}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "fff522a45d565fd1bef2bde4487648f5ba27bbe6628c1000836849b5e92bda7c", "146a317637af5c94b1e2cab23b8908c4", {"14400c8638554f6e97c0743e00", "2585ff3e812ec53f2f0d7d41bea87c5c"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 470.499956ms ago: executing program 3 (id=2018): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='^', 0x34000, 0x0, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)="5d844ea0a3069ce65a8cae6c1ce82c40ae4f7fb30555cb16a4c8df36c103029a0954ff22e4ef3e7145057e90b1b99e812a2ce2d3a6a6cc5d992632dc294ac15ec8ed2155c3a2337d7b16a0641fc6f1db8175158075594283f67fae9218f90da9081b8b228c05cc2476f402c180f186415b9f2deef6098873bf80181dbc84a3340968b959a7a32315f209b5a6c30c38df259bb6cec10923814720ade7f87ffb84e859f56153e9d1bffa8efc8c50b213a792d1347730d24df4aab0fd37a2c4ea839a414814415d0e13b99f", 0xca}, {&(0x7f0000000380)="e1ce4d8132f13effcd3ce9cc7fb6eb0e5fce0921c2a573807d6d473001bd11fa868f9f63e5a004773c559ac17826a3705aba7ac155386f94056dbbdb8203342ca9cfc89aa452f1", 0x47}], 0x2) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000043000100fcff07000400000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4008811}, 0x4008094) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704000007000000b70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006000000095"], &(0x7f0000000240)='GPL\x00', 0x4}, 0x94) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x3, 0x428}}}, 0x7) 158.19035ms ago: executing program 4 (id=2019): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x9, 0x5, {"4ad9e48985b7ce8c1a3ec47971b3fd18"}, 0x3, 0x1, 0x8000000000000001}}}, 0xa0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffffffd) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x3, 0x428}}}, 0x7) 72.774278ms ago: executing program 8 (id=2020): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) acct(&(0x7f0000000040)='./proc/thread-self/fail-nth\x00') write(r0, &(0x7f0000000680)="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", 0x22a) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) accept4$unix(r3, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0xff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @loopback, @remote}}}}) 1.050378ms ago: executing program 8 (id=2021): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r0, 0xffff0000, 0xd, 0x0, &(0x7f0000001480)="2b206d074843b397737ea49da2", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 767.87µs ago: executing program 8 (id=2022): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r4, r3, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000680), &(0x7f00000006c0)=0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x880, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="04010000100081020000000000000000fc0200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000003cedfffffeffffff000000000000000000000000000000ec4f0000000000000000200000000000000000000000000000020000000000000000000000000000000000000000000000000000d43f44b7bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e00e000000200000000000000"], 0x104}}, 0x0) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x5, 0x8, 0x7}]}) ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000200)={0x5, &(0x7f0000000380)=[{0x3, '\x00', @buffer={"207ad5a89aef936ec193d5ca19de6ffc86843dd58d8588e7706492600a665998", 0x20}, 0x401}, {0x2d, '\x00', @data=0x4, 0x2}, {0x28, '\x00', @st={0x4, [{0x2, @uvalue=0x7fffffff}, {0x2, @uvalue=0x7}, {0x2, @uvalue=0x59a8}, {0x0, @uvalue=0x8}]}, 0xc}, {0x2d, '\x00', @data=0x8, 0x39}, {0x1d, '\x00', @st={0x4, [{0x1, @uvalue=0x2}, {0x1, @uvalue=0x3}, {0x2, @uvalue=0xf4}, {0x3, @svalue=0x100000001}]}, 0x45}]}) 0s ago: executing program 8 (id=2023): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0fff3ff000000000800000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9720000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nsim_dev_bool(0xffffffffffffff9c, &(0x7f0000000040)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/dont_allow_reload\x00'}, 0x608301, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "dd214947e23035b5", "64f7cea61f2a58d6d0989672f7ef8920", "5f869a14", "bc9519f0e548f4e7"}, 0x28) kernel console output (not intermixed with test programs): d promiscuous mode [ 79.008310][ T8121] hsr_slave_1: entered promiscuous mode [ 79.008559][ T8121] debugfs: 'hsr0' already exists in 'hsr' [ 79.008569][ T8121] Cannot create hsr debugfs directory [ 79.143333][ C1] net_ratelimit: 730 callbacks suppressed [ 79.149036][ T8117] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 79.157849][ T8117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.158178][ T8117] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 79.160597][ T8117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.173259][ T8117] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 79.176889][ T8117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.178854][ T8117] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 79.190999][ T8117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.203274][ T4705] EXT4-fs warning (device loop4): ext4_rmdir:3194: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 79.203513][ T4705] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 79.203535][ T4705] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 79.205152][ T4705] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 79.205298][ T4705] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 79.205506][ T4705] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 79.205647][ T4705] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 79.207310][ T4705] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 79.207335][ T4705] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.210366][ T4705] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 79.228292][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.340585][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7 [ 79.388123][ T8121] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 79.401443][ T8121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.401826][ T8121] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 79.406058][ T8121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.407482][ T8121] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 79.411360][ T8121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.414717][ T8117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.415148][ T8121] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 79.420945][ T8121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.458133][ T8117] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.468957][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.469007][ T7824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.481795][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.481817][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.569708][ T8121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.591349][ T8121] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.621405][ T8121] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.621416][ T8121] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.638703][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.638726][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.639417][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.639435][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.799626][ T8117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.814367][ T8121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.920062][ T8121] veth0_vlan: entered promiscuous mode [ 79.950420][ T8121] veth1_vlan: entered promiscuous mode [ 79.953523][ T8408] set_capacity_and_notify: 3 callbacks suppressed [ 79.953529][ T8408] loop4: detected capacity change from 0 to 512 [ 79.995531][ T8117] veth0_vlan: entered promiscuous mode [ 80.000688][ T8117] veth1_vlan: entered promiscuous mode [ 80.001614][ T8408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.018989][ T8408] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1280: corrupted xattr block 6: invalid header [ 80.019128][ T8117] veth0_macvtap: entered promiscuous mode [ 80.019306][ T8408] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1280: corrupted xattr block 6: invalid header [ 80.021830][ T8121] veth0_macvtap: entered promiscuous mode [ 80.023015][ T8121] veth1_macvtap: entered promiscuous mode [ 80.026658][ T8121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.027765][ T8121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.032341][ T8117] veth1_macvtap: entered promiscuous mode [ 80.040072][ T8408] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1280: corrupted xattr block 6: invalid header [ 80.041032][ T8408] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1280: corrupted xattr block 6: invalid header [ 80.058869][ T8408] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 80.060580][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.061717][ T8117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.106074][ T7825] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.106105][ T7825] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.106123][ T7825] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.106140][ T7825] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.106157][ T7825] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.177063][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.177075][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.195667][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.195676][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.201946][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.202036][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.202161][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.247404][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.247412][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.250555][ T4897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.250567][ T4897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.333835][ T8436] loop6: detected capacity change from 0 to 256 [ 80.350952][ T8436] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 80.350976][ T8436] FAT-fs (loop6): bogus number of directory entries (1) [ 80.350986][ T8436] FAT-fs (loop6): Can't find a valid FAT filesystem [ 80.385718][ T8444] loop6: detected capacity change from 0 to 8 [ 80.446240][ T8447] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 80.538331][ T8455] loop6: detected capacity change from 0 to 512 [ 80.552741][ T8455] EXT4-fs (loop6): Test dummy encryption mode enabled [ 80.557237][ T8455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.590966][ T8455] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.656207][ T8463] loop6: detected capacity change from 0 to 1024 [ 80.667124][ T8463] EXT4-fs: Ignoring removed nobh option [ 80.674818][ T4705] EXT4-fs warning (device loop4): ext4_rmdir:3194: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 80.674880][ T4705] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 80.674902][ T4705] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 80.675617][ T4705] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 80.675736][ T4705] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 80.675925][ T4705] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 80.676057][ T4705] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 80.676389][ T4705] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 80.676407][ T4705] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.676524][ T4705] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 80.678161][ T8463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.688739][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.727219][ T8473] loop7: detected capacity change from 0 to 256 [ 80.741575][ T8473] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 80.741598][ T8473] FAT-fs (loop7): bogus number of directory entries (1) [ 80.741607][ T8473] FAT-fs (loop7): Can't find a valid FAT filesystem [ 80.768519][ T4713] Bluetooth: hci1: command tx timeout [ 80.768591][ T4707] Bluetooth: hci4: command tx timeout [ 80.788224][ T8477] FAULT_INJECTION: forcing a failure. [ 80.788224][ T8477] name fail_futex, interval 1, probability 0, space 0, times 0 [ 80.788243][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.4.1302 Not tainted syzkaller #0 PREEMPT [ 80.788257][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 80.788270][ T8477] Call trace: [ 80.788274][ T8477] show_stack+0x2c/0x3c (C) [ 80.788293][ T8477] __dump_stack+0x30/0x40 [ 80.788306][ T8477] dump_stack_lvl+0xd8/0x12c [ 80.788316][ T8477] dump_stack+0x1c/0x28 [ 80.788326][ T8477] should_fail_ex+0x418/0x58c [ 80.788334][ T8477] should_fail+0x14/0x24 [ 80.788341][ T8477] get_futex_key+0x1ec/0x12b0 [ 80.788354][ T8477] futex_wait_setup+0x58/0x674 [ 80.788364][ T8477] __futex_wait+0x108/0x25c [ 80.788373][ T8477] futex_wait+0x108/0x2c0 [ 80.788382][ T8477] do_futex+0x320/0x378 [ 80.788391][ T8477] __arm64_sys_futex+0x2e4/0x418 [ 80.788400][ T8477] invoke_syscall+0x98/0x244 [ 80.788412][ T8477] el0_svc_common+0xec/0x23c [ 80.788421][ T8477] do_el0_svc+0x4c/0x5c [ 80.788431][ T8477] el0_svc+0x60/0x1d8 [ 80.788439][ T8477] el0t_64_sync_handler+0x44/0x104 [ 80.788447][ T8477] el0t_64_sync+0x198/0x19c [ 80.793349][ T8481] loop7: detected capacity change from 0 to 8 [ 80.854126][ T4707] Bluetooth: hci3: command tx timeout [ 80.882676][ T8485] loop4: detected capacity change from 0 to 256 [ 81.007196][ T8501] loop7: detected capacity change from 0 to 512 [ 81.045374][ T8501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.057883][ T8501] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1310: corrupted xattr block 6: invalid header [ 81.058122][ T8501] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1310: corrupted xattr block 6: invalid header [ 81.058279][ T8501] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1310: corrupted xattr block 6: invalid header [ 81.059929][ T8501] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1310: corrupted xattr block 6: invalid header [ 81.060257][ T8501] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 81.113146][ T8510] loop4: detected capacity change from 0 to 512 [ 81.113893][ T8510] EXT4-fs (loop4): Test dummy encryption mode enabled [ 81.149135][ T8510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.175598][ T8510] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.358357][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1322'. [ 81.485776][ T8556] EXT4-fs (loop8): Test dummy encryption mode enabled [ 81.499563][ T8556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.518850][ T8556] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.557121][ T7986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.597825][ T30] audit: type=1326 audit(335.639:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.5.1333" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 81.597918][ T30] audit: type=1326 audit(335.639:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.5.1333" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 81.598651][ T30] audit: type=1326 audit(335.639:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.5.1333" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 81.598728][ T30] audit: type=1326 audit(335.639:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.5.1333" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 81.598754][ T30] audit: type=1326 audit(335.639:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.5.1333" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 81.598773][ T30] audit: type=1326 audit(335.639:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.5.1333" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 81.598950][ T30] audit: type=1326 audit(335.639:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.5.1333" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 81.598970][ T30] audit: type=1326 audit(335.639:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.5.1333" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 81.598985][ T30] audit: type=1326 audit(335.639:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8569 comm="syz.5.1333" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 81.649940][ T8117] EXT4-fs warning (device loop7): ext4_rmdir:3194: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 81.650003][ T8117] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 81.650025][ T8117] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 81.650429][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1334'. [ 81.651840][ T8117] EXT4-fs warning (device loop7): ext4_evict_inode:288: xattr delete (err -117) [ 81.652007][ T8117] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 81.652239][ T8117] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 81.652404][ T8117] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 81.652748][ T8117] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2933: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 81.652779][ T8117] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.653009][ T8117] EXT4-fs warning (device loop7): ext4_evict_inode:288: xattr delete (err -117) [ 81.691169][ T8117] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.765151][ T8586] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 81.765169][ T8586] FAT-fs (loop7): bogus number of directory entries (1) [ 81.765178][ T8586] FAT-fs (loop7): Can't find a valid FAT filesystem [ 81.885455][ T8593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.970010][ T30] audit: type=1326 audit(335.986:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.7.1346" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb237a228 code=0x7ffc0000 [ 81.991328][ T8608] FAULT_INJECTION: forcing a failure. [ 81.991328][ T8608] name failslab, interval 1, probability 0, space 0, times 0 [ 81.991348][ T8608] CPU: 0 UID: 0 PID: 8608 Comm: syz.4.1347 Not tainted syzkaller #0 PREEMPT [ 81.991362][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 81.991375][ T8608] Call trace: [ 81.991378][ T8608] show_stack+0x2c/0x3c (C) [ 81.991397][ T8608] __dump_stack+0x30/0x40 [ 81.991408][ T8608] dump_stack_lvl+0xd8/0x12c [ 81.991418][ T8608] dump_stack+0x1c/0x28 [ 81.991428][ T8608] should_fail_ex+0x418/0x58c [ 81.991436][ T8608] should_failslab+0xc4/0x120 [ 81.991444][ T8608] kmem_cache_alloc_noprof+0x94/0x5d4 [ 81.991453][ T8608] audit_log_start+0xfc/0x868 [ 81.991463][ T8608] audit_seccomp+0x60/0x14c [ 81.991470][ T8608] __seccomp_filter+0xc88/0x1a7c [ 81.991479][ T8608] __seccomp_permit_syscall+0xd8/0x27c [ 81.991489][ T8608] syscall_trace_enter+0x2d4/0x6b4 [ 81.991498][ T8608] el0_svc_common+0x170/0x23c [ 81.991508][ T8608] do_el0_svc+0x4c/0x5c [ 81.991518][ T8608] el0_svc+0x60/0x1d8 [ 81.991526][ T8608] el0t_64_sync_handler+0x44/0x104 [ 81.991534][ T8608] el0t_64_sync+0x198/0x19c [ 82.024719][ T8610] syzkaller0: entered promiscuous mode [ 82.024730][ T8610] syzkaller0: entered allmulticast mode [ 82.033211][ T7986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.064526][ T8615] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 82.064551][ T8615] FAT-fs (loop4): bogus number of directory entries (1) [ 82.064560][ T8615] FAT-fs (loop4): Can't find a valid FAT filesystem [ 82.173794][ T8620] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 82.173807][ T8620] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.177372][ T8620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 82.177428][ T8620] System zones: 1-12 [ 82.177537][ T8620] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.1353: bad orphan inode 131072 [ 82.177552][ T8620] loop4: lost filesystem error report for type 5 error -117 [ 82.178300][ T8620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.246227][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.294331][ T8629] netlink: 'syz.4.1357': attribute type 21 has an invalid length. [ 82.294746][ T8629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1357'. [ 82.295102][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 82.295252][ T8629] warning: `syz.4.1357' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.333054][ T8633] FAULT_INJECTION: forcing a failure. [ 82.333054][ T8633] name failslab, interval 1, probability 0, space 0, times 0 [ 82.333073][ T8633] CPU: 1 UID: 0 PID: 8633 Comm: syz.7.1359 Not tainted syzkaller #0 PREEMPT [ 82.333085][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.333099][ T8633] Call trace: [ 82.333102][ T8633] show_stack+0x2c/0x3c (C) [ 82.333123][ T8633] __dump_stack+0x30/0x40 [ 82.333134][ T8633] dump_stack_lvl+0xd8/0x12c [ 82.333144][ T8633] dump_stack+0x1c/0x28 [ 82.333153][ T8633] should_fail_ex+0x418/0x58c [ 82.333162][ T8633] should_failslab+0xc4/0x120 [ 82.333170][ T8633] __kmalloc_noprof+0x108/0x6c8 [ 82.333178][ T8633] tomoyo_realpath_from_path+0xbc/0x4dc [ 82.333190][ T8633] tomoyo_path_number_perm+0x1f0/0x500 [ 82.333199][ T8633] tomoyo_file_ioctl+0x2c/0x3c [ 82.333209][ T8633] security_file_ioctl+0xdc/0x2b0 [ 82.333218][ T8633] __arm64_sys_ioctl+0xb0/0x1cc [ 82.333226][ T8633] invoke_syscall+0x98/0x244 [ 82.333243][ T8633] el0_svc_common+0xec/0x23c [ 82.333253][ T8633] do_el0_svc+0x4c/0x5c [ 82.333263][ T8633] el0_svc+0x60/0x1d8 [ 82.333272][ T8633] el0t_64_sync_handler+0x44/0x104 [ 82.333279][ T8633] el0t_64_sync+0x198/0x19c [ 82.333289][ T8633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 82.389116][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 82.389926][ T8638] netlink: 'syz.4.1360': attribute type 21 has an invalid length. [ 82.389959][ T8638] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1360'. [ 82.534916][ T8648] syzkaller0: entered promiscuous mode [ 82.534926][ T8648] syzkaller0: entered allmulticast mode [ 82.541478][ T8649] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 82.541493][ T8649] FAT-fs (loop8): bogus number of directory entries (1) [ 82.541500][ T8649] FAT-fs (loop8): Can't find a valid FAT filesystem [ 82.631316][ T8660] FAULT_INJECTION: forcing a failure. [ 82.631316][ T8660] name failslab, interval 1, probability 0, space 0, times 0 [ 82.631338][ T8660] CPU: 0 UID: 0 PID: 8660 Comm: syz.6.1370 Not tainted syzkaller #0 PREEMPT [ 82.631348][ T8660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.631363][ T8660] Call trace: [ 82.631366][ T8660] show_stack+0x2c/0x3c (C) [ 82.631385][ T8660] __dump_stack+0x30/0x40 [ 82.631396][ T8660] dump_stack_lvl+0xd8/0x12c [ 82.631406][ T8660] dump_stack+0x1c/0x28 [ 82.631415][ T8660] should_fail_ex+0x418/0x58c [ 82.631424][ T8660] should_failslab+0xc4/0x120 [ 82.631432][ T8660] kmem_cache_alloc_node_noprof+0x98/0x604 [ 82.631440][ T8660] __alloc_skb+0x1f0/0x610 [ 82.631451][ T8660] audit_log_start+0x180/0x868 [ 82.631461][ T8660] audit_seccomp+0x60/0x14c [ 82.631468][ T8660] __seccomp_filter+0xc88/0x1a7c [ 82.631478][ T8660] __seccomp_permit_syscall+0xd8/0x27c [ 82.631487][ T8660] syscall_trace_enter+0x2d4/0x6b4 [ 82.631496][ T8660] el0_svc_common+0x170/0x23c [ 82.631507][ T8660] do_el0_svc+0x4c/0x5c [ 82.631517][ T8660] el0_svc+0x60/0x1d8 [ 82.631525][ T8660] el0t_64_sync_handler+0x44/0x104 [ 82.631532][ T8660] el0t_64_sync+0x198/0x19c [ 82.637142][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1371'. [ 82.638288][ T8663] block nbd7: Device being setup by another task [ 82.673186][ T8665] netlink: 'syz.6.1372': attribute type 9 has an invalid length. [ 82.693069][ T4707] block nbd7: Receive control failed (result -32) [ 82.699580][ T8662] block nbd7: shutting down sockets [ 82.786775][ T8677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.795426][ T8677] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1376: corrupted xattr block 6: invalid header [ 82.795705][ T8677] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1376: corrupted xattr block 6: invalid header [ 82.796358][ T8677] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1376: corrupted xattr block 6: invalid header [ 82.802401][ T8677] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #12: comm syz.7.1376: corrupted xattr block 6: invalid header [ 82.811870][ T8677] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 83.017369][ T8683] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 83.017391][ T8683] FAT-fs (loop4): bogus number of directory entries (1) [ 83.017398][ T8683] FAT-fs (loop4): Can't find a valid FAT filesystem [ 83.088193][ T4707] Bluetooth: hci3: command tx timeout [ 83.358740][ T8117] EXT4-fs warning (device loop7): ext4_rmdir:3194: inode #12: comm syz-executor: empty directory 'file0' has too many links (4) [ 83.358950][ T8117] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2933: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 83.358975][ T8117] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 83.359184][ T8117] EXT4-fs warning (device loop7): ext4_evict_inode:288: xattr delete (err -117) [ 83.359301][ T8117] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 83.359457][ T8117] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 83.359611][ T8117] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 83.360010][ T8117] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2933: inode #15: comm syz-executor: corrupted xattr block 33: invalid header [ 83.360028][ T8117] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.360311][ T8117] EXT4-fs warning (device loop7): ext4_evict_inode:288: xattr delete (err -117) [ 83.390266][ T8117] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.743147][ T8715] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 83.743162][ T8715] FAT-fs (loop8): bogus number of directory entries (1) [ 83.743169][ T8715] FAT-fs (loop8): Can't find a valid FAT filesystem [ 84.055554][ T8719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.067699][ T8719] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1390: corrupted xattr block 6: invalid header [ 84.068008][ T8719] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1390: corrupted xattr block 6: invalid header [ 84.068297][ T8719] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1390: corrupted xattr block 6: invalid header [ 84.069334][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.070248][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.070384][ T8719] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1390: corrupted xattr block 6: invalid header [ 84.070796][ T8719] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 84.099258][ T8722] netlink: 'syz.8.1393': attribute type 16 has an invalid length. [ 84.099268][ T8722] netlink: 'syz.8.1393': attribute type 17 has an invalid length. [ 84.137502][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.137532][ T8722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.139538][ T8722] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.139557][ T8722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.184707][ T8718] syzkaller0: entered promiscuous mode [ 84.184718][ T8718] syzkaller0: entered allmulticast mode [ 84.368311][ T8738] input: syz1 as /devices/virtual/input/input5 [ 84.531549][ C1] net_ratelimit: 982 callbacks suppressed [ 84.650261][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.680506][ T8757] FAULT_INJECTION: forcing a failure. [ 84.680506][ T8757] name failslab, interval 1, probability 0, space 0, times 0 [ 84.680524][ T8757] CPU: 1 UID: 0 PID: 8757 Comm: syz.4.1407 Not tainted syzkaller #0 PREEMPT [ 84.680534][ T8757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 84.680547][ T8757] Call trace: [ 84.680550][ T8757] show_stack+0x2c/0x3c (C) [ 84.680570][ T8757] __dump_stack+0x30/0x40 [ 84.680581][ T8757] dump_stack_lvl+0xd8/0x12c [ 84.680591][ T8757] dump_stack+0x1c/0x28 [ 84.680600][ T8757] should_fail_ex+0x418/0x58c [ 84.680609][ T8757] should_failslab+0xc4/0x120 [ 84.680617][ T8757] __kmalloc_cache_noprof+0x94/0x5fc [ 84.680626][ T8757] audit_log_d_path+0xc4/0x19c [ 84.680639][ T8757] audit_log_d_path_exe+0x48/0x80 [ 84.680649][ T8757] audit_log_task+0x250/0x368 [ 84.680657][ T8757] audit_seccomp+0x74/0x14c [ 84.680664][ T8757] __seccomp_filter+0xc88/0x1a7c [ 84.680674][ T8757] __seccomp_permit_syscall+0xd8/0x27c [ 84.680684][ T8757] syscall_trace_enter+0x2d4/0x6b4 [ 84.680693][ T8757] el0_svc_common+0x170/0x23c [ 84.680704][ T8757] do_el0_svc+0x4c/0x5c [ 84.680713][ T8757] el0_svc+0x60/0x1d8 [ 84.680722][ T8757] el0t_64_sync_handler+0x44/0x104 [ 84.680729][ T8757] el0t_64_sync+0x198/0x19c [ 84.733206][ T8763] syzkaller0: entered promiscuous mode [ 84.733216][ T8763] syzkaller0: entered allmulticast mode [ 84.760548][ T8761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.786161][ T7825] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm kworker/u8:12: bg 0: block 112: padding at end of block bitmap is not set [ 84.790463][ T7825] EXT4-fs (loop7): Remounting filesystem read-only [ 84.791868][ T8117] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.857443][ T8775] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1414'. [ 84.971836][ T8784] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.033445][ T8790] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 85.033459][ T8790] FAT-fs (loop6): bogus number of directory entries (1) [ 85.033465][ T8790] FAT-fs (loop6): Can't find a valid FAT filesystem [ 85.301269][ T4707] Bluetooth: hci3: command tx timeout [ 85.415499][ T8800] FAULT_INJECTION: forcing a failure. [ 85.415499][ T8800] name failslab, interval 1, probability 0, space 0, times 0 [ 85.415518][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.6.1422 Not tainted syzkaller #0 PREEMPT [ 85.415528][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 85.415541][ T8800] Call trace: [ 85.415544][ T8800] show_stack+0x2c/0x3c (C) [ 85.415561][ T8800] __dump_stack+0x30/0x40 [ 85.415572][ T8800] dump_stack_lvl+0xd8/0x12c [ 85.415582][ T8800] dump_stack+0x1c/0x28 [ 85.415591][ T8800] should_fail_ex+0x418/0x58c [ 85.415600][ T8800] should_failslab+0xc4/0x120 [ 85.415608][ T8800] kmem_cache_alloc_noprof+0x94/0x5d4 [ 85.415616][ T8800] audit_log_start+0xfc/0x868 [ 85.415626][ T8800] audit_seccomp+0x60/0x14c [ 85.415634][ T8800] __seccomp_filter+0xc88/0x1a7c [ 85.415643][ T8800] __seccomp_permit_syscall+0xd8/0x27c [ 85.415653][ T8800] syscall_trace_enter+0x2d4/0x6b4 [ 85.415662][ T8800] el0_svc_common+0x170/0x23c [ 85.415672][ T8800] do_el0_svc+0x4c/0x5c [ 85.415682][ T8800] el0_svc+0x60/0x1d8 [ 85.415691][ T8800] el0t_64_sync_handler+0x44/0x104 [ 85.415698][ T8800] el0t_64_sync+0x198/0x19c [ 85.438301][ T8802] set_capacity_and_notify: 18 callbacks suppressed [ 85.438308][ T8802] loop8: detected capacity change from 0 to 512 [ 85.438741][ T8802] EXT4-fs: Ignoring removed nobh option [ 85.453575][ T8802] EXT4-fs (loop8): 1 truncate cleaned up [ 85.456932][ T8802] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.499303][ T8806] syzkaller0: entered promiscuous mode [ 85.499313][ T8806] syzkaller0: entered allmulticast mode [ 85.538769][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.562635][ T8808] loop8: detected capacity change from 0 to 8 [ 85.604074][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1426'. [ 85.688057][ T8816] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 85.738161][ T8820] loop8: detected capacity change from 0 to 256 [ 85.739229][ T8820] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 85.739244][ T8820] FAT-fs (loop8): bogus number of directory entries (1) [ 85.739250][ T8820] FAT-fs (loop8): Can't find a valid FAT filesystem [ 85.791627][ T8822] loop8: detected capacity change from 0 to 512 [ 85.920428][ T8834] syzkaller0: entered promiscuous mode [ 85.920449][ T8834] syzkaller0: entered allmulticast mode [ 86.073119][ T8849] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 86.094326][ T8855] loop4: detected capacity change from 0 to 256 [ 86.098091][ T8855] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 86.098113][ T8855] FAT-fs (loop4): bogus number of directory entries (1) [ 86.098121][ T8855] FAT-fs (loop4): Can't find a valid FAT filesystem [ 86.246965][ T7824] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.276555][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.281618][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.284304][ T4713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.293182][ T4713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.293955][ T4713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.329623][ T8867] loop6: detected capacity change from 0 to 4096 [ 86.351592][ T8867] EXT4-fs (loop6): Test dummy encryption mode enabled [ 86.353909][ T8867] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.393365][ T7824] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.409815][ T7986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.476635][ T7824] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.485142][ T8862] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.516601][ T8882] syzkaller0: entered promiscuous mode [ 86.516611][ T8882] syzkaller0: entered allmulticast mode [ 86.569872][ T7824] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.662626][ T8889] loop6: detected capacity change from 0 to 256 [ 86.667750][ T8889] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 86.667765][ T8889] FAT-fs (loop6): bogus number of directory entries (1) [ 86.667775][ T8889] FAT-fs (loop6): Can't find a valid FAT filesystem [ 86.858059][ T7824] bridge_slave_1: left allmulticast mode [ 86.858075][ T7824] bridge_slave_1: left promiscuous mode [ 86.858180][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.881058][ T7824] bridge_slave_0: left allmulticast mode [ 86.881069][ T7824] bridge_slave_0: left promiscuous mode [ 86.881153][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.005478][ T7824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.034655][ T7824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.050392][ T7824] bond0 (unregistering): Released all slaves [ 87.140226][ T8912] syzkaller0: entered promiscuous mode [ 87.140243][ T8912] syzkaller0: entered allmulticast mode [ 87.200896][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 87.242374][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.242394][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.242465][ T8862] bridge_slave_0: entered allmulticast mode [ 87.243104][ T8862] bridge_slave_0: entered promiscuous mode [ 87.244040][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.244070][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.244135][ T8862] bridge_slave_1: entered allmulticast mode [ 87.244629][ T8862] bridge_slave_1: entered promiscuous mode [ 87.261925][ T8862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.265366][ T8862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.298152][ T8941] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1466'. [ 87.300080][ T8941] loop6: detected capacity change from 0 to 512 [ 87.303911][ T8941] EXT4-fs: Ignoring removed oldalloc option [ 87.304636][ T8941] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 87.304650][ T8941] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 87.310326][ T8941] EXT4-fs (loop6): 1 truncate cleaned up [ 87.310803][ T8941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.343978][ T8862] team0: Port device team_slave_0 added [ 87.345314][ T8862] team0: Port device team_slave_1 added [ 87.374057][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.374066][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.374081][ T8862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.385094][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.385100][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.385112][ T8862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.560456][ T8955] loop8: detected capacity change from 0 to 256 [ 87.566521][ T7986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.577476][ T8955] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 87.577501][ T8955] FAT-fs (loop8): bogus number of directory entries (1) [ 87.577508][ T8955] FAT-fs (loop8): Can't find a valid FAT filesystem [ 87.651392][ T8862] hsr_slave_0: entered promiscuous mode [ 87.651837][ T8862] hsr_slave_1: entered promiscuous mode [ 87.652101][ T8862] debugfs: 'hsr0' already exists in 'hsr' [ 87.652111][ T8862] Cannot create hsr debugfs directory [ 87.668711][ T7824] hsr_slave_0: left promiscuous mode [ 87.669162][ T7824] hsr_slave_1: left promiscuous mode [ 87.669508][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.669518][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.669898][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.669905][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.688184][ T8968] loop4: detected capacity change from 0 to 8 [ 87.695092][ T7824] veth1_macvtap: left promiscuous mode [ 87.695119][ T7824] veth0_macvtap: left promiscuous mode [ 87.695165][ T7824] veth1_vlan: left promiscuous mode [ 87.695287][ T7824] veth0_vlan: left promiscuous mode [ 87.714037][ T8965] binder: BINDER_SET_CONTEXT_MGR already set [ 87.714043][ T8965] binder: 8964:8965 ioctl 4018620d 20000300 returned -16 [ 87.714267][ T8965] binder: 8964:8965 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 87.714282][ T8965] binder: 8965 RLIMIT_NICE not set [ 87.905946][ T7824] team0 (unregistering): Port device team_slave_1 removed [ 87.920716][ T7824] team0 (unregistering): Port device team_slave_0 removed [ 88.044039][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 88.256392][ T8998] tmpfs: Bad value for 'mpol' [ 88.376295][ T8862] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 88.406461][ T8862] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.407603][ T8862] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 88.428589][ T8862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.428932][ T9012] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 88.428952][ T9012] FAT-fs (loop6): bogus number of directory entries (1) [ 88.428962][ T9012] FAT-fs (loop6): Can't find a valid FAT filesystem [ 88.433196][ T8862] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 88.444950][ T8862] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.448032][ T8862] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 88.454003][ T8862] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.466445][ T4707] Bluetooth: hci1: command tx timeout [ 88.521347][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 88.554295][ T8862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.573558][ T8862] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.575671][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.575697][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.592732][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.592759][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.605884][ T8862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.605894][ T8862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.640448][ T9036] syzkaller0: entered promiscuous mode [ 88.640459][ T9036] syzkaller0: entered allmulticast mode [ 88.656681][ T9033] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.674747][ T9033] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1484: corrupted xattr block 6: invalid header [ 88.675313][ T9033] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1484: corrupted xattr block 6: invalid header [ 88.675976][ T9033] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1484: corrupted xattr block 6: invalid header [ 88.676131][ T9033] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1484: corrupted xattr block 6: invalid header [ 88.676541][ T9033] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 88.876115][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 88.916446][ T8862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.920100][ T30] kauditd_printk_skb: 283 callbacks suppressed [ 88.920111][ T30] audit: type=1326 audit(342.487:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 88.920132][ T30] audit: type=1326 audit(342.487:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 88.920201][ T30] audit: type=1326 audit(342.487:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 88.920292][ T30] audit: type=1326 audit(342.487:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 88.920358][ T30] audit: type=1326 audit(342.487:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 88.920442][ T30] audit: type=1326 audit(342.487:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 88.920518][ T30] audit: type=1326 audit(342.487:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 88.920634][ T30] audit: type=1326 audit(342.487:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 88.920666][ T30] audit: type=1326 audit(342.487:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 88.920757][ T30] audit: type=1326 audit(342.487:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9060 comm="syz.5.1487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbd57a228 code=0x7ffc0000 [ 89.357946][ T8862] veth0_vlan: entered promiscuous mode [ 89.362549][ T8862] veth1_vlan: entered promiscuous mode [ 89.377735][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.450966][ T8862] veth0_macvtap: entered promiscuous mode [ 89.460034][ T8862] veth1_macvtap: entered promiscuous mode [ 89.492555][ T8862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.511704][ T8862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.514670][ T9093] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 89.514690][ T9093] FAT-fs (loop8): bogus number of directory entries (1) [ 89.514697][ T9093] FAT-fs (loop8): Can't find a valid FAT filesystem [ 89.523012][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.523070][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.523105][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.523123][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.729936][ T4897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.729948][ T4897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.782273][ T7824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.782281][ T7824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.915367][ T9110] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.960985][ T9110] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.986184][ T4397] net_ratelimit: 346 callbacks suppressed [ 90.029625][ T9128] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 90.029637][ T9128] FAT-fs (loop9): bogus number of directory entries (1) [ 90.029644][ T9128] FAT-fs (loop9): Can't find a valid FAT filesystem [ 90.079679][ T9126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.086879][ T9126] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1501: corrupted xattr block 6: invalid header [ 90.087078][ T9126] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1501: corrupted xattr block 6: invalid header [ 90.087216][ T9126] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1501: corrupted xattr block 6: invalid header [ 90.090647][ T9126] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1501: corrupted xattr block 6: invalid header [ 90.092012][ T9126] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 90.490227][ T9144] binder: 9143:9144 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 90.490246][ T9144] binder: 9144 RLIMIT_NICE not set [ 90.496800][ T9152] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 90.689924][ T4707] Bluetooth: hci1: command tx timeout [ 90.722557][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.753672][ T9165] syzkaller0: entered promiscuous mode [ 90.753684][ T9165] syzkaller0: entered allmulticast mode [ 90.835016][ T9167] set_capacity_and_notify: 7 callbacks suppressed [ 90.835023][ T9167] loop8: detected capacity change from 0 to 256 [ 90.837564][ T9167] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 90.837583][ T9167] FAT-fs (loop8): bogus number of directory entries (1) [ 90.837592][ T9167] FAT-fs (loop8): Can't find a valid FAT filesystem [ 91.022944][ T9171] loop8: detected capacity change from 0 to 512 [ 91.032049][ T9171] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 91.032094][ T9171] System zones: 1-12 [ 91.032979][ T9171] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: inode #12: comm syz.8.1516: missing EA_INODE flag [ 91.032994][ T9171] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 91.036139][ T9171] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1516: error while reading EA inode 12 err=-117 [ 91.036160][ T9171] loop8: lost filesystem error report for type 5 error -117 [ 91.036311][ T9171] EXT4-fs (loop8): 1 orphan inode deleted [ 91.038404][ T9171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.088014][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.198513][ T9188] loop8: detected capacity change from 0 to 8 [ 91.222608][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1518'. [ 91.260906][ T9194] loop8: detected capacity change from 0 to 512 [ 91.270485][ T9194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.280068][ T9194] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1523: corrupted xattr block 6: invalid header [ 91.280343][ T9194] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1523: corrupted xattr block 6: invalid header [ 91.280502][ T9194] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1523: corrupted xattr block 6: invalid header [ 91.280645][ T9194] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #12: comm syz.8.1523: corrupted xattr block 6: invalid header [ 91.280951][ T9194] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 91.317542][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.328352][ T9198] syzkaller0: entered promiscuous mode [ 91.328364][ T9198] syzkaller0: entered allmulticast mode [ 91.350021][ T9200] loop8: detected capacity change from 0 to 256 [ 91.360109][ T9200] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 91.360137][ T9200] FAT-fs (loop8): bogus number of directory entries (1) [ 91.360146][ T9200] FAT-fs (loop8): Can't find a valid FAT filesystem [ 91.373055][ T9200] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1525'. [ 91.522792][ T9216] binder: BINDER_SET_CONTEXT_MGR already set [ 91.527984][ T9216] binder: 9215:9216 ioctl 4018620d 20000300 returned -16 [ 91.528506][ T9216] binder: 9215:9216 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 91.528521][ T9216] binder: 9216 RLIMIT_NICE not set [ 92.489023][ T9284] loop8: detected capacity change from 0 to 256 [ 92.489683][ T9284] vfat: Unknown parameter 'nnonumtail' [ 92.493661][ T9286] loop4: detected capacity change from 0 to 512 [ 92.519559][ T9286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.528961][ T9286] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1536: corrupted xattr block 6: invalid header [ 92.529176][ T9286] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1536: corrupted xattr block 6: invalid header [ 92.529325][ T9286] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1536: corrupted xattr block 6: invalid header [ 92.529460][ T9286] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #12: comm syz.4.1536: corrupted xattr block 6: invalid header [ 92.529727][ T9286] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 92.559376][ T9278] loop6: detected capacity change from 0 to 512 [ 92.582961][ T9278] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 92.583007][ T9278] System zones: 1-12 [ 92.583328][ T9278] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #12: comm syz.6.1533: missing EA_INODE flag [ 92.583341][ T9278] loop6: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 92.583601][ T9278] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.1533: error while reading EA inode 12 err=-117 [ 92.583615][ T9278] loop6: lost filesystem error report for type 5 error -117 [ 92.584616][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.585028][ T9278] EXT4-fs (loop6): 1 orphan inode deleted [ 92.586280][ T9278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.658609][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1539'. [ 92.678873][ T7986] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.789238][ T9317] syzkaller0: entered promiscuous mode [ 92.789251][ T9317] syzkaller0: entered allmulticast mode [ 92.807093][ T7825] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.809312][ T7825] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.809335][ T7825] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.809353][ T7825] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.838670][ T9321] syzkaller0: left promiscuous mode [ 92.838796][ T9321] syzkaller0: left allmulticast mode [ 92.866984][ T9324] loop4: detected capacity change from 0 to 8 [ 92.868160][ T9324] squashfs: Unknown parameter '' [ 92.915807][ T4707] Bluetooth: hci1: command tx timeout [ 93.632530][ T9331] loop6: detected capacity change from 0 to 512 [ 93.644799][ T9331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.647509][ T9333] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 93.647522][ T9333] FAT-fs (loop9): bogus number of directory entries (1) [ 93.647529][ T9333] FAT-fs (loop9): Can't find a valid FAT filesystem [ 93.663827][ T9331] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.1550: corrupted xattr block 6: invalid header [ 93.665186][ T9331] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.1550: corrupted xattr block 6: invalid header [ 93.665753][ T9331] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.1550: corrupted xattr block 6: invalid header [ 93.665956][ T9331] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #12: comm syz.6.1550: corrupted xattr block 6: invalid header [ 93.666323][ T9331] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 93.693655][ T9333] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1549'. [ 93.767412][ T9341] gre1: entered promiscuous mode [ 93.834158][ T9343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 93.835542][ T9343] System zones: 1-12 [ 93.839315][ T9343] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.1551: missing EA_INODE flag [ 93.839371][ T9343] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.841585][ T9343] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1551: error while reading EA inode 12 err=-117 [ 93.841628][ T9343] loop4: lost filesystem error report for type 5 error -117 [ 93.842901][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 93.842914][ C0] EXT4-fs (loop4): initial error at time 347: ext4_xattr_inode_iget:437: inode 12 [ 93.842930][ C0] EXT4-fs (loop4): last error at time 347: ext4_xattr_inode_iget:442 [ 93.848728][ T9343] EXT4-fs (loop4): 1 orphan inode deleted [ 93.853970][ T9343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.108784][ T9353] syzkaller0: entered promiscuous mode [ 94.108795][ T9353] syzkaller0: entered allmulticast mode [ 94.197456][ T9358] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.301821][ T9368] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 94.302167][ T9367] IPVS: stopping backup sync thread 9368 ... [ 94.337718][ T9374] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 94.337737][ T9374] FAT-fs (loop6): bogus number of directory entries (1) [ 94.337746][ T9374] FAT-fs (loop6): Can't find a valid FAT filesystem [ 94.343051][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1564'. [ 94.405237][ T9378] 9pnet_virtio: no channels available for device syz [ 94.852355][ T30] kauditd_printk_skb: 897 callbacks suppressed [ 94.852364][ T30] audit: type=1326 audit(348.034:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.853734][ T30] audit: type=1326 audit(348.034:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.858182][ T30] audit: type=1326 audit(348.034:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.858213][ T30] audit: type=1326 audit(348.034:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.858919][ T30] audit: type=1326 audit(348.034:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.858938][ T30] audit: type=1326 audit(348.043:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.858954][ T30] audit: type=1326 audit(348.043:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.864419][ T30] audit: type=1326 audit(348.043:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.864520][ T30] audit: type=1326 audit(348.043:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.864799][ T30] audit: type=1326 audit(348.043:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9389 comm="syz.8.1571" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 94.865313][ T9390] netlink: 'syz.8.1571': attribute type 15 has an invalid length. [ 94.902486][ T7822] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.927707][ T4713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.929115][ T4713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.932506][ T4713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.935317][ T4713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.936044][ T4713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.003918][ T9395] syzkaller0: entered promiscuous mode [ 95.003930][ T9395] syzkaller0: entered allmulticast mode [ 95.026945][ T7822] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.104065][ T7822] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.273288][ T9418] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 95.273306][ T9418] FAT-fs (loop9): bogus number of directory entries (1) [ 95.273313][ T9418] FAT-fs (loop9): Can't find a valid FAT filesystem [ 95.278154][ T7822] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.294098][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1578'. [ 95.313039][ T9421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 95.313645][ T9421] batman_adv: batadv0: Adding interface: macvlan2 [ 95.313652][ T9421] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.313666][ T9421] batman_adv: batadv0: Interface activated: macvlan2 [ 95.313885][ T865] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 95.319125][ T9391] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.355260][ T4397] net_ratelimit: 563 callbacks suppressed [ 95.454637][ T9433] usb usb7: usbfs: process 9433 (syz.4.1586) did not claim interface 4 before use [ 95.463614][ T9430] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.1583: corrupted xattr block 6: invalid header [ 95.465682][ T9430] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.1583: corrupted xattr block 6: invalid header [ 95.465903][ T9430] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.1583: corrupted xattr block 6: invalid header [ 95.466059][ T9430] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.1583: corrupted xattr block 6: invalid header [ 95.466378][ T9430] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 95.527630][ T9444] EXT4-fs: Ignoring removed i_version option [ 95.554510][ T7822] bridge_slave_1: left allmulticast mode [ 95.554523][ T7822] bridge_slave_1: left promiscuous mode [ 95.554606][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.556268][ T7822] bridge_slave_0: left allmulticast mode [ 95.556278][ T7822] bridge_slave_0: left promiscuous mode [ 95.556339][ T7822] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.765814][ T7822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.790217][ T7822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.805860][ T7822] bond0 (unregistering): Released all slaves [ 95.835592][ T4397] 8021q: adding VLAN 0 to HW filter on device eth12 [ 95.908726][ T9482] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 95.908749][ T9482] FAT-fs (loop8): bogus number of directory entries (1) [ 95.908758][ T9482] FAT-fs (loop8): Can't find a valid FAT filesystem [ 95.921987][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1592'. [ 96.287444][ T9513] synth uevent: /bus/acpi: unknown uevent action string [ 96.357683][ T9506] set_capacity_and_notify: 8 callbacks suppressed [ 96.357695][ T9506] loop4: detected capacity change from 0 to 512 [ 96.383599][ T9506] EXT4-fs (loop4): invalid first ino: 0 [ 96.464492][ T9529] loop4: detected capacity change from 0 to 8 [ 96.549704][ T4397] 8021q: adding VLAN 0 to HW filter on device eth13 [ 96.557315][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.557342][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.557449][ T9391] bridge_slave_0: entered allmulticast mode [ 96.557987][ T9391] bridge_slave_0: entered promiscuous mode [ 96.558945][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.558965][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.559035][ T9391] bridge_slave_1: entered allmulticast mode [ 96.559987][ T9391] bridge_slave_1: entered promiscuous mode [ 96.632534][ T7822] hsr_slave_0: left promiscuous mode [ 96.637855][ T7822] hsr_slave_1: left promiscuous mode [ 96.638240][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.638251][ T7822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.648025][ T7822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.648033][ T7822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.656608][ T7822] veth1_macvtap: left promiscuous mode [ 96.656639][ T7822] veth0_macvtap: left promiscuous mode [ 96.656757][ T7822] veth1_vlan: left promiscuous mode [ 96.656792][ T7822] veth0_vlan: left promiscuous mode [ 96.871261][ T7822] team0 (unregistering): Port device team_slave_1 removed [ 96.876544][ T7822] team0 (unregistering): Port device team_slave_0 removed [ 96.973998][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.977300][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.012475][ T9391] team0: Port device team_slave_0 added [ 97.013444][ T9391] team0: Port device team_slave_1 added [ 97.031425][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.031432][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.031445][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.065439][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.065445][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.065458][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.103655][ T4713] Bluetooth: hci4: command tx timeout [ 97.142907][ T9391] hsr_slave_0: entered promiscuous mode [ 97.147441][ T9391] hsr_slave_1: entered promiscuous mode [ 97.319069][ T9574] loop8: detected capacity change from 0 to 256 [ 97.332017][ T9574] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 97.332047][ T9574] FAT-fs (loop8): bogus number of directory entries (1) [ 97.332055][ T9574] FAT-fs (loop8): Can't find a valid FAT filesystem [ 97.352511][ T9574] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1614'. [ 97.564805][ T4397] 8021q: adding VLAN 0 to HW filter on device eth14 [ 97.679105][ T9610] loop8: detected capacity change from 0 to 512 [ 97.774479][ T9634] loop9: detected capacity change from 0 to 8 [ 97.846944][ T4397] 8021q: adding VLAN 0 to HW filter on device eth15 [ 97.861253][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1624'. [ 97.869031][ T9636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.878699][ T9636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.912388][ T9391] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.924824][ T9391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.925192][ T9391] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.942164][ T9391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.942559][ T9391] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.957199][ T9391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.958439][ T9391] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.974703][ T9391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.092101][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.110211][ T9391] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.115795][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.115824][ T7824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.123885][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.123907][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.154790][ T9670] FAULT_INJECTION: forcing a failure. [ 98.154790][ T9670] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.154807][ T9670] CPU: 1 UID: 0 PID: 9670 Comm: syz.9.1627 Not tainted syzkaller #0 PREEMPT [ 98.154818][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.154833][ T9670] Call trace: [ 98.154836][ T9670] show_stack+0x2c/0x3c (C) [ 98.154857][ T9670] __dump_stack+0x30/0x40 [ 98.154870][ T9670] dump_stack_lvl+0xd8/0x12c [ 98.154882][ T9670] dump_stack+0x1c/0x28 [ 98.154893][ T9670] should_fail_ex+0x418/0x58c [ 98.154903][ T9670] should_fail_alloc_page+0xec/0x10c [ 98.154912][ T9670] prepare_alloc_pages+0x194/0x484 [ 98.154922][ T9670] __alloc_frozen_pages_noprof+0x180/0x578 [ 98.154932][ T9670] alloc_pages_mpol+0x1fc/0x3d0 [ 98.154942][ T9670] folio_alloc_mpol_noprof+0x4c/0x248 [ 98.154952][ T9670] vma_alloc_folio_noprof+0x100/0x1dc [ 98.154963][ T9670] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 98.154975][ T9670] folio_prealloc+0x3c/0x1b0 [ 98.154984][ T9670] do_pte_missing+0x1bd0/0x28bc [ 98.154993][ T9670] handle_mm_fault+0x14d0/0x2b58 [ 98.155006][ T9670] do_page_fault+0x4c4/0xba4 [ 98.155017][ T9670] do_translation_fault+0xc4/0x114 [ 98.155028][ T9670] do_mem_abort+0x70/0x194 [ 98.155039][ T9670] el1_abort+0x50/0x74 [ 98.155048][ T9670] el1h_64_sync_handler+0xdc/0x130 [ 98.155056][ T9670] el1h_64_sync+0x78/0x7c [ 98.155065][ T9670] __arch_copy_to_user+0x1c4/0x240 (P) [ 98.155075][ T9670] vfs_read+0x230/0x8c8 [ 98.155083][ T9670] ksys_pread64+0x118/0x1ac [ 98.155091][ T9670] __arm64_sys_pread64+0xa8/0xc0 [ 98.155099][ T9670] invoke_syscall+0x98/0x244 [ 98.155112][ T9670] el0_svc_common+0xec/0x23c [ 98.155124][ T9670] do_el0_svc+0x4c/0x5c [ 98.155135][ T9670] el0_svc+0x60/0x1d8 [ 98.155143][ T9670] el0t_64_sync_handler+0x44/0x104 [ 98.155151][ T9670] el0t_64_sync+0x198/0x19c [ 98.234335][ T9679] syzkaller0: entered promiscuous mode [ 98.234349][ T9679] syzkaller0: entered allmulticast mode [ 98.245935][ T9678] loop9: detected capacity change from 0 to 512 [ 98.294811][ T9678] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.1629: corrupted xattr block 6: invalid header [ 98.300210][ T9678] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.1629: corrupted xattr block 6: invalid header [ 98.309130][ T9678] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.1629: corrupted xattr block 6: invalid header [ 98.309407][ T9678] EXT4-fs error (device loop9): ext4_xattr_block_get:608: inode #12: comm syz.9.1629: corrupted xattr block 6: invalid header [ 98.309756][ T9678] overlayfs: failed to resolve './sys_sec/tomoyo/domain_policy': -2 [ 98.337359][ T9695] loop4: detected capacity change from 0 to 256 [ 98.350187][ T9695] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 98.350203][ T9695] FAT-fs (loop4): bogus number of directory entries (1) [ 98.350211][ T9695] FAT-fs (loop4): Can't find a valid FAT filesystem [ 98.352579][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'. [ 98.417820][ T9391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.449704][ T9391] veth0_vlan: entered promiscuous mode [ 98.454742][ T9391] veth1_vlan: entered promiscuous mode [ 98.469723][ T9391] veth0_macvtap: entered promiscuous mode [ 98.475278][ T9391] veth1_macvtap: entered promiscuous mode [ 98.487486][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.501000][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.539595][ T7824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.539882][ T7824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.539898][ T7824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.539913][ T7824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.578735][ T7824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.578745][ T7824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.604956][ T7824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.604985][ T7824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.639945][ T9725] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 98.661939][ T9725] nvme nvme1: failed to connect socket: -111 [ 98.744907][ T9748] syzkaller0: left promiscuous mode [ 98.744924][ T9748] syzkaller0: left allmulticast mode [ 98.832894][ T9761] FAULT_INJECTION: forcing a failure. [ 98.832894][ T9761] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.832911][ T9761] CPU: 1 UID: 0 PID: 9761 Comm: syz.3.1640 Not tainted syzkaller #0 PREEMPT [ 98.832922][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.832937][ T9761] Call trace: [ 98.832940][ T9761] show_stack+0x2c/0x3c (C) [ 98.832960][ T9761] __dump_stack+0x30/0x40 [ 98.832973][ T9761] dump_stack_lvl+0xd8/0x12c [ 98.832985][ T9761] dump_stack+0x1c/0x28 [ 98.832997][ T9761] should_fail_ex+0x418/0x58c [ 98.833006][ T9761] should_fail_alloc_page+0xec/0x10c [ 98.833016][ T9761] prepare_alloc_pages+0x194/0x484 [ 98.833025][ T9761] __alloc_frozen_pages_noprof+0x180/0x578 [ 98.833035][ T9761] alloc_pages_mpol+0x1fc/0x3d0 [ 98.833046][ T9761] folio_alloc_mpol_noprof+0x4c/0x248 [ 98.833056][ T9761] vma_alloc_folio_noprof+0x100/0x1dc [ 98.833066][ T9761] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 98.833079][ T9761] folio_prealloc+0x3c/0x1b0 [ 98.833088][ T9761] do_pte_missing+0x1bd0/0x28bc [ 98.833097][ T9761] handle_mm_fault+0x14d0/0x2b58 [ 98.833109][ T9761] do_page_fault+0x4c4/0xba4 [ 98.833120][ T9761] do_translation_fault+0xc4/0x114 [ 98.833132][ T9761] do_mem_abort+0x70/0x194 [ 98.833143][ T9761] el1_abort+0x50/0x74 [ 98.833152][ T9761] el1h_64_sync_handler+0xdc/0x130 [ 98.833160][ T9761] el1h_64_sync+0x78/0x7c [ 98.833169][ T9761] __arch_copy_to_user+0x1c4/0x240 (P) [ 98.833179][ T9761] vfs_read+0x230/0x8c8 [ 98.833187][ T9761] ksys_pread64+0x118/0x1ac [ 98.833195][ T9761] __arm64_sys_pread64+0xa8/0xc0 [ 98.833204][ T9761] invoke_syscall+0x98/0x244 [ 98.833216][ T9761] el0_svc_common+0xec/0x23c [ 98.833234][ T9761] do_el0_svc+0x4c/0x5c [ 98.833246][ T9761] el0_svc+0x60/0x1d8 [ 98.833254][ T9761] el0t_64_sync_handler+0x44/0x104 [ 98.833262][ T9761] el0t_64_sync+0x198/0x19c [ 98.835010][ T9763] loop4: detected capacity change from 0 to 256 [ 98.851415][ T9763] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 98.851430][ T9763] FAT-fs (loop4): bogus number of directory entries (1) [ 98.851437][ T9763] FAT-fs (loop4): Can't find a valid FAT filesystem [ 99.320549][ T9837] FAULT_INJECTION: forcing a failure. [ 99.320549][ T9837] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.320568][ T9837] CPU: 1 UID: 0 PID: 9837 Comm: syz.8.1655 Not tainted syzkaller #0 PREEMPT [ 99.320579][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.320593][ T9837] Call trace: [ 99.320596][ T9837] show_stack+0x2c/0x3c (C) [ 99.320617][ T9837] __dump_stack+0x30/0x40 [ 99.320630][ T9837] dump_stack_lvl+0xd8/0x12c [ 99.320642][ T9837] dump_stack+0x1c/0x28 [ 99.320654][ T9837] should_fail_ex+0x418/0x58c [ 99.320663][ T9837] should_fail_alloc_page+0xec/0x10c [ 99.320672][ T9837] prepare_alloc_pages+0x194/0x484 [ 99.320682][ T9837] __alloc_frozen_pages_noprof+0x180/0x578 [ 99.320692][ T9837] alloc_pages_mpol+0x1fc/0x3d0 [ 99.320702][ T9837] folio_alloc_mpol_noprof+0x4c/0x248 [ 99.320712][ T9837] vma_alloc_folio_noprof+0x100/0x1dc [ 99.320723][ T9837] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 99.320735][ T9837] folio_prealloc+0x3c/0x1b0 [ 99.320744][ T9837] do_pte_missing+0x1bd0/0x28bc [ 99.320752][ T9837] handle_mm_fault+0x14d0/0x2b58 [ 99.320765][ T9837] do_page_fault+0x4c4/0xba4 [ 99.320776][ T9837] do_translation_fault+0xc4/0x114 [ 99.320788][ T9837] do_mem_abort+0x70/0x194 [ 99.320799][ T9837] el1_abort+0x50/0x74 [ 99.320807][ T9837] el1h_64_sync_handler+0xdc/0x130 [ 99.320815][ T9837] el1h_64_sync+0x78/0x7c [ 99.320824][ T9837] __arch_copy_to_user+0x1c4/0x240 (P) [ 99.320834][ T9837] vfs_read+0x230/0x8c8 [ 99.320843][ T9837] ksys_pread64+0x118/0x1ac [ 99.320851][ T9837] __arm64_sys_pread64+0xa8/0xc0 [ 99.320859][ T9837] invoke_syscall+0x98/0x244 [ 99.320875][ T9837] el0_svc_common+0xec/0x23c [ 99.320888][ T9837] do_el0_svc+0x4c/0x5c [ 99.320900][ T9837] el0_svc+0x60/0x1d8 [ 99.320908][ T9837] el0t_64_sync_handler+0x44/0x104 [ 99.320916][ T9837] el0t_64_sync+0x198/0x19c [ 99.399434][ T9846] loop8: detected capacity change from 0 to 256 [ 99.410462][ T9846] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 99.410477][ T9846] FAT-fs (loop8): bogus number of directory entries (1) [ 99.410484][ T9846] FAT-fs (loop8): Can't find a valid FAT filesystem [ 99.514007][ T9856] loop9: detected capacity change from 0 to 1024 [ 99.523878][ T9856] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 99.539785][ T9856] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #3: block 2: comm syz.9.1662: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.539807][ T9856] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 99.539957][ T9856] EXT4-fs error (device loop9): __ext4_get_inode_loc:4916: comm syz.9.1662: Invalid inode table block 1 in block_group 0 [ 99.539972][ T9856] loop9: lost filesystem error report for type 5 error -117 [ 99.541010][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 99.541024][ C0] EXT4-fs (loop9): initial error at time 352: ext4_map_blocks:790: inode 3: block 2 [ 99.541046][ C0] EXT4-fs (loop9): last error at time 352: __ext4_get_inode_loc:4916 [ 99.558523][ T9859] EXT4-fs (loop8): 1 truncate cleaned up [ 99.559489][ T9859] EXT4-fs mount: 8 callbacks suppressed [ 99.559500][ T9859] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.562146][ T9866] netlink: 'syz.5.1660': attribute type 5 has an invalid length. [ 99.568057][ T9856] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 99.568081][ T9856] loop9: lost filesystem error report for type 5 error -117 [ 99.572048][ T9856] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.1662: mark_inode_dirty error [ 99.572076][ T9856] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 99.572327][ T9856] EXT4-fs error (device loop9): ext4_acquire_dquot:7070: comm syz.9.1662: Failed to acquire dquot type 0 [ 99.572339][ T9856] loop9: lost filesystem error report for type 5 error -117 [ 99.574737][ T9856] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 99.574755][ T9856] loop9: lost filesystem error report for type 5 error -117 [ 99.575667][ T9856] EXT4-fs error (device loop9): ext4_evict_inode:269: inode #11: comm syz.9.1662: mark_inode_dirty error [ 99.575690][ T9856] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 99.575789][ T9856] EXT4-fs warning (device loop9): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 99.575831][ T9856] EXT4-fs (loop9): 1 orphan inode deleted [ 99.577026][ T9856] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.595110][ T4897] EXT4-fs error (device loop9): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 99.596571][ T4897] EXT4-fs error (device loop9): ext4_release_dquot:7106: comm kworker/u8:7: Failed to release dquot type 0 [ 99.612289][ T8862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.613083][ T8862] EXT4-fs error (device loop9): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 99.613097][ T8862] loop9: lost filesystem error report for type 5 error -117 [ 99.614168][ T8862] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 99.614183][ T8862] loop9: lost filesystem error report for type 5 error -117 [ 99.614274][ T8862] EXT4-fs error (device loop9): ext4_quota_off:7354: inode #3: comm syz-executor: mark_inode_dirty error [ 99.614285][ T8862] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 99.614364][ T8862] EXT4-fs error (device loop9): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 99.614375][ T8862] loop9: lost filesystem error report for type 5 error -117 [ 99.847902][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.935630][ T9904] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1669'. [ 100.781159][ C1] net_ratelimit: 718 callbacks suppressed [ 101.152291][T10073] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 101.152317][T10073] FAT-fs (loop9): bogus number of directory entries (1) [ 101.152325][T10073] FAT-fs (loop9): Can't find a valid FAT filesystem [ 101.261159][T10084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.314643][ T30] kauditd_printk_skb: 139 callbacks suppressed [ 101.314650][ T30] audit: type=1326 audit(354.076:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.314703][ T30] audit: type=1326 audit(354.076:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.323495][ T30] audit: type=1326 audit(354.086:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.323646][ T30] audit: type=1326 audit(354.086:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.341405][ T30] audit: type=1326 audit(354.104:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.341521][ T30] audit: type=1326 audit(354.104:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.341584][ T30] audit: type=1326 audit(354.104:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.341945][ T30] audit: type=1326 audit(354.104:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.342881][ T30] audit: type=1326 audit(354.104:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.344456][T10102] ubi0: attaching mtd0 [ 101.355355][ T30] audit: type=1326 audit(354.104:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.4.1704" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8577a228 code=0x7ffc0000 [ 101.361974][T10102] ubi0: scanning is finished [ 101.361978][T10102] ubi0: empty MTD device detected [ 101.522771][T10102] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 101.522787][T10102] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 101.522795][T10102] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 101.522802][T10102] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 101.522809][T10102] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 101.522816][T10102] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 101.522823][T10102] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 931119616 [ 101.522831][T10102] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 101.526417][T10129] ubi0: background thread "ubi_bgt0d" started, PID 10129 [ 101.626737][T10134] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 101.626763][T10134] FAT-fs (loop9): bogus number of directory entries (1) [ 101.626770][T10134] FAT-fs (loop9): Can't find a valid FAT filesystem [ 101.957737][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.979992][T10156] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 101.980000][T10156] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 101.980006][T10156] overlayfs: missing 'lowerdir' [ 101.988557][T10156] sctp: [Deprecated]: syz.9.1716 (pid 10156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.988557][T10156] Use struct sctp_sack_info instead [ 101.988880][T10156] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1716'. [ 102.013482][T10158] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1715'. [ 102.056998][T10166] set_capacity_and_notify: 5 callbacks suppressed [ 102.057005][T10166] loop8: detected capacity change from 0 to 512 [ 102.062174][T10166] EXT4-fs (loop8): Test dummy encryption mode enabled [ 102.070101][T10166] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.1720: inode has both inline data and extents flags [ 102.070128][T10166] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 102.070587][T10166] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1720: couldn't read orphan inode 15 (err -117) [ 102.070610][T10166] loop8: lost filesystem error report for type 5 error -117 [ 102.071381][T10166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.076427][T10169] loop9: detected capacity change from 0 to 8 [ 102.079052][T10169] netlink: 332 bytes leftover after parsing attributes in process `syz.9.1721'. [ 102.106238][T10166] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 102.110224][T10169] binder: 10168:10169 ioctl 4018620d 0 returned -22 [ 102.124876][T10166] FAULT_INJECTION: forcing a failure. [ 102.124876][T10166] name fail_futex, interval 1, probability 0, space 0, times 0 [ 102.124891][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.8.1720 Not tainted syzkaller #0 PREEMPT [ 102.124902][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.124915][T10166] Call trace: [ 102.124918][T10166] show_stack+0x2c/0x3c (C) [ 102.124939][T10166] __dump_stack+0x30/0x40 [ 102.124952][T10166] dump_stack_lvl+0xd8/0x12c [ 102.124964][T10166] dump_stack+0x1c/0x28 [ 102.124975][T10166] should_fail_ex+0x418/0x58c [ 102.124984][T10166] should_fail+0x14/0x24 [ 102.124991][T10166] get_futex_key+0x1ec/0x12b0 [ 102.125003][T10166] futex_wake+0x10c/0x594 [ 102.125014][T10166] do_futex+0x2c4/0x378 [ 102.125025][T10166] __arm64_sys_futex+0x2e4/0x418 [ 102.125036][T10166] invoke_syscall+0x98/0x244 [ 102.125049][T10166] el0_svc_common+0xec/0x23c [ 102.125060][T10166] do_el0_svc+0x4c/0x5c [ 102.125072][T10166] el0_svc+0x60/0x1d8 [ 102.125081][T10166] el0t_64_sync_handler+0x44/0x104 [ 102.125089][T10166] el0t_64_sync+0x198/0x19c [ 102.166741][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.219527][T10179] binder: 10168:10179 ioctl c018620b 0 returned -14 [ 102.483273][T10186] loop4: detected capacity change from 0 to 256 [ 102.506757][T10186] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 102.506769][T10186] FAT-fs (loop4): bogus number of directory entries (1) [ 102.506776][T10186] FAT-fs (loop4): Can't find a valid FAT filesystem [ 102.590971][ T4713] Bluetooth: hci4: command tx timeout [ 102.805029][T10207] ip6t_frag: unknown flags 6 [ 102.805146][T10208] ip6t_frag: unknown flags 6 [ 103.543291][T10232] loop8: detected capacity change from 0 to 256 [ 103.552396][T10232] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 103.552419][T10232] FAT-fs (loop8): bogus number of directory entries (1) [ 103.552429][T10232] FAT-fs (loop8): Can't find a valid FAT filesystem [ 104.201188][T10291] loop9: detected capacity change from 0 to 256 [ 104.206572][T10291] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 104.206589][T10291] FAT-fs (loop9): bogus number of directory entries (1) [ 104.206599][T10291] FAT-fs (loop9): Can't find a valid FAT filesystem [ 104.322841][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1751'. [ 104.545270][T10318] syzkaller0: entered promiscuous mode [ 104.545285][T10318] syzkaller0: entered allmulticast mode [ 104.592708][T10320] netlink: 'syz.4.1759': attribute type 1 has an invalid length. [ 104.592722][T10320] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1759'. [ 104.593570][T10320] loop4: detected capacity change from 0 to 8 [ 104.594010][T10320] squashfs: Unknown parameter '' [ 104.626997][T10322] loop4: detected capacity change from 0 to 256 [ 104.638935][T10322] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 104.638952][T10322] FAT-fs (loop4): bogus number of directory entries (1) [ 104.638960][T10322] FAT-fs (loop4): Can't find a valid FAT filesystem [ 105.629642][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1785'. [ 105.629656][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1785'. [ 105.629971][T10392] fuse: Unknown parameter '' [ 105.864089][T10413] loop4: detected capacity change from 0 to 256 [ 105.875349][T10413] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 105.875362][T10413] FAT-fs (loop4): bogus number of directory entries (1) [ 105.875369][T10413] FAT-fs (loop4): Can't find a valid FAT filesystem [ 106.007617][T10430] loop9: detected capacity change from 0 to 256 [ 106.169176][ C1] net_ratelimit: 381 callbacks suppressed [ 107.031264][T10461] loop4: detected capacity change from 0 to 256 [ 107.034068][T10461] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 107.034089][T10461] FAT-fs (loop4): bogus number of directory entries (1) [ 107.034098][T10461] FAT-fs (loop4): Can't find a valid FAT filesystem [ 107.447449][T10478] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1815'. [ 107.447532][T10478] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1815'. [ 107.448125][T10478] fuse: Unknown parameter '' [ 107.501484][T10485] set_capacity_and_notify: 1 callbacks suppressed [ 107.501491][T10485] loop4: detected capacity change from 0 to 512 [ 107.511435][ T30] kauditd_printk_skb: 674 callbacks suppressed [ 107.511448][ T30] audit: type=1326 audit(359.876:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 107.511473][ T30] audit: type=1326 audit(359.876:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 107.511493][ T30] audit: type=1326 audit(359.876:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 107.511512][ T30] audit: type=1326 audit(359.876:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 107.511528][ T30] audit: type=1326 audit(359.876:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 107.511545][ T30] audit: type=1326 audit(359.876:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 107.511561][ T30] audit: type=1326 audit(359.876:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa5f7a228 code=0x7ffc0000 [ 107.511575][ T30] audit: type=1326 audit(359.876:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa5f5d0ec code=0x7ffc0000 [ 107.512412][ T30] audit: type=1326 audit(359.876:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa5f5d0ec code=0x7ffc0000 [ 107.513828][ T30] audit: type=1326 audit(359.876:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10472 comm="syz.8.1815" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa5f5d0ec code=0x7ffc0000 [ 107.523970][T10485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.575473][T10485] EXT4-fs: Cannot change journaled quota options when quota turned on [ 107.589885][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.823279][T10502] FAULT_INJECTION: forcing a failure. [ 107.823279][T10502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 107.823300][T10502] CPU: 1 UID: 0 PID: 10502 Comm: syz.4.1827 Not tainted syzkaller #0 PREEMPT [ 107.823310][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.823323][T10502] Call trace: [ 107.823326][T10502] show_stack+0x2c/0x3c (C) [ 107.823344][T10502] __dump_stack+0x30/0x40 [ 107.823354][T10502] dump_stack_lvl+0xd8/0x12c [ 107.823364][T10502] dump_stack+0x1c/0x28 [ 107.823374][T10502] should_fail_ex+0x418/0x58c [ 107.823382][T10502] should_fail_alloc_page+0xec/0x10c [ 107.823390][T10502] prepare_alloc_pages+0x194/0x484 [ 107.823399][T10502] __alloc_frozen_pages_noprof+0x180/0x578 [ 107.823407][T10502] alloc_pages_mpol+0x1fc/0x3d0 [ 107.823416][T10502] folio_alloc_mpol_noprof+0x4c/0x248 [ 107.823424][T10502] shmem_alloc_folio+0xa0/0x150 [ 107.823435][T10502] shmem_alloc_and_add_folio+0x28c/0xb30 [ 107.823445][T10502] shmem_get_folio_gfp+0x4d8/0x1378 [ 107.823455][T10502] shmem_write_begin+0x160/0x448 [ 107.823465][T10502] generic_perform_write+0x23c/0x7a4 [ 107.823475][T10502] shmem_file_write_iter+0x10c/0x134 [ 107.823486][T10502] vfs_write+0x51c/0xa0c [ 107.823493][T10502] ksys_write+0x12c/0x228 [ 107.823500][T10502] __arm64_sys_write+0x84/0x98 [ 107.823507][T10502] invoke_syscall+0x98/0x244 [ 107.823517][T10502] el0_svc_common+0xec/0x23c [ 107.823527][T10502] do_el0_svc+0x4c/0x5c [ 107.823537][T10502] el0_svc+0x60/0x1d8 [ 107.823545][T10502] el0t_64_sync_handler+0x44/0x104 [ 107.823552][T10502] el0t_64_sync+0x198/0x19c [ 107.929119][T10513] syzkaller1: entered promiscuous mode [ 107.929129][T10513] syzkaller1: entered allmulticast mode [ 108.053123][T10526] loop9: detected capacity change from 0 to 256 [ 108.058379][T10526] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 108.058394][T10526] FAT-fs (loop9): bogus number of directory entries (1) [ 108.058403][T10526] FAT-fs (loop9): Can't find a valid FAT filesystem [ 108.994819][T10530] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.995981][T10530] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.998591][T10530] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.000358][T10530] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.000408][T10530] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.001356][T10530] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.010420][T10530] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.010694][T10530] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.011737][T10530] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.016978][T10530] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.017045][T10530] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.019201][T10530] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.021546][T10530] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 109.021593][T10530] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.022426][T10530] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 109.053537][T10559] loop9: detected capacity change from 0 to 512 [ 109.081502][T10559] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.096563][T10559] EXT4-fs: Cannot change journaled quota options when quota turned on [ 109.115715][ T8862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.126822][T10570] loop4: detected capacity change from 0 to 512 [ 109.145682][T10570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.160739][T10576] loop9: detected capacity change from 0 to 256 [ 109.171816][T10576] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 109.171830][T10576] FAT-fs (loop9): bogus number of directory entries (1) [ 109.171837][T10576] FAT-fs (loop9): Can't find a valid FAT filesystem [ 109.190264][T10578] fuse: fd is not a fuse device [ 109.206743][T10578] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1853'. [ 109.206760][T10578] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1853'. [ 109.207223][T10578] fuse: Unknown parameter '0177777777777777777777700000000000000000044J(q磿 K(_{Yn>Bg MY"%s d-fV Wf00000000000000000000054' [ 109.229410][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.272262][T10584] FAULT_INJECTION: forcing a failure. [ 109.272262][T10584] name failslab, interval 1, probability 0, space 0, times 0 [ 109.272280][T10584] CPU: 1 UID: 0 PID: 10584 Comm: syz.9.1855 Not tainted syzkaller #0 PREEMPT [ 109.272293][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.272307][T10584] Call trace: [ 109.272310][T10584] show_stack+0x2c/0x3c (C) [ 109.272328][T10584] __dump_stack+0x30/0x40 [ 109.272339][T10584] dump_stack_lvl+0xd8/0x12c [ 109.272349][T10584] dump_stack+0x1c/0x28 [ 109.272359][T10584] should_fail_ex+0x418/0x58c [ 109.272368][T10584] should_failslab+0xc4/0x120 [ 109.272378][T10584] __kmalloc_noprof+0x108/0x6c8 [ 109.272387][T10584] tomoyo_realpath_from_path+0xbc/0x4dc [ 109.272399][T10584] tomoyo_path_number_perm+0x1f0/0x500 [ 109.272408][T10584] tomoyo_file_ioctl+0x2c/0x3c [ 109.272419][T10584] security_file_ioctl+0xdc/0x2b0 [ 109.272428][T10584] __arm64_sys_ioctl+0xb0/0x1cc [ 109.272436][T10584] invoke_syscall+0x98/0x244 [ 109.272447][T10584] el0_svc_common+0xec/0x23c [ 109.272457][T10584] do_el0_svc+0x4c/0x5c [ 109.272467][T10584] el0_svc+0x60/0x1d8 [ 109.272476][T10584] el0t_64_sync_handler+0x44/0x104 [ 109.272484][T10584] el0t_64_sync+0x198/0x19c [ 109.272494][T10584] ERROR: Out of memory at tomoyo_realpath_from_path. [ 109.467488][T10604] loop8: detected capacity change from 0 to 256 [ 109.473128][T10604] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 109.473146][T10604] FAT-fs (loop8): bogus number of directory entries (1) [ 109.473156][T10604] FAT-fs (loop8): Can't find a valid FAT filesystem [ 109.898232][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1868'. [ 109.898248][T10622] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1868'. [ 109.899335][T10622] fuse: Unknown parameter '' [ 109.941980][T10633] loop8: detected capacity change from 0 to 1024 [ 109.960329][T10633] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 109.969958][T10633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.995742][T10633] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1876'. [ 110.004344][T10644] 9p: Bad value for 'rfdno' [ 110.027889][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.359962][ T4713] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.421780][T10655] 9p: Bad value for 'wfdno' [ 110.863207][T10685] FAULT_INJECTION: forcing a failure. [ 110.863207][T10685] name failslab, interval 1, probability 0, space 0, times 0 [ 110.863232][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.9.1892 Not tainted syzkaller #0 PREEMPT [ 110.863246][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 110.863260][T10685] Call trace: [ 110.863263][T10685] show_stack+0x2c/0x3c (C) [ 110.863281][T10685] __dump_stack+0x30/0x40 [ 110.863292][T10685] dump_stack_lvl+0xd8/0x12c [ 110.863301][T10685] dump_stack+0x1c/0x28 [ 110.863311][T10685] should_fail_ex+0x418/0x58c [ 110.863319][T10685] should_failslab+0xc4/0x120 [ 110.863328][T10685] __kmalloc_noprof+0x108/0x6c8 [ 110.863336][T10685] tomoyo_encode2+0x10c/0x330 [ 110.863347][T10685] tomoyo_encode+0x34/0x50 [ 110.863356][T10685] tomoyo_realpath_from_path+0x488/0x4dc [ 110.863366][T10685] tomoyo_path_number_perm+0x1f0/0x500 [ 110.863375][T10685] tomoyo_file_ioctl+0x2c/0x3c [ 110.863385][T10685] security_file_ioctl+0xdc/0x2b0 [ 110.863394][T10685] __arm64_sys_ioctl+0xb0/0x1cc [ 110.863402][T10685] invoke_syscall+0x98/0x244 [ 110.863412][T10685] el0_svc_common+0xec/0x23c [ 110.863422][T10685] do_el0_svc+0x4c/0x5c [ 110.863432][T10685] el0_svc+0x60/0x1d8 [ 110.863440][T10685] el0t_64_sync_handler+0x44/0x104 [ 110.863447][T10685] el0t_64_sync+0x198/0x19c [ 110.863460][T10685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 110.917662][ T4713] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 111.093177][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 111.099919][T10710] loop4: detected capacity change from 0 to 256 [ 111.103278][T10710] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 111.103310][T10710] FAT-fs (loop4): bogus number of directory entries (1) [ 111.103319][T10710] FAT-fs (loop4): Can't find a valid FAT filesystem [ 111.150699][T10713] FAULT_INJECTION: forcing a failure. [ 111.150699][T10713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.150719][T10713] CPU: 1 UID: 0 PID: 10713 Comm: syz.3.1901 Not tainted syzkaller #0 PREEMPT [ 111.150733][T10713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 111.150746][T10713] Call trace: [ 111.150750][T10713] show_stack+0x2c/0x3c (C) [ 111.150770][T10713] __dump_stack+0x30/0x40 [ 111.150781][T10713] dump_stack_lvl+0xd8/0x12c [ 111.150791][T10713] dump_stack+0x1c/0x28 [ 111.150801][T10713] should_fail_ex+0x418/0x58c [ 111.150809][T10713] should_fail+0x14/0x24 [ 111.150816][T10713] should_fail_usercopy+0x20/0x30 [ 111.150824][T10713] _inline_copy_from_user+0x3c/0x174 [ 111.150836][T10713] copy_msghdr_from_user+0xb8/0x194 [ 111.150843][T10713] ___sys_sendmsg+0x14c/0x224 [ 111.150853][T10713] __sys_sendmsg+0x158/0x204 [ 111.150863][T10713] __arm64_sys_sendmsg+0x88/0x9c [ 111.150873][T10713] invoke_syscall+0x98/0x244 [ 111.150886][T10713] el0_svc_common+0xec/0x23c [ 111.150897][T10713] do_el0_svc+0x4c/0x5c [ 111.150907][T10713] el0_svc+0x60/0x1d8 [ 111.150915][T10713] el0t_64_sync_handler+0x44/0x104 [ 111.150923][T10713] el0t_64_sync+0x198/0x19c [ 111.216736][ T4713] Bluetooth: hci4: command 0x0c1a tx timeout [ 111.216764][ T4707] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.216780][ T4713] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.216801][ T4707] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.288952][T10722] loop4: detected capacity change from 0 to 512 [ 111.305070][T10722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.333131][T10722] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 111.340152][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.563490][T10746] loop8: detected capacity change from 0 to 256 [ 111.571812][T10747] squashfs: Unknown parameter './file0' [ 111.581863][T10746] vfat: Unknown parameter 'Ps;vJdv*CqIͭfѣ\n1! GăPޞ!)E [ 111.581863][T10746] gAiդj'́Ӹ*c|';RfG>64i7|@qjvCafA [ 111.581863][T10746] [VR' [ 111.603234][T10751] syz_tun: entered allmulticast mode [ 111.608070][T10751] pimreg: entered allmulticast mode [ 111.642353][ T7818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.642366][ T7818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.650404][T10749] syz_tun: left allmulticast mode [ 111.728312][ C0] net_ratelimit: 474 callbacks suppressed [ 111.860850][T10767] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.906306][T10767] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 112.183558][ T8862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.240176][T10777] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1919: invalid block [ 112.240209][T10777] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 112.241306][T10777] EXT4-fs error (device loop4) in ext4_process_orphan:346: IO failure [ 112.241328][T10777] loop4: lost filesystem error report for type 5 error -5 [ 112.242045][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 112.242059][ C1] EXT4-fs (loop4): initial error at time 364: ext4_get_branch:178: inode 11: block 4294967295 [ 112.242079][ C1] EXT4-fs (loop4): last error at time 364: ext4_process_orphan:346 [ 112.249959][T10777] EXT4-fs (loop4): 2 truncates cleaned up [ 112.250487][T10777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.412066][ T4720] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 112.426759][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.453977][ T4720] Bluetooth: hci4: SCO packet for unknown connection handle 1 [ 112.524654][T10818] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.548688][T10823] syzkaller0: left promiscuous mode [ 112.548700][T10823] syzkaller0: left allmulticast mode [ 112.575163][T10818] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 112.587066][ T4720] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.590174][ T8862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.629265][T10829] syzkaller1: left promiscuous mode [ 112.629279][T10829] syzkaller1: left allmulticast mode [ 113.003054][T10874] FAULT_INJECTION: forcing a failure. [ 113.003054][T10874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.003068][T10874] CPU: 0 UID: 0 PID: 10874 Comm: syz.8.1937 Not tainted syzkaller #0 PREEMPT [ 113.003078][T10874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 113.003090][T10874] Call trace: [ 113.003093][T10874] show_stack+0x2c/0x3c (C) [ 113.003110][T10874] __dump_stack+0x30/0x40 [ 113.003120][T10874] dump_stack_lvl+0xd8/0x12c [ 113.003130][T10874] dump_stack+0x1c/0x28 [ 113.003140][T10874] should_fail_ex+0x418/0x58c [ 113.003148][T10874] should_fail+0x14/0x24 [ 113.003155][T10874] should_fail_usercopy+0x20/0x30 [ 113.003162][T10874] dvb_usercopy+0x144/0x4d4 [ 113.003173][T10874] dvb_frontend_ioctl+0x68/0x8c [ 113.003181][T10874] __arm64_sys_ioctl+0x154/0x1cc [ 113.003189][T10874] invoke_syscall+0x98/0x244 [ 113.003199][T10874] el0_svc_common+0xec/0x23c [ 113.003209][T10874] do_el0_svc+0x4c/0x5c [ 113.003226][T10874] el0_svc+0x60/0x1d8 [ 113.003234][T10874] el0t_64_sync_handler+0x44/0x104 [ 113.003242][T10874] el0t_64_sync+0x198/0x19c [ 113.164754][T10903] FAULT_INJECTION: forcing a failure. [ 113.164754][T10903] name failslab, interval 1, probability 0, space 0, times 0 [ 113.164775][T10903] CPU: 1 UID: 0 PID: 10903 Comm: syz.3.1942 Not tainted syzkaller #0 PREEMPT [ 113.164789][T10903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 113.164804][T10903] Call trace: [ 113.164808][T10903] show_stack+0x2c/0x3c (C) [ 113.164828][T10903] __dump_stack+0x30/0x40 [ 113.164840][T10903] dump_stack_lvl+0xd8/0x12c [ 113.164850][T10903] dump_stack+0x1c/0x28 [ 113.164860][T10903] should_fail_ex+0x418/0x58c [ 113.164868][T10903] should_failslab+0xc4/0x120 [ 113.164877][T10903] kmem_cache_alloc_node_noprof+0x98/0x604 [ 113.164886][T10903] __alloc_skb+0x1f0/0x610 [ 113.164896][T10903] netlink_alloc_large_skb+0xd4/0x114 [ 113.164907][T10903] netlink_sendmsg+0x4c4/0x948 [ 113.164917][T10903] __sock_sendmsg+0xc8/0x17c [ 113.164926][T10903] ____sys_sendmsg+0x3d0/0x6c8 [ 113.164936][T10903] ___sys_sendmsg+0x198/0x224 [ 113.164946][T10903] __sys_sendmsg+0x158/0x204 [ 113.164955][T10903] __arm64_sys_sendmsg+0x88/0x9c [ 113.164965][T10903] invoke_syscall+0x98/0x244 [ 113.164976][T10903] el0_svc_common+0xec/0x23c [ 113.164985][T10903] do_el0_svc+0x4c/0x5c [ 113.164995][T10903] el0_svc+0x60/0x1d8 [ 113.165003][T10903] el0t_64_sync_handler+0x44/0x104 [ 113.165010][T10903] el0t_64_sync+0x198/0x19c [ 113.441223][ T4720] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.441573][ T4720] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.441866][ T4720] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.617888][ T4713] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 113.618226][T10925] set_capacity_and_notify: 4 callbacks suppressed [ 113.618234][T10925] loop9: detected capacity change from 0 to 8 [ 113.620104][T10925] squashfs: Unknown parameter 'nfs' [ 113.753248][T10931] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1947'. [ 113.813998][ T4720] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 114.240468][T10952] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1959'. [ 114.375278][ T4720] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 114.443571][T10967] loop9: detected capacity change from 0 to 256 [ 114.455750][T10967] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 114.455776][T10967] FAT-fs (loop9): bogus number of directory entries (1) [ 114.455785][T10967] FAT-fs (loop9): Can't find a valid FAT filesystem [ 114.518044][T10970] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 114.518060][T10970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 114.518099][T10970] vhci_hcd vhci_hcd.0: Device attached [ 114.531366][T10970] Injecting memory failure for pfn 0x135ae6 at process virtual address 0x20000000 [ 114.545177][T10970] Memory failure: 0x135ae6: Sending SIGBUS to syz.9.1964:10970 due to hardware memory corruption [ 114.545291][T10970] Memory failure: 0x135ae6: recovery action for dirty LRU page: Recovered [ 114.545306][T10970] Injecting memory failure for pfn 0x1449d3 at process virtual address 0x20001000 [ 114.545540][T10970] Memory failure: 0x1449d3: Sending SIGBUS to syz.9.1964:10970 due to hardware memory corruption [ 114.545559][T10970] Memory failure: 0x1449d3: recovery action for dirty LRU page: Recovered [ 114.545582][T10970] Injecting memory failure for pfn 0x216bf1 at process virtual address 0x20002000 [ 114.545606][T10970] Memory failure: 0x216bf1: unhandlable page. [ 114.545613][T10970] Memory failure: 0x216bf1: recovery action for reserved kernel page: Ignored [ 114.550257][T10973] vhci_hcd: connection closed [ 114.550500][ T7822] vhci_hcd vhci_hcd.9: stop threads [ 114.550513][ T7822] vhci_hcd vhci_hcd.9: release socket [ 114.550527][ T7822] vhci_hcd vhci_hcd.9: disconnect device [ 115.077306][T10986] loop4: detected capacity change from 0 to 8 [ 115.423526][T11002] loop4: detected capacity change from 0 to 256 [ 115.433133][T11008] netlink: 'syz.8.1975': attribute type 4 has an invalid length. [ 115.433701][T11008] FAULT_INJECTION: forcing a failure. [ 115.433701][T11008] name failslab, interval 1, probability 0, space 0, times 0 [ 115.433715][T11008] CPU: 0 UID: 0 PID: 11008 Comm: syz.8.1975 Tainted: G L syzkaller #0 PREEMPT [ 115.433727][T11008] Tainted: [L]=SOFTLOCKUP [ 115.433730][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 115.433742][T11008] Call trace: [ 115.433745][T11008] show_stack+0x2c/0x3c (C) [ 115.433767][T11008] __dump_stack+0x30/0x40 [ 115.433779][T11008] dump_stack_lvl+0xd8/0x12c [ 115.433791][T11008] dump_stack+0x1c/0x28 [ 115.433803][T11008] should_fail_ex+0x418/0x58c [ 115.433812][T11008] should_failslab+0xc4/0x120 [ 115.433821][T11008] __kmalloc_cache_noprof+0x94/0x5fc [ 115.433831][T11008] nsim_fib_event_nb+0x174/0xc5c [ 115.433842][T11008] notifier_call_chain+0x1a4/0x4cc [ 115.433854][T11008] atomic_notifier_call_chain+0xf0/0x1ac [ 115.433866][T11008] call_fib_notifiers+0x44/0x74 [ 115.433876][T11008] call_fib4_notifiers+0x88/0x118 [ 115.433888][T11008] fib_notify_alias_delete+0x314/0x428 [ 115.433898][T11008] fib_table_delete+0x588/0x7b4 [ 115.433908][T11008] fib_magic+0x294/0x344 [ 115.433916][T11008] fib_del_ifaddr+0xe60/0x113c [ 115.433924][T11008] fib_inetaddr_event+0xb0/0x1c0 [ 115.433933][T11008] notifier_call_chain+0x1a4/0x4cc [ 115.433945][T11008] blocking_notifier_call_chain+0x70/0xa0 [ 115.433956][T11008] __inet_del_ifa+0x5b8/0xca0 [ 115.433967][T11008] inetdev_event+0x550/0x1184 [ 115.433977][T11008] notifier_call_chain+0x1a4/0x4cc [ 115.433988][T11008] raw_notifier_call_chain+0x3c/0x50 [ 115.434000][T11008] call_netdevice_notifiers_info+0xb8/0x120 [ 115.434010][T11008] netif_set_mtu_ext+0x39c/0x574 [ 115.434023][T11008] do_setlink+0x7dc/0x31e8 [ 115.434033][T11008] rtnl_setlink+0x3cc/0x550 [ 115.434043][T11008] rtnetlink_rcv_msg+0x66c/0x9bc [ 115.434053][T11008] netlink_rcv_skb+0x238/0x414 [ 115.434066][T11008] rtnetlink_rcv+0x28/0x38 [ 115.434076][T11008] netlink_unicast+0x600/0x7f8 [ 115.434086][T11008] netlink_sendmsg+0x648/0x948 [ 115.434098][T11008] __sock_sendmsg+0xc8/0x17c [ 115.434109][T11008] sock_write_iter+0x220/0x310 [ 115.434121][T11008] do_iter_readv_writev+0x48c/0x6f8 [ 115.434130][T11008] vfs_writev+0x2a8/0x630 [ 115.434139][T11008] do_writev+0x134/0x2a8 [ 115.434147][T11008] __arm64_sys_writev+0x88/0x9c [ 115.434155][T11008] invoke_syscall+0x98/0x244 [ 115.434168][T11008] el0_svc_common+0xec/0x23c [ 115.434179][T11008] do_el0_svc+0x4c/0x5c [ 115.434191][T11008] el0_svc+0x60/0x1d8 [ 115.434200][T11008] el0t_64_sync_handler+0x44/0x104 [ 115.434213][T11008] el0t_64_sync+0x198/0x19c [ 115.490550][T11003] fuse: Unknown parameter '' [ 115.541673][ T4713] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 115.543890][ T4713] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 115.550428][T11012] loop8: detected capacity change from 0 to 512 [ 115.562402][T11012] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.1978: iget: bad i_size value: 38620345925642 [ 115.562427][T11012] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 115.562892][T11012] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1978: couldn't read orphan inode 15 (err -117) [ 115.562913][T11012] loop8: lost filesystem error report for type 5 error -117 [ 115.563455][T11012] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.623506][ T4713] Bluetooth: hci1: unexpected event for opcode 0x0428 [ 115.661323][ T8121] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.978755][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1984'. [ 115.979205][ T30] kauditd_printk_skb: 821 callbacks suppressed [ 115.979221][ T30] audit: type=1326 audit(367.799:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11034 comm="syz.5.1984" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd57a228 code=0x0 [ 116.232875][T11053] netlink: 'syz.3.1989': attribute type 4 has an invalid length. [ 116.233574][T11053] FAULT_INJECTION: forcing a failure. [ 116.233574][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 116.233588][T11053] CPU: 0 UID: 0 PID: 11053 Comm: syz.3.1989 Tainted: G L syzkaller #0 PREEMPT [ 116.233599][T11053] Tainted: [L]=SOFTLOCKUP [ 116.233602][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 116.233615][T11053] Call trace: [ 116.233618][T11053] show_stack+0x2c/0x3c (C) [ 116.233639][T11053] __dump_stack+0x30/0x40 [ 116.233651][T11053] dump_stack_lvl+0xd8/0x12c [ 116.233663][T11053] dump_stack+0x1c/0x28 [ 116.233674][T11053] should_fail_ex+0x418/0x58c [ 116.233683][T11053] should_failslab+0xc4/0x120 [ 116.233693][T11053] __kmalloc_cache_noprof+0x94/0x5fc [ 116.233703][T11053] nsim_fib_event_nb+0x174/0xc5c [ 116.233714][T11053] notifier_call_chain+0x1a4/0x4cc [ 116.233726][T11053] atomic_notifier_call_chain+0xf0/0x1ac [ 116.233738][T11053] call_fib_notifiers+0x44/0x74 [ 116.233748][T11053] call_fib4_notifiers+0x88/0x118 [ 116.233760][T11053] fib_notify_alias_delete+0x314/0x428 [ 116.233770][T11053] fib_table_delete+0x588/0x7b4 [ 116.233780][T11053] fib_magic+0x294/0x344 [ 116.233788][T11053] fib_del_ifaddr+0xe60/0x113c [ 116.233797][T11053] fib_inetaddr_event+0xb0/0x1c0 [ 116.233806][T11053] notifier_call_chain+0x1a4/0x4cc [ 116.233817][T11053] blocking_notifier_call_chain+0x70/0xa0 [ 116.233829][T11053] __inet_del_ifa+0x5b8/0xca0 [ 116.233839][T11053] inetdev_event+0x550/0x1184 [ 116.233849][T11053] notifier_call_chain+0x1a4/0x4cc [ 116.233860][T11053] raw_notifier_call_chain+0x3c/0x50 [ 116.233872][T11053] call_netdevice_notifiers_info+0xb8/0x120 [ 116.233882][T11053] netif_set_mtu_ext+0x39c/0x574 [ 116.233895][T11053] do_setlink+0x7dc/0x31e8 [ 116.233905][T11053] rtnl_setlink+0x3cc/0x550 [ 116.233915][T11053] rtnetlink_rcv_msg+0x66c/0x9bc [ 116.233926][T11053] netlink_rcv_skb+0x238/0x414 [ 116.233937][T11053] rtnetlink_rcv+0x28/0x38 [ 116.233947][T11053] netlink_unicast+0x600/0x7f8 [ 116.233958][T11053] netlink_sendmsg+0x648/0x948 [ 116.233970][T11053] __sock_sendmsg+0xc8/0x17c [ 116.233980][T11053] sock_write_iter+0x220/0x310 [ 116.233993][T11053] do_iter_readv_writev+0x48c/0x6f8 [ 116.234005][T11053] vfs_writev+0x2a8/0x630 [ 116.234014][T11053] do_writev+0x134/0x2a8 [ 116.234023][T11053] __arm64_sys_writev+0x88/0x9c [ 116.234032][T11053] invoke_syscall+0x98/0x244 [ 116.234044][T11053] el0_svc_common+0xec/0x23c [ 116.234056][T11053] do_el0_svc+0x4c/0x5c [ 116.234067][T11053] el0_svc+0x60/0x1d8 [ 116.234077][T11053] el0t_64_sync_handler+0x44/0x104 [ 116.234085][T11053] el0t_64_sync+0x198/0x19c [ 116.340680][T11059] loop9: detected capacity change from 0 to 512 [ 116.352565][T11059] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.352581][T11059] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.386483][T11059] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.1992: Allocating blocks 41-42 which overlap fs metadata [ 116.386505][T11059] loop9: lost filesystem error report for type 5 error -117 [ 116.386699][T11059] EXT4-fs (loop9): Remounting filesystem read-only [ 116.386838][T11059] Quota error (device loop9): write_blk: dquota write failed [ 116.386847][T11059] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 116.386894][T11059] Quota error (device loop9): write_blk: dquota write failed [ 116.386926][T11059] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 116.386982][T11059] EXT4-fs (loop9): 1 truncate cleaned up [ 116.387549][T11059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.767036][T11069] loop8: detected capacity change from 0 to 256 [ 116.768941][T11069] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 116.768956][T11069] FAT-fs (loop8): bogus number of directory entries (1) [ 116.768962][T11069] FAT-fs (loop8): Can't find a valid FAT filesystem [ 116.838135][ T4713] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 116.864984][T11075] ip6t_rpfilter: unknown options [ 116.865305][ T4713] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 117.334865][ T8862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.375307][ T4897] net_ratelimit: 288 callbacks suppressed [ 117.645727][T11110] vlan1: entered promiscuous mode [ 117.645799][T11110] vlan1: entered allmulticast mode [ 117.645806][T11110] veth0_vlan: entered allmulticast mode [ 117.665364][T11110] loop9: detected capacity change from 0 to 1024 [ 117.667487][T11110] EXT4-fs: Ignoring removed orlov option [ 117.676283][T11110] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 117.751598][T11120] loop4: detected capacity change from 0 to 512 [ 117.763512][T11120] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 117.763532][T11120] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.774492][T11120] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.2011: Allocating blocks 41-42 which overlap fs metadata [ 117.774511][T11120] loop4: lost filesystem error report for type 5 error -117 [ 117.780273][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 117.780284][ C1] EXT4-fs (loop4): initial error at time 369: ext4_mb_mark_diskspace_used:4223 [ 117.780295][ C1] EXT4-fs (loop4): last error at time 369: ext4_mb_mark_diskspace_used:4223 [ 117.788600][T11120] EXT4-fs (loop4): Remounting filesystem read-only [ 117.788654][T11120] Quota error (device loop4): write_blk: dquota write failed [ 117.788663][T11120] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 117.788715][T11120] Quota error (device loop4): write_blk: dquota write failed [ 117.788747][T11120] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 117.788808][T11120] EXT4-fs (loop4): 1 truncate cleaned up [ 117.789282][T11120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.212025][ T8862] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 118.279567][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2015'. [ 118.295438][T11140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.432857][ T4713] Bluetooth: hci4: unexpected event for opcode 0x0428 [ 118.669735][ T4705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.697380][ T4713] Bluetooth: hci0: unexpected event for opcode 0x0428 [ 118.818629][T11153] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2022'. [ 118.819285][T11153] ================================================================== [ 118.819289][T11153] BUG: KASAN: slab-out-of-bounds in hex_string+0x274/0x364 [ 118.819305][T11153] Read of size 1 at addr ffff0000cdfc097c by task syz.8.2022/11153 [ 118.819313][T11153] [ 118.819319][T11153] CPU: 0 UID: 0 PID: 11153 Comm: syz.8.2022 Tainted: G L syzkaller #0 PREEMPT [ 118.819331][T11153] Tainted: [L]=SOFTLOCKUP [ 118.819334][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 118.819346][T11153] Call trace: [ 118.819350][T11153] show_stack+0x2c/0x3c (C) [ 118.819364][T11153] __dump_stack+0x30/0x40 [ 118.819377][T11153] dump_stack_lvl+0xd8/0x12c [ 118.819389][T11153] print_address_description+0xb0/0x238 [ 118.819398][T11153] print_report+0x68/0x84 [ 118.819406][T11153] kasan_report+0x8c/0xc4 [ 118.819417][T11153] __asan_report_load1_noabort+0x20/0x2c [ 118.819429][T11153] hex_string+0x274/0x364 [ 118.819440][T11153] pointer+0x1a8/0x6b4 [ 118.819450][T11153] vsnprintf+0x618/0xd10 [ 118.819460][T11153] pointer+0x5e8/0x6b4 [ 118.819469][T11153] vsnprintf+0x618/0xd10 [ 118.819479][T11153] vscnprintf+0x6c/0xd4 [ 118.819488][T11153] printk_sprint+0xc0/0x65c [ 118.819500][T11153] vprintk_store+0x714/0xb94 [ 118.819511][T11153] vprintk_emit+0x1bc/0x514 [ 118.819523][T11153] dev_vprintk_emit+0x2ec/0x3b4 [ 118.819535][T11153] dev_printk_emit+0xe0/0x130 [ 118.819547][T11153] __dynamic_dev_dbg+0x1b4/0x254 [ 118.819557][T11153] dtv_property_process_get+0x26bc/0x2838 [ 118.819568][T11153] dvb_frontend_handle_ioctl+0x1644/0x2424 [ 118.819577][T11153] dvb_frontend_do_ioctl+0x124/0x278 [ 118.819586][T11153] dvb_usercopy+0x2a4/0x4d4 [ 118.819598][T11153] dvb_frontend_ioctl+0x68/0x8c [ 118.819606][T11153] __arm64_sys_ioctl+0x154/0x1cc [ 118.819614][T11153] invoke_syscall+0x98/0x244 [ 118.819627][T11153] el0_svc_common+0xec/0x23c [ 118.819639][T11153] do_el0_svc+0x4c/0x5c [ 118.819650][T11153] el0_svc+0x60/0x1d8 [ 118.819657][T11153] el0t_64_sync_handler+0x44/0x104 [ 118.819666][T11153] el0t_64_sync+0x198/0x19c [ 118.819675][T11153] [ 118.819676][T11153] Allocated by task 11153: [ 118.819681][T11153] kasan_save_track+0x40/0x78 [ 118.819689][T11153] kasan_save_alloc_info+0x40/0x50 [ 118.819698][T11153] __kasan_kmalloc+0x9c/0xb4 [ 118.819706][T11153] __kmalloc_node_track_caller_noprof+0x440/0x6e0 [ 118.819715][T11153] memdup_user+0x44/0xec [ 118.819722][T11153] dvb_frontend_handle_ioctl+0xb8c/0x2424 [ 118.819730][T11153] dvb_frontend_do_ioctl+0x124/0x278 [ 118.819738][T11153] dvb_usercopy+0x2a4/0x4d4 [ 118.819747][T11153] dvb_frontend_ioctl+0x68/0x8c [ 118.819754][T11153] __arm64_sys_ioctl+0x154/0x1cc [ 118.819760][T11153] invoke_syscall+0x98/0x244 [ 118.819770][T11153] el0_svc_common+0xec/0x23c [ 118.819780][T11153] do_el0_svc+0x4c/0x5c [ 118.819790][T11153] el0_svc+0x60/0x1d8 [ 118.819796][T11153] el0t_64_sync_handler+0x44/0x104 [ 118.819802][T11153] el0t_64_sync+0x198/0x19c [ 118.819808][T11153] [ 118.819810][T11153] The buggy address belongs to the object at ffff0000cdfc0800 [ 118.819810][T11153] which belongs to the cache kmalloc-512 of size 512 [ 118.819817][T11153] The buggy address is located 0 bytes to the right of [ 118.819817][T11153] allocated 380-byte region [ffff0000cdfc0800, ffff0000cdfc097c) [ 118.819825][T11153] [ 118.819827][T11153] The buggy address belongs to the physical page: [ 118.819831][T11153] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000cdfc3c00 pfn:0x10dfc0 [ 118.819839][T11153] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.819845][T11153] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 118.819854][T11153] page_type: f5(slab) [ 118.819861][T11153] raw: 05ffc00000000240 ffff0000c0001c80 fffffdffc3cb9410 fffffdffc3649310 [ 118.819869][T11153] raw: ffff0000cdfc3c00 000000000010000f 00000000f5000000 0000000000000000 [ 118.819877][T11153] head: 05ffc00000000240 ffff0000c0001c80 fffffdffc3cb9410 fffffdffc3649310 [ 118.819884][T11153] head: ffff0000cdfc3c00 000000000010000f 00000000f5000000 0000000000000000 [ 118.819891][T11153] head: 05ffc00000000002 fffffdffc337f001 00000000ffffffff 00000000ffffffff [ 118.819898][T11153] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 118.819902][T11153] page dumped because: kasan: bad access detected [ 118.819905][T11153] [ 118.819907][T11153] Memory state around the buggy address: [ 118.819911][T11153] ffff0000cdfc0800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.819916][T11153] ffff0000cdfc0880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.819922][T11153] >ffff0000cdfc0900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 [ 118.819926][T11153] ^ [ 118.819931][T11153] ffff0000cdfc0980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.819936][T11153] ffff0000cdfc0a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.819940][T11153] ================================================================== [ 118.819944][T11153] Disabling lock debugging due to kernel taint [ 122.761122][ T4897] net_ratelimit: 1122 callbacks suppressed [ 128.320599][ T4897] net_ratelimit: 241 callbacks suppressed