last executing test programs: 1m42.138600644s ago: executing program 4 (id=8): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000005c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0xf02a2480, 0x0, 0xffe2, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x4805, &(0x7f0000000380)={[{@uni_xlate}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@fat=@showexec}, {@fat=@showexec}, {@shortname_winnt}, {@numtail}]}, 0x0, 0x2bf, &(0x7f0000002bc0)="$eJzs3U1rE2sUwPHTpGnSlDZZlAv3wuUerhvdDG38BEFaEANKbURdCFM70ZAxE2ZiJCK2O7d+juLSlYL6Bbpx517cFEFw04U4kmQmpuloX7Sd1vx/UOZ0zpw8Tzoz5UyhT7auP71Xq3hGxWxKIqOSEFmXbZF8JwqMBdtEN56QQetyburzu3+v3rh5qVgqLSypLhaXzxdUdea/Vw8ePfv/TXPq2vOZl2nZzN/a+lR4v/nX5t9bX5fDV3dETF1xnKa5Ylu6WvVqhuoV2zI9S6t1z3Kbaqob5iu202i01ayvTmcbruV5atbbWrPa2nS06bbVvGNW62oYhk5nZdQkD1xR3lhaMotHMhnEYTJqp+sWzWRksrxxHJMCAAAnS1z9/92qp1VP606nv/9J/5+Qwfwe/b/ISPf/h9X4cSqyn8Tp0un/s8H9uxP9PwAAAAAAAAAAAAAAAAAAAAAAp8G27+d838+F2/ArLSIZEQm/j3ueOBqc/9E28I97GRH7SavcKve2vXyxIjNiiyVzKZEv3esh0IsXL5YW5rQrL6/ttaB+rVVOSrpXX+0Plo+un+/V62D9mqQkG9Z3xi9ITmaj6wsR9a3yhJw946eDkS0xJCdvb4sjtqx2r+vv9Y/nVS9cLg3VT3aPAwAAAADgT2Bo367n927e0HDZkKF8b2f/+XxOcnv8fWDo+Xpc/hmP730DAAAAADBKvAmpmbZtuV77YWxB6njGChez/S0vKBLnT6wTZPZ78LiIBHtexDznAwUJERlOpXbtiQ6Sv3aWP4rsvC9mYz/dhw78ZP9a/XB/4GNi9iiP8ZcSAAAAgCMRNv1jcU8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIARtt9VxMLjD7MI2cBwyXjeJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAyfAsAAP//+xwQhQ==") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') msgsnd(0x0, 0x0, 0xff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000240)=0xfde9) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x3, [@datasec={0x1, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x5, 0xcd}, {0x2, 0x6, 0x80000000}, {0x2, 0x1, 0x59e}, {0x3, 0x7, 0xb}], 'M'}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x30]}}, &(0x7f00000000c0)=""/9, 0x67, 0x9, 0x1, 0x5}, 0x28) 1m41.929082877s ago: executing program 4 (id=11): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000140)={0x1f, @none}, 0x8) listen(r1, 0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000), 0x8) listen(r2, 0x5) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write$cgroup_pressure(r3, &(0x7f0000000040)={'some', 0x20, 0x9, 0x20, 0x1955bc0a}, 0x2f) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000001c0)='ns/net\x00', &(0x7f0000000480)="5839b6000a799e10cf1e93bd267015df711388db112eea1ea1050465170420a19dd9815ab57ba362b5cb60db395d66070c45c3e1c2512be6bd7f54491fa017de10a9e166f7153c672622cd29a453dbb35b748c43c186c51093c8b2f0be8cadf061d01490651d57c452a67dba8c2681b16918bdbfa46c260a425f6b863b7933f39cf13acb446474ebb3bc77a61e2d17f1d64bbaf68e2c1a", 0x97) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1m40.405930462s ago: executing program 4 (id=22): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000300)={{}, 0x1, 0x1, 0x1}, 0x18) write$input_event(r1, &(0x7f0000000380)={{}, 0x1, 0x65, 0x1}, 0x18) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x9) setregid(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@resgid={'resgid', 0x3d, r3}}, {@nogrpid}, {@quota}, {@usrquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r4 = syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r5, 0xee00, 0xee00) read$hiddev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffefffe}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x10, 0x0, &(0x7f0000000480)="268078f8b8f071c1a93a7379bcd0a030", 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="390100000000000000", @ANYRES16=r9, @ANYBLOB="01002dbd7000000000004e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab00fcffffff08000b006b0b00000600110003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="3df16f92309176d72ea25107cc93952dbeb001ea80c2ab3efab4debcd35d33330f4e6e682eea78d57872c64afba76f66dae09e0c24c955e69f5de0687f6de03ec173030cc75da0b604e420e99c98f1b5ee4801404d8806d12c3ed384d7c118f91adfa5a31d01c0b445f8b04e503a991a075dfa29d9c915f148a6bc046ab2d047317625b4eeb39c9185834c861adf4e20f22257ae7a0da8414338d85e8e0f33d14fcd6e22b556217d03895fad896687a55880f0c658cbc845d9efb339", @ANYRES8=r9, @ANYRESOCT=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) mount$9p_tcp(&(0x7f0000002480), &(0x7f00000024c0)='./proc\x00', &(0x7f0000002500), 0x10001, &(0x7f0000002540)=ANY=[@ANYBLOB="0df8d042963d7463702c706f72743d3078303030303030303030303030346532332c00"]) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="600100001000800026bd700000000000ac1414040000000000000000000000425000ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m40.352690959s ago: executing program 32 (id=22): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x1}, 'syz0\x00', 0x1}) ioctl$UI_DEV_CREATE(r1, 0x5501) write$input_event(r1, &(0x7f0000000300)={{}, 0x1, 0x1, 0x1}, 0x18) write$input_event(r1, &(0x7f0000000380)={{}, 0x1, 0x65, 0x1}, 0x18) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x9) setregid(0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@resgid={'resgid', 0x3d, r3}}, {@nogrpid}, {@quota}, {@usrquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r4 = syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r5, 0xee00, 0xee00) read$hiddev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7ffefffe}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x10, 0x0, &(0x7f0000000480)="268078f8b8f071c1a93a7379bcd0a030", 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r8) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="390100000000000000", @ANYRES16=r9, @ANYBLOB="01002dbd7000000000004e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab00fcffffff08000b006b0b00000600110003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="3df16f92309176d72ea25107cc93952dbeb001ea80c2ab3efab4debcd35d33330f4e6e682eea78d57872c64afba76f66dae09e0c24c955e69f5de0687f6de03ec173030cc75da0b604e420e99c98f1b5ee4801404d8806d12c3ed384d7c118f91adfa5a31d01c0b445f8b04e503a991a075dfa29d9c915f148a6bc046ab2d047317625b4eeb39c9185834c861adf4e20f22257ae7a0da8414338d85e8e0f33d14fcd6e22b556217d03895fad896687a55880f0c658cbc845d9efb339", @ANYRES8=r9, @ANYRESOCT=0x0], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) mount$9p_tcp(&(0x7f0000002480), &(0x7f00000024c0)='./proc\x00', &(0x7f0000002500), 0x10001, &(0x7f0000002540)=ANY=[@ANYBLOB="0df8d042963d7463702c706f72743d3078303030303030303030303030346532332c00"]) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="600100001000800026bd700000000000ac1414040000000000000000000000425000ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m6.95331958s ago: executing program 1 (id=458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@report={0x9c, 0x29, 0x1, 0x70bd2b, 0x25dfdbfe, {0x33, {@in=@rand_addr=0x64010102, @in6=@private2, 0x7ff, 0x6, 0x4e23, 0x0, 0x0, 0x1b0, 0xa0, 0x2b}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @iptfs_max_qsize={0x8, 0x1e, 0x3963}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000018000105000000000000000002200000fe04000100000000080001000a000001080004000100000006001500050000002400168020000100010000000002040000000000fc"], 0x58}}, 0x0) 1m6.923754058s ago: executing program 1 (id=459): socket$igmp6(0xa, 0x3, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x80, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r1, &(0x7f00000009c0)='1', 0x1, 0xf}]) dup3(r1, r0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m6.010407951s ago: executing program 1 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000019000b00000000000000000002200000fe04000100000000080001000a00000b"], 0x58}}, 0x0) 1m5.947959898s ago: executing program 1 (id=466): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x6, 0x5}) fanotify_mark(0xffffffffffffffff, 0x90, 0x8000032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mlock2(&(0x7f0000108000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1m5.799316801s ago: executing program 1 (id=471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000008c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x500, 0x0, 0x2, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5dd814aa2eb7e4f8a75905a9850edbe30000000008008000", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40c5475030000000000000000004000"}}}}}}}, 0x0) 1m5.719950125s ago: executing program 33 (id=472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x2, 0x2b9, &(0x7f0000000800)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setresuid(0xee01, 0x0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f100", @ANYRES64=r1], 0x101c40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m5.168116842s ago: executing program 1 (id=478): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000014a9fcff0400000038130000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x3000000}, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000010000000400000f030000000400000005000000cd00000002000000060000000000008002000000010000009e05000003000000070000000b0000004d36550a0000000000000f01000000b5597f910d9adc424b4e2ca9f400005e4b2ed98bb7a86fbe1bf3e84d03e1b5ffcf91c6ce965c69b817d5cb277cce08f742fbe97a483f5eb05c00"], &(0x7f00000000c0)=""/9, 0x66, 0x9, 0x1, 0x5}, 0x28) 1m5.100901778s ago: executing program 34 (id=478): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000014a9fcff0400000038130000", @ANYRES32, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x3000000}, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000010000000400000f030000000400000005000000cd00000002000000060000000000008002000000010000009e05000003000000070000000b0000004d36550a0000000000000f01000000b5597f910d9adc424b4e2ca9f400005e4b2ed98bb7a86fbe1bf3e84d03e1b5ffcf91c6ce965c69b817d5cb277cce08f742fbe97a483f5eb05c00"], &(0x7f00000000c0)=""/9, 0x66, 0x9, 0x1, 0x5}, 0x28) 55.188530573s ago: executing program 7 (id=579): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 55.127670909s ago: executing program 7 (id=581): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000300)={0x1, 0x0, {0x8, 0xb0, 0x2019, 0x0, 0xa, 0x7, 0x1, 0x3}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x0) fchdir(r6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (async) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x6) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000000480)={0x0, 0xdb8, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x3, 0xe, {{0xf, 0x4, 0x3, 0x8, 0x3c, 0x65, 0x0, 0x7, 0x29, 0x0, @local, @loopback, {[@end, @ssrr={0x89, 0x13, 0x45, [@multicast2, @loopback, @remote, @empty]}, @lsrr={0x83, 0x7, 0xcb, [@loopback]}, @timestamp_addr={0x44, 0xc, 0x80, 0x1, 0xa, [{@empty, 0x8001}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x10, 0x7800, 0x3, 0xe, {{0xf, 0x4, 0x3, 0x8, 0x3c, 0x65, 0x0, 0x7, 0x29, 0x0, @local, @loopback, {[@end, @ssrr={0x89, 0x13, 0x45, [@multicast2, @loopback, @remote, @empty]}, @lsrr={0x83, 0x7, 0xcb, [@loopback]}, @timestamp_addr={0x44, 0xc, 0x80, 0x1, 0xa, [{@empty, 0x8001}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@bridge_delvlan={0x74, 0x71, 0x2, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x0, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x0, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0x0, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x0, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY, @BRIDGE_VLANDB_ENTRY={0x0, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x0, 0x6, 0x1}}]}, 0x74}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@bridge_delvlan={0x74, 0x71, 0x2, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x40}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x0, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x0, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0x0, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x0, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY, @BRIDGE_VLANDB_ENTRY={0x0, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x0, 0x6, 0x1}}]}, 0x74}}, 0x0) 54.26449412s ago: executing program 7 (id=587): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) setuid(0xee00) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=ANY=[], 0x41c}], 0x1}, 0x40020) socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)}) ioctl$FE_READ_STATUS(r2, 0x80046f45, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x12010, 0xffffffffffffffff, 0xffffe000) r3 = userfaultfd(0x80800) close(0x3) r4 = userfaultfd(0x80801) mmap(&(0x7f00006f0000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r1, 0xce4f1000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) memfd_create(0x0, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080), 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 51.203540474s ago: executing program 7 (id=633): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/console\x00', 0x1, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xf21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c00078008000500feffffff08000600000000004dfd050000000000240007800800050000000000000005000000000061ff05000000000008000500000000000400078014000780080006000000000047ff0500000000004400078007000500feffffff0800050000000000080005000000000058fc06000000000008000500000000000800060000001a339930a2d436f7b291d652ff000008000600000000000800060000000000"], 0xd0}}, 0x0) 50.854400685s ago: executing program 7 (id=635): setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000500)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f00000000c0)={0x6, {"8d0000f692ee930d00000000000100", "000900000000000200"}, 0x7, 0x4}) 50.242560635s ago: executing program 7 (id=646): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x11, 0xc8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) syz_usb_connect$uac2(0x5, 0xa5, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000081e04003040000102030109029300030108100a080b01020107200909040000000101203f0924010600031b001a06240b01016e0c2403060204290177977c7e09040100000102200009040101010102200010240107ff030200000002ff010000dd09050109ff0304037f082501800cf70a000904020000010120000904020101010220"], &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0}) 50.157742878s ago: executing program 35 (id=646): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x11, 0xc8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x68}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000001100)=@generic={0x1, 0x5, 0x8}) syz_usb_connect$uac2(0x5, 0xa5, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000081e04003040000102030109029300030108100a080b01020107200909040000000101203f0924010600031b001a06240b01016e0c2403060204290177977c7e09040100000102200009040101010102200010240107ff030200000002ff010000dd09050109ff0304037f082501800cf70a000904020000010120000904020101010220"], &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0}) 43.436032938s ago: executing program 2 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) 43.346145234s ago: executing program 2 (id=726): r0 = semget(0x2, 0x4, 0x200) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x4, 0x1800}, {0x2, 0x8000, 0x1000}, {0x0, 0x7, 0x800}, {0x3, 0x9}, {0x1, 0x8, 0x800}, {0x2, 0xb}, {0x4, 0x3}, {0x3, 0xffff, 0x1800}], 0x8, &(0x7f0000000040)={0x0, 0x989680}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000a000000ba51608c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000014000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000008000a00000000000001d58092505832f9ec0000000000000801000001000000000100"], 0xfc}, 0x1, 0x0, 0x0, 0x20008084}, 0x20000000) sendto$inet6(r1, &(0x7f0000000280)="ed", 0x1, 0xa0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) 43.345932715s ago: executing program 2 (id=727): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0', 0x33) ioctl(r0, 0xc138fd09, &(0x7f0000003000)="0400000006000000000000006c0100003801000001") 43.328446986s ago: executing program 2 (id=728): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000010140)='l', 0x1, 0x604042ffc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fdffffff0000000007000000850000002c000000b7080000000000007b8af8ff00000000b7080000068000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', r4, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="0010001d000000136e53532f2848", 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_clone(0x1200000, &(0x7f00000004c0)="343a7f8ef141d7e14aa875d33e4922b2c24e5a9a2cef8de682bb41f3f1dcc247d76bd81b5e953fa6c93ee09a5438a00c667cf4ea0bb00363e1eb40b9f747beb4817964036c8be017c0c747e3650a5f98e6461d9023abd2235d73a647e7fe44bbd55566a22a85d57341b8238e024bc674b4ad161e5d833e1beba37a6632eac2079172dd61eb94978d85c3c9b9d9cb25688ae0882df05242280810a5", 0x9b, &(0x7f0000000580), &(0x7f0000000980), &(0x7f00000009c0)="4a90544a066e7b293dbea08fc2de9ab4ab45f4ebd5c5de6ecaf296e92f88fbabfdc52fc5f843d6123cc5b8b02e50c4eeca6fc191508265346f343a6415bd23d2249a222b90544187490fe75ed36d330285f1e80b2bc692d0700096366a63b678cce85ad68ef4b574a2726b159ee5908eb55766c8f5406883c4") ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, &(0x7f0000000000)={0x9, 0x7d, 0xb3b9, 0x7ff, 0x80000000}) 43.286702157s ago: executing program 2 (id=729): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x80) (fail_nth: 8) 43.127964295s ago: executing program 2 (id=730): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100), 0x0, 0xc0c) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 43.110748814s ago: executing program 36 (id=730): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100), 0x0, 0xc0c) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}) 25.067469743s ago: executing program 6 (id=944): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="03000000594126b4249905d541d6b1c30e6013760580ef553daa2a67c2869bc1619029f2635594787d538ce428c24719b01db9f807ab617ca5a7ccd5e3f80f4f0919e19f58f705a3356cfc3f7c8425f3ad1d2350828a42ea27bdb77dd5"], 0x5f) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000240)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000001000001", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000000000000000000000001000001", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c001600", @ANYRES16=r2, @ANYBLOB="040025bd7000b20a00000b000000080002000400000005000500810000000500050081000000080004000000000c0800040003000000050005000f0000000800020003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0x3, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7, 0x20ffd}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048101, &(0x7f0000000040)={0xa, 0x0, 0x100f4, @remote, 0xe}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048101, &(0x7f0000000040)={0xa, 0x0, 0x100f4, @remote, 0xe}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) (async) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r5, 0x716e) accept$inet6(r5, 0x0, 0x0) (async) accept$inet6(r5, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000) syz_open_dev$usbfs(&(0x7f0000000200), 0x5, 0x204000) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000200), 0x5, 0x204000) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0x7}, 0x40, 0x4, &(0x7f0000000580)="07d088871482a510ab3cbf709316a94179e1d64e9000c33663b004a8116a433703848818a53fc34d30daa46a13b72caeab6e574a04f7b00203c1b3252f394ad73b175cc02fc00082ff341383e447af627d8e37c2ac2f295878896ea7daba9e4e4f457552759c3036e8fa47f9e06ee94769323d316f93239376fce6d91b9edfa34b3c91f9bcd52e0ae8498f61369c4fce2b963766fe487970678e6440ba4a6aa9b689a464d7fa253c", 0xa8, 0x2, 0xffd, 0x0, 0xffff, 0x5, &(0x7f0000000340)="e4a0e9ffa57c33f21abe60fa86c4d46011d019f0b666228ed0890b93c204c05e0fb0ab74f6f4b83f053c2d279f1db5f0873b645eccd99df73756c2815ab2a4cdf24e3242e67c3b0870b684da49db85395f3db3255e8e97bd11f76b2be87c539e7d52f44ff16273314d14887f6bf7a257b0f2bab98a266b714779cbfdff4d20a7f59092aab219a4a89079363c0fd7fd54041f0ca112708d8c45e955a618b87166545e7c2b2da93e49d0964d63d36f063456ec6e40a2c61fde3cbbb029f9a7ac4531b56e"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003cc0)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1000}, 0x0, 0x0, '\x00', {0x3, 0x7d4, 0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x72) (async) r8 = fsmount(0xffffffffffffffff, 0x1, 0x72) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000c40)={0xc, 0x8, 0xfa00, {&(0x7f0000000ac0)}}, 0x10) r9 = openat$cgroup_ro(r8, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) setuid(0xee01) utimensat(r9, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 25.002357722s ago: executing program 6 (id=945): r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x6, "0659dc2a4d18829bbfc530c92dff81cac142a1ce3a056f3348823f8f2891f8f4"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xb83297c01978451f}, 0x48) add_key(0x0, &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) 23.991176065s ago: executing program 6 (id=953): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000018000105000000000000000002200000fe04000100000000080001000a000001080004000100000006001500050000002400168020000100010000000002040000000000fc"], 0x58}}, 0x0) 23.083752958s ago: executing program 6 (id=968): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r1, 0x104, 0x1) getdents64(r1, 0x0, 0x4f) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf2523000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r5 = syz_io_uring_setup(0x1ed6, &(0x7f0000001200)={0x0, 0x0, 0x40000, 0x3, 0xffffffff, 0x0, 0x0}, &(0x7f0000001280)=0x0, &(0x7f00000012c0)=0x0, &(0x7f0000000000)=0x0) r9 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x40000) ioctl$VIDIOC_SUBDEV_G_EDID(r9, 0xc0285628, &(0x7f00000009c0)={0x0, 0x200, 0x7, '\x00', &(0x7f0000000980)}) syz_io_uring_submit(r6, r7, r8, &(0x7f0000001340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x2, 0x20, 0x0, 0x0, 0x0) 22.934405285s ago: executing program 6 (id=973): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x400, 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x25040002) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) close(0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 22.591641439s ago: executing program 6 (id=976): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x3, [], 'M6U'}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}}, &(0x7f00000000c0)=""/9, 0x36, 0x9, 0x1, 0x5}, 0x28) 22.52692994s ago: executing program 37 (id=976): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) accept4(r0, 0x0, 0x0, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x3, [], 'M6U'}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}}, &(0x7f00000000c0)=""/9, 0x36, 0x9, 0x1, 0x5}, 0x28) 17.937697374s ago: executing program 4 (id=977): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x43, 0x47a, &(0x7f00000028c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000006d40)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000006200)=ANY=[@ANYBLOB="a8000000000000000000000007000000070b086401010100000000880200"], 0x20}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000)=0x2800000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x3d8, 0x138, 0xa, 0x148, 0x138, 0x10, 0x340, 0x2a8, 0x2a8, 0x340, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff000000, 0x0, 'bridge0\x00', 'pim6reg\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0xd, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x18f, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4e9be7bf902bdc2ff82e3f18458d3d40bfdc0bdc77378b6186274d7de56d5af300"}}}, {{@ip={@broadcast, @remote, 0xff000000, 0x0, 'pimreg1\x00', 'tunl0\x00', {}, {}, 0x20, 0x2}, 0x0, 0x1c8, 0x208, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xaf, 0x0, "f0230592616f3c085734abbdd8d6c2627672fc61719966b3ea479cfb061e"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x438) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/1/smp_affinity\x00', 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000140)='./proc_mnt\x00', &(0x7f00000005c0), 0xa59028, &(0x7f0000000540)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x7f}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) r4 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) fstat(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000003280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000052c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r5}}, {@subj_type}, {@euid_gt={'euid>', r5}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_hash}, {@uid_lt={'uid<', r6}}, {@subj_user={'subj_user', 0x3d, '@*^\\'}}, {@fsmagic={'fsmagic', 0x3d, 0x2e}}, {@dont_measure}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 17.184079802s ago: executing program 4 (id=1015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20008400000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}}, 0x0) 14.246362269s ago: executing program 4 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd06, &(0x7f0000003000)="0400000032000000000000003801") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffbb, 0x2, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) r4 = syz_open_pts(r3, 0x200) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x34, 0x1, 0x1000, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x22, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000020000000000005e00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7ee0000000600008500000083000000bf0900000000000055090100000000009500000000000000850000008c00000085b6f8ff10000000180000002d919c3200000000ff03000094720c00fcffffffb7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000008000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x4, 0xa7, &(0x7f0000000900)=""/167, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x9, 0x7d, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a80), 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, r6, 0x22, 0x0, @val=@netkit={@void, @value=r8, @void, @void, r7}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 14.102688645s ago: executing program 38 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd06, &(0x7f0000003000)="0400000032000000000000003801") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffbb, 0x2, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r3, &(0x7f0000000300)=ANY=[], 0xff2e) r4 = syz_open_pts(r3, 0x200) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map=0x1, 0x34, 0x1, 0x1000, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x22, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000020000000000005e00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7ee0000000600008500000083000000bf0900000000000055090100000000009500000000000000850000008c00000085b6f8ff10000000180000002d919c3200000000ff03000094720c00fcffffffb7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000008000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0x4, 0xa7, &(0x7f0000000900)=""/167, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x9, 0x7d, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a80), 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, r6, 0x22, 0x0, @val=@netkit={@void, @value=r8, @void, @void, r7}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 6.132876387s ago: executing program 3 (id=1126): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1f}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f00000002c0)='./proc/thread-self/fail-nth/file0\x00', &(0x7f0000000180)='virtiofs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000280)={'wlan1\x00', @random="26e9b23d7d00"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007118be000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) write(r2, &(0x7f0000000000)='3', 0x4e) accept4(r2, 0x0, 0x0, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x3, [], 'M6U'}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}}, &(0x7f00000000c0)=""/9, 0x36, 0x9, 0x1, 0x5}, 0x28) 6.072134286s ago: executing program 3 (id=1128): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.138534169s ago: executing program 3 (id=1140): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) (async) syz_emit_ethernet(0x69, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff0000ffffaaaaaaaaaa0008004503005b00680000009866340d4c983c0da9022f907800000000e00000012480810000010003009a7f10000800000086dd0800c8be2000000010000000010000000000000008"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x22120, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='ac']) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b18f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000002e0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc, &(0x7f000000cf3d)=""/195, 0x0, 0xd4, '\x00', 0x0, @fallback=0xd}, 0x59) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) (async) r6 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001100)={r4, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9, 0x14, "339f020bbe82b398000100000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e8333c691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe5815efd4a730e04d52a1710000289737f0374c72a964a03147a75df8a69ea917deb7ba193b3e7755fd29f35239d2", "244333791f042fbfd9744b66cc530000000400000001000000002200", [0x354d39d0, 0x245]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) (async) sendfile(r7, r3, 0x0, 0x8) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) 4.432007913s ago: executing program 3 (id=1146): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001000)='./dev\x00', &(0x7f0000001040)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000003000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") write(0xffffffffffffffff, &(0x7f0000003138)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00integrity\x00\x00\x00\x00\x00\x00\x007:0 0 4 J 0', 0x33) ioctl(r0, 0xc138fd09, &(0x7f0000003000)="04ffffff85000000000000006c0100003801000001") 4.37582749s ago: executing program 3 (id=1147): mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) (async) r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x80000001, 0x1b7031d6, 0x0, 0x20, 0x18}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000044000000160a01000000000000000000010073797a30000000000900020073797a310000000018000380080001400000000004000380080002400000000048000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000001c00038018000380140001007663616e300000000000000000000000140000001000010000000000000000000000000a"], 0xd4}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000680)=ANY=[@ANYBLOB="0133611b23c472574da092b9f731a1e5ad"]) ioctl$UFFDIO_MOVE(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000, 0xe535cb55744237ed}) 3.355586038s ago: executing program 3 (id=1155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x3}, 0x1c) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x80, 0x6, 0x300, 0x8, 0x0, 0x0, 0x0}) (async) r2 = fcntl$dupfd(r0, 0x322321764c08d483, r1) write$binfmt_elf64(r2, &(0x7f0000001600)=ANY=[], 0xd87) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) fcntl$setsig(r4, 0xa, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setparam(r3, &(0x7f00000006c0)=0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) syz_ublk_setup_io_uring(0x5c27, &(0x7f0000000200)={0x0, 0xcb2b, 0x800, 0x3, 0xd7}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_CQ_RING(0x0, 0x6239, 0x2000001, 0x141031, 0xffffffffffffffff, 0x8000000) (async) syz_io_uring_setup(0x4aef, &(0x7f0000000340)={0x0, 0x307, 0x2, 0x2, 0x39d}, &(0x7f00000003c0), &(0x7f0000000400), 0x0) (async) syz_io_uring_setup(0xf20, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001300)="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", 0x559, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0020000600000003600e120800100002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 3.284022007s ago: executing program 9 (id=1157): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x6, 0x400000) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x401}) r1 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @local, 0x1}, 0x1c) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x800) accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x800) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) timerfd_create(0x8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCL_SELLOADLUT(r4, 0x541c, &(0x7f0000000240)={0x5, 0x3, 0x200, 0x6, 0x2369}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$loop(&(0x7f0000000280), 0x5, 0x4484) r7 = dup(r3) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000300)={0x4e4, 0xd, 0xa, 0x101, 0x0, 0x0, {0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d4, 0x3, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x71, 0x6, 0x1, 0x0, "cd8417d0dac4e7ab50fb2a9d9c2fcb78599022bca56251abb8d2b88426bfc5e9a2ed4e7c3e7b906374fb618ef4746f36c16dd581d5dfbb9279151c3040ed0850655e27a2bdbb96b877399dea8b3966be3a20872323ba91cb7f45434709a4f53f6658c8f7f920532e95195948e1"}, @NFTA_SET_ELEM_USERDATA={0xe5, 0x6, 0x1, 0x0, "6cf1a02c3d847d7329b1055ca5758995ddfcf385c3d8d47cdff6336f525702685f29511610fa5a74dabee0e645e2cab709fcfc7799fb544f81f90ef08603158f1616965a7b8bc089c44266ffaf2b2f291a66d661d7b1fba26303ba77fb729f55fdde79b5c31d3113562a5a23d27b627c258d134223c6a0857a9118913ac0dcdf214b412003c3edb66c07212c9501f202213947162fd959d5e0d408a51e60b64e44b9ddb745db6a7ff98a0a98a79fcbc7025219645dc1a0697b4276f3b121ee46c1c77b891fad8f15918d1aed5098f8d4347cd4ccb5a4e7619897e7aec55f70390e"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup={{0x8}, @void}}, @NFTA_SET_ELEM_USERDATA={0x48, 0x6, 0x1, 0x0, "282213d33c723435b0c6ed1291e7c3e0082ade469e36c6b6bd9434550d5699981cdfb0b110f1360cb777333a5cd14cc6a51cae8327c77b796411ac513d03070b90951f18"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2b4, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x274, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "ad38a2a6b874a39e4d84f1e0ccb433dd304afdf52d1fdd8738410cb5cb6dbbe7eb630f0d74fcd8d511acb2d5fc16b415693e3cf72597fc073a1c978209fde009b786a6a8a40afde0104917e6970394ed587a4fcb0d858f3682a71916704b12be30da31c506db17900dafc0a4c38d1f44705d31007fd21d615372ad4cbae8f4c863a04c05970bfb391bb88e7492ed5c89383804ffdbd5410b867f1f04c6081a3276ab0625c716835dacbde1f258f3e65713a90856bfade3da346076750c93fd2e8369f0cb2c2ecdf231691058d4ba0267b5a60c00d8a97b0c7be23c1370616eb66705bd5f"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x78, 0x1, "6e5eeb37302ff6fc14d1a9a9e662f614dd28795b4009b9d46d4a68c0fb4559c7b9736f537931cac18f3189e8d4be43e8d55ccfa09e583fd45d5d6fc1fb1e6a0fb31b354d38f2d6a06fba933ab6c4e7a168ee11e901845810bf4406b97490919ca212ffda367f2fd5ff203b34eb34b6e455389db0"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x40040}, 0x20000040) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x9) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r5) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x44, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe926}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004010) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000a00)={'ip6gretap0\x00'}) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000a80)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) llistxattr(&(0x7f0000000ac0)='./file1\x00', &(0x7f0000000b00)=""/101, 0x65) pipe2(&(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000bc0)=0x16c64, 0x4) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c40), r9) sendmsg$L2TP_CMD_TUNNEL_DELETE(r9, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x68, r11, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x48}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4885) read$FUSE(r10, &(0x7f0000000d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r10, &(0x7f0000002e40)={0x28, 0x0, r12, {{0x1, 0x104}}}, 0x28) 3.220058725s ago: executing program 9 (id=1159): syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) socket$inet6(0xa, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa3000000000000070300000dfeffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 2.347063274s ago: executing program 5 (id=1161): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xffffffffffffffa0, &(0x7f0000000040)=[{&(0x7f0000000080)="d80000001c0081064e81f782db44b904201d08040400006083e878cc233b7046b34e6fec00000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a9c0a77843094195ffe0bace8017cbec4c2ee5a7cef4090000001fb791643a5e8775730d16a4683f5aeb4edbb57a5025ccc29e0063951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d933e2a92954b43370e7834000000000000000000", 0xc8}, {&(0x7f0000000000)="3ff1357f5cd1219a0b16f301c7a805572fc24c994449fa9ddb46156309097b550747852bf2a345d20ee60efd82325a5de9f9e4623c", 0x35}], 0x2, 0x0, 0x0, 0x7400}, 0x28040890) 2.283954088s ago: executing program 5 (id=1162): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0}) r6 = socket$nl_audit(0x10, 0x3, 0x9) pipe2$watch_queue(0x0, 0x80) syz_io_uring_setup(0x37c1, &(0x7f00000004c0)={0x0, 0x364d, 0x800, 0x1, 0x133}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x80082102, &(0x7f0000000080)={r2, 0x1, r6, 0x3, 0x80000}) write(r0, 0x0, 0x0) 2.27509632s ago: executing program 9 (id=1163): r0 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f00000007c0)={[{@grpjquota}, {@init_itable_val}, {@resgid}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@resgid}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x800}}, {@barrier}, {@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4000800) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x3, 0x7, 0x4010, 0xffffffffffffffff, 0x20000000) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) getresgid(0x0, 0x0, 0x0) 2.23820143s ago: executing program 9 (id=1164): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='autogroup\x00') writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)='+5', 0x2}, {&(0x7f00000000c0)="e488b964", 0x4}], 0x2) r1 = openat(r0, &(0x7f0000000040)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0xa000, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x80) read(r2, &(0x7f0000000340)=""/129, 0x81) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x9, 0x3c, 0x0, 0x3, 0x1002ba, 0x5, 0x6, 0x80, 0x7fffffff, 0x50000000, 0x1000, 0x1000, 0x10001, 0x6, 0x1, 0x19, {0x7, 0x3}, 0xfb, 0xd}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r1, &(0x7f0000000300)='1', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x400000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f000038f000/0x1000)=nil, 0x1000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000003ac0)=[{{&(0x7f0000000800)=@rc={0x1f, @any, 0x8}, 0x80, 0x0}}, {{&(0x7f0000002540)=@nfc_llcp={0x27, 0x0, 0xfffffffb, 0x6, 0x6, 0x4, "28839e3f0d065c97361e42d944b1661f81be1063c82d2dab2db7606161f1ab5e58037806c0ca1099295fcf6a9301135139f80cf8f8d42084a8d4fd41e5a157", 0x1a}, 0x80, &(0x7f0000003980)=[{&(0x7f0000000200)="554c6bf09a07554ada4d286262ba851be52d6642d7d89f267acdbabf18d6026997f20c7109704e47858f551bea2dadb0c9565e6915f1c1d12a791769182df0d63a5cc3535ebb6307ee1e0485ae016792ddda805858daccffab804bdd0bf1aaa1dcfec143669b59f7054950b69e37b7e593f31b0b26e4edc923bca7eefad01742", 0x80}], 0x1}}], 0x2, 0x20048894) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 1.793836337s ago: executing program 0 (id=1167): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) 1.793354041s ago: executing program 9 (id=1168): socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x3, 0x1daf6}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.687460365s ago: executing program 0 (id=1170): close(0x3) setns(0xc9, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdfd28f075fb0caedbf2526000000080003003beb17165398060000000000000000000000000000d94d07c049fe4950256e2d07c59cd6f56a6092d445da2c892236ad77e1cb6a0091c8d5c754071d58ab1ae525e77561cc9f38f7edac5cc41bc3c9f22e0bb56969a40503000000e2d33898aa4eaead272f0f5b222e52e153e0ed8eeec3d4441c9f6a8648f150fcf7a2d8acb9c0bf79240000e0bce6e526c202c334e3ffff6d1b85a7ec068fae49d2339c3d28b706d53102f7b65a8fb7a90c1db546e5d8c8ec645eb578550000000000000000b9fe8ee542a49b2b399fd1a99c3e25561538ff67fcd46c26706e4824a80b1de4755b8b955417aac2ae48071ae8abfe5f9b954dc613b3a189958d7235cc4d6e202442861016422991a94d4cb5f1b19ee8faa5198140b067d3aadf44c449ee0f46604af485ff45f0f674ee6fff02c2e07718313166bcbcf20c72dade07614d1b474b5a54220e3b988cb5ac9124b27514d72cfcf82fceccb413db793d8ad553de222401e5f05d4220c6c2df54a5cff1c031081b910dc65ccb35991597cb8eb32bcd8d4c477ba4bbc575791608e5363b01", @ANYRES32=r1, @ANYBLOB="0a0034000202020202020000080026006c0900000a0006005050105050500000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x40891) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20040845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0x0}, 0x0) tkill(0x0, 0x12) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$kcm(0xf, 0x0, 0x2) sendmsg$inet(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 1.289508706s ago: executing program 5 (id=1171): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) clock_gettime(0x7, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x880) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x29, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000340)={[{@dax}, {@auto_da_alloc}, {@nouser_xattr}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x21}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@test_dummy_encryption_v1}, {@minixdf}], [], 0x2c}, 0x84, 0x4bb, &(0x7f0000001040)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.138625316s ago: executing program 8 (id=1173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000280)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@ipv6_newrule={0x44, 0x20, 0x5bfddf52a8fa8e87, 0x70bd2d, 0x25dfdbff, {0xa, 0x20, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @private2}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x16}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0xd}, 0x4008040) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000080), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x70bd27, 0xa, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x60}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}]]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 1.072028688s ago: executing program 8 (id=1174): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000040000008200000000000000180000000000000069000000370000006400000000000000280080fe0000000029000000050000000002020100000000fe8000000000000000000000000000bb24"], 0x80}, 0x40080) 1.048951586s ago: executing program 0 (id=1175): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x103, [{0x0, 0x2, 0x7}, {0x0, 0x3, 0xb}]}]}}, &(0x7f0000000080)=""/236, 0x3e, 0xec, 0x1, 0x2000}, 0x28) 998.146621ms ago: executing program 8 (id=1176): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="660a00000900000061118f0000000000850000002100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) 929.567995ms ago: executing program 0 (id=1177): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45c", 0xeb}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5b0faf353", 0xdd}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd", 0x89}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423b", 0x5a}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512", 0x4a}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f26", 0x32}], 0x5) write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f61076340a87dae9d3427acc844357d6bdbba726e7a41eb30a916df698ab241b5e4991f41d34afd2c2b99f259ca582f09c8027c3381e64070aad6ec7f7c7c973d55a33eca3cc4245bf488a497ac966aa13111ec3033172a3512e97700b3b58b621ccb71309d6ccafb05352718a362d14c38501ec45a522fb86563533d1f46e3fc182181ca5583096ec3849fb5db88ba0bcf565ec4665280402275fe98483a6c6b9da4665196aeff9b18c1e4fe3f19f1ff296702a10a27684a6cf0f9c003f", 0x3de) 929.087828ms ago: executing program 8 (id=1178): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) recvmsg$can_j1939(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/173, 0xad}, {&(0x7f0000000240)=""/193, 0xc1}], 0x2, &(0x7f0000000380)=""/22, 0x16}, 0x2023) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async) syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x1ce, &(0x7f00000004c0)="$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") sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)=ANY=[@ANYBLOB="8a69938a0547d7e0ead814000000dacf3398224c4dcf4237362031a13df90b63267bbcf9b37ccd91c86ed401fbe5253bde71c0fa2df0df245910f989fa4bc91f8a742760e4151e351f0896100c8a1f93c5503a77d1ab5e775c366576fd297047d5f2e7c22279d46be2e498801b392bc4461b4b100b11f866f06599fdfb9ba7097373a61d4002ba0b6094cabdf94215f88f65409984d1e0478286981c1021055ff72176fae733ddc517086e7b5fc9d442a77cf11a6e58ac3564111613e05ff63f9ae30c49106f81a71d8b1e450bc0e1fa58eab668c8151b864928f6cf763dcddfb544463388e1a63d3ec4bb915f25", @ANYRES16=r2, @ANYBLOB="8fdf0a000000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/132, 0x84}, {&(0x7f00000004c0)=""/179, 0xb3}, {&(0x7f0000000580)=""/226, 0xe2}, {&(0x7f0000000680)=""/67, 0x43}, {&(0x7f0000000700)=""/110, 0x6e}, {&(0x7f0000000780)=""/214, 0xd6}], 0x6}}], 0x1, 0x120, &(0x7f0000000940)={0x77359400}) (async, rerun: 32) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}, 0xb09}, {{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000000bc0)=""/198, 0xc6}, {&(0x7f0000000cc0)=""/209, 0xd1}, {&(0x7f0000000dc0)=""/165, 0xa5}, {&(0x7f0000004280)=""/145, 0x94}, {&(0x7f0000004340)=""/132, 0x84}, {&(0x7f00000044c0)=""/226, 0xe2}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x7}, 0x1ff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40000040, 0x0) (rerun: 32) 841.795311ms ago: executing program 9 (id=1179): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000fa9000/0x4000)=nil, 0x4000}, 0x1}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @multicast2}, "1a3f02eb38ad1bf6"}}}}}, 0x0) 790.45758ms ago: executing program 8 (id=1180): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) 788.428625ms ago: executing program 5 (id=1181): r0 = socket(0x2d, 0x2, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendto(r0, 0x0, 0x42, 0x40040, &(0x7f0000000500)=@generic={0x2d, "000000000000000008000100000006000000000000000000000000000000000000000000000000000000000000000000100100"}, 0x80) 733.436617ms ago: executing program 5 (id=1182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180800000000fdffffff00000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 732.050165ms ago: executing program 8 (id=1183): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="130000001000000002"], 0x50) userfaultfd(0x80001) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4, 0xf58}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x4, 0xf58}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1800004, 0x31, 0xffffffffffffffff, 0xd0fb8000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x44, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0xc, 0x4, 0x40, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @generic={0x3, 0xffffff0e, "e99b33db426a4086d69cb95c4996aec9"}]}}}}}}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020) 731.610385ms ago: executing program 5 (id=1184): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 86.555172ms ago: executing program 0 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000001308000a4000000004d4010000020a05"], 0x250}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 0s ago: executing program 0 (id=1186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000018000105000000000000000002200000fe04000100000000080001000a000001080004000100000006001500050000002400168020000100010000000002040000000000fc"], 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000019000100000000000000000002200000fe04000100000000080001000a000701080004000100000006001500050000002400168020000100010000000002040000000000fc"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): ilter on device eth12 [ 75.436835][ T6779] netlink: 52 bytes leftover after parsing attributes in process `syz.2.521'. [ 75.437954][ T6779] wlan0 speed is unknown, defaulting to 1000 [ 75.437972][ T6779] wlan0 speed is unknown, defaulting to 1000 [ 75.438197][ T6779] wlan0 speed is unknown, defaulting to 1000 [ 75.438867][ T6779] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.449642][ T6779] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 75.457404][ T6779] wlan0 speed is unknown, defaulting to 1000 [ 75.457782][ T6779] wlan0 speed is unknown, defaulting to 1000 [ 75.462635][ T6779] wlan0 speed is unknown, defaulting to 1000 [ 75.463028][ T6779] wlan0 speed is unknown, defaulting to 1000 [ 75.463348][ T6779] wlan0 speed is unknown, defaulting to 1000 [ 75.487373][ T4403] 8021q: adding VLAN 0 to HW filter on device eth11 [ 75.821168][ T6794] netlink: 'syz.7.523': attribute type 1 has an invalid length. [ 76.331004][ T50] Bluetooth: hci0: command tx timeout [ 76.971327][ T50] Bluetooth: hci2: command tx timeout [ 77.148713][ T6844] netlink: 'syz.7.541': attribute type 1 has an invalid length. [ 77.254836][ T6844] netlink: 16 bytes leftover after parsing attributes in process `syz.7.541'. [ 77.385542][ T6854] loop7: detected capacity change from 0 to 512 [ 77.391465][ T6854] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.408276][ T6854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.740250][ T6869] loop0: detected capacity change from 0 to 1024 [ 77.767090][ T6869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.797329][ T6869] binder: BINDER_SET_CONTEXT_MGR already set [ 77.797343][ T6869] binder: 6868:6869 ioctl 4018620d 20004a80 returned -16 [ 77.818863][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.083177][ T6877] loop0: detected capacity change from 0 to 256 [ 78.118874][ T6879] loop0: detected capacity change from 0 to 1 [ 78.172627][ T6879] ldm_validate_privheads(): Disk read failed. [ 78.172659][ T6879] loop0: [ 78.172668][ T6879] loop0: partition table partially beyond EOD, truncated [ 78.247931][ T6454] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.262366][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 78.262381][ T30] audit: type=1326 audit(78.240:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6881 comm="syz.0.551" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbd79368 code=0x0 [ 78.420562][ T50] Bluetooth: hci0: command tx timeout [ 78.638420][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.639980][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.049960][ T50] Bluetooth: hci2: command tx timeout [ 80.452853][ T6939] netlink: 'syz.7.572': attribute type 11 has an invalid length. [ 80.452875][ T6939] netlink: 448 bytes leftover after parsing attributes in process `syz.7.572'. [ 80.463927][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 81.610000][ T7002] netlink: 'syz.6.593': attribute type 21 has an invalid length. [ 81.610020][ T7002] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.715045][ T7011] netlink: 52 bytes leftover after parsing attributes in process `syz.6.595'. [ 81.734016][ T7014] input: syz0 as /devices/virtual/input/input2 [ 81.739462][ T7013] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 81.739478][ T7013] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 81.739488][ T7013] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 81.907975][ T7024] loop6: detected capacity change from 0 to 1024 [ 81.908992][ T7024] EXT4-fs: Ignoring removed bh option [ 81.913027][ T7024] EXT4-fs: Invalid want_extra_isize 212 [ 81.983882][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.600'. [ 82.011616][ T7031] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 82.011637][ T7031] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 82.013594][ T7031] netlink: 120 bytes leftover after parsing attributes in process `syz.6.600'. [ 82.304316][ T7043] netlink: 'syz.5.604': attribute type 9 has an invalid length. [ 82.304335][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.5.604'. [ 82.942797][ T7059] netlink: 48 bytes leftover after parsing attributes in process `syz.6.609'. [ 82.988836][ T7062] netlink: 'syz.6.610': attribute type 1 has an invalid length. [ 83.092123][ T7063] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 83.092181][ T7063] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 83.106359][ T7065] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 83.106377][ T7065] device-mapper: ioctl: error adding target to table [ 83.108198][ T7062] netlink: 16 bytes leftover after parsing attributes in process `syz.6.610'. [ 83.190209][ T51] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.191850][ T51] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.191890][ T51] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.191906][ T51] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.209066][ T7077] syzkaller0: entered promiscuous mode [ 83.209082][ T7077] syzkaller0: entered allmulticast mode [ 83.213178][ T7077] tipc: Started in network mode [ 83.213192][ T7077] tipc: Node identity 6630bb3f4e3d, cluster identity 4711 [ 83.213293][ T7077] tipc: Enabled bearer , priority 10 [ 83.215611][ T7076] tipc: Resetting bearer [ 83.231622][ T7076] tipc: Disabling bearer [ 83.642913][ T7088] FAULT_INJECTION: forcing a failure. [ 83.642913][ T7088] name failslab, interval 1, probability 0, space 0, times 0 [ 83.642947][ T7088] CPU: 0 UID: 0 PID: 7088 Comm: syz.5.618 Not tainted syzkaller #0 PREEMPT [ 83.642957][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.642962][ T7088] Call trace: [ 83.642965][ T7088] show_stack+0x2c/0x3c (C) [ 83.642985][ T7088] __dump_stack+0x30/0x40 [ 83.642995][ T7088] dump_stack_lvl+0xd8/0x12c [ 83.643004][ T7088] dump_stack+0x1c/0x28 [ 83.643014][ T7088] should_fail_ex+0x418/0x58c [ 83.643024][ T7088] should_failslab+0xc4/0x120 [ 83.643035][ T7088] __kmalloc_node_noprof+0x10c/0x6e4 [ 83.643046][ T7088] __vmalloc_node_range_noprof+0x43c/0xe9c [ 83.643054][ T7088] __vmalloc_node_noprof+0xec/0x14c [ 83.643062][ T7088] __vmalloc_noprof+0x64/0x8c [ 83.643069][ T7088] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 83.643078][ T7088] bpf_prog_alloc+0x48/0x110 [ 83.643086][ T7088] bpf_prog_load+0x5e0/0x1554 [ 83.643094][ T7088] __sys_bpf+0x7d4/0x82c [ 83.643101][ T7088] __arm64_sys_bpf+0xd0/0xec [ 83.643108][ T7088] invoke_syscall+0x98/0x244 [ 83.643118][ T7088] el0_svc_common+0xec/0x23c [ 83.643127][ T7088] do_el0_svc+0x4c/0x5c [ 83.643136][ T7088] el0_svc+0x60/0x1d8 [ 83.643146][ T7088] el0t_64_sync_handler+0x44/0x104 [ 83.643154][ T7088] el0t_64_sync+0x198/0x19c [ 83.643165][ T7088] syz.5.618: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 83.643840][ T7088] CPU: 0 UID: 0 PID: 7088 Comm: syz.5.618 Not tainted syzkaller #0 PREEMPT [ 83.643852][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 83.643857][ T7088] Call trace: [ 83.643861][ T7088] show_stack+0x2c/0x3c (C) [ 83.643877][ T7088] __dump_stack+0x30/0x40 [ 83.643889][ T7088] dump_stack_lvl+0xd8/0x12c [ 83.643900][ T7088] dump_stack+0x1c/0x28 [ 83.643910][ T7088] warn_alloc+0x1c4/0x1d8 [ 83.643920][ T7088] __vmalloc_node_range_noprof+0x670/0xe9c [ 83.643929][ T7088] __vmalloc_node_noprof+0xec/0x14c [ 83.643936][ T7088] __vmalloc_noprof+0x64/0x8c [ 83.643944][ T7088] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 83.643953][ T7088] bpf_prog_alloc+0x48/0x110 [ 83.643960][ T7088] bpf_prog_load+0x5e0/0x1554 [ 83.643968][ T7088] __sys_bpf+0x7d4/0x82c [ 83.643976][ T7088] __arm64_sys_bpf+0xd0/0xec [ 83.643983][ T7088] invoke_syscall+0x98/0x244 [ 83.643992][ T7088] el0_svc_common+0xec/0x23c [ 83.644002][ T7088] do_el0_svc+0x4c/0x5c [ 83.644011][ T7088] el0_svc+0x60/0x1d8 [ 83.644019][ T7088] el0t_64_sync_handler+0x44/0x104 [ 83.644028][ T7088] el0t_64_sync+0x198/0x19c [ 83.644036][ T7088] Mem-Info: [ 83.644041][ T7088] active_anon:24 inactive_anon:19659 isolated_anon:0 [ 83.644041][ T7088] active_file:2750 inactive_file:14260 isolated_file:0 [ 83.644041][ T7088] unevictable:768 dirty:232 writeback:0 [ 83.644041][ T7088] slab_reclaimable:9698 slab_unreclaimable:90955 [ 83.644041][ T7088] mapped:32506 shmem:14434 pagetables:5927 [ 83.644041][ T7088] sec_pagetables:0 bounce:0 [ 83.644041][ T7088] kernel_misc_reclaimable:0 [ 83.644041][ T7088] free:1316386 free_pcp:13412 free_cma:7616 [ 83.644063][ T7088] Node 0 active_anon:96kB inactive_anon:78636kB active_file:11000kB inactive_file:57040kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:130024kB dirty:928kB writeback:0kB shmem:57736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10112kB pagetables:23708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 83.644083][ T7088] Node 0 DMA free:3077888kB boost:0kB min:20356kB low:25444kB high:30532kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 83.644105][ T7088] lowmem_reserve[]: 0 0 3652 3652 3652 [ 83.644123][ T7088] Node 0 Normal free:2187656kB boost:0kB min:24696kB low:30868kB high:37040kB reserved_highatomic:0kB free_highatomic:0kB active_anon:96kB inactive_anon:78636kB active_file:11000kB inactive_file:57040kB unevictable:3072kB writepending:928kB zspages:0kB present:5242880kB managed:3740016kB mlocked:0kB bounce:0kB free_pcp:53648kB local_pcp:15688kB free_cma:0kB [ 83.644144][ T7088] lowmem_reserve[]: 0 0 0 0 0 [ 83.644161][ T7088] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 83.644218][ T7088] Node 0 Normal: 2*4kB (UE) 14*8kB (UE) 4*16kB (UM) 27*32kB (UME) 6*64kB (UE) 53*128kB (UE) 1*256kB (M) 110*512kB (UME) 439*1024kB (UM) 5*2048kB (UM) 406*4096kB (UM) = 2187544kB [ 83.644745][ T7088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 83.644753][ T7088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 83.644760][ T7088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 83.644766][ T7088] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 83.644773][ T7088] 31415 total pagecache pages [ 83.644777][ T7088] 0 pages in swap cache [ 83.644780][ T7088] Free swap = 124996kB [ 83.644784][ T7088] Total swap = 124996kB [ 83.644787][ T7088] 2097152 pages RAM [ 83.644790][ T7088] 0 pages HighMem/MovableOnly [ 83.644793][ T7088] 392100 pages reserved [ 83.644796][ T7088] 8192 pages cma reserved [ 83.644799][ T7088] 0 pages hwpoisoned [ 83.780309][ T7091] loop6: detected capacity change from 0 to 512 [ 83.782330][ T7091] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 83.782350][ T7091] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 84.074623][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.624'. [ 84.074649][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.624'. [ 84.274755][ T7114] loop5: detected capacity change from 0 to 128 [ 84.284147][ T7114] EXT4-fs (loop5): Test dummy encryption mode enabled [ 84.287648][ T7114] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.288569][ T7114] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.616925][ T30] audit: type=1326 audit(5795978191.609:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7120 comm="syz.2.631" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5779368 code=0x0 [ 84.809965][ T7128] lo speed is unknown, defaulting to 1000 [ 84.811316][ T7128] wlan0 speed is unknown, defaulting to 1000 [ 85.211437][ T4958] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.544268][ T1768] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.555770][ T7166] FAULT_INJECTION: forcing a failure. [ 85.555770][ T7166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.555788][ T7166] CPU: 0 UID: 0 PID: 7166 Comm: syz.0.647 Not tainted syzkaller #0 PREEMPT [ 85.555799][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 85.555804][ T7166] Call trace: [ 85.555807][ T7166] show_stack+0x2c/0x3c (C) [ 85.555825][ T7166] __dump_stack+0x30/0x40 [ 85.555837][ T7166] dump_stack_lvl+0xd8/0x12c [ 85.555849][ T7166] dump_stack+0x1c/0x28 [ 85.555860][ T7166] should_fail_ex+0x418/0x58c [ 85.555873][ T7166] should_fail+0x14/0x24 [ 85.555884][ T7166] should_fail_usercopy+0x20/0x30 [ 85.555896][ T7166] bpf_vlog_reverse_ubuf+0x254/0x578 [ 85.555909][ T7166] bpf_vlog_finalize+0x11c/0x36c [ 85.555920][ T7166] bpf_log_attr_finalize+0x90/0x28c [ 85.555933][ T7166] btf_new_fd+0x3a8/0xa24 [ 85.555944][ T7166] bpf_btf_load+0x144/0x190 [ 85.555954][ T7166] __sys_bpf+0x7f0/0x82c [ 85.555963][ T7166] __arm64_sys_bpf+0xd0/0xec [ 85.555971][ T7166] invoke_syscall+0x98/0x244 [ 85.555984][ T7166] el0_svc_common+0xec/0x23c [ 85.555995][ T7166] do_el0_svc+0x4c/0x5c [ 85.556006][ T7166] el0_svc+0x60/0x1d8 [ 85.556018][ T7166] el0t_64_sync_handler+0x44/0x104 [ 85.556028][ T7166] el0t_64_sync+0x198/0x19c [ 85.647842][ T1768] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.648637][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.650832][ T4717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.651186][ T4717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.651513][ T4717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.651812][ T4717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.745421][ T1768] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.779010][ T7188] __nla_validate_parse: 4 callbacks suppressed [ 85.779026][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.652'. [ 85.793291][ T7188] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 85.793309][ T7188] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 85.795402][ T7188] netlink: 120 bytes leftover after parsing attributes in process `syz.5.652'. [ 85.795915][ T7178] FAULT_INJECTION: forcing a failure. [ 85.795915][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.795938][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.6.650 Not tainted syzkaller #0 PREEMPT [ 85.795948][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 85.795953][ T7178] Call trace: [ 85.795955][ T7178] show_stack+0x2c/0x3c (C) [ 85.795972][ T7178] __dump_stack+0x30/0x40 [ 85.795982][ T7178] dump_stack_lvl+0xd8/0x12c [ 85.795991][ T7178] dump_stack+0x1c/0x28 [ 85.796000][ T7178] should_fail_ex+0x418/0x58c [ 85.796011][ T7178] should_fail+0x14/0x24 [ 85.796020][ T7178] should_fail_usercopy+0x20/0x30 [ 85.796029][ T7178] strncpy_from_user+0x48/0x388 [ 85.796037][ T7178] setxattr_copy+0x88/0x1c0 [ 85.796045][ T7178] path_setxattrat+0x130/0x2a8 [ 85.796052][ T7178] __arm64_sys_lsetxattr+0xd0/0xec [ 85.796060][ T7178] invoke_syscall+0x98/0x244 [ 85.796069][ T7178] el0_svc_common+0xec/0x23c [ 85.796078][ T7178] do_el0_svc+0x4c/0x5c [ 85.796087][ T7178] el0_svc+0x60/0x1d8 [ 85.796097][ T7178] el0t_64_sync_handler+0x44/0x104 [ 85.796105][ T7178] el0t_64_sync+0x198/0x19c [ 85.813717][ T1768] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.879353][ T7171] lo speed is unknown, defaulting to 1000 [ 85.881129][ T7171] wlan0 speed is unknown, defaulting to 1000 [ 85.923136][ T7203] netlink: 52 bytes leftover after parsing attributes in process `syz.0.655'. [ 85.954272][ T1768] bridge_slave_1: left allmulticast mode [ 85.954294][ T1768] bridge_slave_1: left promiscuous mode [ 85.954370][ T1768] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.972001][ T1768] bridge_slave_0: left allmulticast mode [ 85.972020][ T1768] bridge_slave_0: left promiscuous mode [ 85.972101][ T1768] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.105597][ T7224] loop0: detected capacity change from 0 to 512 [ 86.107127][ T1768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.115360][ T7224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.115408][ T7224] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.129259][ T1768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.160647][ T1768] bond0 (unregistering): Released all slaves [ 86.168974][ T7224] netlink: 'syz.0.662': attribute type 10 has an invalid length. [ 86.436066][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.436160][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.438073][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.438109][ T7224] bridge0: port 2(bridge_slave_1) entered listening state [ 86.438190][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.438232][ T7224] bridge0: port 1(bridge_slave_0) entered listening state [ 86.451416][ T7224] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.500311][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.500375][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.500428][ T7171] bridge_slave_0: entered allmulticast mode [ 86.500985][ T7171] bridge_slave_0: entered promiscuous mode [ 86.507948][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.507997][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.508053][ T7171] bridge_slave_1: entered allmulticast mode [ 86.508600][ T7171] bridge_slave_1: entered promiscuous mode [ 86.521432][ T7171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.522267][ T7171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.529246][ T7171] team0: Port device team_slave_0 added [ 86.534875][ T7171] team0: Port device team_slave_1 added [ 86.543392][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.543402][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.543417][ T7171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.543916][ T7171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.543922][ T7171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.543933][ T7171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.665056][ T4403] 8021q: adding VLAN 0 to HW filter on device eth13 [ 86.667197][ T7171] hsr_slave_0: entered promiscuous mode [ 86.667511][ T7171] hsr_slave_1: entered promiscuous mode [ 86.667704][ T7171] debugfs: 'hsr0' already exists in 'hsr' [ 86.667714][ T7171] Cannot create hsr debugfs directory [ 86.736582][ T1768] hsr_slave_0: left promiscuous mode [ 86.736980][ T1768] hsr_slave_1: left promiscuous mode [ 86.737239][ T1768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.737250][ T1768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.737602][ T1768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.737611][ T1768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.743727][ T1768] veth1_macvtap: left promiscuous mode [ 86.743756][ T1768] veth0_macvtap: left promiscuous mode [ 86.743825][ T1768] veth1_vlan: left promiscuous mode [ 86.743859][ T1768] veth0_vlan: left promiscuous mode [ 86.867775][ T1768] team0 (unregistering): Port device team_slave_1 removed [ 86.875266][ T1768] team0 (unregistering): Port device team_slave_0 removed [ 86.981503][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.020445][ T7171] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 87.030972][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.031428][ T7171] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 87.041235][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.041595][ T7171] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 87.044041][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.044595][ T7171] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 87.048286][ T7171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.075171][ T7171] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.075202][ T7171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.075274][ T7171] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.075302][ T7171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.177251][ T7285] loop2: detected capacity change from 0 to 512 [ 87.186815][ T7171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.204149][ T7171] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.219266][ T7285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.263608][ T7171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.263626][ T7171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.373019][ T7310] tipc: Started in network mode [ 87.373038][ T7310] tipc: Node identity ac14140f, cluster identity 4711 [ 87.373124][ T7310] tipc: New replicast peer: 255.255.255.255 [ 87.373295][ T7310] tipc: Enabled bearer , priority 10 [ 87.374631][ T7310] FAULT_INJECTION: forcing a failure. [ 87.374631][ T7310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.374645][ T7310] CPU: 0 UID: 0 PID: 7310 Comm: syz.5.668 Not tainted syzkaller #0 PREEMPT [ 87.374654][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.374659][ T7310] Call trace: [ 87.374662][ T7310] show_stack+0x2c/0x3c (C) [ 87.374689][ T7310] __dump_stack+0x30/0x40 [ 87.374701][ T7310] dump_stack_lvl+0xd8/0x12c [ 87.374713][ T7310] dump_stack+0x1c/0x28 [ 87.374725][ T7310] should_fail_ex+0x418/0x58c [ 87.374738][ T7310] should_fail+0x14/0x24 [ 87.374749][ T7310] should_fail_usercopy+0x20/0x30 [ 87.374761][ T7310] bpf_vlog_reverse_ubuf+0x370/0x578 [ 87.374774][ T7310] bpf_vlog_finalize+0x11c/0x36c [ 87.374785][ T7310] bpf_log_attr_finalize+0x90/0x28c [ 87.374798][ T7310] btf_new_fd+0x3a8/0xa24 [ 87.374809][ T7310] bpf_btf_load+0x144/0x190 [ 87.374819][ T7310] __sys_bpf+0x7f0/0x82c [ 87.374828][ T7310] __arm64_sys_bpf+0xd0/0xec [ 87.374836][ T7310] invoke_syscall+0x98/0x244 [ 87.374848][ T7310] el0_svc_common+0xec/0x23c [ 87.374860][ T7310] do_el0_svc+0x4c/0x5c [ 87.374871][ T7310] el0_svc+0x60/0x1d8 [ 87.374882][ T7310] el0t_64_sync_handler+0x44/0x104 [ 87.374893][ T7310] el0t_64_sync+0x198/0x19c [ 87.434465][ T7313] lo speed is unknown, defaulting to 1000 [ 87.434856][ T7313] wlan0 speed is unknown, defaulting to 1000 [ 87.462100][ T7319] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 87.462120][ T7319] device-mapper: ioctl: error adding target to table [ 87.505979][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.659235][ T7171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.709721][ T50] Bluetooth: hci2: command tx timeout [ 88.105753][ T7171] veth0_vlan: entered promiscuous mode [ 88.112166][ T7171] veth1_vlan: entered promiscuous mode [ 88.135484][ T7171] veth0_macvtap: entered promiscuous mode [ 88.138079][ T7171] veth1_macvtap: entered promiscuous mode [ 88.145986][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.151649][ T7171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.187945][ T40] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.188003][ T40] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.188020][ T40] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.188035][ T40] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.205342][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.205355][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.220987][ T1915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.221001][ T1915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.476370][ T7409] netlink: 48 bytes leftover after parsing attributes in process `syz.0.679'. [ 88.485342][ T7409] overlayfs: failed to resolve 'lower': -2 [ 88.535462][ T10] tipc: Node number set to 2886997007 [ 88.623858][ T7425] loop0: detected capacity change from 0 to 512 [ 88.705501][ T7425] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 88.707832][ T7425] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.684: attempt to clear invalid blocks 1024 len 1 [ 88.707852][ T7425] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 88.709679][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 88.709695][ C0] EXT4-fs (loop0): initial error at time 5795978195: ext4_mb_generate_buddy:1317 [ 88.709710][ C0] EXT4-fs (loop0): last error at time 5795978195: ext4_clear_blocks:876: inode 13 [ 88.734832][ T7425] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.684: invalid indirect mapped block 1819239214 (level 0) [ 88.734863][ T7425] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 88.736086][ T7425] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.684: invalid indirect mapped block 33554432 (level 2) [ 88.736105][ T7425] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 88.736422][ T7425] EXT4-fs (loop0): 1 truncate cleaned up [ 88.736878][ T7425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.814714][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.817592][ T7451] netlink: 'syz.5.689': attribute type 11 has an invalid length. [ 88.817612][ T7451] netlink: 448 bytes leftover after parsing attributes in process `syz.5.689'. [ 88.967790][ T7473] netlink: 76 bytes leftover after parsing attributes in process `syz.2.695'. [ 88.979088][ T7473] loop2: detected capacity change from 0 to 512 [ 88.990965][ T7473] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.695: corrupted in-inode xattr: invalid ea_ino [ 88.990992][ T7473] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.991143][ T7473] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.695: couldn't read orphan inode 15 (err -117) [ 88.991159][ T7473] loop2: lost filesystem error report for type 5 error -117 [ 88.991691][ T7473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.254622][ T4720] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.779725][ T50] Bluetooth: hci2: command tx timeout [ 89.789288][ T7520] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 89.854348][ T7529] netlink: 'syz.0.702': attribute type 1 has an invalid length. [ 89.859419][ T7529] bond2: option mode: invalid value (8) [ 89.863316][ T7529] bond2 (unregistering): Released all slaves [ 89.880595][ T4403] 8021q: adding VLAN 0 to HW filter on device eth15 [ 89.896601][ T7534] loop5: detected capacity change from 0 to 512 [ 89.913288][ T7534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.913334][ T7534] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.915158][ T7529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.702'. [ 89.939148][ T7534] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.703: corrupted xattr block 33: invalid ea_ino [ 89.944659][ T7529] netlink: 'syz.0.702': attribute type 10 has an invalid length. [ 89.944675][ T7529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.702'. [ 89.947019][ T7529] dummy0: entered promiscuous mode [ 89.947967][ T7534] EXT4-fs (loop5): Remounting filesystem read-only [ 89.959386][ T4958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.110215][ T4403] 8021q: adding VLAN 0 to HW filter on device eth14 [ 90.298875][ T7560] random: crng reseeded on system resumption [ 90.590315][ T4403] 8021q: adding VLAN 0 to HW filter on device eth16 [ 91.367838][ T7604] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 91.395677][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.715'. [ 91.398333][ T7608] loop6: detected capacity change from 0 to 128 [ 91.411608][ T7609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.417403][ T7608] EXT4-fs (loop6): Test dummy encryption mode enabled [ 91.417421][ T7608] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 91.429548][ T7613] mmap: syz.6.715 (7613): VmData 38289408 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 91.434272][ T7613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.434446][ T7613] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 91.434822][ T7613] bond1: (slave sit1): Error -95 calling set_mac_address [ 91.731934][ T7620] FAULT_INJECTION: forcing a failure. [ 91.731934][ T7620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.731954][ T7620] CPU: 0 UID: 0 PID: 7620 Comm: syz.6.717 Not tainted syzkaller #0 PREEMPT [ 91.731964][ T7620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.731970][ T7620] Call trace: [ 91.731973][ T7620] show_stack+0x2c/0x3c (C) [ 91.731995][ T7620] __dump_stack+0x30/0x40 [ 91.732008][ T7620] dump_stack_lvl+0xd8/0x12c [ 91.732020][ T7620] dump_stack+0x1c/0x28 [ 91.732031][ T7620] should_fail_ex+0x418/0x58c [ 91.732043][ T7620] should_fail+0x14/0x24 [ 91.732054][ T7620] should_fail_usercopy+0x20/0x30 [ 91.732066][ T7620] bpf_verifier_vlog+0x81c/0xbc0 [ 91.732078][ T7620] btf_verifier_log+0x120/0x1a0 [ 91.732086][ T7620] btf_datasec_log+0x78/0xbc [ 91.732095][ T7620] __btf_verifier_log_type+0x3bc/0x5e4 [ 91.732108][ T7620] btf_datasec_check_meta+0x348/0x71c [ 91.732116][ T7620] btf_parse_type_sec+0x36c/0x17a8 [ 91.732125][ T7620] btf_new_fd+0x33c/0xa24 [ 91.732137][ T7620] bpf_btf_load+0x144/0x190 [ 91.732147][ T7620] __sys_bpf+0x7f0/0x82c [ 91.732155][ T7620] __arm64_sys_bpf+0xd0/0xec [ 91.732163][ T7620] invoke_syscall+0x98/0x244 [ 91.732175][ T7620] el0_svc_common+0xec/0x23c [ 91.732186][ T7620] do_el0_svc+0x4c/0x5c [ 91.732198][ T7620] el0_svc+0x60/0x1d8 [ 91.732208][ T7620] el0t_64_sync_handler+0x44/0x104 [ 91.732219][ T7620] el0t_64_sync+0x198/0x19c [ 91.861053][ T50] Bluetooth: hci2: command tx timeout [ 92.297856][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.302330][ T7645] FAULT_INJECTION: forcing a failure. [ 92.302330][ T7645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.302346][ T7645] CPU: 0 UID: 0 PID: 7645 Comm: syz.2.724 Not tainted syzkaller #0 PREEMPT [ 92.302356][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.302362][ T7645] Call trace: [ 92.302365][ T7645] show_stack+0x2c/0x3c (C) [ 92.302385][ T7645] __dump_stack+0x30/0x40 [ 92.302398][ T7645] dump_stack_lvl+0xd8/0x12c [ 92.302409][ T7645] dump_stack+0x1c/0x28 [ 92.302420][ T7645] should_fail_ex+0x418/0x58c [ 92.302433][ T7645] should_fail+0x14/0x24 [ 92.302444][ T7645] should_fail_usercopy+0x20/0x30 [ 92.302456][ T7645] _inline_copy_from_user+0x3c/0x174 [ 92.302469][ T7645] bpf_vlog_reverse_ubuf+0x9c/0x578 [ 92.302481][ T7645] bpf_vlog_finalize+0x164/0x36c [ 92.302493][ T7645] bpf_log_attr_finalize+0x90/0x28c [ 92.302505][ T7645] btf_new_fd+0x3a8/0xa24 [ 92.302517][ T7645] bpf_btf_load+0x144/0x190 [ 92.302527][ T7645] __sys_bpf+0x7f0/0x82c [ 92.302535][ T7645] __arm64_sys_bpf+0xd0/0xec [ 92.302549][ T7645] invoke_syscall+0x98/0x244 [ 92.302561][ T7645] el0_svc_common+0xec/0x23c [ 92.302573][ T7645] do_el0_svc+0x4c/0x5c [ 92.302585][ T7645] el0_svc+0x60/0x1d8 [ 92.302596][ T7645] el0t_64_sync_handler+0x44/0x104 [ 92.302606][ T7645] el0t_64_sync+0x198/0x19c [ 92.303572][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.357731][ T7646] fido_id[7646]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 92.376142][ T7651] netlink: 68 bytes leftover after parsing attributes in process `syz.2.726'. [ 92.412263][ T7654] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 92.412283][ T7654] device-mapper: ioctl: error adding target to table [ 92.442410][ T7662] loop2: detected capacity change from 0 to 256 [ 92.450287][ T7662] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.450325][ T7662] vfat filesystem being mounted at /147/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 92.468076][ T4720] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 92.468149][ T4720] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 92.510226][ T7663] bond0: (slave syz_tun): Releasing backup interface [ 92.703229][ T4717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.712661][ T4717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.714638][ T4717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.715437][ T4717] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.715691][ T4717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.725866][ T30] audit: type=1800 audit(5795978199.719:93): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.0.732" name="/newroot/158" dev="tmpfs" ino=874 res=0 errno=0 [ 92.739078][ T1721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.827660][ T1721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.860991][ T7665] lo speed is unknown, defaulting to 1000 [ 92.861310][ T7665] wlan0 speed is unknown, defaulting to 1000 [ 93.153703][ T1721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.196318][ T7716] netlink: 'syz.6.740': attribute type 1 has an invalid length. [ 93.209179][ T7716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.222210][ T7716] bond2: (slave veth3): Enslaving as an active interface with a down link [ 93.231443][ T1721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.249180][ T7716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.257772][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.6.740'. [ 93.295061][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.295098][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.295153][ T7665] bridge_slave_0: entered allmulticast mode [ 93.295740][ T7665] bridge_slave_0: entered promiscuous mode [ 93.302854][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.302912][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.303032][ T7665] bridge_slave_1: entered allmulticast mode [ 93.303481][ T7665] bridge_slave_1: entered promiscuous mode [ 93.319861][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.323950][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.337212][ T7665] team0: Port device team_slave_0 added [ 93.338097][ T7665] team0: Port device team_slave_1 added [ 93.356822][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.356837][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.356851][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.357442][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.357448][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.357460][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.378716][ T7729] loop6: detected capacity change from 0 to 512 [ 93.382872][ T7729] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 93.405561][ T10] corsair-psu 0003:1B1C:1C03.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 93.428408][ T7665] hsr_slave_0: entered promiscuous mode [ 93.429473][ T7665] hsr_slave_1: entered promiscuous mode [ 93.432624][ T7665] debugfs: 'hsr0' already exists in 'hsr' [ 93.432641][ T7665] Cannot create hsr debugfs directory [ 93.439382][ T1721] bridge_slave_1: left allmulticast mode [ 93.439399][ T1721] bridge_slave_1: left promiscuous mode [ 93.439470][ T1721] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.454625][ T1721] bridge_slave_0: left allmulticast mode [ 93.454649][ T1721] bridge_slave_0: left promiscuous mode [ 93.454761][ T1721] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.577148][ T1721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.612564][ T1721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.651121][ T1721] bond0 (unregistering): Released all slaves [ 93.668805][ T10] corsair-psu 0003:1B1C:1C03.0002: unable to initialize device (-110) [ 93.670260][ T10] corsair-psu 0003:1B1C:1C03.0002: probe with driver corsair-psu failed with error -110 [ 93.675453][ T1721] bond1 (unregistering): (slave veth3): Releasing active interface [ 93.679719][ T7750] netlink: 'syz.8.745': attribute type 11 has an invalid length. [ 93.679759][ T7750] netlink: 448 bytes leftover after parsing attributes in process `syz.8.745'. [ 93.694992][ T7752] FAULT_INJECTION: forcing a failure. [ 93.694992][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.695013][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.0.746 Not tainted syzkaller #0 PREEMPT [ 93.695023][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.695028][ T7752] Call trace: [ 93.695032][ T7752] show_stack+0x2c/0x3c (C) [ 93.695051][ T7752] __dump_stack+0x30/0x40 [ 93.695063][ T7752] dump_stack_lvl+0xd8/0x12c [ 93.695075][ T7752] dump_stack+0x1c/0x28 [ 93.695086][ T7752] should_fail_ex+0x418/0x58c [ 93.695099][ T7752] should_fail+0x14/0x24 [ 93.695110][ T7752] should_fail_usercopy+0x20/0x30 [ 93.695122][ T7752] _inline_copy_from_user+0x3c/0x174 [ 93.695135][ T7752] bpf_vlog_reverse_ubuf+0x9c/0x578 [ 93.695147][ T7752] bpf_vlog_finalize+0x11c/0x36c [ 93.695159][ T7752] bpf_log_attr_finalize+0x90/0x28c [ 93.695171][ T7752] btf_new_fd+0x3a8/0xa24 [ 93.695183][ T7752] bpf_btf_load+0x144/0x190 [ 93.695193][ T7752] __sys_bpf+0x7f0/0x82c [ 93.695201][ T7752] __arm64_sys_bpf+0xd0/0xec [ 93.695209][ T7752] invoke_syscall+0x98/0x244 [ 93.695222][ T7752] el0_svc_common+0xec/0x23c [ 93.695233][ T7752] do_el0_svc+0x4c/0x5c [ 93.695244][ T7752] el0_svc+0x60/0x1d8 [ 93.695255][ T7752] el0t_64_sync_handler+0x44/0x104 [ 93.695265][ T7752] el0t_64_sync+0x198/0x19c [ 93.729325][ T1721] bond1 (unregistering): Released all slaves [ 93.787355][ T7758] loop6: detected capacity change from 0 to 512 [ 93.795532][ T4403] 8021q: adding VLAN 0 to HW filter on device eth17 [ 93.807781][ T1721] tipc: Disabling bearer [ 93.809015][ T1721] tipc: Left network mode [ 93.811706][ T913] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 93.812321][ T913] bond2: (slave veth3): making interface the new active one [ 93.813151][ T913] bond2: active interface up! [ 93.840288][ T7758] netlink: 10778 bytes leftover after parsing attributes in process `syz.6.749'. [ 93.939707][ T50] Bluetooth: hci2: command tx timeout [ 94.411114][ T7785] 9p: Bad value for 'wfdno' [ 94.619348][ T1721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.619366][ T1721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.619934][ T1721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.619944][ T1721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.625264][ T1721] veth1_macvtap: left promiscuous mode [ 94.625290][ T1721] veth0_macvtap: left promiscuous mode [ 94.625409][ T1721] veth1_vlan: left promiscuous mode [ 94.625572][ T1721] veth0_vlan: left promiscuous mode [ 94.702986][ T7793] FAULT_INJECTION: forcing a failure. [ 94.702986][ T7793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.703007][ T7793] CPU: 1 UID: 0 PID: 7793 Comm: syz.8.756 Not tainted syzkaller #0 PREEMPT [ 94.703017][ T7793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.703022][ T7793] Call trace: [ 94.703025][ T7793] show_stack+0x2c/0x3c (C) [ 94.703047][ T7793] __dump_stack+0x30/0x40 [ 94.703060][ T7793] dump_stack_lvl+0xd8/0x12c [ 94.703071][ T7793] dump_stack+0x1c/0x28 [ 94.703082][ T7793] should_fail_ex+0x418/0x58c [ 94.703096][ T7793] should_fail+0x14/0x24 [ 94.703107][ T7793] should_fail_usercopy+0x20/0x30 [ 94.703119][ T7793] _inline_copy_from_user+0x3c/0x174 [ 94.703133][ T7793] bpf_vlog_reverse_ubuf+0x9c/0x578 [ 94.703145][ T7793] bpf_vlog_finalize+0x11c/0x36c [ 94.703157][ T7793] bpf_log_attr_finalize+0x90/0x28c [ 94.703169][ T7793] btf_new_fd+0x3a8/0xa24 [ 94.703182][ T7793] bpf_btf_load+0x144/0x190 [ 94.703192][ T7793] __sys_bpf+0x7f0/0x82c [ 94.703201][ T7793] __arm64_sys_bpf+0xd0/0xec [ 94.703209][ T7793] invoke_syscall+0x98/0x244 [ 94.703222][ T7793] el0_svc_common+0xec/0x23c [ 94.703234][ T7793] do_el0_svc+0x4c/0x5c [ 94.703245][ T7793] el0_svc+0x60/0x1d8 [ 94.703256][ T7793] el0t_64_sync_handler+0x44/0x104 [ 94.703270][ T7793] el0t_64_sync+0x198/0x19c [ 94.730438][ T50] Bluetooth: hci3: command tx timeout [ 95.136872][ T1721] team0 (unregistering): Port device team_slave_1 removed [ 95.146697][ T1721] team0 (unregistering): Port device team_slave_0 removed [ 95.202990][ T4403] 8021q: adding VLAN 0 to HW filter on device eth18 [ 95.213173][ T10] infiniband syz_device_name_32_chars_1234567: ib_query_port failed (-19) [ 95.240346][ T7665] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 95.244423][ T7814] loop6: detected capacity change from 0 to 512 [ 95.246193][ T7814] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 95.246213][ T7814] EXT4-fs (loop6): DAX unsupported by block device. [ 95.257067][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.762'. [ 95.266437][ T7665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.268640][ T7665] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 95.277149][ T7665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.302079][ T7665] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 95.313900][ T7665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.321283][ T7665] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 95.327463][ T7665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.384929][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 95.410681][ T7833] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 95.411380][ T7833] netlink: 120 bytes leftover after parsing attributes in process `syz.0.766'. [ 95.451153][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.463720][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.468107][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.468153][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.473515][ T1821] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.473550][ T1821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.873313][ T7823] loop6: detected capacity change from 0 to 512 [ 95.884164][ T7823] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.885217][ T7823] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 95.885683][ T7823] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 95.885726][ T7823] System zones: 0-2, 18-18, 34-34 [ 95.901079][ T7823] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.764: bad orphan inode 15 [ 95.901105][ T7823] loop6: lost filesystem error report for type 5 error -117 [ 95.901348][ T7823] ext4_test_bit(bit=14, block=18) = 1 [ 95.901357][ T7823] is_bad_inode(inode)=0 [ 95.901362][ T7823] NEXT_ORPHAN(inode)=2264924160 [ 95.901367][ T7823] max_ino=32 [ 95.901371][ T7823] i_nlink=0 [ 95.901602][ T7823] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2933: inode #15: comm syz.6.764: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 95.901618][ T7823] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.901997][ T7823] EXT4-fs warning (device loop6): ext4_evict_inode:288: xattr delete (err -117) [ 95.908094][ T7823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.963791][ T4403] 8021q: adding VLAN 0 to HW filter on device eth19 [ 95.982163][ T6428] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.995465][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.095379][ T7882] FAULT_INJECTION: forcing a failure. [ 96.095379][ T7882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.095399][ T7882] CPU: 0 UID: 0 PID: 7882 Comm: syz.6.772 Not tainted syzkaller #0 PREEMPT [ 96.095410][ T7882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.095415][ T7882] Call trace: [ 96.095418][ T7882] show_stack+0x2c/0x3c (C) [ 96.095436][ T7882] __dump_stack+0x30/0x40 [ 96.095449][ T7882] dump_stack_lvl+0xd8/0x12c [ 96.095460][ T7882] dump_stack+0x1c/0x28 [ 96.095471][ T7882] should_fail_ex+0x418/0x58c [ 96.095484][ T7882] should_fail+0x14/0x24 [ 96.095495][ T7882] should_fail_usercopy+0x20/0x30 [ 96.095507][ T7882] bpf_vlog_reverse_ubuf+0x370/0x578 [ 96.095520][ T7882] bpf_vlog_finalize+0x11c/0x36c [ 96.095532][ T7882] bpf_log_attr_finalize+0x90/0x28c [ 96.095544][ T7882] btf_new_fd+0x3a8/0xa24 [ 96.095556][ T7882] bpf_btf_load+0x144/0x190 [ 96.095566][ T7882] __sys_bpf+0x7f0/0x82c [ 96.095575][ T7882] __arm64_sys_bpf+0xd0/0xec [ 96.095583][ T7882] invoke_syscall+0x98/0x244 [ 96.095596][ T7882] el0_svc_common+0xec/0x23c [ 96.095607][ T7882] do_el0_svc+0x4c/0x5c [ 96.095618][ T7882] el0_svc+0x60/0x1d8 [ 96.095629][ T7882] el0t_64_sync_handler+0x44/0x104 [ 96.095640][ T7882] el0t_64_sync+0x198/0x19c [ 96.140836][ T7665] veth0_vlan: entered promiscuous mode [ 96.143682][ T7665] veth1_vlan: entered promiscuous mode [ 96.153445][ T7665] veth0_macvtap: entered promiscuous mode [ 96.155509][ T7665] veth1_macvtap: entered promiscuous mode [ 96.165967][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.179000][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.248041][ T58] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.248290][ T58] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.248311][ T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.248330][ T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.361741][ T7896] 9p: Bad value for 'wfdno' [ 96.528888][ T7896] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 96.623859][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.623876][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.626278][ T7899] warning: `syz.5.775' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.644224][ T1768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.644239][ T1768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.667741][ T4403] 8021q: adding VLAN 0 to HW filter on device eth20 [ 96.734481][ T7904] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 96.734504][ T7904] device-mapper: ioctl: error adding target to table [ 96.819738][ T50] Bluetooth: hci3: command tx timeout [ 96.952397][ T50] Bluetooth: hci2: Unexpected cc 0x0000 with no status [ 96.974586][ T7934] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 96.977100][ T7934] macvlan0: entered promiscuous mode [ 96.995071][ T7934] mac80211_hwsim hwsim1 wlan1: left promiscuous mode [ 97.801126][ T7964] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 97.807981][ T7964] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.825866][ T7964] bond2: (slave veth5): Enslaving as an active interface with a down link [ 97.838756][ T7964] dummy0: left promiscuous mode [ 97.852552][ T7964] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 97.852603][ T7964] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 97.937576][ T1821] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 97.937694][ T1821] bond2: (slave veth5): making interface the new active one [ 97.938823][ T1821] bond2: active interface up! [ 98.093945][ T7981] syzkaller0: entered promiscuous mode [ 98.093964][ T7981] syzkaller0: entered allmulticast mode [ 98.095395][ T7981] tipc: Started in network mode [ 98.095409][ T7981] tipc: Node identity 4e8731f0c726, cluster identity 4711 [ 98.095500][ T7981] tipc: Enabled bearer , priority 10 [ 98.099870][ T7979] tipc: Resetting bearer [ 98.108554][ T7977] loop9: detected capacity change from 0 to 8192 [ 98.122655][ T7977] vfat filesystem being mounted at /5/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 98.138057][ T7975] trusted_key: encrypted_key: master key parameter is missing [ 98.143530][ T7979] tipc: Disabling bearer [ 98.190964][ T7975] syz.9.794: attempt to access beyond end of device [ 98.190964][ T7975] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 98.191010][ T7975] Buffer I/O error on dev loop9, logical block 57847, async page read [ 98.192760][ T7975] syz.9.794: attempt to access beyond end of device [ 98.192760][ T7975] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 98.192782][ T7975] Buffer I/O error on dev loop9, logical block 57847, async page read [ 98.356298][ T7990] netlink: 'syz.0.798': attribute type 11 has an invalid length. [ 98.356338][ T7990] netlink: 448 bytes leftover after parsing attributes in process `syz.0.798'. [ 98.475372][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 98.481614][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 98.889585][ T50] Bluetooth: hci3: command tx timeout [ 99.017532][ T8003] loop9: detected capacity change from 0 to 8192 [ 99.048229][ T8021] loop6: detected capacity change from 0 to 2048 [ 99.075995][ T8021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.076058][ T8021] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.266147][ T6428] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.356969][ T8032] FAULT_INJECTION: forcing a failure. [ 99.356969][ T8032] name failslab, interval 1, probability 0, space 0, times 0 [ 99.356991][ T8032] CPU: 0 UID: 0 PID: 8032 Comm: syz.6.811 Not tainted syzkaller #0 PREEMPT [ 99.357002][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.357008][ T8032] Call trace: [ 99.357011][ T8032] show_stack+0x2c/0x3c (C) [ 99.357030][ T8032] __dump_stack+0x30/0x40 [ 99.357042][ T8032] dump_stack_lvl+0xd8/0x12c [ 99.357054][ T8032] dump_stack+0x1c/0x28 [ 99.357065][ T8032] should_fail_ex+0x418/0x58c [ 99.357078][ T8032] should_failslab+0xc4/0x120 [ 99.357091][ T8032] __kvmalloc_node_noprof+0x160/0x7fc [ 99.357100][ T8032] pipapo_realloc_scratch+0x118/0x258 [ 99.357113][ T8032] pipapo_maybe_clone+0x2b8/0xae8 [ 99.357125][ T8032] nft_pipapo_insert+0x110/0x1268 [ 99.357137][ T8032] nft_setelem_insert+0xa4/0x330 [ 99.357151][ T8032] nf_tables_newsetelem+0x1ee4/0x31fc [ 99.357160][ T8032] nfnetlink_rcv+0xc8c/0x16ec [ 99.357173][ T8032] netlink_unicast+0x600/0x7f8 [ 99.357183][ T8032] netlink_sendmsg+0x648/0x948 [ 99.357193][ T8032] __sock_sendmsg+0xc8/0x17c [ 99.357203][ T8032] ____sys_sendmsg+0x3d0/0x6c8 [ 99.357212][ T8032] ___sys_sendmsg+0x198/0x224 [ 99.357222][ T8032] __sys_sendmsg+0x158/0x204 [ 99.357232][ T8032] __arm64_sys_sendmsg+0x88/0x9c [ 99.357242][ T8032] invoke_syscall+0x98/0x244 [ 99.357254][ T8032] el0_svc_common+0xec/0x23c [ 99.357266][ T8032] do_el0_svc+0x4c/0x5c [ 99.357277][ T8032] el0_svc+0x60/0x1d8 [ 99.357288][ T8032] el0t_64_sync_handler+0x44/0x104 [ 99.357299][ T8032] el0t_64_sync+0x198/0x19c [ 99.406182][ T8034] Invalid ELF header magic: != ELF [ 100.655367][ T8070] netlink: 20 bytes leftover after parsing attributes in process `syz.9.821'. [ 100.743125][ T8074] loop9: detected capacity change from 0 to 8 [ 100.756580][ T8074] SQUASHFS error: Failed to read block 0xe000000000001e8: -5 [ 100.756607][ T8074] unable to read xattr id index table [ 100.801271][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.9.824'. [ 100.948465][ T8089] FAULT_INJECTION: forcing a failure. [ 100.948465][ T8089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.948486][ T8089] CPU: 1 UID: 0 PID: 8089 Comm: syz.9.829 Not tainted syzkaller #0 PREEMPT [ 100.948496][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.948502][ T8089] Call trace: [ 100.948505][ T8089] show_stack+0x2c/0x3c (C) [ 100.948524][ T8089] __dump_stack+0x30/0x40 [ 100.948537][ T8089] dump_stack_lvl+0xd8/0x12c [ 100.948548][ T8089] dump_stack+0x1c/0x28 [ 100.948559][ T8089] should_fail_ex+0x418/0x58c [ 100.948573][ T8089] should_fail+0x14/0x24 [ 100.948584][ T8089] should_fail_usercopy+0x20/0x30 [ 100.948596][ T8089] bpf_vlog_reverse_ubuf+0x254/0x578 [ 100.948610][ T8089] bpf_vlog_finalize+0x11c/0x36c [ 100.948622][ T8089] bpf_log_attr_finalize+0x90/0x28c [ 100.948635][ T8089] btf_new_fd+0x3a8/0xa24 [ 100.948648][ T8089] bpf_btf_load+0x144/0x190 [ 100.948658][ T8089] __sys_bpf+0x7f0/0x82c [ 100.948667][ T8089] __arm64_sys_bpf+0xd0/0xec [ 100.948676][ T8089] invoke_syscall+0x98/0x244 [ 100.948695][ T8089] el0_svc_common+0xec/0x23c [ 100.948707][ T8089] do_el0_svc+0x4c/0x5c [ 100.948718][ T8089] el0_svc+0x60/0x1d8 [ 100.948730][ T8089] el0t_64_sync_handler+0x44/0x104 [ 100.948741][ T8089] el0t_64_sync+0x198/0x19c [ 100.969768][ T8091] loop9: detected capacity change from 0 to 256 [ 100.971616][ T8091] vfat filesystem being mounted at /17/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 100.978182][ T8091] Injecting memory failure for pfn 0x15db60 at process virtual address 0x20000000 [ 100.984641][ T50] Bluetooth: hci3: command tx timeout [ 101.001184][ T8091] Memory failure: 0x15db60: Sending SIGBUS to syz.9.831:8091 due to hardware memory corruption [ 101.001257][ T8091] Memory failure: 0x15db60: recovery action for unsplit thp: Failed [ 101.021857][ T8096] loop8: detected capacity change from 0 to 512 [ 101.032844][ T8096] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.065123][ T8096] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.065179][ T8096] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.648381][ T8131] 9p: Bad value for 'wfdno' [ 101.880274][ T7171] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.923649][ T8135] FAULT_INJECTION: forcing a failure. [ 101.923649][ T8135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.923671][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz.0.841 Not tainted syzkaller #0 PREEMPT [ 101.923687][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.923693][ T8135] Call trace: [ 101.923697][ T8135] show_stack+0x2c/0x3c (C) [ 101.923718][ T8135] __dump_stack+0x30/0x40 [ 101.923731][ T8135] dump_stack_lvl+0xd8/0x12c [ 101.923743][ T8135] dump_stack+0x1c/0x28 [ 101.923754][ T8135] should_fail_ex+0x418/0x58c [ 101.923767][ T8135] should_fail+0x14/0x24 [ 101.923778][ T8135] should_fail_usercopy+0x20/0x30 [ 101.923791][ T8135] _inline_copy_from_user+0x3c/0x174 [ 101.923805][ T8135] bpf_vlog_reverse_ubuf+0x9c/0x578 [ 101.923817][ T8135] bpf_vlog_finalize+0x11c/0x36c [ 101.923829][ T8135] bpf_log_attr_finalize+0x90/0x28c [ 101.923841][ T8135] btf_new_fd+0x3a8/0xa24 [ 101.923854][ T8135] bpf_btf_load+0x144/0x190 [ 101.923864][ T8135] __sys_bpf+0x7f0/0x82c [ 101.923873][ T8135] __arm64_sys_bpf+0xd0/0xec [ 101.923881][ T8135] invoke_syscall+0x98/0x244 [ 101.923894][ T8135] el0_svc_common+0xec/0x23c [ 101.923905][ T8135] do_el0_svc+0x4c/0x5c [ 101.923917][ T8135] el0_svc+0x60/0x1d8 [ 101.923928][ T8135] el0t_64_sync_handler+0x44/0x104 [ 101.923939][ T8135] el0t_64_sync+0x198/0x19c [ 102.183573][ T8149] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 102.375563][ T8148] loop0: detected capacity change from 0 to 8192 [ 102.384020][ T8148] vfat filesystem being mounted at /188/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 102.402398][ T8148] trusted_key: encrypted_key: master key parameter is missing [ 102.437650][ T8148] syz.0.845: attempt to access beyond end of device [ 102.437650][ T8148] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 102.437681][ T8148] Buffer I/O error on dev loop0, logical block 57847, async page read [ 102.437891][ T8148] syz.0.845: attempt to access beyond end of device [ 102.437891][ T8148] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 102.437904][ T8148] Buffer I/O error on dev loop0, logical block 57847, async page read [ 102.592598][ T8155] netlink: 52 bytes leftover after parsing attributes in process `syz.9.848'. [ 102.724233][ T8183] ieee802154 phy0 wpan0: encryption failed: -90 [ 102.958148][ T8194] loop8: detected capacity change from 0 to 512 [ 102.985536][ T8194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.985588][ T8194] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.989916][ T8194] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 102.993070][ T8194] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 102.993089][ T8194] EXT4-fs (loop8): This should not happen!! Data will be lost [ 102.993089][ T8194] [ 102.993097][ T8194] EXT4-fs (loop8): Total free blocks count 0 [ 102.993105][ T8194] EXT4-fs (loop8): Free/Dirty block details [ 102.993114][ T8194] EXT4-fs (loop8): free_blocks=65281 [ 102.993124][ T8194] EXT4-fs (loop8): dirty_blocks=33 [ 102.993130][ T8194] EXT4-fs (loop8): Block reservation details [ 102.993136][ T8194] EXT4-fs (loop8): i_reserved_data_blocks=33 [ 103.119350][ T8215] netlink: 'syz.5.855': attribute type 1 has an invalid length. [ 103.128053][ T8215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.143099][ T8215] bond1: (slave veth3): Enslaving as an active interface with a down link [ 103.183275][ T8215] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 103.183308][ T8215] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 103.198554][ T8185] [U]  [ 103.228144][ T8222] netlink: 'syz.5.856': attribute type 11 has an invalid length. [ 103.228182][ T8222] netlink: 448 bytes leftover after parsing attributes in process `syz.5.856'. [ 103.241164][ T58] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 103.241746][ T58] bond1: (slave veth3): making interface the new active one [ 103.244233][ T58] bond1: active interface up! [ 103.262165][ T8224] loop9: detected capacity change from 0 to 1024 [ 103.273838][ T8224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.304379][ T7665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.666232][ T8273] FAULT_INJECTION: forcing a failure. [ 103.666232][ T8273] name failslab, interval 1, probability 0, space 0, times 0 [ 103.666257][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.6.871 Not tainted syzkaller #0 PREEMPT [ 103.666269][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.666275][ T8273] Call trace: [ 103.666277][ T8273] show_stack+0x2c/0x3c (C) [ 103.666300][ T8273] __dump_stack+0x30/0x40 [ 103.666312][ T8273] dump_stack_lvl+0xd8/0x12c [ 103.666324][ T8273] dump_stack+0x1c/0x28 [ 103.666335][ T8273] should_fail_ex+0x418/0x58c [ 103.666348][ T8273] should_failslab+0xc4/0x120 [ 103.666361][ T8273] __kvmalloc_node_noprof+0x160/0x7fc [ 103.666370][ T8273] pipapo_realloc_scratch+0x118/0x258 [ 103.666384][ T8273] pipapo_maybe_clone+0x2b8/0xae8 [ 103.666396][ T8273] nft_pipapo_insert+0x110/0x1268 [ 103.666407][ T8273] nft_setelem_insert+0xa4/0x330 [ 103.666418][ T8273] nf_tables_newsetelem+0x1ee4/0x31fc [ 103.666426][ T8273] nfnetlink_rcv+0xc8c/0x16ec [ 103.666439][ T8273] netlink_unicast+0x600/0x7f8 [ 103.666449][ T8273] netlink_sendmsg+0x648/0x948 [ 103.666459][ T8273] __sock_sendmsg+0xc8/0x17c [ 103.666469][ T8273] ____sys_sendmsg+0x3d0/0x6c8 [ 103.666479][ T8273] ___sys_sendmsg+0x198/0x224 [ 103.666489][ T8273] __sys_sendmsg+0x158/0x204 [ 103.666499][ T8273] __arm64_sys_sendmsg+0x88/0x9c [ 103.666509][ T8273] invoke_syscall+0x98/0x244 [ 103.666521][ T8273] el0_svc_common+0xec/0x23c [ 103.666533][ T8273] do_el0_svc+0x4c/0x5c [ 103.666544][ T8273] el0_svc+0x60/0x1d8 [ 103.666555][ T8273] el0t_64_sync_handler+0x44/0x104 [ 103.666566][ T8273] el0t_64_sync+0x198/0x19c [ 103.816624][ T7171] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.910648][ T8286] ieee802154 phy0 wpan0: encryption failed: -90 [ 105.077518][ T8321] FAULT_INJECTION: forcing a failure. [ 105.077518][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 105.077541][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.8.886 Not tainted syzkaller #0 PREEMPT [ 105.077552][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 105.077558][ T8321] Call trace: [ 105.077561][ T8321] show_stack+0x2c/0x3c (C) [ 105.077583][ T8321] __dump_stack+0x30/0x40 [ 105.077596][ T8321] dump_stack_lvl+0xd8/0x12c [ 105.077608][ T8321] dump_stack+0x1c/0x28 [ 105.077620][ T8321] should_fail_ex+0x418/0x58c [ 105.077633][ T8321] should_failslab+0xc4/0x120 [ 105.077645][ T8321] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 105.077660][ T8321] shmem_alloc_inode+0x2c/0x48 [ 105.077672][ T8321] alloc_inode+0x68/0x198 [ 105.077683][ T8321] new_inode+0x20/0x50 [ 105.077698][ T8321] shmem_get_inode+0xac/0x788 [ 105.077709][ T8321] __shmem_file_setup+0x168/0x284 [ 105.077720][ T8321] shmem_zero_setup+0x90/0x130 [ 105.077731][ T8321] mmap_region+0x12f0/0x1c28 [ 105.077743][ T8321] do_mmap+0xb88/0x1104 [ 105.077751][ T8321] vm_mmap_pgoff+0x298/0x46c [ 105.077759][ T8321] ksys_mmap_pgoff+0xd0/0x5b4 [ 105.077768][ T8321] __arm64_sys_mmap+0x110/0x12c [ 105.077780][ T8321] invoke_syscall+0x98/0x244 [ 105.077792][ T8321] el0_svc_common+0xec/0x23c [ 105.077804][ T8321] do_el0_svc+0x4c/0x5c [ 105.077815][ T8321] el0_svc+0x60/0x1d8 [ 105.077827][ T8321] el0t_64_sync_handler+0x44/0x104 [ 105.077837][ T8321] el0t_64_sync+0x198/0x19c [ 105.110340][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.8.886'. [ 105.110364][ T8321] netlink: 14 bytes leftover after parsing attributes in process `syz.8.886'. [ 105.424854][ T8337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.426504][ T8337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.803925][ T8347] 9p: Bad value for 'wfdno' [ 105.840062][ T8347] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 106.093020][ T8356] loop0: detected capacity change from 0 to 512 [ 106.098511][ T8356] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.104310][ T8356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.104356][ T8356] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.458899][ T8353] netlink: 52 bytes leftover after parsing attributes in process `syz.5.897'. [ 106.533074][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.899'. [ 107.172570][ T8375] loop9: detected capacity change from 0 to 512 [ 107.172969][ T8375] EXT4-fs: Ignoring removed bh option [ 107.182151][ T8375] EXT4-fs (loop9): Test dummy encryption mode enabled [ 107.196916][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.198344][ T8375] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #11: comm syz.9.900: corrupted in-inode xattr: bad e_name length [ 107.198364][ T8375] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 107.201625][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 107.201639][ C0] EXT4-fs (loop9): initial error at time 5795978214: ext4_iget_extra_inode:5210: inode 11 [ 107.201658][ C0] EXT4-fs (loop9): last error at time 5795978214: ext4_iget_extra_inode:5210: inode 11 [ 107.201917][ T8375] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.900: couldn't read orphan inode 11 (err -117) [ 107.201935][ T8375] loop9: lost filesystem error report for type 5 error -117 [ 107.202090][ T8375] EXT4-fs (loop9): 1 truncate cleaned up [ 107.221307][ T8375] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.226319][ T8375] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 107.226577][ T8375] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.900: bg 0: block 5: invalid block bitmap [ 107.287554][ T8386] loop0: detected capacity change from 0 to 1 [ 107.372505][ T8386] ldm_validate_privheads(): Disk read failed. [ 107.372535][ T8386] loop0: [ 107.372543][ T8386] loop0: partition table partially beyond EOD, truncated [ 107.628746][ T7665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.765254][ T8407] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 108.110414][ T8439] netlink: 12 bytes leftover after parsing attributes in process `syz.9.916'. [ 108.182266][ T8439] FAULT_INJECTION: forcing a failure. [ 108.182266][ T8439] name fail_futex, interval 1, probability 0, space 0, times 0 [ 108.182288][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: syz.9.916 Not tainted syzkaller #0 PREEMPT [ 108.182301][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 108.182308][ T8439] Call trace: [ 108.182311][ T8439] show_stack+0x2c/0x3c (C) [ 108.182333][ T8439] __dump_stack+0x30/0x40 [ 108.182348][ T8439] dump_stack_lvl+0xd8/0x12c [ 108.182359][ T8439] dump_stack+0x1c/0x28 [ 108.182370][ T8439] should_fail_ex+0x418/0x58c [ 108.182383][ T8439] should_fail+0x14/0x24 [ 108.182394][ T8439] get_futex_key+0x1ec/0x12b0 [ 108.182405][ T8439] futex_wait_setup+0x58/0x674 [ 108.182416][ T8439] __futex_wait+0x108/0x25c [ 108.182427][ T8439] futex_wait+0x108/0x2c0 [ 108.182437][ T8439] do_futex+0x320/0x378 [ 108.182447][ T8439] __arm64_sys_futex+0x2e4/0x418 [ 108.182457][ T8439] invoke_syscall+0x98/0x244 [ 108.182470][ T8439] el0_svc_common+0xec/0x23c [ 108.182481][ T8439] do_el0_svc+0x4c/0x5c [ 108.182492][ T8439] el0_svc+0x60/0x1d8 [ 108.182504][ T8439] el0t_64_sync_handler+0x44/0x104 [ 108.182514][ T8439] el0t_64_sync+0x198/0x19c [ 108.270834][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.920'. [ 108.357300][ T8453] loop6: detected capacity change from 0 to 512 [ 108.380981][ T8453] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.920: corrupted in-inode xattr: invalid ea_ino [ 108.381007][ T8453] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.385173][ T8453] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.920: couldn't read orphan inode 15 (err -117) [ 108.385194][ T8453] loop6: lost filesystem error report for type 5 error -117 [ 108.385863][ T8453] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.764438][ T8467] FAULT_INJECTION: forcing a failure. [ 108.764438][ T8467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.764461][ T8467] CPU: 0 UID: 0 PID: 8467 Comm: syz.5.922 Not tainted syzkaller #0 PREEMPT [ 108.764473][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 108.764479][ T8467] Call trace: [ 108.764482][ T8467] show_stack+0x2c/0x3c (C) [ 108.764501][ T8467] __dump_stack+0x30/0x40 [ 108.764514][ T8467] dump_stack_lvl+0xd8/0x12c [ 108.764526][ T8467] dump_stack+0x1c/0x28 [ 108.764538][ T8467] should_fail_ex+0x418/0x58c [ 108.764551][ T8467] should_fail+0x14/0x24 [ 108.764563][ T8467] should_fail_usercopy+0x20/0x30 [ 108.764576][ T8467] bpf_verifier_vlog+0x478/0xbc0 [ 108.764590][ T8467] btf_verifier_log+0x120/0x1a0 [ 108.764599][ T8467] btf_datasec_log+0x78/0xbc [ 108.764609][ T8467] __btf_verifier_log_type+0x3bc/0x5e4 [ 108.764623][ T8467] btf_datasec_check_meta+0x348/0x71c [ 108.764634][ T8467] btf_parse_type_sec+0x36c/0x17a8 [ 108.764644][ T8467] btf_new_fd+0x33c/0xa24 [ 108.764656][ T8467] bpf_btf_load+0x144/0x190 [ 108.764667][ T8467] __sys_bpf+0x7f0/0x82c [ 108.764685][ T8467] __arm64_sys_bpf+0xd0/0xec [ 108.764695][ T8467] invoke_syscall+0x98/0x244 [ 108.764708][ T8467] el0_svc_common+0xec/0x23c [ 108.764720][ T8467] do_el0_svc+0x4c/0x5c [ 108.764733][ T8467] el0_svc+0x60/0x1d8 [ 108.764745][ T8467] el0t_64_sync_handler+0x44/0x104 [ 108.764757][ T8467] el0t_64_sync+0x198/0x19c [ 108.963082][ T8471] netlink: 'syz.0.923': attribute type 39 has an invalid length. [ 108.989239][ T8476] syzkaller0: entered promiscuous mode [ 108.989258][ T8476] syzkaller0: entered allmulticast mode [ 109.007567][ T8476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.021677][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.028672][ T8476] FAULT_INJECTION: forcing a failure. [ 109.028672][ T8476] name fail_futex, interval 1, probability 0, space 0, times 0 [ 109.028697][ T8476] CPU: 1 UID: 0 PID: 8476 Comm: syz.5.924 Not tainted syzkaller #0 PREEMPT [ 109.028709][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.028715][ T8476] Call trace: [ 109.028718][ T8476] show_stack+0x2c/0x3c (C) [ 109.028739][ T8476] __dump_stack+0x30/0x40 [ 109.028751][ T8476] dump_stack_lvl+0xd8/0x12c [ 109.028763][ T8476] dump_stack+0x1c/0x28 [ 109.028774][ T8476] should_fail_ex+0x418/0x58c [ 109.028788][ T8476] should_fail+0x14/0x24 [ 109.028798][ T8476] get_futex_key+0x1ec/0x12b0 [ 109.028811][ T8476] futex_wake+0x10c/0x594 [ 109.028822][ T8476] do_futex+0x2c4/0x378 [ 109.028831][ T8476] __arm64_sys_futex+0x2e4/0x418 [ 109.028842][ T8476] invoke_syscall+0x98/0x244 [ 109.028854][ T8476] el0_svc_common+0xec/0x23c [ 109.028866][ T8476] do_el0_svc+0x4c/0x5c [ 109.028877][ T8476] el0_svc+0x60/0x1d8 [ 109.028888][ T8476] el0t_64_sync_handler+0x44/0x104 [ 109.028898][ T8476] el0t_64_sync+0x198/0x19c [ 109.125265][ T6428] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.374731][ T8502] tipc: Enabled bearer , priority 10 [ 109.623166][ T8507] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 109.749811][ T8517] 9pnet_fd: Insufficient options for proto=fd [ 109.819108][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.5.935'. [ 110.612351][ T8551] loop8: detected capacity change from 0 to 8 [ 110.614499][ T8551] squashfs image failed sanity check [ 110.711149][ T8555] netlink: 36 bytes leftover after parsing attributes in process `syz.6.944'. [ 110.711167][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.6.944'. [ 110.711176][ T8555] netlink: 36 bytes leftover after parsing attributes in process `syz.6.944'. [ 110.711500][ T8555] netlink: 36 bytes leftover after parsing attributes in process `syz.6.944'. [ 110.711510][ T8555] netlink: 16 bytes leftover after parsing attributes in process `syz.6.944'. [ 110.711520][ T8555] netlink: 36 bytes leftover after parsing attributes in process `syz.6.944'. [ 110.731922][ T8555] sock: sock_set_timeout: `syz.6.944' (pid 8555) tries to set negative timeout [ 110.731949][ T8556] sock: sock_set_timeout: `syz.6.944' (pid 8556) tries to set negative timeout [ 110.904472][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 111.157411][ T8562] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 111.157435][ T8562] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 111.162945][ T8562] netlink: 120 bytes leftover after parsing attributes in process `syz.0.946'. [ 111.185239][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.947'. [ 111.475348][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 111.569951][ T8584] FAULT_INJECTION: forcing a failure. [ 111.569951][ T8584] name failslab, interval 1, probability 0, space 0, times 0 [ 111.570793][ T8584] CPU: 0 UID: 0 PID: 8584 Comm: syz.5.949 Not tainted syzkaller #0 PREEMPT [ 111.570806][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 111.570811][ T8584] Call trace: [ 111.570814][ T8584] show_stack+0x2c/0x3c (C) [ 111.570835][ T8584] __dump_stack+0x30/0x40 [ 111.570846][ T8584] dump_stack_lvl+0xd8/0x12c [ 111.570855][ T8584] dump_stack+0x1c/0x28 [ 111.570864][ T8584] should_fail_ex+0x418/0x58c [ 111.570875][ T8584] should_failslab+0xc4/0x120 [ 111.570886][ T8584] __kmalloc_noprof+0x108/0x6c8 [ 111.570900][ T8584] tomoyo_realpath_from_path+0xbc/0x4dc [ 111.570911][ T8584] tomoyo_path_number_perm+0x1f0/0x500 [ 111.570919][ T8584] tomoyo_file_ioctl+0x2c/0x3c [ 111.570929][ T8584] security_file_ioctl+0xdc/0x2b0 [ 111.570938][ T8584] __arm64_sys_ioctl+0xb0/0x1cc [ 111.570948][ T8584] invoke_syscall+0x98/0x244 [ 111.570958][ T8584] el0_svc_common+0xec/0x23c [ 111.570967][ T8584] do_el0_svc+0x4c/0x5c [ 111.570977][ T8584] el0_svc+0x60/0x1d8 [ 111.570986][ T8584] el0t_64_sync_handler+0x44/0x104 [ 111.570995][ T8584] el0t_64_sync+0x198/0x19c [ 111.571100][ T8584] ERROR: Out of memory at tomoyo_realpath_from_path. [ 112.218657][ T8609] netlink: 'syz.5.961': attribute type 11 has an invalid length. [ 112.224599][ T8607] loop0: detected capacity change from 0 to 8192 [ 112.436329][ T8619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.437809][ T8619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.601422][ T8615] loop9: detected capacity change from 0 to 512 [ 112.601628][ T8617] FAULT_INJECTION: forcing a failure. [ 112.601628][ T8617] name fail_futex, interval 1, probability 0, space 0, times 0 [ 112.601650][ T8617] CPU: 0 UID: 0 PID: 8617 Comm: syz.0.965 Not tainted syzkaller #0 PREEMPT [ 112.601664][ T8617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 112.601670][ T8617] Call trace: [ 112.601680][ T8617] show_stack+0x2c/0x3c (C) [ 112.601705][ T8617] __dump_stack+0x30/0x40 [ 112.601720][ T8617] dump_stack_lvl+0xd8/0x12c [ 112.601731][ T8617] dump_stack+0x1c/0x28 [ 112.601743][ T8617] should_fail_ex+0x418/0x58c [ 112.601755][ T8617] should_fail+0x14/0x24 [ 112.601766][ T8617] get_futex_key+0x1ec/0x12b0 [ 112.601776][ T8617] futex_wait_setup+0x58/0x674 [ 112.601788][ T8617] __futex_wait+0x108/0x25c [ 112.601798][ T8617] futex_wait+0x108/0x2c0 [ 112.601809][ T8617] do_futex+0x320/0x378 [ 112.601818][ T8617] __arm64_sys_futex+0x2e4/0x418 [ 112.601829][ T8617] invoke_syscall+0x98/0x244 [ 112.601841][ T8617] el0_svc_common+0xec/0x23c [ 112.601852][ T8617] do_el0_svc+0x4c/0x5c [ 112.601863][ T8617] el0_svc+0x60/0x1d8 [ 112.601874][ T8617] el0t_64_sync_handler+0x44/0x104 [ 112.601885][ T8617] el0t_64_sync+0x198/0x19c [ 112.612185][ T8615] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 112.612287][ T8615] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 112.612297][ T8615] EXT4-fs (loop9): group descriptors corrupted! [ 112.715756][ T8628] loop6: detected capacity change from 0 to 512 [ 112.733784][ T8628] vfat filesystem being mounted at /91/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 112.805239][ T6428] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 112.805424][ T6428] FAT-fs (loop6): Filesystem has been set read-only [ 112.805552][ T6428] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 112.878903][ T8640] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 112.894078][ T8640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 112.914559][ T8640] bond3: (slave veth7): Enslaving as an active interface with a down link [ 112.933180][ T8640] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 112.933214][ T8640] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 112.987443][ T6428] bond0: (slave syz_tun): Releasing backup interface [ 113.023444][ T8643] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 113.043690][ T1721] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 113.044283][ T1721] bond3: (slave veth7): making interface the new active one [ 113.046795][ T1721] bond3: active interface up! [ 113.130876][ T1721] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.130905][ T1721] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.194580][ T1721] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.194779][ T1721] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.263943][ T1721] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.263972][ T1721] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.270211][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.272731][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.274759][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.279031][ T4717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.281822][ T4717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.366037][ T1721] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.366068][ T1721] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.538240][ T1721] bridge_slave_1: left allmulticast mode [ 113.538265][ T1721] bridge_slave_1: left promiscuous mode [ 113.538357][ T1721] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.572636][ T1721] bridge_slave_0: left allmulticast mode [ 113.572656][ T1721] bridge_slave_0: left promiscuous mode [ 113.572756][ T1721] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.715031][ T1721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.742030][ T1721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.760441][ T1721] bond0 (unregistering): Released all slaves [ 113.994629][ T1721] bond1 (unregistering): Released all slaves [ 114.000415][ T1721] bond2 (unregistering): (slave veth3): Releasing active interface [ 114.025893][ T8672] loop0: detected capacity change from 0 to 512 [ 114.030997][ T8672] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.033346][ T1721] bond2 (unregistering): Released all slaves [ 114.034009][ T8672] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.981: inode has both inline data and extents flags [ 114.034035][ T8672] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 114.034144][ T8672] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.981: couldn't read orphan inode 15 (err -117) [ 114.034159][ T8672] loop0: lost filesystem error report for type 5 error -117 [ 114.037985][ T8672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.096757][ T8646] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.096831][ T8646] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.096888][ T8646] bridge_slave_0: entered allmulticast mode [ 114.097407][ T8646] bridge_slave_0: entered promiscuous mode [ 114.108255][ T8646] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.108286][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.108462][ T8646] bridge_slave_1: entered allmulticast mode [ 114.109011][ T8646] bridge_slave_1: entered promiscuous mode [ 114.113083][ T8672] fscrypt: AES-256-XTS using blk-crypto-fallback [ 114.123522][ T1721] tipc: Left network mode [ 114.129080][ T8646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.133456][ T8646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.143570][ T8646] team0: Port device team_slave_0 added [ 114.144344][ T8646] team0: Port device team_slave_1 added [ 114.173473][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.214445][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.214458][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.214472][ T8646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.216308][ T8646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.216327][ T8646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.216339][ T8646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.603654][ T8694] loop0: detected capacity change from 0 to 512 [ 114.606334][ T8694] EXT4-fs: Ignoring removed bh option [ 114.650021][ T8694] EXT4-fs (loop0): Test dummy encryption mode enabled [ 114.663545][ T8694] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #11: comm syz.0.982: corrupted in-inode xattr: bad e_name length [ 114.663567][ T8694] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.663765][ T8694] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.982: couldn't read orphan inode 11 (err -117) [ 114.663787][ T8694] loop0: lost filesystem error report for type 5 error -117 [ 114.663918][ T8694] EXT4-fs (loop0): 1 truncate cleaned up [ 114.664363][ T8694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.698911][ T8685] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.982: bg 0: block 5: invalid block bitmap [ 114.717892][ T8646] hsr_slave_0: entered promiscuous mode [ 114.718267][ T8646] hsr_slave_1: entered promiscuous mode [ 114.718456][ T8646] debugfs: 'hsr0' already exists in 'hsr' [ 114.718466][ T8646] Cannot create hsr debugfs directory [ 114.775571][ T1721] hsr_slave_0: left promiscuous mode [ 114.775923][ T1721] hsr_slave_1: left promiscuous mode [ 114.776179][ T1721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.776191][ T1721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.776557][ T1721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.776566][ T1721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.791420][ T1721] veth1_macvtap: left promiscuous mode [ 114.791457][ T1721] veth0_macvtap: left promiscuous mode [ 114.791526][ T1721] veth1_vlan: left promiscuous mode [ 114.791558][ T1721] veth0_vlan: left promiscuous mode [ 114.793638][ T8703] loop9: detected capacity change from 0 to 8 [ 114.796675][ T8703] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 114.796692][ T8703] unable to read xattr id index table [ 114.931239][ T1721] team0 (unregistering): Port device team_slave_1 removed [ 114.935637][ T1721] team0 (unregistering): Port device team_slave_0 removed [ 114.967888][ T8714] Bluetooth: MGMT ver 1.23 [ 114.972402][ T8714] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 115.004517][ T4403] 8021q: adding VLAN 0 to HW filter on device eth21 [ 115.137062][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.289500][ T50] Bluetooth: hci0: command tx timeout [ 116.288481][ T4403] 8021q: adding VLAN 0 to HW filter on device eth22 [ 116.444530][ T8646] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 116.446912][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 116.447327][ T8646] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 116.500286][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 116.502560][ T8646] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.521016][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 116.521371][ T8646] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.523730][ T8646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.524752][ T4403] 8021q: adding VLAN 0 to HW filter on device eth23 [ 116.536094][ T8775] syzkaller0: left promiscuous mode [ 116.536118][ T8775] syzkaller0: left allmulticast mode [ 116.555363][ T8772] loop0: detected capacity change from 0 to 8192 [ 116.570556][ T8646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.574920][ T8646] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.579966][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.579997][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.580510][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.580529][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.613250][ T8784] __nla_validate_parse: 5 callbacks suppressed [ 116.613266][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1000'. [ 116.743868][ T8789] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 116.782113][ T8796] fuse: Unknown parameter 'švÙ$ÍnbXó–kZ´ó'ʳç‹P²•ã' [ 116.970298][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 116.970748][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 117.098489][ T8802] loop5: detected capacity change from 0 to 512 [ 117.098879][ T8802] EXT4-fs: Ignoring removed bh option [ 117.122504][ T8802] EXT4-fs (loop5): Test dummy encryption mode enabled [ 117.150341][ T8802] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #11: comm syz.5.1001: corrupted in-inode xattr: bad e_name length [ 117.150371][ T8802] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 117.158436][ T8802] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1001: couldn't read orphan inode 11 (err -117) [ 117.158464][ T8802] loop5: lost filesystem error report for type 5 error -117 [ 117.159288][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 117.159305][ C0] EXT4-fs (loop5): initial error at time 5795978224: ext4_iget_extra_inode:5210: inode 11 [ 117.159321][ C0] EXT4-fs (loop5): last error at time 5795978224: ext4_orphan_get:1408 [ 117.164081][ T8802] EXT4-fs (loop5): 1 truncate cleaned up [ 117.164581][ T8802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.179870][ T8792] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.1001: bg 0: block 5: invalid block bitmap [ 117.198764][ T8811] netlink: 'syz.9.1004': attribute type 1 has an invalid length. [ 117.198781][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1004'. [ 117.237971][ T8646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.249063][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1006'. [ 117.252671][ T8821] FAULT_INJECTION: forcing a failure. [ 117.252671][ T8821] name fail_futex, interval 1, probability 0, space 0, times 0 [ 117.252696][ T8821] CPU: 1 UID: 0 PID: 8821 Comm: syz.9.1006 Not tainted syzkaller #0 PREEMPT [ 117.252712][ T8821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 117.252718][ T8821] Call trace: [ 117.252721][ T8821] show_stack+0x2c/0x3c (C) [ 117.252741][ T8821] __dump_stack+0x30/0x40 [ 117.252753][ T8821] dump_stack_lvl+0xd8/0x12c [ 117.252764][ T8821] dump_stack+0x1c/0x28 [ 117.252775][ T8821] should_fail_ex+0x418/0x58c [ 117.252788][ T8821] should_fail+0x14/0x24 [ 117.252799][ T8821] get_futex_key+0x1ec/0x12b0 [ 117.252809][ T8821] futex_wake+0x10c/0x594 [ 117.252820][ T8821] do_futex+0x2c4/0x378 [ 117.252829][ T8821] __arm64_sys_futex+0x2e4/0x418 [ 117.252840][ T8821] invoke_syscall+0x98/0x244 [ 117.252851][ T8821] el0_svc_common+0xec/0x23c [ 117.252863][ T8821] do_el0_svc+0x4c/0x5c [ 117.252874][ T8821] el0_svc+0x60/0x1d8 [ 117.252885][ T8821] el0t_64_sync_handler+0x44/0x104 [ 117.252895][ T8821] el0t_64_sync+0x198/0x19c [ 117.358435][ T4403] 8021q: adding VLAN 0 to HW filter on device eth24 [ 117.361320][ T8646] veth0_vlan: entered promiscuous mode [ 117.364513][ T8646] veth1_vlan: entered promiscuous mode [ 117.369844][ T50] Bluetooth: hci0: command tx timeout [ 117.385938][ T8646] veth0_macvtap: entered promiscuous mode [ 117.388754][ T8646] veth1_macvtap: entered promiscuous mode [ 117.399377][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.401654][ T8646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.438795][ T1768] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.440412][ T1768] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.442873][ T1768] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.473781][ T1768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.473795][ T1768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.479422][ T913] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.488932][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.488947][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.791960][ T4958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.837361][ T8855] loop4: detected capacity change from 0 to 512 [ 117.838571][ T8855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.848302][ T8855] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.977: invalid indirect mapped block 9 (level 0) [ 117.848324][ T8855] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 117.849522][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 117.849536][ C1] EXT4-fs (loop4): initial error at time 5795978224: ext4_free_branches:1023: inode 11 [ 117.849555][ C1] EXT4-fs (loop4): last error at time 5795978224: ext4_free_branches:1023: inode 11 [ 117.857693][ T8855] EXT4-fs (loop4): 1 truncate cleaned up [ 117.858171][ T8855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.863097][ T8855] xt_LOG: level 175 >= 8 [ 117.865317][ T8855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.865503][ T8855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.867194][ T8855] overlay: Unknown parameter 'context' [ 118.047693][ T8873] loop0: detected capacity change from 0 to 1 [ 118.081008][ T8873] ldm_validate_privheads(): Disk read failed. [ 118.081043][ T8873] loop0: [ 118.081052][ T8873] loop0: partition table partially beyond EOD, truncated [ 118.120161][ T8883] loop5: detected capacity change from 0 to 512 [ 118.124841][ T8883] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.154184][ T8883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.154239][ T8883] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.529668][ T8646] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 118.987669][ T4958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.086291][ T8945] tipc: New replicast peer: 255.255.255.255 [ 119.086541][ T8945] tipc: Enabled bearer , priority 10 [ 119.087610][ T8945] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001 [ 120.145825][ T9019] syzkaller0: entered promiscuous mode [ 120.145846][ T9019] syzkaller0: entered allmulticast mode [ 120.149363][ T9019] tipc: Enabled bearer , priority 10 [ 120.155479][ T9018] tipc: Resetting bearer [ 120.176180][ T9018] tipc: Disabling bearer [ 120.329989][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1037'. [ 120.383668][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'. [ 120.414184][ T9046] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 120.414206][ T9046] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 120.415016][ T9046] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1039'. [ 120.572262][ T8674] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 120.630457][ T9065] loop0: detected capacity change from 0 to 1 [ 120.702057][ T9065] ldm_validate_privheads(): Disk read failed. [ 120.702085][ T9065] loop0: [ 120.702093][ T9065] loop0: partition table partially beyond EOD, truncated [ 121.046436][ T9080] xt_l2tp: v2 tid > 0xffff: 37482740 [ 121.179551][ T4803] tipc: Node number set to 2309042672 [ 121.388642][ T9100] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 121.488137][ T8646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.592123][ T9107] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1052'. [ 121.604555][ T1768] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.688951][ T9115] loop0: detected capacity change from 0 to 512 [ 121.712049][ T9115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.729016][ T9115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.729073][ T9115] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.802985][ T4717] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.805703][ T4717] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.806287][ T4717] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.806679][ T4717] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.806901][ T4717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 122.184579][ T9139] loop5: detected capacity change from 0 to 4096 [ 122.185385][ T9139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.186121][ T9139] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 122.187515][ T9139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.196298][ T9145] netlink: 'syz.9.1059': attribute type 11 has an invalid length. [ 122.196333][ T9145] netlink: 448 bytes leftover after parsing attributes in process `syz.9.1059'. [ 122.231830][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1058'. [ 122.346356][ T1768] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.398900][ T4958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.428975][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.429037][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.429097][ T9122] bridge_slave_0: entered allmulticast mode [ 122.429827][ T9122] bridge_slave_0: entered promiscuous mode [ 122.430780][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.430908][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.430998][ T9122] bridge_slave_1: entered allmulticast mode [ 122.431390][ T9122] bridge_slave_1: entered promiscuous mode [ 122.449302][ T9122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.463843][ T9122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.476970][ T1768] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.554125][ T9165] FAULT_INJECTION: forcing a failure. [ 122.554125][ T9165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.554167][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.9.1060 Not tainted syzkaller #0 PREEMPT [ 122.554177][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 122.554182][ T9165] Call trace: [ 122.554185][ T9165] show_stack+0x2c/0x3c (C) [ 122.554205][ T9165] __dump_stack+0x30/0x40 [ 122.554216][ T9165] dump_stack_lvl+0xd8/0x12c [ 122.554225][ T9165] dump_stack+0x1c/0x28 [ 122.554234][ T9165] should_fail_ex+0x418/0x58c [ 122.554245][ T9165] should_fail+0x14/0x24 [ 122.554254][ T9165] should_fail_usercopy+0x20/0x30 [ 122.554264][ T9165] _inline_copy_from_user+0x3c/0x174 [ 122.554274][ T9165] seccomp_notify_ioctl+0x80c/0x1488 [ 122.554283][ T9165] __arm64_sys_ioctl+0x154/0x1cc [ 122.554294][ T9165] invoke_syscall+0x98/0x244 [ 122.554304][ T9165] el0_svc_common+0xec/0x23c [ 122.554314][ T9165] do_el0_svc+0x4c/0x5c [ 122.554323][ T9165] el0_svc+0x60/0x1d8 [ 122.554332][ T9165] el0t_64_sync_handler+0x44/0x104 [ 122.554341][ T9165] el0t_64_sync+0x198/0x19c [ 122.996868][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.039434][ T9122] team0: Port device team_slave_0 added [ 123.042526][ T9122] team0: Port device team_slave_1 added [ 123.072430][ T1768] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.087828][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.087839][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.087853][ T9122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.100550][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.100561][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.100576][ T9122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.144008][ T9122] hsr_slave_0: entered promiscuous mode [ 123.144333][ T9122] hsr_slave_1: entered promiscuous mode [ 123.236015][ T9180] loop9: detected capacity change from 0 to 512 [ 123.257885][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1068'. [ 123.282057][ T9180] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.1067: corrupted in-inode xattr: invalid ea_ino [ 123.282080][ T9180] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.282195][ T9180] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.1067: couldn't read orphan inode 15 (err -117) [ 123.282208][ T9180] loop9: lost filesystem error report for type 5 error -117 [ 123.282906][ T9180] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.309551][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1067'. [ 123.309572][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1067'. [ 123.309588][ T9180] netlink: 'syz.9.1067': attribute type 11 has an invalid length. [ 123.309596][ T9180] netlink: 'syz.9.1067': attribute type 12 has an invalid length. [ 123.315707][ T1768] bridge_slave_1: left allmulticast mode [ 123.315730][ T1768] bridge_slave_1: left promiscuous mode [ 123.315821][ T1768] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.317775][ T1768] bridge_slave_0: left allmulticast mode [ 123.317791][ T1768] bridge_slave_0: left promiscuous mode [ 123.317863][ T1768] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.343587][ T9185] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 123.416844][ T1768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.442024][ T1768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.470180][ T1768] bond0 (unregistering): Released all slaves [ 123.474248][ T9181] netlink: 'syz.0.1066': attribute type 4 has an invalid length. [ 123.591700][ T9190] evm: overlay not supported [ 123.777161][ T9195] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO) [ 123.777182][ T9195] device-mapper: ioctl: error adding target to table [ 123.784250][ T9189] netlink: 'syz.5.1069': attribute type 39 has an invalid length. [ 123.784324][ T9189] macvlan1: entered promiscuous mode [ 123.784421][ T9189] macvlan1: entered allmulticast mode [ 123.784428][ T9189] veth1_vlan: entered allmulticast mode [ 123.836744][ T9215] loop8: detected capacity change from 0 to 256 [ 123.838599][ T9215] vfat: Unknown parameter 'Àortname' [ 123.850014][ T4717] Bluetooth: hci0: command tx timeout [ 123.964428][ T9226] tipc: Started in network mode [ 123.964447][ T9226] tipc: Node identity 0a43561b29a2, cluster identity 4711 [ 123.964542][ T9226] tipc: Enabled bearer , priority 0 [ 123.967269][ T9226] tipc: Resetting bearer [ 123.968975][ T9225] tipc: Disabling bearer [ 123.999744][ T9237] netlink: 'syz.5.1078': attribute type 1 has an invalid length. [ 124.099013][ T9237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.101482][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 124.381751][ T9245] bond2: (slave veth5): Enslaving as an active interface with a down link [ 124.384403][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1078'. [ 124.384700][ T7665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.404266][ T9237] macvlan1: left promiscuous mode [ 124.404330][ T9237] macvlan1: left allmulticast mode [ 124.404337][ T9237] veth1_vlan: left allmulticast mode [ 124.418825][ T1768] hsr_slave_0: left promiscuous mode [ 124.424239][ T1768] hsr_slave_1: left promiscuous mode [ 124.424592][ T1768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.424606][ T1768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.424784][ T9258] loop9: detected capacity change from 0 to 128 [ 124.426725][ T1768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.426741][ T1768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.447152][ T1768] veth1_macvtap: left promiscuous mode [ 124.447184][ T1768] veth0_macvtap: left promiscuous mode [ 124.447230][ T1768] veth1_vlan: left promiscuous mode [ 124.447263][ T1768] veth0_vlan: left promiscuous mode [ 124.453013][ T9257] FAULT_INJECTION: forcing a failure. [ 124.453013][ T9257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.453035][ T9257] CPU: 0 UID: 0 PID: 9257 Comm: syz.8.1082 Not tainted syzkaller #0 PREEMPT [ 124.453049][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 124.453055][ T9257] Call trace: [ 124.453058][ T9257] show_stack+0x2c/0x3c (C) [ 124.453080][ T9257] __dump_stack+0x30/0x40 [ 124.453094][ T9257] dump_stack_lvl+0xd8/0x12c [ 124.453105][ T9257] dump_stack+0x1c/0x28 [ 124.453116][ T9257] should_fail_ex+0x418/0x58c [ 124.453129][ T9257] should_fail+0x14/0x24 [ 124.453139][ T9257] should_fail_usercopy+0x20/0x30 [ 124.453151][ T9257] _inline_copy_from_user+0x3c/0x174 [ 124.453162][ T9257] tipc_setsockopt+0x3a4/0x7c0 [ 124.453171][ T9257] do_sock_setsockopt+0x1f0/0x330 [ 124.453182][ T9257] __sys_setsockopt+0x104/0x170 [ 124.453192][ T9257] __arm64_sys_setsockopt+0xc8/0xe4 [ 124.453202][ T9257] invoke_syscall+0x98/0x244 [ 124.453214][ T9257] el0_svc_common+0xec/0x23c [ 124.453226][ T9257] do_el0_svc+0x4c/0x5c [ 124.453237][ T9257] el0_svc+0x60/0x1d8 [ 124.453247][ T9257] el0t_64_sync_handler+0x44/0x104 [ 124.453258][ T9257] el0t_64_sync+0x198/0x19c [ 124.581161][ T1768] team0 (unregistering): Port device team_slave_1 removed [ 124.585101][ T1768] team0 (unregistering): Port device team_slave_0 removed [ 124.921704][ T51] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 124.921813][ T51] bond2: (slave veth5): making interface the new active one [ 124.927462][ T51] bond2: active interface up! [ 125.177612][ T9294] FAULT_INJECTION: forcing a failure. [ 125.177612][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.177633][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.5.1092 Not tainted syzkaller #0 PREEMPT [ 125.177643][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 125.177648][ T9294] Call trace: [ 125.177651][ T9294] show_stack+0x2c/0x3c (C) [ 125.177670][ T9294] __dump_stack+0x30/0x40 [ 125.177687][ T9294] dump_stack_lvl+0xd8/0x12c [ 125.177697][ T9294] dump_stack+0x1c/0x28 [ 125.177706][ T9294] should_fail_ex+0x418/0x58c [ 125.177717][ T9294] should_fail+0x14/0x24 [ 125.177727][ T9294] should_fail_usercopy+0x20/0x30 [ 125.177737][ T9294] _inline_copy_from_user+0x3c/0x174 [ 125.177748][ T9294] io_submit_one+0xc4/0xee4 [ 125.177755][ T9294] __arm64_sys_io_submit+0x230/0x3b8 [ 125.177762][ T9294] invoke_syscall+0x98/0x244 [ 125.177772][ T9294] el0_svc_common+0xec/0x23c [ 125.177781][ T9294] do_el0_svc+0x4c/0x5c [ 125.177790][ T9294] el0_svc+0x60/0x1d8 [ 125.177800][ T9294] el0t_64_sync_handler+0x44/0x104 [ 125.177809][ T9294] el0t_64_sync+0x198/0x19c [ 125.217274][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 125.456868][ T9326] loop8: detected capacity change from 0 to 512 [ 125.458934][ T4403] 8021q: adding VLAN 0 to HW filter on device eth3 [ 125.462070][ T9326] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 125.473204][ T9326] EXT4-fs (loop8): 1 truncate cleaned up [ 125.475195][ T9326] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.552750][ T9326] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1095: invalid indirect mapped block 2185560079 (level 0) [ 125.563499][ T9326] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1095: invalid indirect mapped block 65535 (level 2) [ 125.567981][ T9326] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz.8.1095: Invalid inode table block 0 in block_group 0 [ 125.588981][ T9326] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 125.591897][ T9326] EXT4-fs error (device loop8): ext4_splice_branch:479: inode #13: comm syz.8.1095: mark_inode_dirty error [ 125.592215][ T9326] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.1095: bg 0: block 46: invalid block bitmap [ 125.592371][ T9326] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 125.592618][ T9326] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz.8.1095: Invalid inode table block 0 in block_group 0 [ 125.595932][ T9326] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 125.596105][ T9326] EXT4-fs error (device loop8): ext4_truncate:4721: inode #13: comm syz.8.1095: mark_inode_dirty error [ 125.680880][ T9122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.714359][ T9122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 125.715466][ T9122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.723841][ T9122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 125.724437][ T9122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.725608][ T9122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 125.726396][ T9122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.789015][ T9122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 125.973461][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.974945][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.101966][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.101998][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.103994][ T4717] Bluetooth: hci0: command tx timeout [ 126.126670][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.153409][ T9122] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.154979][ T1768] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.155007][ T1768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.166377][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.166414][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.229472][ T7171] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.701902][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.149030][ T9418] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1105'. [ 127.156049][ T9418] loop8: detected capacity change from 0 to 1024 [ 127.174057][ T9418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.206602][ T9423] loop9: detected capacity change from 0 to 512 [ 127.216958][ T9423] EXT4-fs (loop9): 1 truncate cleaned up [ 127.217394][ T9423] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.226579][ T9423] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1106: invalid indirect mapped block 234881024 (level 0) [ 127.471739][ T7171] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.499925][ T9122] veth0_vlan: entered promiscuous mode [ 127.506017][ T9122] veth1_vlan: entered promiscuous mode [ 127.527661][ T9122] veth0_macvtap: entered promiscuous mode [ 127.529120][ T9122] veth1_macvtap: entered promiscuous mode [ 127.538992][ T9432] loop8: detected capacity change from 0 to 512 [ 127.543406][ T9432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.545570][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.553199][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.571372][ T9432] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.571434][ T9432] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.586256][ T9432] overlay: Unknown parameter 'euid' [ 127.592523][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.592902][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.592926][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.592944][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.632048][ T1842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.632065][ T1842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.685561][ T1842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.685576][ T1842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.037898][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2 [ 128.067955][ T7665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.169441][ T4717] Bluetooth: hci0: command tx timeout [ 128.598306][ T7171] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.075962][ T9491] binder: 9490:9491 ioctl c00c620f 9999999999999999 returned -14 [ 129.108874][ T9517] FAULT_INJECTION: forcing a failure. [ 129.108874][ T9517] name failslab, interval 1, probability 0, space 0, times 0 [ 129.109362][ T9517] CPU: 1 UID: 0 PID: 9517 Comm: syz.3.1118 Not tainted syzkaller #0 PREEMPT [ 129.109382][ T9517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 129.109389][ T9517] Call trace: [ 129.109392][ T9517] show_stack+0x2c/0x3c (C) [ 129.109418][ T9517] __dump_stack+0x30/0x40 [ 129.109435][ T9517] dump_stack_lvl+0xd8/0x12c [ 129.109447][ T9517] dump_stack+0x1c/0x28 [ 129.109458][ T9517] should_fail_ex+0x418/0x58c [ 129.109471][ T9517] should_failslab+0xc4/0x120 [ 129.109483][ T9517] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 129.109493][ T9517] kstrdup+0x50/0x104 [ 129.109500][ T9517] kstrdup_const+0x54/0x6c [ 129.109508][ T9517] __kernfs_new_node+0xb0/0x7d8 [ 129.109518][ T9517] kernfs_new_node+0xe8/0x130 [ 129.109527][ T9517] kernfs_create_link+0x98/0x1e4 [ 129.109538][ T9517] sysfs_do_create_link_sd+0x8c/0x120 [ 129.109550][ T9517] sysfs_create_link+0x74/0x94 [ 129.109561][ T9517] module_add_driver+0x264/0x2e0 [ 129.109572][ T9517] bus_add_driver+0x254/0x500 [ 129.109583][ T9517] driver_register+0x220/0x310 [ 129.109591][ T9517] usb_gadget_register_driver_owner+0xf0/0x25c [ 129.109602][ T9517] raw_ioctl+0x10f8/0x356c [ 129.109614][ T9517] __arm64_sys_ioctl+0x154/0x1cc [ 129.109626][ T9517] invoke_syscall+0x98/0x244 [ 129.109648][ T9517] el0_svc_common+0xec/0x23c [ 129.109659][ T9517] do_el0_svc+0x4c/0x5c [ 129.109670][ T9517] el0_svc+0x60/0x1d8 [ 129.109681][ T9517] el0t_64_sync_handler+0x44/0x104 [ 129.109695][ T9517] el0t_64_sync+0x198/0x19c [ 129.109748][ T9517] bus_add_driver: failed to create module links for raw-gadget.0 [ 129.109784][ T9517] UDC core: USB Raw Gadget: driver registration failed: -12 [ 129.109794][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 129.146578][ T9512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.146768][ T9512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.264985][ T9537] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 129.265652][ T9536] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 129.407626][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1122'. [ 129.407654][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1122'. [ 129.407670][ T9559] netlink: 'syz.0.1122': attribute type 6 has an invalid length. [ 129.407682][ T9559] netlink: 'syz.0.1122': attribute type 5 has an invalid length. [ 129.416661][ T9559] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1122'. [ 129.416766][ T9559] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1122'. [ 129.565130][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1124'. [ 129.697473][ T9594] loop8: detected capacity change from 0 to 4096 [ 129.711828][ T9595] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1127'. [ 129.724434][ T9594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.757752][ T9607] netlink: 'syz.0.1129': attribute type 11 has an invalid length. [ 129.757797][ T9607] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1129'. [ 129.845956][ T7171] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.180268][ T9632] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.249337][ T4717] Bluetooth: hci0: command tx timeout [ 130.278719][ T9642] syzkaller0: entered promiscuous mode [ 130.278738][ T9642] syzkaller0: entered allmulticast mode [ 130.283610][ T9642] tipc: Started in network mode [ 130.283627][ T9642] tipc: Node identity dadac32d05d, cluster identity 4711 [ 130.284971][ T9642] tipc: Enabled bearer , priority 10 [ 130.291839][ T9641] tipc: Resetting bearer [ 130.432881][ T9653] futex_wake_op: syz.0.1136 tries to shift op by 144; fix this program [ 130.522210][ T9641] tipc: Disabling bearer [ 130.587629][ T9664] loop8: detected capacity change from 0 to 4096 [ 130.657144][ T9664] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.675311][ T9674] nfs: Unknown parameter 'acz2' [ 130.691554][ T9674] loop9: detected capacity change from 0 to 524287998 [ 130.714293][ T7171] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.734201][ T9671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.744860][ T9684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1141'. [ 130.752428][ T9684] gre0: entered promiscuous mode [ 130.752525][ T9684] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 131.327075][ T9711] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967044.133.0), cmd(9) [ 131.528110][ T9722] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1147'. [ 132.384901][ T9747] netlink: 'syz.9.1153': attribute type 11 has an invalid length. [ 132.384942][ T9747] netlink: 448 bytes leftover after parsing attributes in process `syz.9.1153'. [ 133.494097][ T9795] loop9: detected capacity change from 0 to 512 [ 133.495709][ T9795] ext4: Bad value for 'journal_dev' [ 134.008253][ T9812] loop9: detected capacity change from 0 to 7 [ 134.024904][ T9812] Dev loop9: unable to read RDB block 7 [ 134.024926][ T9812] loop9: unable to read partition table [ 134.025000][ T9812] loop9: partition table beyond EOD, truncated [ 134.025010][ T9812] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 134.027440][ C0] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 134.027471][ C0] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 134.043259][ T9812] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 134.044517][ T9812] [U] J"—E:ÀÆ" [ 134.060251][ T9812] loop8: detected capacity change from 0 to 128 [ 134.063085][ T9812] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 134.079206][ T9812] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.079887][ T9812] ext2 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.084985][ T9817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.517597][ T7171] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.674598][ T9842] loop5: detected capacity change from 0 to 512 [ 134.676465][ T9842] ext4: Unknown parameter 'nouser_xattr' [ 134.848531][ T9870] loop8: detected capacity change from 0 to 8 [ 134.858112][ T9870] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 134.858125][ T9870] unable to read xattr id index table [ 134.858862][ T9870] SQUASHFS error: zlib decompression failed, data probably corrupt [ 134.858888][ T9870] SQUASHFS error: Failed to read block 0x9b: -5 [ 134.858897][ T9870] SQUASHFS error: Unable to read metadata cache entry [99] [ 134.858906][ T9870] SQUASHFS error: Unable to read inode 0x127 [ 134.935981][ T9877] tunl0: entered promiscuous mode [ 134.936949][ T9877] netlink: 'syz.9.1179': attribute type 4 has an invalid length. [ 134.936961][ T9877] __nla_validate_parse: 2 callbacks suppressed [ 134.936969][ T9877] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1179'. [ 135.680483][ T9904] netlink: 'syz.0.1185': attribute type 11 has an invalid length. [ 135.680525][ T9904] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1185'. [ 135.743766][ T9908] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 135.751788][ T9908] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.763218][ T9908] bond4: (slave veth9): Enslaving as an active interface with a down link [ 135.767359][ T9908] gre0: left promiscuous mode [ 135.778160][ T9908] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 135.778207][ T9908] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 135.788329][ T9908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1187'. [ 135.799356][ T1821] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.799663][ T1821] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.799695][ T1821] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.799720][ T1821] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.860464][ T51] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 135.861123][ T51] bond4: (slave veth9): making interface the new active one [ 135.862816][ T51] bond4: active interface up! [ 136.167892][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1193'. [ 136.175027][ T9936] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 136.175045][ T9936] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 136.175807][ T9936] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1193'. [ 136.219735][ T9940] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.134217728.0), cmd(9) [ 147.049940][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.049959][ C1] bridge0: topology change detected, propagating [ 147.050084][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.050094][ C1] bridge0: topology change detected, propagating [ 153.609867][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 158.738924][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 187.371096][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.371131][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 209.928045][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 213.608144][ T31] INFO: task kworker/0:4:4801 blocked for more than 143 seconds. [ 213.608163][ T31] Not tainted syzkaller #0 [ 213.608169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 213.608174][ T31] task:kworker/0:4 state:D stack:0 pid:4801 tgid:4801 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 213.608190][ T31] Workqueue: usb_hub_wq hub_event [ 213.608209][ T31] Call trace: [ 213.608213][ T31] __switch_to+0x2b4/0x6e4 (T) [ 213.608226][ T31] __schedule+0x135c/0x2b00 [ 213.608234][ T31] schedule+0x13c/0x20c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 213.608242][ T31] usb_kill_urb+0x1b8/0x31c [ 213.608250][ T31] usb_start_wait_urb+0x1c8/0x478 [ 213.608259][ T31] usb_control_msg+0x1e8/0x378 [ 213.608267][ T31] get_bMaxPacketSize0+0xb4/0x208 [ 213.608278][ T31] hub_port_init+0x890/0x1c94 [ 213.608289][ T31] hub_event+0x1bc0/0x39fc [ 213.608299][ T31] process_scheduled_works+0x91c/0x1250 [ 213.608310][ T31] worker_thread+0x798/0xbd0 [ 213.608319][ T31] kthread+0x304/0x3d4 [ 213.608327][ T31] ret_from_fork+0x10/0x20 [ 213.608381][ T31] [ 213.608381][ T31] Showing all locks held in the system: [ 213.608388][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 213.608394][ T31] #0: ffff800088c41960 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 213.608425][ T31] locks held by kworker/u8:9/1768: 4, last CPU#0: [ 213.608432][ T31] #0: ffff0000c004c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 213.608455][ T31] #1: ffff800097037c20 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 213.608477][ T31] #2: ffff0000f5c04258 (&devlink->lock_key#11){+.+.}-{4:4}, at: devl_trylock+0x24/0x34 [ 213.608503][ T31] #3: ffff0000f19454e0 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x168/0x9cc [ 213.608531][ T31] locks held by getty/4493: 2, on CPU#1: [ 213.608537][ T31] #0: ffff0000d1f230a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 213.608559][ T31] #1: ffff80009243b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x348/0xf78 [ 213.608583][ T31] locks held by kworker/u9:2/4717: 3, on CPU#1: [ 213.608589][ T31] #0: ffff0000d8826940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 213.608611][ T31] #1: ffff8000950e7c20 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 213.608633][ T31] #2: ffff0000f5d04ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x178/0x374 [ 213.608656][ T31] locks held by kworker/0:4/4801: 5, on CPU#0: [ 213.608662][ T31] #0: ffff0000c2404540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 213.608689][ T31] #1: ffff8000a8c47c20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 213.608714][ T31] #2: ffff0000cb3951d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x128/0x39fc [ 213.608737][ T31] #3: ffff0000cb5a9578 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x191c/0x39fc [ 213.608760][ T31] #4: ffff0000cb4dc260 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x1948/0x39fc [ 213.608790][ T31] locks held by syz.3.1155/9756: 1, on CPU#0: [ 213.608795][ T31] #0: ffff0000cb3951d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x138/0x674 [ 213.608816][ T31] [ 213.608819][ T31] ============================================= [ 213.608819][ T31] [ 213.608824][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 213.670414][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 213.672037][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 213.673928][ T31] Call trace: [ 213.674558][ T31] show_stack+0x2c/0x3c (C) [ 213.675439][ T31] __dump_stack+0x30/0x40 [ 213.676266][ T31] dump_stack_lvl+0x30/0x12c [ 213.677143][ T31] dump_stack+0x1c/0x28 [ 213.677951][ T31] vpanic+0x594/0xaf8 [ 213.678731][ T31] vpanic+0x0/0xaf8 [ 213.679472][ T31] hung_task_panic+0x0/0x2c [ 213.680375][ T31] kthread+0x304/0x3d4 [ 213.681172][ T31] ret_from_fork+0x10/0x20 [ 213.682047][ T31] SMP: stopping secondary CPUs [ 213.683007][ T31] Kernel Offset: disabled [ 213.683862][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 213.685235][ T31] Memory Limit: none [ 214.049635][ T31] Rebooting in 86400 seconds..