last executing test programs: 5m51.191907598s ago: executing program 32 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 5m12.630313055s ago: executing program 5 (id=951): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x10dcd8, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 5m10.909294862s ago: executing program 5 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_usb_connect$uac3(0x1, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x407}}, {0x5, &(0x7f0000000640)=@string={0x5, 0x3, "da7995"}}, {0x2, &(0x7f00000006c0)=@string={0x2}}]}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m9.347220324s ago: executing program 5 (id=965): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x18}}, 0x8804) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m9.09680869s ago: executing program 4 (id=968): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$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") r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fffffffff0000000100000280000001", 0x13) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) 5m9.066874347s ago: executing program 5 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) umount2(0x0, 0xa) 5m8.776310482s ago: executing program 5 (id=971): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x7, 0x0, 0x3, {0x2, @raw_data="ebcc8dfcef47675d46cc42f7014531d16e30e1eb0ea2865b6ad8f4ee7d7e6cf6d80bbd2f4b64f85afee307933f3e6df18e635d13e5e1ccbd5c23e15c53e6f269561758f89fb47af03da5c60c417ad2aa76666fd9ea398c6aebd59f2e46dd9b4ca0b021e74f4084c7e0cb45f1849e0b0e9e2b5b07a6ade69f45e96484cae5e2a2855d49a315c4c32cd522e868d4bc9274906180aa5dd6dfeb3332fcd4728a5f605a837eb189985a98a20667157030980249dd9b210ba66567ae447213dbc4f3110c3722f8046b075c"}, 0x6}) 5m8.521800619s ago: executing program 4 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x101042, 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 5m8.310435337s ago: executing program 5 (id=974): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x3, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x8, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m7.749846223s ago: executing program 33 (id=974): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x5, 0x6}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x1ff, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x7e7, 0xb, 0x4, 0x9, 0x8, 0x3, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x8, 0x1c, 0x120000, 0x80000000, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x5, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m7.712257572s ago: executing program 4 (id=978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) 5m7.418895638s ago: executing program 4 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) umount2(0x0, 0xa) 5m7.168478474s ago: executing program 4 (id=984): r0 = fsopen(&(0x7f0000000280)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x86) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 5m6.678971514s ago: executing program 4 (id=987): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") setuid(0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000254c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000a0}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x0) 5m6.077841609s ago: executing program 34 (id=987): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") setuid(0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000254c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000a0}}, {{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x2, 0x0) 4m54.986535815s ago: executing program 3 (id=1038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x71bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 4m53.106875518s ago: executing program 3 (id=1047): syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r0 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x2, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000280)={0xa, {"8d0000f692eec800", "000900000000000200"}, 0x7, 0x4}) 4m52.897432125s ago: executing program 3 (id=1049): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="05"], 0x18}}, 0x8804) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m50.018960573s ago: executing program 3 (id=1059): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001400)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@utf8}, {@utf8}, {@uni_xlateno}, {@fat=@flush}, {@rodir}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@fat=@sys_immutable}, {@shortname_winnt}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@uni_xlateno}]}, 0x1, 0x28e, &(0x7f0000001140)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 4m49.483006583s ago: executing program 3 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x201, 0x34343459, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x3}, {0xffffffff, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 4m47.710035652s ago: executing program 3 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x101042, 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 4m47.194673188s ago: executing program 35 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x101042, 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 2m7.364263512s ago: executing program 7 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3808}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40084) 2m6.594231805s ago: executing program 7 (id=2109): sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="0100000000000000000035000000080003"], 0x44}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200"}) 2m6.388433601s ago: executing program 7 (id=2113): mount(0x0, &(0x7f00000000c0)='./proc\x00', 0x0, 0x108010, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa26}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xc6fffffd) io_setup(0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) 2m5.345617326s ago: executing program 7 (id=2122): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x4000000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x100) 2m4.894769977s ago: executing program 7 (id=2127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xc, 0xffff}, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m2.104640515s ago: executing program 7 (id=2154): ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000001140)={0x16, &(0x7f0000000340)=[{0x14, '\x00', @data=0x80, 0xc}]}) 2m1.497408912s ago: executing program 36 (id=2154): ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000001140)={0x16, &(0x7f0000000340)=[{0x14, '\x00', @data=0x80, 0xc}]}) 1m59.766485231s ago: executing program 0 (id=2179): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000400)=@ethtool_rxfh_indir={0x0, 0x5, [0x6, 0x7, 0x6, 0x9, 0x7]}}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setns(0xc9, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = socket(0x2a, 0x2, 0x80000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="05002cbd"], 0x38}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f40600", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r6, @ANYBLOB="d506330080000000ffff"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$PPPOEIOCDFWD(r3, 0x541b, 0xf0ff1f00000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x8, 0x0, &(0x7f0000000400)) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000314010000000000000000002500020073797a5f6465766963655f6e616d655f33325f63686172735f31323334353637000000000800410073697700070033006c6f"], 0x48}}, 0x0) 1m59.553978639s ago: executing program 0 (id=2181): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x6e2a}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe0) 1m59.37295161s ago: executing program 0 (id=2182): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24048455) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x20}}, 0x80) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0xc000) 1m59.23910556s ago: executing program 0 (id=2184): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x22500, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(0x0, 0x0) 1m58.138020248s ago: executing program 0 (id=2189): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000880), 0x0, 0x47b, &(0x7f0000000bc0)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBgxpNPGA00QMea1sIYaGG1kQIkWoMXkwMUc/Go4n/gN68GPVkYuJJ74aEKBfQU83MzsDuutsutN1S9vNJZnlv5k3fe/vmzbyZN0sAPWso+0gitkbE7xExUIs2Jhiq/XP18tnJfy6fnUxiYeGNv5I83ZXLZyfLpOV+W4rIcBqRfpQUmTSaPX3m+ES1On2qiI/OnXhndPb0maeOnZg4On10+uT4wYMH9o89+8z404uUfmNEPN9RPbN6Xdn9/syeXa+8deHVycMX3v7pm6y8W4vt9fVYKUNZxf9eyNWt/iz7eHSlM1tj2+rCSV+bRN8e+K3apfLQmUpEZM3Vn/f/gajE9cYbiJc/XNPCAasquzZtbL95fgG4jSXRYbLoLCGwXpQX+uz+t1y6NPS4JVx6oXYDlNX7arHUtvRFWqTpb7q/XUlDEXF4/t8vsyVW6TkEAEC9Tya/OBRPthr/pXFPXbrtxRzKYETcGRE7IuKuiNgZEXdH5GnvjYj72ua0oeXa5qmhhvFPPqGUXlxWBZeQjf+eK+a2Gsd/5eivMlgpYtvy+vcnR45Vp/cV38lw9G/M4mOL5PH9S79+2m5b/fgvW7L8y7FgUY6LfU0P6KYm5ibyQekKuPRBxO6+VvVPrs0EZM2wKyJ2d/g3i/22l/Fjj3+9p13apeu/dEbLsfBVxGO19p+PpvqXksXnJ0fviOr0vtHyqPi/n385/3q7/JdV/xWQtf/mxuO/OclgUj9fO3vjeZz/4+O29zQ3e/xvSN7M26U8q7w3MTd3aixiQ3IojzesH7++bxkv02f1H97buv/vqAU2ZR/3R0R2ED8QEQ9GxENF2R+OiEciYu8i9f/xxfbbboX2n2p5/rt2/De1/40HKsd/+K5d/p21/4E8NFysyc9/S+i0gMv57gAAAGC9SPN34JN05Fo4TUdGau/w74zNaXVmdu6JIzPvnpyqvSs/GP1p+aRroO556FgyX/zFWny8eFZcbt9fPDf+vLIpj49MzlSn1rju0Ou2tOn/mT8ra106YNW1mkcbbzlf2/BDNuA20Nz/08boude6WRigq1bgPRpgnVqi/6fdKgfQfa7/0Lta9f9zTXFzAXB7cv2H3qX/Q+/S/6F36f/Qk5bzu/5eDmSnzFugGNWBoh1vdPfy7c6bzz3Sta67wGoEWv8/TQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvVfwEAAP//Kr3kAA==") mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) 1m57.41250244s ago: executing program 0 (id=2195): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e040810"], 0x7) 1m57.018462829s ago: executing program 37 (id=2195): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e040810"], 0x7) 12.312500339s ago: executing program 9 (id=2953): unshare(0x20040600) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000001, 0x4, 0x0, 0x800000}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x18, 0x5a, 0xb774a01f0b333ae3, 0xfffffffc, 0x80, {0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x14, r3, 0xb1b, 0x70bd2a, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4081) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x7}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4}, 0x94) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="02098e05020000002bbd7000fedbdf25c4b0bdee4dd9e3f8611f1e00dc49325d4567df9d47247407fc7d8f2b1d4b3e6eaacef934a6179f5a3cb387ce2f3a52c49c77e9c1d00dfe34256288006352e975626e4c8a77876c62e86dd2215e3c1fe15d01c40605a5690811d05cf31e30a64bb78b2b981524189156ddd837ff740d03c443750108c3821187e7e21dd2910b56068dca25b797c28084b56272297957196c711e110ef906dbd332af20eb0105e9048c7c0f769a76d4d43fa7691689049fd98d699e6480b9c9c926cfd589c73b59783586b2d0ef783d0ef7099500127488aa3aa2797f173eed4d960a1456058b3b90e12b23cd6988916938d446ec49cb5e95424f59cafe8a3f9ed6b282c012020e42d28c085c9c6b7c7b35f3efeda93625d307d03b56e6f6035a99e3e82a7b8b0e"], 0x10}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x164}}, 0x240448c8) socket$can_j1939(0x1d, 0x2, 0x7) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x1125, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x17, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0x91}, @ldst={0x2, 0x2, 0x3, 0x7, 0x6, 0xffffffffffffffff, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000cc0), &(0x7f0000000d00)=[{0x1, 0x2, 0xc, 0xc}, {0x2, 0x4, 0xd, 0xb}], 0x10, 0x8000}, 0x94) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'ipvlan0\x00', 0x0}) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x0, r10}, 0x14) 12.106542406s ago: executing program 8 (id=2957): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 11.991471761s ago: executing program 8 (id=2958): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3e) 11.893766114s ago: executing program 9 (id=2959): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dbdc03, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0x1, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x8, 0x6, 0x0, 0x1, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004865}, 0x4000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f00000000c0)=']', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x15, r4, 0x1, 0x2}, 0x14) 10.922365452s ago: executing program 2 (id=2965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tcx}, 0x1c) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r3, 0xc138fd06, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20) io_setup(0x2278, &(0x7f0000000180)) 9.64413977s ago: executing program 2 (id=2968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x2, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x19, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 3.030022738s ago: executing program 2 (id=2970): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) close(0x3) 2.827545353s ago: executing program 8 (id=2972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff0806ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 2.262835001s ago: executing program 9 (id=2974): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 2.261905031s ago: executing program 1 (id=2984): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b70000000000000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0x22, 0x0, &(0x7f0000000800)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.252449553s ago: executing program 8 (id=2975): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="04004600080026006c090000050034000000000004000801"], 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x20004080) 2.115174434s ago: executing program 6 (id=2976): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0xa, 0x1, 0xc000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf272a3ac6076c7940f905536167d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fef8b213b26794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9a73bddb1d40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555ca96ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11db3dd6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25fd5872172ed2f5651d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27e2379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205342400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834813b34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x4, 0x0, 0x7fffffff, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r2, r3, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x1}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 2.035030982s ago: executing program 1 (id=2977): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) mount(&(0x7f00000001c0)=@filename='./file0\x00', 0x0, &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) 2.013970526s ago: executing program 2 (id=2978): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@tcx}, 0x1c) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(r3, 0xc138fd06, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20) io_setup(0x2278, &(0x7f0000000180)) 1.918720518s ago: executing program 6 (id=2979): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 1.870942359s ago: executing program 8 (id=2980): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$inet(0x2, 0x3, 0x8d) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) 1.543052603s ago: executing program 1 (id=2981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.252504538s ago: executing program 6 (id=2982): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000020)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x11) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl(r2, 0x8914, &(0x7f0000000100)='can0\x00\x00\x00\x00\x00') ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000230)=0x4) 1.159166939s ago: executing program 1 (id=2983): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x20048804) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) 1.031364138s ago: executing program 9 (id=2985): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010003704000080000000000000000000", @ANYRES32=r1, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @broadcast}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x38}, 0x200000e0) 892.648459ms ago: executing program 2 (id=2986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff0806ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x80) 809.853617ms ago: executing program 6 (id=2987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020059", 0x5}], 0x1}, 0x80) 781.926334ms ago: executing program 1 (id=2988): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r2, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f00000001c0)={@any, 0xff, 0x5, 0x3, 0x800, 0x5, "8f1dc444b2a813bcfd8e57d84dc7115eec5fbeda733e52756349fd8d2c4fda878f0e54599180e4543cba2ef65d539ad3cd097ab0f432e66f1466ba52b445f33927335186bbab00507d36e8b17e8b3af68ca2e0d945c90c64f86ad7be6544128410589a95916675cc8006a544210f380098271a4f83f018722836306112e8b25b"}) 640.876095ms ago: executing program 9 (id=2989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) close(0x3) 363.186838ms ago: executing program 1 (id=2990): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f00000010c0)=ANY=[@ANYBLOB="180200000a0000010000000000000000180200000a0000020000000000000000bfa200000000000007020000c0ffffffb703000040000000b70400009a000000850000004500000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000280)={r6, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000700)={r2, r2, 0xa, 0x1, &(0x7f0000000500)='\r', 0x7, 0x3, 0x7c0, 0x3, 0x8, 0x1, 0x1, 'syz0\x00'}) 290.840184ms ago: executing program 2 (id=2991): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x3, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0xa, 0x1, 0xc000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x4, 0x0, 0x7fffffff, 0xfffffffd, 0x6, {0x2, 0x8000000000000000, 0x8, 0x100000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r2, r3, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000340)=""/142, 0x1a, 0x8e, 0x1}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 256.470432ms ago: executing program 6 (id=2992): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) mount(&(0x7f00000001c0)=@filename='./file0\x00', 0x0, &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) 164.685633ms ago: executing program 9 (id=2993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0xb, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x20) 837.219µs ago: executing program 8 (id=2994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 6 (id=2995): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000000)=0x78, 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xf7, 0x2, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x0, 0x401, 0xff80}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000001280)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x9, 0x5, {{0x25, 0x4, 0x1, 0x3, 0x94, 0x68, 0x0, 0xdb, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x31, 0x2, [{0x5, 0xa, "34f6aa90279d1937"}, {0x1, 0x4, 'F#'}, {0x0, 0x8, "01b116d4a388"}, {0x7, 0x8, "f8d69cd09d70"}, {0x0, 0xd, "9e63d0952696e72604127d"}]}, @end, @timestamp_addr={0x44, 0x3c, 0xc0, 0x1, 0x9, [{@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@local, 0x3a}, {@multicast2, 0x2}, {@multicast1, 0x7ff}, {@broadcast}, {@multicast2, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xfa, 0x3, 0xb, [{@empty}]}]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x224, r7, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x84, 0x5, "ceb3c6c47781a92afd2a77e3c4259d3b40cd1100f953f2100466afd3a711e56a8caac309fe14776ebe84c288a49df7862e407a2f98c1b23f423396f135bd8037cf00676c8ec1e5039416ffdfde1ac4bcef4ed59341c8e9f61e225ca2ea9f20ca4375c64efa96f3abcc52b0b61a98dbcf9c3661b38fccfca1c38c27d0ae1d7ed0"}]}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xb7, 0x3, "6df26d498d42e5f179e0c5fa68a8b0d5b350d09fd9eb336709c4b19b3bc30d9110d3aa4aee2443bdcfac0d7dfe02cf16db61e141e255cd5b62d18be50df726a90255aebb36f4cf42df8acfa9c4ec27f00ce72093ba2e088922d8c7c6bd7384d1a494756e02fbbc248b0e195de716e568811ffddcc228504d6fe1a7677568757933f30fe737c324b33715bde73a7881431265f9025ec32871dbddd65914acb43a37f59d1d68350de597515883bc1d6cc1cf2d5a"}, @ETHTOOL_A_WOL_MODES={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2a, 0x5, "e0faffea0b44bcee0eb4d3bc7639b099599df943214321044b433dab3fa74424e6556d395283"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x317}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x200000c4}, 0xc000) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f0000000100)=0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@RTM_GETNSID={0x1c, 0x5a, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r14}]}, 0x1c}}, 0x8000) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) kernel console output (not intermixed with test programs): blkcg_maybe_throttle_current+0x1a0/0xa80 [ 447.069400][T10175] __se_sys_futex+0x381/0x410 [ 447.074302][T10175] ? __x64_sys_futex+0xf0/0xf0 [ 447.079116][T10175] ? __x64_sys_futex+0x1d/0xf0 [ 447.083963][T10175] do_syscall_64+0x4c/0xa0 [ 447.088466][T10175] ? clear_bhb_loop+0x60/0xb0 [ 447.093193][T10175] ? clear_bhb_loop+0x60/0xb0 [ 447.097912][T10175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.103854][T10175] RIP: 0033:0x7fe1a319e159 [ 447.108303][T10175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.128110][T10175] RSP: 002b:00007fe1a3fa30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 447.136844][T10175] RAX: ffffffffffffffda RBX: 00007fe1a3425fa8 RCX: 00007fe1a319e159 [ 447.145059][T10175] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe1a3425fac [ 447.153168][T10175] RBP: 00007fe1a3425fa0 R08: 0031b83c50174ff6 R09: 0000000000000000 [ 447.161182][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.169288][T10175] R13: 00007fe1a3426038 R14: 00007ffe3146d490 R15: 00007ffe3146d578 [ 447.177327][T10175] [ 448.058209][T10197] loop6: detected capacity change from 0 to 128 [ 448.316696][T10205] loop7: detected capacity change from 0 to 512 [ 448.325949][T10204] FAULT_INJECTION: forcing a failure. [ 448.325949][T10204] name failslab, interval 1, probability 0, space 0, times 0 [ 448.404236][T10204] CPU: 1 PID: 10204 Comm: syz.0.1805 Not tainted syzkaller #0 [ 448.411877][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.422068][T10204] Call Trace: [ 448.425386][T10204] [ 448.428361][T10204] dump_stack_lvl+0x188/0x24e [ 448.433094][T10204] ? show_regs_print_info+0x12/0x12 [ 448.438425][T10204] ? load_image+0x410/0x410 [ 448.442992][T10204] ? __lock_acquire+0x7c40/0x7c40 [ 448.448074][T10204] should_fail_ex+0x390/0x4c0 [ 448.452809][T10204] should_failslab+0x5/0x20 [ 448.457522][T10204] slab_pre_alloc_hook+0x59/0x300 [ 448.462588][T10204] kmem_cache_alloc_lru+0x49/0x2e0 [ 448.467734][T10204] ? sock_alloc_inode+0x24/0xc0 [ 448.472609][T10204] sock_alloc_inode+0x24/0xc0 [ 448.477301][T10204] ? sockfs_init_fs_context+0xa0/0xa0 [ 448.482689][T10204] new_inode_pseudo+0x5f/0x1c0 [ 448.487467][T10204] __sock_create+0x129/0x940 [ 448.492071][T10204] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 448.498364][T10204] __sys_socket+0xc4/0x190 [ 448.502805][T10204] __x64_sys_socket+0x76/0x80 [ 448.507509][T10204] do_syscall_64+0x4c/0xa0 [ 448.512035][T10204] ? clear_bhb_loop+0x60/0xb0 [ 448.516727][T10204] ? clear_bhb_loop+0x60/0xb0 [ 448.521443][T10204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.527358][T10204] RIP: 0033:0x7fc23759e159 [ 448.531781][T10204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.551486][T10204] RSP: 002b:00007fc2383ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 448.559915][T10204] RAX: ffffffffffffffda RBX: 00007fc237825fa0 RCX: 00007fc23759e159 [ 448.567901][T10204] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 448.575880][T10204] RBP: 00007fc23763506b R08: 0000000000000000 R09: 0000000000000000 [ 448.583857][T10204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.591839][T10204] R13: 00007fc237826038 R14: 00007fc237825fa0 R15: 00007ffc924beff8 [ 448.599829][T10204] [ 448.610961][T10205] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.1804: missing EA_INODE flag [ 448.654407][T10204] socket: no more sockets [ 448.684364][T10205] EXT4-fs (loop7): Remounting filesystem read-only [ 448.691050][T10205] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1804: error while reading EA inode 2 err=-117 [ 448.784155][T10205] EXT4-fs (loop7): Remounting filesystem read-only [ 448.791077][T10205] EXT4-fs (loop7): 1 orphan inode deleted [ 448.797165][T10205] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 448.904321][T10205] EXT4-fs error (device loop7): ext4_empty_dir:3138: inode #2: comm syz.7.1804: invalid size [ 448.974996][T10230] loop8: detected capacity change from 0 to 512 [ 448.989965][T10205] EXT4-fs (loop7): Remounting filesystem read-only [ 449.020573][T10230] EXT4-fs: Ignoring removed nobh option [ 449.046605][T10235] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 449.078277][T10230] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 449.117205][T10230] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.1810: attempt to clear invalid blocks 1 len 1 [ 449.154526][ T7364] EXT4-fs (loop7): unmounting filesystem. [ 449.217211][T10230] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 449.274280][T10230] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1810: invalid indirect mapped block 1819239214 (level 0) [ 449.344811][T10230] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1810: invalid indirect mapped block 1819239214 (level 1) [ 449.410679][T10230] EXT4-fs (loop8): 1 truncate cleaned up [ 449.453984][T10230] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 449.568966][T10245] binder: 10244:10245 unknown command 0 [ 449.607464][T10245] binder: 10244:10245 ioctl c0306201 200000000080 returned -22 [ 449.857854][ T7703] EXT4-fs (loop8): unmounting filesystem. [ 450.065781][T10256] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 450.097082][T10258] loop0: detected capacity change from 0 to 512 [ 450.247193][T10258] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 450.312189][T10258] ext4 filesystem being mounted at /372/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.333411][T10266] FAULT_INJECTION: forcing a failure. [ 450.333411][T10266] name failslab, interval 1, probability 0, space 0, times 0 [ 450.413009][T10266] CPU: 0 PID: 10266 Comm: syz.6.1821 Not tainted syzkaller #0 [ 450.420597][T10266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 450.430785][T10266] Call Trace: [ 450.434140][T10266] [ 450.437102][T10266] dump_stack_lvl+0x188/0x24e [ 450.441832][T10266] ? show_regs_print_info+0x12/0x12 [ 450.447082][T10266] ? load_image+0x410/0x410 [ 450.451726][T10266] ? __lock_acquire+0x7c40/0x7c40 [ 450.456807][T10266] should_fail_ex+0x390/0x4c0 [ 450.461559][T10266] should_failslab+0x5/0x20 [ 450.466105][T10266] slab_pre_alloc_hook+0x59/0x300 [ 450.471182][T10266] kmem_cache_alloc_lru+0x49/0x2e0 [ 450.476337][T10266] ? sock_alloc_inode+0x24/0xc0 [ 450.481244][T10266] sock_alloc_inode+0x24/0xc0 [ 450.485962][T10266] ? sockfs_init_fs_context+0xa0/0xa0 [ 450.491370][T10266] new_inode_pseudo+0x5f/0x1c0 [ 450.496192][T10266] __sock_create+0x129/0x940 [ 450.500822][T10266] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 450.506849][T10266] __sys_socket+0xc4/0x190 [ 450.511312][T10266] __x64_sys_socket+0x76/0x80 [ 450.516034][T10266] do_syscall_64+0x4c/0xa0 [ 450.520491][T10266] ? clear_bhb_loop+0x60/0xb0 [ 450.525196][T10266] ? clear_bhb_loop+0x60/0xb0 [ 450.529908][T10266] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.535838][T10266] RIP: 0033:0x7f3db519e159 [ 450.540288][T10266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.559934][T10266] RSP: 002b:00007f3db6071028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 450.568398][T10266] RAX: ffffffffffffffda RBX: 00007f3db5425fa0 RCX: 00007f3db519e159 [ 450.576441][T10266] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 450.584444][T10266] RBP: 00007f3db523506b R08: 0000000000000000 R09: 0000000000000000 [ 450.592452][T10266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.600455][T10266] R13: 00007f3db5426038 R14: 00007f3db5425fa0 R15: 00007ffe38c7be78 [ 450.608483][T10266] [ 450.967437][T10266] socket: no more sockets [ 451.133835][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 451.503822][T10284] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 451.729605][T10294] usb usb7: check_ctrlrecip: process 10294 (syz.0.1824) requesting ep 01 but needs 81 [ 451.760081][T10294] usb usb7: usbfs: process 10294 (syz.0.1824) did not claim interface 0 before use [ 452.273121][T10303] input: syz1 as /devices/virtual/input/input16 [ 452.401007][T10305] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.1832'. [ 453.083812][T10315] FAULT_INJECTION: forcing a failure. [ 453.083812][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 453.125246][T10315] CPU: 1 PID: 10315 Comm: syz.6.1835 Not tainted syzkaller #0 [ 453.132792][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.143154][T10315] Call Trace: [ 453.146470][T10315] [ 453.149434][T10315] dump_stack_lvl+0x188/0x24e [ 453.154306][T10315] ? show_regs_print_info+0x12/0x12 [ 453.159541][T10315] ? load_image+0x410/0x410 [ 453.164085][T10315] ? __lock_acquire+0x7c40/0x7c40 [ 453.169153][T10315] should_fail_ex+0x390/0x4c0 [ 453.173868][T10315] should_failslab+0x5/0x20 [ 453.178409][T10315] slab_pre_alloc_hook+0x59/0x300 [ 453.183593][T10315] kmem_cache_alloc_lru+0x49/0x2e0 [ 453.188753][T10315] ? sock_alloc_inode+0x24/0xc0 [ 453.193653][T10315] sock_alloc_inode+0x24/0xc0 [ 453.198366][T10315] ? sockfs_init_fs_context+0xa0/0xa0 [ 453.203792][T10315] new_inode_pseudo+0x5f/0x1c0 [ 453.208618][T10315] __sock_create+0x129/0x940 [ 453.213345][T10315] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 453.219383][T10315] __sys_socket+0xc4/0x190 [ 453.223961][T10315] __x64_sys_socket+0x76/0x80 [ 453.228695][T10315] do_syscall_64+0x4c/0xa0 [ 453.233159][T10315] ? clear_bhb_loop+0x60/0xb0 [ 453.237881][T10315] ? clear_bhb_loop+0x60/0xb0 [ 453.242606][T10315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 453.248726][T10315] RIP: 0033:0x7f3db519e159 [ 453.253198][T10315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.273243][T10315] RSP: 002b:00007f3db6071028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 453.281794][T10315] RAX: ffffffffffffffda RBX: 00007f3db5425fa0 RCX: 00007f3db519e159 [ 453.289815][T10315] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 453.297831][T10315] RBP: 00007f3db523506b R08: 0000000000000000 R09: 0000000000000000 [ 453.305859][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.313963][T10315] R13: 00007f3db5426038 R14: 00007f3db5425fa0 R15: 00007ffe38c7be78 [ 453.321996][T10315] [ 453.335122][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 453.397143][T10315] socket: no more sockets [ 454.144827][T10335] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 454.455582][T10337] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 455.831416][T10369] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.840745][T10369] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.019346][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 457.409164][T10397] binder: 10394:10397 unknown command 0 [ 457.415923][T10397] binder: 10394:10397 ioctl c0306201 200000000080 returned -22 [ 457.670473][T10402] loop6: detected capacity change from 0 to 512 [ 457.797149][T10402] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 457.814663][T10402] ext4 filesystem being mounted at /169/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.124212][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 458.387609][T10426] FAULT_INJECTION: forcing a failure. [ 458.387609][T10426] name failslab, interval 1, probability 0, space 0, times 0 [ 458.444078][T10426] CPU: 0 PID: 10426 Comm: syz.6.1866 Not tainted syzkaller #0 [ 458.451632][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.461911][T10426] Call Trace: [ 458.465230][T10426] [ 458.468197][T10426] dump_stack_lvl+0x188/0x24e [ 458.472929][T10426] ? show_regs_print_info+0x12/0x12 [ 458.478179][T10426] ? load_image+0x410/0x410 [ 458.482914][T10426] ? __lock_acquire+0x7c40/0x7c40 [ 458.488003][T10426] should_fail_ex+0x390/0x4c0 [ 458.492752][T10426] should_failslab+0x5/0x20 [ 458.497307][T10426] slab_pre_alloc_hook+0x59/0x300 [ 458.502389][T10426] kmem_cache_alloc_lru+0x49/0x2e0 [ 458.507636][T10426] ? sock_alloc_inode+0x24/0xc0 [ 458.512547][T10426] sock_alloc_inode+0x24/0xc0 [ 458.517272][T10426] ? sockfs_init_fs_context+0xa0/0xa0 [ 458.522703][T10426] new_inode_pseudo+0x5f/0x1c0 [ 458.527525][T10426] __sock_create+0x129/0x940 [ 458.532176][T10426] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 458.538220][T10426] __sys_socket+0xc4/0x190 [ 458.542704][T10426] __x64_sys_socket+0x76/0x80 [ 458.547519][T10426] do_syscall_64+0x4c/0xa0 [ 458.551981][T10426] ? clear_bhb_loop+0x60/0xb0 [ 458.556698][T10426] ? clear_bhb_loop+0x60/0xb0 [ 458.561445][T10426] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.567484][T10426] RIP: 0033:0x7f3db519e159 [ 458.571939][T10426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.591678][T10426] RSP: 002b:00007f3db6071028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 458.600179][T10426] RAX: ffffffffffffffda RBX: 00007f3db5425fa0 RCX: 00007f3db519e159 [ 458.608287][T10426] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 458.616394][T10426] RBP: 00007f3db523506b R08: 0000000000000000 R09: 0000000000000000 [ 458.624422][T10426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.632539][T10426] R13: 00007f3db5426038 R14: 00007f3db5425fa0 R15: 00007ffe38c7be78 [ 458.640658][T10426] [ 458.694785][T10426] socket: no more sockets [ 458.867662][T10439] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 458.922495][T10437] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 459.034077][T10447] binder: 10440:10447 unknown command 0 [ 459.094025][T10447] binder: 10440:10447 ioctl c0306201 200000000080 returned -22 [ 459.374120][T10452] input: syz1 as /devices/virtual/input/input17 [ 460.923727][T10467] team0 (unregistering): Port device team_slave_0 removed [ 460.990304][T10467] team0 (unregistering): Port device team_slave_1 removed [ 461.471665][T10499] loop6: detected capacity change from 0 to 512 [ 461.479671][T10497] input: syz1 as /devices/virtual/input/input18 [ 461.667135][T10499] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 461.814251][T10499] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.469113][T10516] overlayfs: missing 'lowerdir' [ 462.707489][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 462.770639][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 462.798258][T10519] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.807453][T10519] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.816450][T10519] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.825244][T10519] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.851553][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 462.860291][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'. [ 462.920495][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 463.023205][T10526] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 465.982195][T10588] FAULT_INJECTION: forcing a failure. [ 465.982195][T10588] name failslab, interval 1, probability 0, space 0, times 0 [ 466.075333][T10588] CPU: 1 PID: 10588 Comm: syz.7.1912 Not tainted syzkaller #0 [ 466.082958][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 466.093042][T10588] Call Trace: [ 466.096365][T10588] [ 466.099403][T10588] dump_stack_lvl+0x188/0x24e [ 466.104105][T10588] ? show_regs_print_info+0x12/0x12 [ 466.109495][T10588] ? load_image+0x410/0x410 [ 466.114019][T10588] ? __lock_acquire+0x7c40/0x7c40 [ 466.119150][T10588] should_fail_ex+0x390/0x4c0 [ 466.123854][T10588] should_failslab+0x5/0x20 [ 466.128459][T10588] slab_pre_alloc_hook+0x59/0x300 [ 466.133511][T10588] kmem_cache_alloc_lru+0x49/0x2e0 [ 466.138636][T10588] ? sock_alloc_inode+0x24/0xc0 [ 466.143508][T10588] sock_alloc_inode+0x24/0xc0 [ 466.148198][T10588] ? sockfs_init_fs_context+0xa0/0xa0 [ 466.153580][T10588] new_inode_pseudo+0x5f/0x1c0 [ 466.158365][T10588] __sock_create+0x129/0x940 [ 466.162974][T10588] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 466.169072][T10588] __sys_socket+0xc4/0x190 [ 466.173626][T10588] __x64_sys_socket+0x76/0x80 [ 466.178427][T10588] do_syscall_64+0x4c/0xa0 [ 466.183043][T10588] ? clear_bhb_loop+0x60/0xb0 [ 466.187763][T10588] ? clear_bhb_loop+0x60/0xb0 [ 466.192462][T10588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 466.198395][T10588] RIP: 0033:0x7fe1a319e159 [ 466.202830][T10588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.222545][T10588] RSP: 002b:00007fe1a3fa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 466.231231][T10588] RAX: ffffffffffffffda RBX: 00007fe1a3425fa0 RCX: 00007fe1a319e159 [ 466.239395][T10588] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 466.247382][T10588] RBP: 00007fe1a323506b R08: 0000000000000000 R09: 0000000000000000 [ 466.255883][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.263867][T10588] R13: 00007fe1a3426038 R14: 00007fe1a3425fa0 R15: 00007ffe3146d578 [ 466.272021][T10588] [ 466.514724][T10588] socket: no more sockets [ 466.689437][T10603] loop0: detected capacity change from 0 to 512 [ 466.741385][T10603] EXT4-fs: Ignoring removed oldalloc option [ 466.771465][T10603] EXT4-fs: Ignoring removed i_version option [ 466.805918][T10603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.871746][T10603] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1916: invalid block [ 466.985510][T10603] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1916: invalid indirect mapped block 4294967295 (level 1) [ 467.024612][T10603] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1916: invalid indirect mapped block 4294967295 (level 1) [ 467.081748][T10603] EXT4-fs (loop0): 2 truncates cleaned up [ 467.102358][T10603] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 467.184134][T10603] EXT4-fs (loop0): shut down requested (0) [ 467.269689][T10620] loop6: detected capacity change from 0 to 512 [ 467.322680][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 467.350364][T10620] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1919: missing EA_INODE flag [ 467.465313][T10620] EXT4-fs (loop6): Remounting filesystem read-only [ 467.472326][T10620] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1919: error while reading EA inode 2 err=-117 [ 467.495942][T10620] EXT4-fs (loop6): Remounting filesystem read-only [ 467.504247][T10620] EXT4-fs (loop6): 1 orphan inode deleted [ 467.514126][T10620] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 467.788706][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 468.551322][T10649] device syzkaller0 entered promiscuous mode [ 469.351527][T10660] FAULT_INJECTION: forcing a failure. [ 469.351527][T10660] name failslab, interval 1, probability 0, space 0, times 0 [ 469.451236][T10660] CPU: 0 PID: 10660 Comm: syz.8.1927 Not tainted syzkaller #0 [ 469.458883][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.469103][T10660] Call Trace: [ 469.472443][T10660] [ 469.475420][T10660] dump_stack_lvl+0x188/0x24e [ 469.480332][T10660] ? show_regs_print_info+0x12/0x12 [ 469.486022][T10660] ? load_image+0x410/0x410 [ 469.490838][T10660] ? __might_sleep+0xd0/0xd0 [ 469.495754][T10660] ? __lock_acquire+0x7c40/0x7c40 [ 469.500947][T10660] should_fail_ex+0x390/0x4c0 [ 469.505791][T10660] should_failslab+0x5/0x20 [ 469.510352][T10660] slab_pre_alloc_hook+0x59/0x300 [ 469.515606][T10660] ? tomoyo_encode+0x28a/0x550 [ 469.520592][T10660] __kmem_cache_alloc_node+0x4f/0x270 [ 469.522863][T10666] siw: device registration error -23 [ 469.526178][T10660] ? tomoyo_encode+0x28a/0x550 [ 469.526229][T10660] __kmalloc+0xa3/0x240 [ 469.539215][T10668] FAULT_INJECTION: forcing a failure. [ 469.539215][T10668] name failslab, interval 1, probability 0, space 0, times 0 [ 469.540569][T10660] tomoyo_encode+0x28a/0x550 [ 469.558025][T10660] tomoyo_realpath_from_path+0x578/0x5c0 [ 469.563714][T10660] ? kmem_cache_free+0xf7/0x2a0 [ 469.568622][T10660] tomoyo_mount_permission+0x8fb/0x9b0 [ 469.574129][T10660] ? tomoyo_mount_permission+0x2a1/0x9b0 [ 469.579828][T10660] ? kmem_cache_free+0xf7/0x2a0 [ 469.584843][T10660] ? tomoyo_get_name+0x520/0x520 [ 469.589961][T10660] ? lockdep_hardirqs_on+0x94/0x140 [ 469.595222][T10660] security_sb_mount+0x83/0xb0 [ 469.600042][T10660] path_mount+0xb8/0xfb0 [ 469.604341][T10660] __se_sys_mount+0x2e3/0x3d0 [ 469.609069][T10660] ? __x64_sys_mount+0xc0/0xc0 [ 469.613889][T10660] ? lockdep_hardirqs_on+0x94/0x140 [ 469.619157][T10660] ? __x64_sys_mount+0x1c/0xc0 [ 469.623986][T10660] do_syscall_64+0x4c/0xa0 [ 469.628449][T10660] ? clear_bhb_loop+0x60/0xb0 [ 469.633175][T10660] ? clear_bhb_loop+0x60/0xb0 [ 469.637911][T10660] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.643879][T10660] RIP: 0033:0x7f621f39e159 [ 469.648340][T10660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.668084][T10660] RSP: 002b:00007f62201b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 469.676675][T10660] RAX: ffffffffffffffda RBX: 00007f621f625fa0 RCX: 00007f621f39e159 [ 469.684968][T10660] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 00002000000001c0 [ 469.693011][T10660] RBP: 00007f621f43506b R08: 0000000000000000 R09: 0000000000000000 [ 469.701128][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.709144][T10660] R13: 00007f621f626038 R14: 00007f621f625fa0 R15: 00007fffaa5c4448 [ 469.717175][T10660] [ 469.735222][T10668] CPU: 1 PID: 10668 Comm: syz.7.1931 Not tainted syzkaller #0 [ 469.742938][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.753097][T10668] Call Trace: [ 469.756391][T10668] [ 469.759464][T10668] dump_stack_lvl+0x188/0x24e [ 469.764163][T10668] ? show_regs_print_info+0x12/0x12 [ 469.769461][T10668] ? load_image+0x410/0x410 [ 469.773982][T10668] ? __lock_acquire+0x7c40/0x7c40 [ 469.779111][T10668] should_fail_ex+0x390/0x4c0 [ 469.783813][T10668] should_failslab+0x5/0x20 [ 469.788358][T10668] slab_pre_alloc_hook+0x59/0x300 [ 469.793417][T10668] kmem_cache_alloc_lru+0x49/0x2e0 [ 469.798549][T10668] ? sock_alloc_inode+0x24/0xc0 [ 469.803523][T10668] sock_alloc_inode+0x24/0xc0 [ 469.808214][T10668] ? sockfs_init_fs_context+0xa0/0xa0 [ 469.813689][T10668] new_inode_pseudo+0x5f/0x1c0 [ 469.818469][T10668] __sock_create+0x129/0x940 [ 469.823166][T10668] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 469.829282][T10668] __sys_socket+0xc4/0x190 [ 469.833860][T10668] __x64_sys_socket+0x76/0x80 [ 469.838599][T10668] do_syscall_64+0x4c/0xa0 [ 469.843121][T10668] ? clear_bhb_loop+0x60/0xb0 [ 469.847973][T10668] ? clear_bhb_loop+0x60/0xb0 [ 469.852756][T10668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.858665][T10668] RIP: 0033:0x7fe1a319e159 [ 469.863135][T10668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.882751][T10668] RSP: 002b:00007fe1a3fa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 469.891179][T10668] RAX: ffffffffffffffda RBX: 00007fe1a3425fa0 RCX: 00007fe1a319e159 [ 469.899171][T10668] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 469.907159][T10668] RBP: 00007fe1a323506b R08: 0000000000000000 R09: 0000000000000000 [ 469.915142][T10668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.923171][T10668] R13: 00007fe1a3426038 R14: 00007fe1a3425fa0 R15: 00007ffe3146d578 [ 469.931364][T10668] [ 470.080075][T10679] IPv6: ADDRCONF(NETDEV_CHANGE): sl0: link becomes ready [ 470.214427][T10660] ERROR: Out of memory at tomoyo_realpath_from_path. [ 470.453208][T10668] socket: no more sockets [ 471.807865][T10717] loop7: detected capacity change from 0 to 128 [ 471.871795][T10719] device syzkaller0 entered promiscuous mode [ 471.881802][T10717] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 471.904513][T10717] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 472.237243][ T7364] EXT4-fs (loop7): unmounting filesystem. [ 473.941836][T10742] loop8: detected capacity change from 0 to 512 [ 474.073423][T10742] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 474.134997][T10742] ext4 filesystem being mounted at /127/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.334675][T10753] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 474.384076][T10753] overlayfs: failed to set xattr on upper [ 474.392420][ T7703] EXT4-fs (loop8): unmounting filesystem. [ 474.405300][T10753] overlayfs: ...falling back to index=off,metacopy=off. [ 474.412552][T10753] overlayfs: conflicting lowerdir path [ 475.354078][T10770] xt_cgroup: invalid path, errno=-2 [ 476.106040][T10781] device syzkaller0 entered promiscuous mode [ 476.187225][T10786] tipc: Started in network mode [ 476.219794][T10786] tipc: Node identity ac14140f, cluster identity 4711 [ 476.239369][T10786] tipc: New replicast peer: 255.255.255.255 [ 476.299539][T10786] tipc: Enabled bearer , priority 10 [ 477.345695][ T4359] tipc: Node number set to 2886997007 [ 477.491673][T10824] FAULT_INJECTION: forcing a failure. [ 477.491673][T10824] name failslab, interval 1, probability 0, space 0, times 0 [ 477.561427][T10824] CPU: 1 PID: 10824 Comm: syz.6.1962 Not tainted syzkaller #0 [ 477.569062][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.579335][T10824] Call Trace: [ 477.582730][T10824] [ 477.585687][T10824] dump_stack_lvl+0x188/0x24e [ 477.590406][T10824] ? show_regs_print_info+0x12/0x12 [ 477.595647][T10824] ? load_image+0x410/0x410 [ 477.600214][T10824] ? __lock_acquire+0x7c40/0x7c40 [ 477.605289][T10824] should_fail_ex+0x390/0x4c0 [ 477.610010][T10824] should_failslab+0x5/0x20 [ 477.614538][T10824] slab_pre_alloc_hook+0x59/0x300 [ 477.619688][T10824] kmem_cache_alloc_lru+0x49/0x2e0 [ 477.624828][T10824] ? sock_alloc_inode+0x24/0xc0 [ 477.629803][T10824] sock_alloc_inode+0x24/0xc0 [ 477.634520][T10824] ? sockfs_init_fs_context+0xa0/0xa0 [ 477.639950][T10824] new_inode_pseudo+0x5f/0x1c0 [ 477.644760][T10824] __sock_create+0x129/0x940 [ 477.649404][T10824] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 477.655445][T10824] __sys_socket+0xc4/0x190 [ 477.659927][T10824] __x64_sys_socket+0x76/0x80 [ 477.664665][T10824] do_syscall_64+0x4c/0xa0 [ 477.669118][T10824] ? clear_bhb_loop+0x60/0xb0 [ 477.673925][T10824] ? clear_bhb_loop+0x60/0xb0 [ 477.678643][T10824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.684590][T10824] RIP: 0033:0x7f3db519e159 [ 477.689062][T10824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.708977][T10824] RSP: 002b:00007f3db6071028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 477.717445][T10824] RAX: ffffffffffffffda RBX: 00007f3db5425fa0 RCX: 00007f3db519e159 [ 477.725469][T10824] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 477.733490][T10824] RBP: 00007f3db523506b R08: 0000000000000000 R09: 0000000000000000 [ 477.741597][T10824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.749616][T10824] R13: 00007f3db5426038 R14: 00007f3db5425fa0 R15: 00007ffe38c7be78 [ 477.757652][T10824] [ 478.084920][T10824] socket: no more sockets [ 478.282756][T10847] loop0: detected capacity change from 0 to 128 [ 478.341227][T10846] xt_cgroup: invalid path, errno=-2 [ 478.691409][T10855] loop7: detected capacity change from 0 to 256 [ 478.695088][T10857] FAULT_INJECTION: forcing a failure. [ 478.695088][T10857] name failslab, interval 1, probability 0, space 0, times 0 [ 478.701712][T10854] device syzkaller0 entered promiscuous mode [ 478.713659][T10857] CPU: 1 PID: 10857 Comm: syz.8.1974 Not tainted syzkaller #0 [ 478.724416][T10857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 478.734508][T10857] Call Trace: [ 478.737811][T10857] [ 478.740759][T10857] dump_stack_lvl+0x188/0x24e [ 478.745465][T10857] ? show_regs_print_info+0x12/0x12 [ 478.750776][T10857] ? load_image+0x410/0x410 [ 478.755307][T10857] ? __might_sleep+0xd0/0xd0 [ 478.760064][T10857] ? __lock_acquire+0x7c40/0x7c40 [ 478.765115][T10857] should_fail_ex+0x390/0x4c0 [ 478.769902][T10857] should_failslab+0x5/0x20 [ 478.774509][T10857] slab_pre_alloc_hook+0x59/0x300 [ 478.779639][T10857] ? vfs_write+0x777/0x9a0 [ 478.784167][T10857] kmem_cache_alloc+0x56/0x2f0 [ 478.788965][T10857] ? getname_flags+0xb7/0x500 [ 478.793680][T10857] getname_flags+0xb7/0x500 [ 478.798212][T10857] do_sys_openat2+0xdd/0x4f0 [ 478.802831][T10857] ? do_sys_open+0xe0/0xe0 [ 478.807271][T10857] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 478.813282][T10857] ? lock_chain_count+0x20/0x20 [ 478.818158][T10857] __x64_sys_openat+0x135/0x160 [ 478.823028][T10857] do_syscall_64+0x4c/0xa0 [ 478.827458][T10857] ? clear_bhb_loop+0x60/0xb0 [ 478.832172][T10857] ? clear_bhb_loop+0x60/0xb0 [ 478.836887][T10857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.842823][T10857] RIP: 0033:0x7f621f39e159 [ 478.847260][T10857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.866897][T10857] RSP: 002b:00007f62201b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 478.875325][T10857] RAX: ffffffffffffffda RBX: 00007f621f625fa0 RCX: 00007f621f39e159 [ 478.883305][T10857] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 478.891287][T10857] RBP: 00007f621f43506b R08: 0000000000000000 R09: 0000000000000000 [ 478.899355][T10857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.907364][T10857] R13: 00007f621f626038 R14: 00007f621f625fa0 R15: 00007fffaa5c4448 [ 478.915381][T10857] [ 478.939679][T10859] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 479.850227][T10875] loop6: detected capacity change from 0 to 512 [ 479.970837][T10875] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 479.978291][T10881] loop0: detected capacity change from 0 to 512 [ 480.004201][T10875] ext4 filesystem being mounted at /190/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.052619][T10881] EXT4-fs: Ignoring removed oldalloc option [ 480.088692][T10881] EXT4-fs: Ignoring removed i_version option [ 480.121512][T10881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 480.211117][T10881] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1979: invalid block [ 480.255822][T10881] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1979: invalid indirect mapped block 4294967295 (level 1) [ 480.272674][T10881] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1979: invalid indirect mapped block 4294967295 (level 1) [ 480.296271][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 480.324425][T10889] FAULT_INJECTION: forcing a failure. [ 480.324425][T10889] name failslab, interval 1, probability 0, space 0, times 0 [ 480.337510][T10889] CPU: 1 PID: 10889 Comm: syz.7.1981 Not tainted syzkaller #0 [ 480.345020][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.355120][T10889] Call Trace: [ 480.358509][T10889] [ 480.361542][T10889] dump_stack_lvl+0x188/0x24e [ 480.366341][T10889] ? show_regs_print_info+0x12/0x12 [ 480.371550][T10889] ? load_image+0x410/0x410 [ 480.376073][T10889] ? __might_sleep+0xd0/0xd0 [ 480.380673][T10889] ? __lock_acquire+0x7c40/0x7c40 [ 480.385717][T10889] should_fail_ex+0x390/0x4c0 [ 480.390424][T10889] should_failslab+0x5/0x20 [ 480.394932][T10889] slab_pre_alloc_hook+0x59/0x300 [ 480.399975][T10889] kmem_cache_alloc+0x56/0x2f0 [ 480.404756][T10889] ? security_inode_alloc+0x30/0x110 [ 480.410056][T10889] security_inode_alloc+0x30/0x110 [ 480.415360][T10889] inode_init_always+0x910/0xc90 [ 480.420311][T10889] new_inode_pseudo+0x91/0x1c0 [ 480.425122][T10889] __sock_create+0x129/0x940 [ 480.430252][T10889] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 480.436342][T10889] __sys_socket+0xc4/0x190 [ 480.440778][T10889] __x64_sys_socket+0x76/0x80 [ 480.445504][T10889] do_syscall_64+0x4c/0xa0 [ 480.449929][T10889] ? clear_bhb_loop+0x60/0xb0 [ 480.454615][T10889] ? clear_bhb_loop+0x60/0xb0 [ 480.459330][T10889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.465327][T10889] RIP: 0033:0x7fe1a319e159 [ 480.469749][T10889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.489895][T10889] RSP: 002b:00007fe1a3fa3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 480.498329][T10889] RAX: ffffffffffffffda RBX: 00007fe1a3425fa0 RCX: 00007fe1a319e159 [ 480.506572][T10889] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 480.514815][T10889] RBP: 00007fe1a323506b R08: 0000000000000000 R09: 0000000000000000 [ 480.522796][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.530773][T10889] R13: 00007fe1a3426038 R14: 00007fe1a3425fa0 R15: 00007ffe3146d578 [ 480.538773][T10889] [ 480.572000][T10889] socket: no more sockets [ 480.580924][T10881] EXT4-fs (loop0): 2 truncates cleaned up [ 480.710951][T10881] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 481.424525][T10881] EXT4-fs (loop0): shut down requested (0) [ 481.557021][T10897] loop6: detected capacity change from 0 to 128 [ 481.612896][T10899] loop7: detected capacity change from 0 to 128 [ 481.637662][T10897] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 481.650460][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 481.711243][T10897] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 481.859937][T10904] loop0: detected capacity change from 0 to 256 [ 481.942448][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 481.962401][T10904] FAT-fs (loop0): Directory bread(block 1285) failed [ 482.010345][T10904] FAT-fs (loop0): Directory bread(block 1286) failed [ 482.024874][T10906] FAULT_INJECTION: forcing a failure. [ 482.024874][T10906] name failslab, interval 1, probability 0, space 0, times 0 [ 482.059041][T10904] FAT-fs (loop0): Directory bread(block 1287) failed [ 482.085676][T10906] CPU: 1 PID: 10906 Comm: syz.7.1987 Not tainted syzkaller #0 [ 482.093233][T10906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.103337][T10906] Call Trace: [ 482.104134][T10904] FAT-fs (loop0): Directory bread(block 1288) failed [ 482.106635][T10906] [ 482.116302][T10906] dump_stack_lvl+0x188/0x24e [ 482.121045][T10906] ? show_regs_print_info+0x12/0x12 [ 482.126552][T10906] ? load_image+0x410/0x410 [ 482.131117][T10906] ? __might_sleep+0xd0/0xd0 [ 482.134075][T10904] FAT-fs (loop0): Directory bread(block 1285) failed [ 482.135771][T10906] ? __lock_acquire+0x7c40/0x7c40 [ 482.142485][T10904] FAT-fs (loop0): Directory bread(block 1286) failed [ 482.147502][T10906] should_fail_ex+0x390/0x4c0 [ 482.147541][T10906] should_failslab+0x5/0x20 [ 482.147559][T10906] slab_pre_alloc_hook+0x59/0x300 [ 482.147581][T10906] ? vfs_write+0x777/0x9a0 [ 482.147610][T10906] kmem_cache_alloc+0x56/0x2f0 [ 482.147628][T10906] ? getname_flags+0xb7/0x500 [ 482.147650][T10906] getname_flags+0xb7/0x500 [ 482.147672][T10906] do_sys_openat2+0xdd/0x4f0 [ 482.147697][T10906] ? do_sys_open+0xe0/0xe0 [ 482.147723][T10906] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 482.147754][T10906] ? lock_chain_count+0x20/0x20 [ 482.147785][T10906] __x64_sys_openat+0x135/0x160 [ 482.147815][T10906] do_syscall_64+0x4c/0xa0 [ 482.147834][T10906] ? clear_bhb_loop+0x60/0xb0 [ 482.147853][T10906] ? clear_bhb_loop+0x60/0xb0 [ 482.147875][T10906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.147899][T10906] RIP: 0033:0x7fe1a319e159 [ 482.147918][T10906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.147934][T10906] RSP: 002b:00007fe1a3fa3028 EFLAGS: 00000246 [ 482.154938][T10904] FAT-fs (loop0): Directory bread(block 1287) failed [ 482.159731][T10906] ORIG_RAX: 0000000000000101 [ 482.164527][T10904] FAT-fs (loop0): Directory bread(block 1288) failed [ 482.169467][T10906] RAX: ffffffffffffffda RBX: 00007fe1a3425fa0 RCX: 00007fe1a319e159 [ 482.258045][T10913] device syzkaller0 entered promiscuous mode [ 482.262928][T10906] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 482.262950][T10906] RBP: 00007fe1a323506b R08: 0000000000000000 R09: 0000000000000000 [ 482.262962][T10906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.262973][T10906] R13: 00007fe1a3426038 R14: 00007fe1a3425fa0 R15: 00007ffe3146d578 [ 482.327278][T10906] [ 482.503010][T10914] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 482.981109][T10920] loop7: detected capacity change from 0 to 256 [ 483.071224][T10920] FAT-fs (loop7): "posix" option is obsolete, not supported now [ 483.327604][T10928] FAULT_INJECTION: forcing a failure. [ 483.327604][T10928] name failslab, interval 1, probability 0, space 0, times 0 [ 483.383110][T10928] CPU: 0 PID: 10928 Comm: syz.6.1994 Not tainted syzkaller #0 [ 483.390663][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.400940][T10928] Call Trace: [ 483.404252][T10928] [ 483.407212][T10928] dump_stack_lvl+0x188/0x24e [ 483.411969][T10928] ? show_regs_print_info+0x12/0x12 [ 483.417216][T10928] ? load_image+0x410/0x410 [ 483.421771][T10928] ? __lock_acquire+0x7c40/0x7c40 [ 483.426851][T10928] should_fail_ex+0x390/0x4c0 [ 483.431587][T10928] should_failslab+0x5/0x20 [ 483.436124][T10928] slab_pre_alloc_hook+0x59/0x300 [ 483.441370][T10928] kmem_cache_alloc_lru+0x49/0x2e0 [ 483.446620][T10928] ? sock_alloc_inode+0x24/0xc0 [ 483.451535][T10928] sock_alloc_inode+0x24/0xc0 [ 483.456233][T10928] ? sockfs_init_fs_context+0xa0/0xa0 [ 483.461617][T10928] new_inode_pseudo+0x5f/0x1c0 [ 483.466489][T10928] __sock_create+0x129/0x940 [ 483.471094][T10928] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 483.477122][T10928] __sys_socket+0xc4/0x190 [ 483.481570][T10928] __x64_sys_socket+0x76/0x80 [ 483.486262][T10928] do_syscall_64+0x4c/0xa0 [ 483.491411][T10928] ? clear_bhb_loop+0x60/0xb0 [ 483.496097][T10928] ? clear_bhb_loop+0x60/0xb0 [ 483.500786][T10928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 483.506724][T10928] RIP: 0033:0x7f3db519e159 [ 483.511237][T10928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.531034][T10928] RSP: 002b:00007f3db6071028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 483.539474][T10928] RAX: ffffffffffffffda RBX: 00007f3db5425fa0 RCX: 00007f3db519e159 [ 483.547462][T10928] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 483.555523][T10928] RBP: 00007f3db523506b R08: 0000000000000000 R09: 0000000000000000 [ 483.563506][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.571570][T10928] R13: 00007f3db5426038 R14: 00007f3db5425fa0 R15: 00007ffe38c7be78 [ 483.579570][T10928] [ 483.618148][T10928] socket: no more sockets [ 483.800780][T10941] loop7: detected capacity change from 0 to 512 [ 483.843433][T10941] EXT4-fs: Ignoring removed oldalloc option [ 483.869999][T10941] EXT4-fs: Ignoring removed i_version option [ 483.902598][T10941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 484.022846][T10946] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1999'. [ 484.085878][T10941] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.1996: invalid block [ 484.118295][T10941] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1996: invalid indirect mapped block 4294967295 (level 1) [ 484.133515][T10941] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1996: invalid indirect mapped block 4294967295 (level 1) [ 484.158467][T10941] EXT4-fs (loop7): 2 truncates cleaned up [ 484.158806][T10950] FAULT_INJECTION: forcing a failure. [ 484.158806][T10950] name failslab, interval 1, probability 0, space 0, times 0 [ 484.164577][T10941] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 484.188624][T10950] CPU: 0 PID: 10950 Comm: syz.8.2001 Not tainted syzkaller #0 [ 484.196218][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.206303][T10950] Call Trace: [ 484.209638][T10950] [ 484.212581][T10950] dump_stack_lvl+0x188/0x24e [ 484.217285][T10950] ? show_regs_print_info+0x12/0x12 [ 484.222504][T10950] ? load_image+0x410/0x410 [ 484.227032][T10950] ? __might_sleep+0xd0/0xd0 [ 484.231663][T10950] ? __lock_acquire+0x7c40/0x7c40 [ 484.236801][T10950] should_fail_ex+0x390/0x4c0 [ 484.241513][T10950] should_failslab+0x5/0x20 [ 484.246025][T10950] slab_pre_alloc_hook+0x59/0x300 [ 484.251094][T10950] ? vfs_write+0x777/0x9a0 [ 484.255528][T10950] kmem_cache_alloc+0x56/0x2f0 [ 484.260302][T10950] ? getname_flags+0xb7/0x500 [ 484.265009][T10950] getname_flags+0xb7/0x500 [ 484.269657][T10950] do_sys_openat2+0xdd/0x4f0 [ 484.274275][T10950] ? do_sys_open+0xe0/0xe0 [ 484.278739][T10950] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 484.284738][T10950] ? lock_chain_count+0x20/0x20 [ 484.289605][T10950] __x64_sys_openat+0x135/0x160 [ 484.294479][T10950] do_syscall_64+0x4c/0xa0 [ 484.298926][T10950] ? clear_bhb_loop+0x60/0xb0 [ 484.303613][T10950] ? clear_bhb_loop+0x60/0xb0 [ 484.308306][T10950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.314214][T10950] RIP: 0033:0x7f621f39e159 [ 484.318660][T10950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.338281][T10950] RSP: 002b:00007f62201b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 484.346731][T10950] RAX: ffffffffffffffda RBX: 00007f621f625fa0 RCX: 00007f621f39e159 [ 484.354828][T10950] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 484.362928][T10950] RBP: 00007f621f43506b R08: 0000000000000000 R09: 0000000000000000 [ 484.371178][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.379250][T10950] R13: 00007f621f626038 R14: 00007f621f625fa0 R15: 00007fffaa5c4448 [ 484.387245][T10950] [ 484.437670][T10941] EXT4-fs (loop7): shut down requested (0) [ 484.554820][ T7364] EXT4-fs (loop7): unmounting filesystem. [ 484.674340][T10955] process 'syz.8.2002' launched './tracing/events/enable' with NULL argv: empty string added [ 484.719874][T10955] kernel read not supported for file /events/enable (pid: 10955 comm: syz.8.2002) [ 485.210605][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2010'. [ 485.417651][T10981] loop8: detected capacity change from 0 to 128 [ 485.775601][T10989] loop7: detected capacity change from 0 to 512 [ 485.879548][T10989] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 485.933538][T10989] ext4 filesystem being mounted at /199/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.171759][ T7364] EXT4-fs (loop7): unmounting filesystem. [ 486.382297][T11008] loop0: detected capacity change from 0 to 128 [ 486.414829][T11010] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2771 [ 488.183142][T11047] loop8: detected capacity change from 0 to 512 [ 488.246199][T11047] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 488.385404][T11047] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.785648][ T7703] EXT4-fs (loop8): unmounting filesystem. [ 489.759916][T11072] loop7: detected capacity change from 0 to 512 [ 489.797593][T11072] EXT4-fs: Ignoring removed i_version option [ 489.821655][T11072] EXT4-fs: Ignoring removed bh option [ 489.862036][T11072] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.2047: inode #13: comm syz.7.2047: iget: illegal inode # [ 489.930978][T11072] EXT4-fs (loop7): Remounting filesystem read-only [ 489.979830][T11072] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.2047: couldn't read orphan inode 13 (err -117) [ 490.003578][T11072] EXT4-fs (loop7): Remounting filesystem read-only [ 490.032902][T11072] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 490.121848][T11085] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2053'. [ 490.140998][T11072] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2047: bg 0: block 426: padding at end of block bitmap is not set [ 490.220726][T11072] EXT4-fs (loop7): Remounting filesystem read-only [ 490.319675][ T7364] EXT4-fs (loop7): unmounting filesystem. [ 491.502857][T11128] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2071'. [ 491.916505][T11137] usb usb7: check_ctrlrecip: process 11137 (syz.6.2074) requesting ep 01 but needs 81 [ 491.926325][T11137] usb usb7: usbfs: process 11137 (syz.6.2074) did not claim interface 0 before use [ 493.870737][T11170] loop7: detected capacity change from 0 to 256 [ 493.889503][T11171] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2089'. [ 495.630301][T11217] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2108'. [ 496.135313][T11237] usb usb7: check_ctrlrecip: process 11237 (syz.7.2113) requesting ep 01 but needs 81 [ 496.144988][T11237] usb usb7: usbfs: process 11237 (syz.7.2113) did not claim interface 0 before use [ 496.858086][T11252] loop7: detected capacity change from 0 to 1024 [ 496.943998][T11252] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 497.185826][ T7364] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /220/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 497.295725][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 497.320061][ T7364] EXT4-fs error (device loop7): ext4_empty_dir:3147: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 497.446518][T11268] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2128'. [ 497.508523][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 497.535951][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 497.581024][ T7364] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /220/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 497.732468][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 497.742711][ T7364] EXT4-fs error (device loop7): ext4_empty_dir:3147: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 497.802519][T11275] loop0: detected capacity change from 0 to 512 [ 497.833925][T11275] EXT4-fs: Ignoring removed i_version option [ 497.840065][T11275] EXT4-fs: Ignoring removed bh option [ 497.855939][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 497.862874][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 497.875970][ T7364] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /220/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 497.879569][T11275] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.2131: inode #13: comm syz.0.2131: iget: illegal inode # [ 497.923017][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 497.941730][ T7364] EXT4-fs error (device loop7): ext4_empty_dir:3147: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 498.058933][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 498.082316][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 498.094778][T11275] EXT4-fs (loop0): Remounting filesystem read-only [ 498.101365][T11275] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.2131: couldn't read orphan inode 13 (err -117) [ 498.159283][T11275] EXT4-fs (loop0): Remounting filesystem read-only [ 498.164445][ T7364] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /220/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 498.184316][T11275] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 498.221641][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 498.233483][ T7364] EXT4-fs error (device loop7): ext4_empty_dir:3147: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 498.286113][T11287] device syzkaller0 entered promiscuous mode [ 498.320429][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 498.330123][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 498.356090][ T7364] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /220/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 498.391744][ T7364] EXT4-fs (loop7): Remounting filesystem read-only [ 498.399677][ T7364] EXT4-fs error (device loop7): ext4_empty_dir:3147: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 498.418093][T11275] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2131: bg 0: block 426: padding at end of block bitmap is not set [ 498.480889][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 498.492668][T11275] EXT4-fs (loop0): Remounting filesystem read-only [ 498.520745][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 498.534068][T11293] loop6: detected capacity change from 0 to 512 [ 498.557526][T11293] EXT4-fs: Ignoring removed nobh option [ 498.564974][T11293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 498.576470][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 498.609702][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 498.624414][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 498.693446][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 498.719918][T11293] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 498.759341][T11293] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 498.771830][ T7364] EXT4-fs warning (device loop7): ext4_empty_dir:3149: inode #11: comm syz-executor: directory missing '.' [ 499.066898][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 499.332514][T11319] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2147'. [ 500.331611][T11344] loop0: detected capacity change from 0 to 512 [ 500.447008][ T4360] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 500.853755][T11357] loop0: detected capacity change from 0 to 512 [ 500.948395][T11357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 501.014857][T11357] ext4 filesystem being mounted at /439/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.217768][ T4278] EXT4-fs (loop0): unmounting filesystem. [ 501.467619][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.474681][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.523578][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.534146][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.543276][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 501.553046][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 501.561668][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 501.569098][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 501.623421][T11370] lo speed is unknown, defaulting to 1000 [ 501.862013][T11370] chnl_net:caif_netlink_parms(): no params data found [ 501.893646][T11382] device syzkaller0 entered promiscuous mode [ 502.295443][T11370] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.302621][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.339576][T11370] device bridge_slave_0 entered promiscuous mode [ 502.385529][T11370] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.392751][T11370] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.422950][T11370] device bridge_slave_1 entered promiscuous mode [ 502.451710][T11370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.477664][T11370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.489878][T11406] loop8: detected capacity change from 0 to 1024 [ 502.601620][T11370] team0: Port device team_slave_0 added [ 502.635957][T11370] team0: Port device team_slave_1 added [ 502.636433][T11406] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 502.732076][T11370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.783214][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.816989][T11370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.845954][T11370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.852981][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.007645][ T7703] EXT4-fs (loop8): unmounting filesystem. [ 503.014330][T11370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.065595][T11421] gadgetfs: bound to dummy_udc driver [ 503.153512][T11370] device hsr_slave_0 entered promiscuous mode [ 503.580486][T11370] device hsr_slave_1 entered promiscuous mode [ 503.635345][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 503.802332][T11370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.881160][T11370] Cannot create hsr debugfs directory [ 504.571421][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2193'. [ 504.647383][T11370] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 504.680436][T11370] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 504.709966][T11370] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 504.750856][T11370] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 505.195994][ T4275] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 505.206354][ T4275] Bluetooth: hci2: Injecting HCI hardware error event [ 505.216791][ T4275] Bluetooth: hci2: hardware error 0x00 [ 505.754075][T11370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.756384][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 505.898869][T11370] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.965890][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 505.974713][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 506.014704][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 506.045937][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.064720][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.072190][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.105183][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.175430][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.185860][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.193018][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.207039][T11471] FAULT_INJECTION: forcing a failure. [ 506.207039][T11471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.229874][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 506.238469][T11471] CPU: 0 PID: 11471 Comm: syz.6.2204 Not tainted syzkaller #0 [ 506.245985][T11471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.256274][T11471] Call Trace: [ 506.259848][T11471] [ 506.262815][T11471] dump_stack_lvl+0x188/0x24e [ 506.267541][T11471] ? show_regs_print_info+0x12/0x12 [ 506.272783][T11471] ? load_image+0x410/0x410 [ 506.277339][T11471] ? __lock_acquire+0x7c40/0x7c40 [ 506.282414][T11471] ? vfs_write+0x777/0x9a0 [ 506.286863][T11471] should_fail_ex+0x390/0x4c0 [ 506.291595][T11471] _copy_from_user+0x2c/0x170 [ 506.296288][T11471] do_seccomp+0x38f/0xe00 [ 506.300703][T11471] ? prctl_set_seccomp+0x60/0x60 [ 506.305690][T11471] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 506.311746][T11471] ? lockdep_hardirqs_on+0x94/0x140 [ 506.316964][T11471] do_syscall_64+0x4c/0xa0 [ 506.321495][T11471] ? clear_bhb_loop+0x60/0xb0 [ 506.326186][T11471] ? clear_bhb_loop+0x60/0xb0 [ 506.330962][T11471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.336968][T11471] RIP: 0033:0x7f3db519e159 [ 506.341398][T11471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.361381][T11471] RSP: 002b:00007f3db6071028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 506.369895][T11471] RAX: ffffffffffffffda RBX: 00007f3db5425fa0 RCX: 00007f3db519e159 [ 506.377969][T11471] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 506.386134][T11471] RBP: 00007f3db523506b R08: 0000000000000000 R09: 0000000000000000 [ 506.394634][T11471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.402790][T11471] R13: 00007f3db5426038 R14: 00007f3db5425fa0 R15: 00007ffe38c7be78 [ 506.410978][T11471] [ 506.434137][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.444982][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 506.491433][T11370] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 506.522511][T11370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 506.606502][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 506.622871][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 506.631796][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 506.640803][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 506.649977][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 506.667316][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 506.679714][ T4286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 506.688986][ T4286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 506.699647][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 506.709175][ T4286] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 506.717778][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 506.746627][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 506.774132][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 506.782997][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 506.806357][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 506.823341][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 506.838282][T11479] lo speed is unknown, defaulting to 1000 [ 507.360187][T11479] chnl_net:caif_netlink_parms(): no params data found [ 507.465575][ T4275] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 507.505049][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.512618][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.554402][T11370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.577708][T11506] netlink: 'syz.1.2211': attribute type 12 has an invalid length. [ 507.594197][T11506] netlink: 'syz.1.2211': attribute type 29 has an invalid length. [ 507.621039][T11506] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2211'. [ 507.820271][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.864230][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 507.894566][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.178622][T11479] device bridge_slave_0 entered promiscuous mode [ 508.413660][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.567955][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.610027][T11479] device bridge_slave_1 entered promiscuous mode [ 508.683117][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2214'. [ 508.722040][T11479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.754881][ T4275] Bluetooth: hci1: command 0x0409 tx timeout [ 509.079767][T11479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.853089][T11479] team0: Port device team_slave_0 added [ 509.896455][T11479] team0: Port device team_slave_1 added [ 509.944119][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 510.007483][T11479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.063543][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.163974][T11479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.191833][T11479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.209615][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.256638][T11544] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.2223'. [ 510.294212][T11479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.408368][T11479] device hsr_slave_0 entered promiscuous mode [ 510.429830][T11479] device hsr_slave_1 entered promiscuous mode [ 510.449694][T11479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.471515][T11479] Cannot create hsr debugfs directory [ 510.576319][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 510.595394][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 510.716302][T11370] device veth0_vlan entered promiscuous mode [ 510.723465][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 510.742117][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 510.769568][T11370] device veth1_vlan entered promiscuous mode [ 510.793386][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 510.808818][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 510.824223][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 510.831808][ T4284] Bluetooth: hci1: command 0x041b tx timeout [ 511.148512][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 511.166242][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 511.448835][T11370] device veth0_macvtap entered promiscuous mode [ 511.470575][T11370] device veth1_macvtap entered promiscuous mode [ 511.695376][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.780101][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.801830][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.813166][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.823694][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.835016][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.851926][T11370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.572174][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 512.610704][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 512.621577][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 512.637778][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 512.655133][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.679238][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.702143][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.725056][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.740209][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.754525][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.776179][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.788793][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.809933][T11370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.843940][T11370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.865329][T11370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.884552][T11600] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.2239'. [ 512.906587][ T4284] Bluetooth: hci1: command 0x040f tx timeout [ 513.002270][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 513.035383][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 513.046365][T11370] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.093244][T11370] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.115137][T11370] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.134064][T11370] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.304426][T11606] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2242'. [ 513.441409][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.444073][T11611] loop6: detected capacity change from 0 to 128 [ 513.462190][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.537790][T11611] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 513.546803][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 513.562702][T11611] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 513.587784][ T4792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.614028][ T4792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.653578][T11479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 513.665324][T11617] loop8: detected capacity change from 0 to 512 [ 513.698448][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 513.744338][T11617] EXT4-fs (loop8): Test dummy encryption mode enabled [ 513.746557][T11479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 513.841357][T11617] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #11: comm syz.8.2244: casefold flag without casefold feature [ 513.876289][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 513.904226][T11479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 513.931853][T11479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 514.009748][T11617] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.2244: couldn't read orphan inode 11 (err -117) [ 514.085638][T11617] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 514.298505][ T7703] EXT4-fs (loop8): unmounting filesystem. [ 514.332650][T11479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.426067][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.437936][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.492695][T11479] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.546018][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.565374][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.600362][T10518] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.607705][T10518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.663166][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.692864][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.739684][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.764419][T11647] binder: 11646:11647 ioctl c0306201 200000000080 returned -14 [ 514.778303][T10518] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.785674][T10518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.840751][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 514.864975][T11649] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.2254'. [ 514.885141][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 514.895546][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 514.961833][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.984034][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 515.001127][T11654] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 515.027696][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 515.068611][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.187535][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.275532][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.314934][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.350904][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.582414][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 516.802393][T11693] loop9: detected capacity change from 0 to 512 [ 516.925259][T11693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 516.933911][T11700] loop6: detected capacity change from 0 to 1024 [ 516.953784][T11693] System zones: 1-12 [ 516.982529][T11693] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.2267: missing EA_INODE flag [ 517.002409][T11700] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 517.032319][T11700] EXT4-fs (loop6): barriers disabled [ 517.048517][T11693] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2267: error while reading EA inode 12 err=-117 [ 517.068993][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.073623][T11700] JBD2: no valid journal superblock found [ 517.082035][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.097643][T11693] EXT4-fs (loop9): 1 orphan inode deleted [ 517.115393][T11700] EXT4-fs (loop6): error loading journal [ 517.131403][T11693] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 517.169164][T11479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.311735][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 517.326680][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 517.393694][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2267'. [ 517.517610][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 517.537803][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 518.027707][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 518.076698][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 518.297580][T11479] device veth0_vlan entered promiscuous mode [ 518.456572][T11370] EXT4-fs (loop9): unmounting filesystem. [ 518.546767][T11720] netlink: 'syz.8.2272': attribute type 72 has an invalid length. [ 518.611324][T11479] device veth1_vlan entered promiscuous mode [ 518.762997][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 518.775268][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 518.831257][T11479] device veth0_macvtap entered promiscuous mode [ 518.859423][T11479] device veth1_macvtap entered promiscuous mode [ 518.940453][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.042238][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.064030][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.101218][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.133066][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.163983][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.183619][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.213711][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.276435][T11479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.327702][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 519.337165][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 519.371199][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 519.425191][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.481618][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.505018][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.524620][T11755] loop9: detected capacity change from 0 to 128 [ 519.531147][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.555625][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.573935][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.588503][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.619175][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.644904][T11755] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 519.667936][T11755] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 519.686258][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.722012][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.763381][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.814505][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.849194][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.884101][T11479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.892462][T11370] EXT4-fs (loop9): unmounting filesystem. [ 519.908050][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 519.927518][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 520.016084][T11479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.044552][T11479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.053331][T11479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.124139][T11479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.404257][ T5643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.412321][ T5643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.536317][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 520.714071][ T5643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.722246][ T5643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.758918][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.889630][T11799] loop2: detected capacity change from 0 to 256 [ 520.906439][T11799] FAT-fs (loop2): Unrecognized mount option "BGÅ[ " or missing value [ 522.294935][T11809] device syzkaller0 entered promiscuous mode [ 522.450880][T11820] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 522.734826][T11832] loop8: detected capacity change from 0 to 128 [ 522.800527][T11832] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 522.817322][T11832] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 522.919305][ T7703] EXT4-fs (loop8): unmounting filesystem. [ 524.038961][T11850] loop2: detected capacity change from 0 to 1024 [ 524.072375][T11850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 524.150893][T11857] loop9: detected capacity change from 0 to 8 [ 524.229771][T11850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 524.304526][T11857] SQUASHFS error: Failed to read block 0x6e6: -5 [ 524.342961][T11864] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 524.343979][T11850] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 524.350987][T11864] overlayfs: failed to set xattr on upper [ 524.366666][T11864] overlayfs: ...falling back to index=off,metacopy=off. [ 524.381251][T11857] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 524.404070][T11857] SQUASHFS error: Unable to read directory block [6e4:0] [ 524.698134][T11872] loop9: detected capacity change from 0 to 128 [ 524.801737][T11872] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 524.863492][T11866] loop6: detected capacity change from 0 to 8192 [ 524.879482][T11479] EXT4-fs (loop2): unmounting filesystem. [ 524.899598][T11872] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 524.957302][T11866] loop6: p1 < > p4 < > [ 525.173124][T11370] EXT4-fs (loop9): unmounting filesystem. [ 525.611742][T11903] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 525.808748][ T4914] udevd[4914]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 525.875453][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 527.032753][T11931] loop8: detected capacity change from 0 to 8 [ 527.227546][T11938] loop2: detected capacity change from 0 to 128 [ 527.366003][T11938] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 527.400427][T11938] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 527.513359][T11479] EXT4-fs (loop2): unmounting filesystem. [ 527.722649][T11957] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2335'. [ 528.618325][T11970] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 528.822254][T11973] FAULT_INJECTION: forcing a failure. [ 528.822254][T11973] name failslab, interval 1, probability 0, space 0, times 0 [ 528.834928][T11973] CPU: 0 PID: 11973 Comm: syz.6.2339 Not tainted syzkaller #0 [ 528.842519][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.852612][T11973] Call Trace: [ 528.855926][T11973] [ 528.858908][T11973] dump_stack_lvl+0x188/0x24e [ 528.863626][T11973] ? __wake_up+0x12e/0x1a0 [ 528.868095][T11973] ? show_regs_print_info+0x12/0x12 [ 528.873451][T11973] ? load_image+0x410/0x410 [ 528.877979][T11973] should_fail_ex+0x390/0x4c0 [ 528.882673][T11973] should_failslab+0x5/0x20 [ 528.887188][T11973] slab_pre_alloc_hook+0x59/0x300 [ 528.892237][T11973] ? __lock_acquire+0x7c40/0x7c40 [ 528.897298][T11973] kmem_cache_alloc+0x56/0x2f0 [ 528.902086][T11973] ? __sigqueue_alloc+0x40c/0x520 [ 528.907138][T11973] ? __sigqueue_alloc+0x32/0x520 [ 528.912129][T11973] __sigqueue_alloc+0x40c/0x520 [ 528.917063][T11973] __send_signal_locked+0x22f/0xde0 [ 528.922285][T11973] do_notify_parent+0xb24/0xd10 [ 528.927242][T11973] ? trace_signal_generate+0x260/0x260 [ 528.932735][T11973] ? __lock_acquire+0x7c40/0x7c40 [ 528.937793][T11973] release_task+0x121c/0x1680 [ 528.942497][T11973] ? do_exit+0x18d7/0x2570 [ 528.946929][T11973] ? delayed_put_task_struct+0x2f0/0x2f0 [ 528.952571][T11973] ? _raw_write_lock_irq+0xb7/0xf0 [ 528.957695][T11973] ? _raw_write_lock_irqsave+0x100/0x100 [ 528.963339][T11973] ? _raw_write_unlock_irq+0x1f/0x40 [ 528.968721][T11973] ? lockdep_hardirqs_on+0x94/0x140 [ 528.973932][T11973] do_exit+0x18d7/0x2570 [ 528.978196][T11973] ? put_task_struct+0x80/0x80 [ 528.982976][T11973] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 528.988976][T11973] ? lock_chain_count+0x20/0x20 [ 528.993835][T11973] ? _raw_spin_lock_irq+0xb7/0xf0 [ 528.998875][T11973] do_group_exit+0x229/0x2e0 [ 529.003627][T11973] ? lockdep_hardirqs_on+0x94/0x140 [ 529.008842][T11973] get_signal+0x1259/0x1340 [ 529.013373][T11973] arch_do_signal_or_restart+0xc4/0x1310 [ 529.019202][T11973] ? do_futex+0x310/0x320 [ 529.023543][T11973] ? get_sigframe_size+0x10/0x10 [ 529.028491][T11973] ? __ia32_sys_get_robust_list+0x100/0x100 [ 529.034439][T11973] ? exit_to_user_mode_loop+0x3b/0x110 [ 529.039917][T11973] exit_to_user_mode_loop+0x70/0x110 [ 529.045215][T11973] exit_to_user_mode_prepare+0xee/0x180 [ 529.050783][T11973] syscall_exit_to_user_mode+0x16/0x40 [ 529.056256][T11973] do_syscall_64+0x58/0xa0 [ 529.060681][T11973] ? clear_bhb_loop+0x60/0xb0 [ 529.065734][T11973] ? clear_bhb_loop+0x60/0xb0 [ 529.070437][T11973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.076353][T11973] RIP: 0033:0x7f3db519e159 [ 529.080801][T11973] Code: Unable to access opcode bytes at 0x7f3db519e12f. [ 529.087938][T11973] RSP: 002b:00007f3db60710e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 529.096549][T11973] RAX: fffffffffffffe00 RBX: 00007f3db5425fa8 RCX: 00007f3db519e159 [ 529.104625][T11973] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3db5425fa8 [ 529.112609][T11973] RBP: 00007f3db5425fa0 R08: 0000000000000000 R09: 0000000000000000 [ 529.120587][T11973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.128566][T11973] R13: 00007f3db5426038 R14: 00007ffe38c7bd90 R15: 00007ffe38c7be78 [ 529.136565][T11973] [ 529.565603][T11991] loop6: detected capacity change from 0 to 128 [ 529.768733][T11991] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 529.793683][T11991] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 530.066757][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 530.355277][T12007] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2351'. [ 533.404947][T12055] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.2366'. [ 535.463065][T12086] loop2: detected capacity change from 0 to 8 [ 537.298478][T12135] loop8: detected capacity change from 0 to 8 [ 539.622421][T12165] input: syz1 as /devices/virtual/input/input20 [ 540.005067][T12174] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 540.881861][T12214] input: syz1 as /devices/virtual/input/input21 [ 541.439250][T12236] loop8: detected capacity change from 0 to 512 [ 541.512209][T12236] EXT4-fs: Mount option(s) incompatible with ext2 [ 541.570703][T12236] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 541.626580][T12236] overlayfs: failed to set xattr on upper [ 541.669765][T12236] overlayfs: ...falling back to index=off,metacopy=off. [ 541.842649][T12250] loop6: detected capacity change from 0 to 1024 [ 541.955069][T12250] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 542.136151][T12262] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 542.305176][T12268] input: syz1 as /devices/virtual/input/input22 [ 542.666124][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 542.905715][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.913150][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.920122][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.927111][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.933998][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.940807][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.947674][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.954520][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.961413][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.968462][T12282] tc action pedit offset must be on 32 bit boundaries [ 542.975360][T12282] 0: reclassify loop, rule prio 0, protocol 800 [ 543.493515][T12310] loop6: detected capacity change from 0 to 256 [ 543.577225][T12312] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 544.288200][T12335] ip_tables: iptables: counters copy to user failed while replacing table [ 545.228484][T12335] loop8: detected capacity change from 0 to 4096 [ 545.285199][T12335] EXT4-fs: inline encryption not supported [ 545.327403][T12335] EXT4-fs (loop8): Test dummy encryption mode enabled [ 545.387649][T12335] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 545.474316][T12351] loop9: detected capacity change from 0 to 1024 [ 545.552418][T12351] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 545.566528][T12356] loop6: detected capacity change from 0 to 1024 [ 545.677885][T12356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 545.827005][T12356] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 545.845312][T12356] EXT4-fs (loop6): orphan cleanup on readonly fs [ 545.893676][T12356] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #3: block 3: comm syz.6.2459: lblock 3 mapped to illegal pblock 3 (length 1) [ 546.543919][T12368] overlayfs: failed to resolve './bus': -2 [ 546.627505][T11370] EXT4-fs (loop9): unmounting filesystem. [ 546.734470][T12356] __quota_error: 12 callbacks suppressed [ 546.734492][T12356] Quota error (device loop6): write_blk: dquota write failed [ 546.873440][T12356] Quota error (device loop6): find_free_dqentry: Can't write quota data block 3 [ 546.971397][T12356] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 547.074686][T12356] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2459: Failed to acquire dquot type 0 [ 547.086681][T12356] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 3: comm syz.6.2459: lblock 3 mapped to illegal pblock 3 (length 1) [ 547.101614][T12356] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 547.263967][T12356] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2459: Failed to acquire dquot type 0 [ 547.301556][T12356] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.2459: Freeing blocks not in datazone - block = 0, count = 4096 [ 547.421864][T12356] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #3: block 3: comm syz.6.2459: lblock 3 mapped to illegal pblock 3 (length 1) [ 547.553243][T12356] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 547.617666][T12356] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.2459: Failed to acquire dquot type 0 [ 547.703651][T12356] EXT4-fs (loop6): 1 orphan inode deleted [ 547.757946][T12356] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 548.026373][ T7703] EXT4-fs (loop8): unmounting filesystem. [ 548.033159][T12356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 548.055538][T12356] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 548.306770][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 548.657913][T12410] loop6: detected capacity change from 0 to 1024 [ 548.761304][T12410] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 548.989134][ T7339] EXT4-fs (loop6): unmounting filesystem. [ 550.845840][T12466] can0: slcan on pts0. [ 551.007873][T12472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2490'. [ 551.034372][T12465] can0 (unregistered): slcan off pts0. [ 551.678226][T12495] loop6: detected capacity change from 0 to 256 [ 555.735902][T12622] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 556.185497][T12636] Bluetooth: MGMT ver 1.22 [ 556.912749][T12656] can0: slcan on pts0. [ 556.994322][T12655] can0 (unregistered): slcan off pts0. [ 557.247136][T12663] fuse: Bad value for 'fd' [ 558.264099][ T4275] Bluetooth: hci0: command 0x0c20 tx timeout [ 558.574774][T12700] 9pnet_fd: Insufficient options for proto=fd [ 558.604074][T12697] can0: slcan on pts0. [ 558.676148][T12695] can0 (unregistered): slcan off pts0. [ 559.012721][T12710] batman_adv: batadv0: Adding interface: macvtap1 [ 559.062422][T12710] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.194448][T12710] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 559.260082][T12487] Set syz1 is full, maxelem 65536 reached [ 559.292134][T12721] device gretap0 entered promiscuous mode [ 559.722190][T12737] 9pnet_fd: Insufficient options for proto=fd [ 559.995827][T12739] device bond_slave_0 entered promiscuous mode [ 560.002624][T12739] device bond_slave_1 entered promiscuous mode [ 560.070177][T12739] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 560.113109][T12739] bond1: (slave macvlan2): making interface the new active one [ 560.168067][T12739] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 561.758079][T12786] ip_tables: iptables: counters copy to user failed while replacing table [ 561.798389][T12788] 9pnet_fd: Insufficient options for proto=fd [ 561.880269][T12792] geneve1: mtu greater than device maximum [ 562.156190][T12796] FAULT_INJECTION: forcing a failure. [ 562.156190][T12796] name fail_futex, interval 1, probability 0, space 0, times 0 [ 562.224738][T12796] CPU: 0 PID: 12796 Comm: syz.9.2599 Not tainted syzkaller #0 [ 562.232283][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.242478][T12796] Call Trace: [ 562.245795][T12796] [ 562.248843][T12796] dump_stack_lvl+0x188/0x24e [ 562.253580][T12796] ? do_syscall_64+0x4c/0xa0 [ 562.258217][T12796] ? show_regs_print_info+0x12/0x12 [ 562.263469][T12796] ? load_image+0x410/0x410 [ 562.268030][T12796] ? mark_lock+0x94/0x320 [ 562.272758][T12796] should_fail_ex+0x390/0x4c0 [ 562.277487][T12796] get_futex_key+0x1b1/0x1000 [ 562.282203][T12796] ? memset+0x1e/0x40 [ 562.286234][T12796] ? futex_setup_timer+0xc0/0xc0 [ 562.291191][T12796] ? lockdep_init_map_type+0x98/0x8d0 [ 562.296670][T12796] futex_wake+0x123/0x4f0 [ 562.301013][T12796] ? __raw_spin_lock_init+0x41/0x100 [ 562.306310][T12796] ? futex_wake_mark+0x150/0x150 [ 562.311359][T12796] do_futex+0x2e2/0x320 [ 562.315539][T12796] ? fd_install+0x5c/0x4e0 [ 562.319991][T12796] ? __ia32_sys_get_robust_list+0x100/0x100 [ 562.325976][T12796] ? rcu_read_lock_sched_held+0x86/0x110 [ 562.331619][T12796] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 562.337613][T12796] ? put_pid+0xc3/0x120 [ 562.341797][T12796] __se_sys_futex+0x381/0x410 [ 562.346485][T12796] ? __x64_sys_futex+0xf0/0xf0 [ 562.351258][T12796] ? __x64_sys_futex+0x1d/0xf0 [ 562.356030][T12796] do_syscall_64+0x4c/0xa0 [ 562.360460][T12796] ? clear_bhb_loop+0x60/0xb0 [ 562.365146][T12796] ? clear_bhb_loop+0x60/0xb0 [ 562.369835][T12796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.375751][T12796] RIP: 0033:0x7f2f3059e159 [ 562.380176][T12796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.399969][T12796] RSP: 002b:00007f2f314f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 562.408580][T12796] RAX: ffffffffffffffda RBX: 00007f2f30825fa8 RCX: 00007f2f3059e159 [ 562.416561][T12796] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2f30825fac [ 562.424745][T12796] RBP: 00007f2f30825fa0 R08: 0006cdf0a61c3c26 R09: 0000000000000000 [ 562.432814][T12796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.440878][T12796] R13: 00007f2f30826038 R14: 00007fff12eea240 R15: 00007fff12eea328 [ 562.448973][T12796] [ 562.742905][T12809] netlink: 'syz.6.2605': attribute type 72 has an invalid length. [ 562.911525][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.917973][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.965321][T12816] ip_tables: iptables: counters copy to user failed while replacing table [ 563.108528][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 563.128265][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 563.137868][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 563.148446][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 563.157650][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 563.169707][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 563.220279][T12823] 9pnet_fd: Insufficient options for proto=fd [ 563.474374][T12818] lo speed is unknown, defaulting to 1000 [ 563.815124][T12838] FAULT_INJECTION: forcing a failure. [ 563.815124][T12838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.414658][T12838] CPU: 1 PID: 12838 Comm: syz.9.2614 Not tainted syzkaller #0 [ 564.422298][T12838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.432384][T12838] Call Trace: [ 564.435719][T12838] [ 564.438762][T12838] dump_stack_lvl+0x188/0x24e [ 564.443514][T12838] ? show_regs_print_info+0x12/0x12 [ 564.448923][T12838] ? load_image+0x410/0x410 [ 564.453471][T12838] ? __lock_acquire+0x7c40/0x7c40 [ 564.458640][T12838] should_fail_ex+0x390/0x4c0 [ 564.463379][T12838] _copy_from_user+0x2c/0x170 [ 564.468098][T12838] strndup_user+0xb3/0x150 [ 564.472661][T12838] __se_sys_mount+0x9b/0x3d0 [ 564.477393][T12838] ? __x64_sys_mount+0xc0/0xc0 [ 564.482285][T12838] ? lockdep_hardirqs_on+0x94/0x140 [ 564.487522][T12838] ? __x64_sys_mount+0x1c/0xc0 [ 564.492337][T12838] do_syscall_64+0x4c/0xa0 [ 564.497050][T12838] ? clear_bhb_loop+0x60/0xb0 [ 564.501758][T12838] ? clear_bhb_loop+0x60/0xb0 [ 564.506472][T12838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.512404][T12838] RIP: 0033:0x7f2f3059e159 [ 564.516848][T12838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.536583][T12838] RSP: 002b:00007f2f314f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 564.545040][T12838] RAX: ffffffffffffffda RBX: 00007f2f30825fa0 RCX: 00007f2f3059e159 [ 564.553046][T12838] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 00002000000001c0 [ 564.561052][T12838] RBP: 00007f2f3063506b R08: 0000000000000000 R09: 0000000000000000 [ 564.569046][T12838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.577031][T12838] R13: 00007f2f30826038 R14: 00007f2f30825fa0 R15: 00007fff12eea328 [ 564.585030][T12838] [ 564.588166][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.907002][T12818] chnl_net:caif_netlink_parms(): no params data found [ 564.968154][T12857] ip_tables: iptables: counters copy to user failed while replacing table [ 565.234122][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 566.003469][T12876] team0 (unregistering): Port device team_slave_0 removed [ 566.031826][T12876] team0 (unregistering): Failed to send options change via netlink (err -105) [ 566.042593][T12876] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 566.058885][T12876] team0 (unregistering): Port device team_slave_1 removed [ 566.199984][T12818] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.234299][T12818] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.272725][T12818] device bridge_slave_0 entered promiscuous mode [ 566.421076][T12886] device syzkaller0 entered promiscuous mode [ 566.461847][T12818] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.512342][T12818] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.614597][T12818] device bridge_slave_1 entered promiscuous mode [ 567.324124][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 568.051915][T12931] ip_tables: iptables: counters copy to user failed while replacing table [ 569.390467][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 571.132275][T12925] device bond0 entered promiscuous mode [ 571.138109][T12925] device bond_slave_0 entered promiscuous mode [ 571.145616][T12925] device bond_slave_1 entered promiscuous mode [ 571.153123][T12925] device batadv0 entered promiscuous mode [ 571.160987][T12925] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 571.282754][T12938] team0 (unregistering): Port device team_slave_0 removed [ 571.345249][T12938] team0 (unregistering): Port device team_slave_1 removed [ 571.368575][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2641'. [ 571.381995][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2641'. [ 571.397722][T12941] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.406793][T12941] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.415712][T12941] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.424495][T12941] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.474058][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 571.487360][T12818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.511716][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 571.530271][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2641'. [ 571.549250][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2641'. [ 571.593716][T12818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.727778][T12818] team0: Port device team_slave_0 added [ 571.773030][T12818] team0: Port device team_slave_1 added [ 571.922765][T12818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.950217][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.000321][T12974] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input25 [ 572.030884][T12818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.180798][T12818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.215636][T12818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.298930][T12818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.011596][T12818] device hsr_slave_0 entered promiscuous mode [ 573.064636][T12818] device hsr_slave_1 entered promiscuous mode [ 573.109969][T12818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.165312][T12818] Cannot create hsr debugfs directory [ 574.171656][T12818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.223943][T12818] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.514183][T13001] team0 (unregistering): Port device team_slave_0 removed [ 574.571677][T13001] team0 (unregistering): Port device team_slave_1 removed [ 574.633607][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2655'. [ 574.666656][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2655'. [ 574.761829][T12818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.792577][T12818] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.844024][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2655'. [ 574.878202][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2655'. [ 575.063777][T12818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.088286][T12818] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.135886][T12818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.155456][T12818] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.447000][T13050] fuse: Bad value for 'fd' [ 576.790204][T12818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 576.847959][T12818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 576.901531][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2664'. [ 576.970540][T12818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 577.007198][T12818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 577.245210][T13070] device bond_slave_0 entered promiscuous mode [ 577.251561][T13070] device bond_slave_1 entered promiscuous mode [ 577.282084][T13070] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 577.385292][T13070] bond2: (slave macvlan2): making interface the new active one [ 577.453530][T13070] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 578.248841][T12818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.423088][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.474752][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 578.486669][T12818] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.522418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 578.559109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.598994][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.606367][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.685522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.741675][T10515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 578.772699][T10515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.825049][T10515] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.832401][T10515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.892968][T10515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 578.948486][T10515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 579.019787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 579.042356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 579.105518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 579.155512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 579.186343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 579.246533][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 579.274676][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 579.295428][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 579.325788][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 579.359946][T12818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.407165][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2682'. [ 579.758142][T13122] tipc: Started in network mode [ 579.794127][T13122] tipc: Node identity b2281f85820c, cluster identity 4711 [ 579.801616][T13122] tipc: Enabled bearer , priority 0 [ 580.127272][T13134] device syzkaller0 entered promiscuous mode [ 580.152035][T13134] tipc: Resetting bearer [ 580.282478][T13153] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2689'. [ 580.304977][T13141] tipc: Enabling of bearer rejected, failed to enable media [ 580.397825][T13146] device bond_slave_0 entered promiscuous mode [ 580.404170][T13146] device bond_slave_1 entered promiscuous mode [ 580.434479][T13146] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 580.463492][T13146] bond1: (slave macvlan2): making interface the new active one [ 580.503797][T13146] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 580.552542][T13121] tipc: Resetting bearer [ 584.679569][T13121] tipc: Disabling bearer [ 584.704820][ T7] tipc: Node number set to 807673733 [ 584.716342][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 584.726865][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 584.761057][T13193] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.770060][T13193] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.779338][T13193] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.788291][T13193] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.850217][T13193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 584.870962][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 584.934453][T13087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 584.942085][T13087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 584.958603][T12818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.115621][T13087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 585.145531][T13087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 585.174099][ T4322] hid-generic 0005:0008:0009.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 585.216731][T13087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 585.239119][T13087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 585.281858][T13087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 585.328997][T13087] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 585.379869][T12818] device veth0_vlan entered promiscuous mode [ 585.463029][T12818] device veth1_vlan entered promiscuous mode [ 585.569588][T13227] fido_id[13227]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 585.606302][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 585.630414][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 585.671490][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 585.728846][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 585.768853][T12818] device veth0_macvtap entered promiscuous mode [ 585.801537][T12818] device veth1_macvtap entered promiscuous mode [ 585.927778][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.991204][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.057633][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.107255][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.142733][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.179610][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.238080][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.286825][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.333887][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 586.363961][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.406635][T12818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.441859][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 586.455469][T10518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 586.573625][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.604362][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.614991][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.633901][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.654934][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.691292][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.712713][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.734727][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.787517][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.826598][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.836919][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.889080][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.930787][T12818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 586.974159][T12818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.989559][T12818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.022695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 587.065061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 587.089771][T12818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.125926][T12818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.144002][T12818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.174040][T12818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.262249][T13269] 9pnet_fd: Insufficient options for proto=fd [ 587.377497][T13087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.398367][T13087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.428956][ T9489] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 587.494792][T13277] tipc: Started in network mode [ 587.507768][T13277] tipc: Node identity e2eede9d6954, cluster identity 4711 [ 587.522491][T13279] fuse: Bad value for 'fd' [ 587.547617][T13277] tipc: Enabled bearer , priority 0 [ 587.565833][ T9489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.568445][T13280] device syzkaller0 entered promiscuous mode [ 587.594481][ T9489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.602238][T10515] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 587.632352][T13283] bond2: option mode: unable to set because the bond device has slaves [ 587.680843][T13277] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 587.752271][T13283] device macvlan3 entered promiscuous mode [ 587.767903][T13283] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 587.803680][T13280] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2715'. [ 587.831812][T13277] tipc: Resetting bearer [ 587.890328][T13275] tipc: Resetting bearer [ 588.033037][T13275] tipc: Disabling bearer [ 588.143568][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2721'. [ 588.205559][T13304] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2721'. [ 588.475936][T13294] syz.8.2721 (13294) used greatest stack depth: 18128 bytes left [ 588.818456][T13323] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 588.856840][T13320] device syzkaller1 entered promiscuous mode [ 589.057317][T13329] IPv6: NLM_F_REPLACE set, but no existing node found! [ 589.359722][T13339] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 589.537734][T13351] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2741'. [ 589.593846][T13351] IPv6: Can't replace route, no match found [ 589.855794][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2743'. [ 589.912220][T13359] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.162418][T13371] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2747'. [ 590.600139][T13385] device macvlan2 entered promiscuous mode [ 590.611920][T13385] device bond_slave_0 entered promiscuous mode [ 590.618259][T13385] device bond_slave_1 entered promiscuous mode [ 590.665151][T13385] device bond0 entered promiscuous mode [ 590.671495][T13385] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 590.681098][T13385] bond2: (slave macvlan2): making interface the new active one [ 590.711540][T13385] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 591.338414][T13409] sock: sock_timestamping_bind_phc: sock not bind to device [ 591.656615][T13420] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2768'. [ 592.428526][T13435] ip_tables: iptables: counters copy to user failed while replacing table [ 592.443613][T13437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 592.716712][T13449] bond2: option mode: unable to set because the bond device has slaves [ 592.799066][T13449] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 593.311233][T13466] netlink: 'syz.6.2788': attribute type 1 has an invalid length. [ 594.095583][T13493] bond1: option mode: unable to set because the bond device has slaves [ 594.196777][T13493] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 594.262126][T13498] device syzkaller0 entered promiscuous mode [ 594.831831][T13518] tipc: Enabling of bearer rejected, failed to enable media [ 594.933536][T13527] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2806'. [ 595.494415][T13543] ip_tables: iptables: counters copy to user failed while replacing table [ 595.811259][T13552] usb usb7: check_ctrlrecip: process 13552 (syz.1.2812) requesting ep 01 but needs 81 [ 595.821073][T13552] usb usb7: usbfs: process 13552 (syz.1.2812) did not claim interface 0 before use [ 596.724417][T13560] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2820'. [ 596.735789][T13564] fuse: Bad value for 'fd' [ 597.011721][T13575] tipc: Enabling of bearer rejected, failed to enable media [ 597.136625][T13579] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2824'. [ 597.622537][T13594] bond1: option mode: unable to set because the bond device has slaves [ 597.697066][T13594] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 597.750569][T13600] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2833'. [ 598.783552][T13631] sctp: [Deprecated]: syz.1.2845 (pid 13631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.783552][T13631] Use struct sctp_sack_info instead [ 599.109564][T13647] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2850'. [ 599.148622][T13647] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2850'. [ 599.679165][T13670] netlink: 'syz.2.2859': attribute type 1 has an invalid length. [ 600.584348][T13701] ip_tables: iptables: counters copy to user failed while replacing table [ 601.049041][T13717] device syzkaller0 entered promiscuous mode [ 601.666368][T13740] ip_tables: iptables: counters copy to user failed while replacing table [ 601.891880][T13750] netlink: 'syz.9.2892': attribute type 8 has an invalid length. [ 602.228944][T13759] device syzkaller0 entered promiscuous mode [ 602.667143][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2898'. [ 603.235325][T13780] ip_tables: iptables: counters copy to user failed while replacing table [ 603.375421][T13784] netlink: 'syz.2.2905': attribute type 8 has an invalid length. [ 603.414249][T13786] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 603.625173][T13794] device syzkaller0 entered promiscuous mode [ 604.335476][T13817] usb usb7: check_ctrlrecip: process 13817 (syz.9.2913) requesting ep 01 but needs 81 [ 604.345497][T13817] usb usb7: usbfs: process 13817 (syz.9.2913) did not claim interface 0 before use [ 605.060154][T13819] ip_tables: iptables: counters copy to user failed while replacing table [ 605.123617][T13821] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2918'. [ 605.163127][T13821] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2918'. [ 605.172434][T13823] netlink: 'syz.9.2919': attribute type 8 has an invalid length. [ 605.345673][T13825] fuse: Bad value for 'fd' [ 605.641700][T13833] device syzkaller0 entered promiscuous mode [ 606.542314][T13859] usb usb7: check_ctrlrecip: process 13859 (syz.9.2929) requesting ep 01 but needs 81 [ 606.552312][T13859] usb usb7: usbfs: process 13859 (syz.9.2929) did not claim interface 0 before use [ 607.347285][T13867] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2931'. [ 607.364093][T13866] ip_tables: iptables: counters copy to user failed while replacing table [ 607.414106][T13867] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2931'. [ 607.477306][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2932'. [ 607.781842][T13879] fuse: Bad value for 'fd' [ 608.045512][T13886] device syzkaller0 entered promiscuous mode [ 608.393482][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 608.488674][T13898] ip_tables: iptables: counters copy to user failed while replacing table [ 608.673118][T13902] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2944'. [ 608.707579][T13902] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2944'. [ 608.753726][T13901] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2945'. [ 608.943494][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 609.042054][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880640ca000: rx timeout, send abort [ 609.323430][T13909] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2947'. [ 609.473116][T13909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 609.906688][T13754] Set syz1 is full, maxelem 65536 reached [ 609.958031][T13930] netlink: 'syz.9.2953': attribute type 1 has an invalid length. [ 609.991365][T13932] netlink: 'syz.1.2954': attribute type 1 has an invalid length. [ 610.099624][T13932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.270100][T13945] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input26 [ 610.313732][T13934] bond3: (slave veth3): Enslaving as an active interface with a down link [ 610.399777][T13940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 610.429599][T13940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 610.473521][T13940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 610.624496][T13932] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 610.714495][T13932] bond3: (slave batadv1): making interface the new active one [ 610.753374][T13932] device batadv1 entered promiscuous mode [ 610.805478][T13932] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 610.860924][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 611.070930][T13956] device syzkaller0 entered promiscuous mode [ 611.241163][T13969] device syzkaller0 entered promiscuous mode [ 615.732803][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2964'. [ 619.141207][T14006] tipc: Enabling of bearer rejected, failed to enable media [ 619.531902][T14026] device syzkaller0 entered promiscuous mode [ 619.923239][T14034] netlink: 'syz.9.2974': attribute type 1 has an invalid length. [ 620.057097][T14034] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.157382][T14039] bond3: (slave veth3): Enslaving as an active interface with a down link [ 620.217144][T14034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 620.228721][T14034] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 620.294332][T14034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.543757][T14047] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 620.668755][T14047] bond3: (slave batadv2): making interface the new active one [ 620.809312][T14047] device batadv2 entered promiscuous mode [ 620.871282][T14047] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 620.884405][ T4792] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 620.987509][T14063] can0: slcan on pts0. [ 621.104552][T14061] can0 (unregistered): slcan off pts0. [ 621.469320][T14077] device syzkaller0 entered promiscuous mode [ 621.520790][T14079] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input27 [ 622.017803][T14095] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 622.088830][ T4275] Bluetooth: hci2: link tx timeout [ 622.104640][ T4275] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 622.139410][T14095] [ 622.141812][T14095] ====================================================== [ 622.148946][T14095] WARNING: possible circular locking dependency detected [ 622.155992][T14095] syzkaller #0 Not tainted [ 622.160429][T14095] ------------------------------------------------------ [ 622.167478][T14095] syz.1.2990/14095 is trying to acquire lock: [ 622.173550][T14095] ffff888026adc428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20 [ 622.182633][T14095] [ 622.182633][T14095] but task is already holding lock: [ 622.190042][T14095] ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 622.199018][T14095] [ 622.199018][T14095] which lock already depends on the new lock. [ 622.199018][T14095] [ 622.209597][T14095] [ 622.209597][T14095] the existing dependency chain (in reverse order) is: [ 622.218615][T14095] [ 622.218615][T14095] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 622.226002][T14095] __mutex_lock+0x12d/0xae0 [ 622.231127][T14095] rfcomm_security_cfm+0x95/0x780 [ 622.237223][T14095] hci_auth_complete_evt+0x365/0xba0 [ 622.243124][T14095] hci_event_packet+0x806/0x1290 [ 622.248588][T14095] hci_rx_work+0x3eb/0xd40 [ 622.253534][T14095] process_one_work+0x8ab/0x1160 [ 622.259022][T14095] worker_thread+0xaf5/0x12a0 [ 622.264402][T14095] kthread+0x29d/0x330 [ 622.268992][T14095] ret_from_fork+0x1f/0x30 [ 622.273997][T14095] [ 622.273997][T14095] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 622.281824][T14095] __mutex_lock+0x12d/0xae0 [ 622.286942][T14095] hci_remote_features_evt+0x464/0xa10 [ 622.292932][T14095] hci_event_packet+0x806/0x1290 [ 622.298394][T14095] hci_rx_work+0x3eb/0xd40 [ 622.303338][T14095] process_one_work+0x8ab/0x1160 [ 622.308799][T14095] worker_thread+0xaf5/0x12a0 [ 622.314028][T14095] kthread+0x29d/0x330 [ 622.318704][T14095] ret_from_fork+0x1f/0x30 [ 622.323662][T14095] [ 622.323662][T14095] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 622.330987][T14095] __lock_acquire+0x2d18/0x7c40 [ 622.336475][T14095] lock_acquire+0x1bb/0x4a0 [ 622.341617][T14095] __mutex_lock+0x12d/0xae0 [ 622.346736][T14095] l2cap_chan_connect+0xfb/0xe20 [ 622.352203][T14095] l2cap_sock_connect+0x576/0x750 [ 622.357755][T14095] kernel_connect+0x13e/0x1c0 [ 622.362959][T14095] rfcomm_dlc_open+0x600/0x10c0 [ 622.368333][T14095] rfcomm_sock_connect+0x2e9/0x600 [ 622.374016][T14095] __sys_connect+0x3cb/0x450 [ 622.379138][T14095] __x64_sys_connect+0x76/0x80 [ 622.384427][T14095] do_syscall_64+0x4c/0xa0 [ 622.389398][T14095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.396023][T14095] [ 622.396023][T14095] other info that might help us debug this: [ 622.396023][T14095] [ 622.406266][T14095] Chain exists of: [ 622.406266][T14095] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 622.406266][T14095] [ 622.419266][T14095] Possible unsafe locking scenario: [ 622.419266][T14095] [ 622.426740][T14095] CPU0 CPU1 [ 622.432300][T14095] ---- ---- [ 622.437857][T14095] lock(rfcomm_mutex); [ 622.442025][T14095] lock(hci_cb_list_lock); [ 622.449167][T14095] lock(rfcomm_mutex); [ 622.455944][T14095] lock(&hdev->lock); [ 622.460133][T14095] [ 622.460133][T14095] *** DEADLOCK *** [ 622.460133][T14095] [ 622.468286][T14095] 1 lock held by syz.1.2990/14095: [ 622.473397][T14095] #0: ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0 [ 622.482809][T14095] [ 622.482809][T14095] stack backtrace: [ 622.488785][T14095] CPU: 0 PID: 14095 Comm: syz.1.2990 Not tainted syzkaller #0 [ 622.496248][T14095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.506575][T14095] Call Trace: [ 622.509864][T14095] [ 622.512801][T14095] dump_stack_lvl+0x188/0x24e [ 622.517489][T14095] ? load_image+0x410/0x410 [ 622.522005][T14095] ? show_regs_print_info+0x12/0x12 [ 622.527298][T14095] ? print_circular_bug+0x12b/0x1a0 [ 622.532609][T14095] check_noncircular+0x296/0x330 [ 622.537568][T14095] ? add_chain_block+0x9b0/0x9b0 [ 622.542514][T14095] ? lockdep_lock+0xf1/0x1f0 [ 622.547222][T14095] ? _find_first_zero_bit+0xd2/0x100 [ 622.552636][T14095] __lock_acquire+0x2d18/0x7c40 [ 622.557508][T14095] ? verify_lock_unused+0x140/0x140 [ 622.562728][T14095] ? verify_lock_unused+0x140/0x140 [ 622.568386][T14095] lock_acquire+0x1bb/0x4a0 [ 622.572903][T14095] ? l2cap_chan_connect+0xfb/0xe20 [ 622.578043][T14095] ? __might_sleep+0xd0/0xd0 [ 622.582669][T14095] ? read_lock_is_recursive+0x10/0x10 [ 622.588063][T14095] ? __lock_acquire+0x7c40/0x7c40 [ 622.593097][T14095] ? __lock_acquire+0x1465/0x7c40 [ 622.598138][T14095] __mutex_lock+0x12d/0xae0 [ 622.602760][T14095] ? l2cap_chan_connect+0xfb/0xe20 [ 622.607880][T14095] ? do_raw_read_unlock+0x39/0x70 [ 622.612913][T14095] ? _raw_read_unlock+0x24/0x40 [ 622.617773][T14095] ? hci_get_route+0x3a1/0x4d0 [ 622.622541][T14095] ? l2cap_chan_connect+0xfb/0xe20 [ 622.627659][T14095] ? mutex_lock_nested+0x10/0x10 [ 622.632600][T14095] ? print_unlock_imbalance_bug+0x160/0x160 [ 622.638503][T14095] ? mark_lock+0x94/0x320 [ 622.642845][T14095] l2cap_chan_connect+0xfb/0xe20 [ 622.647788][T14095] ? lock_chain_count+0x20/0x20 [ 622.652664][T14095] ? l2cap_sock_connect+0x13e/0x750 [ 622.657868][T14095] ? l2cap_chan_le_send_credits+0x590/0x590 [ 622.663767][T14095] ? __local_bh_enable_ip+0x136/0x1c0 [ 622.669146][T14095] ? _local_bh_enable+0xa0/0xa0 [ 622.674002][T14095] l2cap_sock_connect+0x576/0x750 [ 622.679038][T14095] ? l2cap_sock_bind+0x870/0x870 [ 622.683990][T14095] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 622.689980][T14095] ? memset+0x1e/0x40 [ 622.693965][T14095] ? kernel_connect+0xee/0x1c0 [ 622.698738][T14095] kernel_connect+0x13e/0x1c0 [ 622.703425][T14095] ? kernel_accept+0x420/0x420 [ 622.708204][T14095] ? rfcomm_dlc_open+0x5c4/0x10c0 [ 622.713325][T14095] rfcomm_dlc_open+0x600/0x10c0 [ 622.718180][T14095] ? lock_chain_count+0x20/0x20 [ 622.723035][T14095] ? rfcomm_sock_connect+0x2c2/0x600 [ 622.728329][T14095] ? rfcomm_dlc_free+0x40/0x40 [ 622.733102][T14095] ? __local_bh_enable_ip+0x136/0x1c0 [ 622.738495][T14095] ? lockdep_hardirqs_on+0x94/0x140 [ 622.743703][T14095] ? __local_bh_enable_ip+0x136/0x1c0 [ 622.749078][T14095] ? _local_bh_enable+0xa0/0xa0 [ 622.753930][T14095] ? do_raw_spin_unlock+0x11d/0x230 [ 622.759155][T14095] rfcomm_sock_connect+0x2e9/0x600 [ 622.764272][T14095] ? rfcomm_sock_bind+0x550/0x550 [ 622.769314][T14095] __sys_connect+0x3cb/0x450 [ 622.773950][T14095] ? __sys_connect_file+0x170/0x170 [ 622.779158][T14095] __x64_sys_connect+0x76/0x80 [ 622.783946][T14095] do_syscall_64+0x4c/0xa0 [ 622.788365][T14095] ? clear_bhb_loop+0x60/0xb0 [ 622.793045][T14095] ? clear_bhb_loop+0x60/0xb0 [ 622.797728][T14095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.803630][T14095] RIP: 0033:0x7f41a519e159 [ 622.808050][T14095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.827665][T14095] RSP: 002b:00007f41a6050028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 622.836088][T14095] RAX: ffffffffffffffda RBX: 00007f41a5425fa0 RCX: 00007f41a519e159 [ 622.844150][T14095] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 000000000000000c [ 622.852122][T14095] RBP: 00007f41a523506b R08: 0000000000000000 R09: 0000000000000000 [ 622.860099][T14095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.868085][T14095] R13: 00007f41a5426038 R14: 00007f41a5425fa0 R15: 00007ffe59080558 [ 622.876062][T14095] [ 622.914009][ T4275] Bluetooth: hci2: link tx timeout [ 622.925302][ T4275] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 623.039922][T14110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 623.072892][T14110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 623.127175][T14110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 623.211139][T14113] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 623.336589][ T4792] device batadv1 left promiscuous mode [ 624.184125][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 624.348806][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.355168][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.423936][T11482] Bluetooth: hci4: command 0x0406 tx timeout [ 631.543967][T11482] Bluetooth: hci1: command 0x0406 tx timeout