last executing test programs: 1m12.446645234s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a3100000000200004801c0001800a0001006c696d69740000000c009dd123fb0440000000010900020073797a3200000000050007"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xb, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3ff}]}}]}, 0x44}}, 0x20004055) setns(0xc9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r2, &(0x7f00000002c0)={@val={0x0, 0x805}, @val={0x0, 0x80, 0xf100, 0x3ff, 0x5, 0x81}, @x25={0x0, 0x0, 0x1}}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 1m11.341800141s ago: executing program 3 (id=10): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x200, 0x6, 0xca, 0xb}]}) 1m10.409686774s ago: executing program 3 (id=20): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)="e43344", 0x3) r2 = dup(r0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x79, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000480)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40440c0) msgget$private(0x0, 0x1c0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r7, r6}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x20058) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xfffffffe}}}}}}, 0x0) recvmmsg(r11, &(0x7f0000000f40)=[{{&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/17, 0x11}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/146, 0x92}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f00000007c0)=""/120, 0x78}, {&(0x7f0000000840)=""/90, 0x5a}], 0x7, &(0x7f0000000a00)=""/56, 0x38}, 0x40}, {{&(0x7f0000000a40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/63, 0x3f}], 0x1, &(0x7f0000000b40)=""/54, 0x36}, 0x3}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b80)=""/31, 0x1f}, {&(0x7f0000000bc0)=""/226, 0xe2}, {&(0x7f0000000cc0)=""/159, 0x9f}, {&(0x7f0000000d80)=""/68, 0x44}], 0x4, &(0x7f0000000e40)=""/254, 0xfe}, 0xf}], 0x3, 0x10162, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r12, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1m10.223655279s ago: executing program 3 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x16, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0xfffffffffffffffe) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfffffffffffffe20}, @HCI_OP_LE_SET_RANDOM_ADDR={{0x6}, 0x5}}}, 0xb) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x4010) 1m9.652122678s ago: executing program 32 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000600000009c0000000000000072000000000000029500000d00000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x80000aa, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}]}, 0x48}}, 0x0) 1m1.183130551s ago: executing program 33 (id=97): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 58.058087448s ago: executing program 34 (id=117): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x11, 0x4}, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x28, 0x10, 0x401, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r2, 0x300}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x0) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 55.689338965s ago: executing program 35 (id=142): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) syz_pidfd_open(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0xfff3}, {0x1}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0xa0, 0x1, 0x2, 0x5}]}}]}}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r5, @ANYBLOB="080005", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 55.127710284s ago: executing program 36 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x16, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0xfffffffffffffffe) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfffffffffffffe20}, @HCI_OP_LE_SET_RANDOM_ADDR={{0x6}, 0x5}}}, 0xb) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x4010) 52.907660007s ago: executing program 0 (id=163): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) (async) listen(r0, 0x5) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$PPPIOCDISCONN(r3, 0x7439) (async) r4 = accept$inet(r0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0xb8, 0x16, 0xa, 0xa06, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x58, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'wg0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x120}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x60, 0x4, 0x2, 0x22000, r5, 0x9, '\x00', 0x0, r3, 0x1, 0x3, 0x2}, 0x50) (async) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) (async) sendto$inet(r3, &(0x7f0000000200)="0008000000000102", 0x8, 0x0, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0xffffffffffffffb4, 0x40002043, 0x0, 0xfffffffffffffe83) 52.302068887s ago: executing program 9 (id=148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x44c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x348, 0x2, [@TCA_BPF_ACT={0x344, 0x1, [@m_simple={0xd0, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x1, 0x10000000, 0x7fffffff, 0x5}}]}, {0x8a, 0x6, "f2687c5aa78339e616deb3f1952753d9cf558778848a36d6c9940000947c11a1a804635325a9519bdd7d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e00000000000000003e74015138ea6ba9c60c29dd78378bb28567c803e2d81ccda8c5f8e000b81344003a042a979b8353b716e0d9c0c6c5fbd082d834d2e81309ce43eb"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xe8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xad, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x11c, 0x6, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2f, 0x0, 0x800, 0x1796}, @multicast2, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x6, 0x9, 0x8}, @multicast2, @remote, 0xffffff00, 0x10}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7, 0x8, 0x5, 0xf447}, @remote, @private=0xa010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffff797, 0x1, 0x7fffffff, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffff, 0x1}}]}, {0x51, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad033"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x6c, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x3c, 0x6, "07bdcd75a4a9da5b8b50d4652cb3159bb53b2171e4c21b5ee7e84134c69cc9678b50f2de32ddaab80e12716bc2c004e3b76cf08cab038408"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xd0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0x4c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x1d, 0x6, "d35262dd0c45c89a36560c0300000000000000c4e5b36b2569"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x70, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x44, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x44c, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x348, 0x2, [@TCA_BPF_ACT={0x344, 0x1, [@m_simple={0xd0, 0xe, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x1, 0x10000000, 0x7fffffff, 0x5}}]}, {0x8a, 0x6, "f2687c5aa78339e616deb3f1952753d9cf558778848a36d6c9940000947c11a1a804635325a9519bdd7d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e00000000000000003e74015138ea6ba9c60c29dd78378bb28567c803e2d81ccda8c5f8e000b81344003a042a979b8353b716e0d9c0c6c5fbd082d834d2e81309ce43eb"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xe8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xad, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x11c, 0x6, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2f, 0x0, 0x800, 0x1796}, @multicast2, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x4, 0x6, 0x9, 0x8}, @multicast2, @remote, 0xffffff00, 0x10}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7, 0x8, 0x5, 0xf447}, @remote, @private=0xa010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xfffff797, 0x1, 0x7fffffff, 0x2}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffff, 0x1}}]}, {0x51, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad033"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x6c, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x3c, 0x6, "07bdcd75a4a9da5b8b50d4652cb3159bb53b2171e4c21b5ee7e84134c69cc9678b50f2de32ddaab80e12716bc2c004e3b76cf08cab038408"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xd0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc0, 0x1, [@m_simple={0x4c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x1d, 0x6, "d35262dd0c45c89a36560c0300000000000000c4e5b36b2569"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x70, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x44, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x44c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) (async) write(r0, &(0x7f0000000200)='0', 0x1) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) mount$bpf(0x0, &(0x7f0000003040)='./file0\x00', &(0x7f0000003080), 0x8082, &(0x7f00000030c0)=ANY=[@ANYBLOB='mode=00000000000000000034257,gid=', @ANYRESHEX=r5]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x1, 0x7}, [{0x2, 0x2, r2}, {0x2, 0x0, 0xee00}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x4, 0xee00}, {0x2, 0x2, r3}], {0x4, 0x6}, [{0x8, 0x0, r5}, {0x8, 0x6, 0xee00}], {}, {0x20, 0x3}}, 0x5c, 0x1) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 52.225178028s ago: executing program 9 (id=166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 52.223188503s ago: executing program 9 (id=168): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x321081a, &(0x7f00000005c0)={[{@acl}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) (async) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f0000000340)={0x0, 0xfb, 0xc8, 0x0, 0x1, "971d1554aee4a0ebd6e3ad8f7b1fc3d6", "6cf7208cfda18048345c08902cf9e2385f0ad4d6e80603d3e2fdbc4095d60198c3448f5e820d668f843139b500759792e5e7b5550dbfbb8945536bda2bb4a25e1cab87704bf9473ce9cd79b1b0a31afe5f8dd2227e89549326fd2084c77e1b5e700a813a1fe41e4b978104c77825ace38b563afe52d507d459e74b2f853337a8f3cac90b72fb591742b5203d207e41e73ba09188cd2c526ac5e406045de5f691c17420777434c7478a4553ee45ff75ddfab6b6"}, 0xc8, 0x2) pwrite64(r0, &(0x7f0000000300)='E^', 0x2, 0x47ecf) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() (async) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/virtio-pci/new_id\x00', 0x1, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/virtio-pci/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000000)='8086 7', 0x6) (async) write(r3, &(0x7f0000000000)='8086 7', 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000076000d0b00400000000000000300001a0000000008000a0001000000080001"], 0x28}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x10, 0x100000001, 0x2}) 51.968391043s ago: executing program 0 (id=170): socket$igmp6(0xa, 0x3, 0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0x20) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000013, r3, 0x0) (async) splice(r3, &(0x7f0000000040)=0x2, r4, 0x0, 0x889, 0x8) (async) r6 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r6, &(0x7f0000000380)='ig', 0x2) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000000)=0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008"], 0x22) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000071122e00000000009500000000000000181bf03b7ff9ced336e619939fe14e659dd8a6c4315918fc650336e7f2e67997731d11e7f3cb285a47e6c9ef1feb45867ead4537e96ad8db3cc7aea3e62cb7a9c1ac93bfefaf9fa776c210513466b300809cfa747f3327e92299a9e12c30c1cc68e16153cae36a49c342e0ffdc3e43b957e2a0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x1000004, 0x0, r1, 0x1000, '\x00', 0x0, r8, 0x5, 0x0, 0x4}, 0x91) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x2c, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x9f}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x40, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bind$bt_hci(r0, &(0x7f00000005c0), 0x6) 51.611730398s ago: executing program 0 (id=175): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@noblock_validity}, {@lazytime}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) accept4$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0xa2dae75972d06b82) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000c7000000000000000a000000911176000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 51.471995166s ago: executing program 0 (id=176): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0xfb, 0x2b4, &(0x7f00000008c0)="$eJzs3L9rE2EYwPHHpD9T22QQQUF80EVFjjb+AwZpQYwotRF1EK72oiFnUnJnJSK2m6vg7ioUBwc3Qf0Hurg5uEmXDgouHdRI73LtpZ4UbS8JzfcD5d573/e5vverPPdC37Ubz+6Xi45RNF1JDKkkRJZkXSSzUWo60NwmvPKAhC3J6ZHvn45du3nrUi6fn5xWncrNnMuq6tjxdw8fvzrxwR25/mbs7aCsZG6vfct+WTm8cmTt10xw9Kqrps5Wq645a1s6V3LKhupV2zIdS0sVx6q1tBft6vx8Xc3K3GhqvmY5jpqVupaturpVdWt1Ne+apYoahqGjKek1yX+OKCxPT5u5WAaDThiOqqzVcmYysrGw3I5BAQCA7hJz/n/2pUhk/n+v5GjJ0cpO+X9CyP/jQ/6/nxxclcivwI38P9V8fzed+dnGkQEAAAAAAAAAAAAAAAAAAAAAgN1YbzTSjUYjHWyDn0ERGRKRYL/T40Q8dnP/B9s/XOyx0D/uDYnYTxcKCwV/67fnilISWywZ7xf54T0PTX556mJ+clw9GXlvLzbjFxcKSe/58OIDmej4CT9eW+P7JRX+/VlJyyH5HBWfjYwfkFMnQ/GGpOXjHamKLXPec70V/2RC9cKV/Lb4Ya8fAAAAAAD7gaGb/vh+99oNDZYN2dbuV27ND0g6ND8QLBIUnh/Y9n3dJ0f7OnPOAAAAAAD0Gqf+qGzatlWj0FI4LyJ/7RPMbrR/YKnNmuEuuVAxFhIb92BPj/z89YvLO/X5Grwa3XER9rSw+sA/tdampER17tAfJAAAAACx2Ur6Oz0SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6V/RSYclwF68m2PmftcdCx0q29eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALvM7AAD//yaRD3M=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='lock '], 0xc) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 51.40925927s ago: executing program 0 (id=178): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 51.310944409s ago: executing program 9 (id=181): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@bsdgroups}, {@nobarrier}, {@noinit_itable}], [{@appraise_type}, {@euid_lt}, {@subj_type={'subj_type', 0x3d, '(!'}}, {@appraise}, {@appraise_type}]}, 0xfc, 0x574, &(0x7f0000001980)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143442, 0x0) (async) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, 0xffffffffffffffff, 0x863b1000) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async, rerun: 32) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r7, 0x9, 0x0, @void}, 0x10) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x8}, 0x8) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000276829f5a54b7b98fa5f5c819573ac1b89310b54003a357a93bb57c4af71fd8c354f319b137b17d61627e2cd7e93742a9757b18e8fadc0330594d39b82b7dd4e4722655332474452692a4c157df06f50cce3cae9b426c3603a57786bdca24f424aa7a813afc0327d6e768fb9908c8295e55ab88cd9f1c64ea03766b3daac87f0d62c6ed20c3404199e31c8d4934f1fc64946dede7cd261170d977c202fc600e508a1043062d09e07b71ff6e42178b7e2a6d2bebcae9bee42421d6a4d18703ed15cf0b7c86bba32a44e0459e9cb8ee86957cdc0ecb02b495cdfcfc373085f053db07cba8d399d93249928bf4f12b5309a6519e14a7bff8f8abcc8aa3d2c53df0a37233213b3551e3c35de81e93f75a0bbd9720716eb64a45729e7da2426b121b22f60e5e63b131458a1d00f2d31f7913ddf048163efd8edcf655551cb50a453656b776948cccf49b4014cec59430269560daf78727b4ad00e603a800bf67f90ee609d73738785cdd2b4fd02907c499146764d87e4b17d561a0339ea0059178200458eb1735b770a28355931", @ANYRES32=0x0, @ANYBLOB="040101000000000008060000", @ANYRES32=r4, @ANYBLOB="14000300776730000000000000000000000000000800040001000000"], 0x44}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000080), 0x58, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = memfd_create(&(0x7f0000000000)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcdX\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9=\t\xbb\x0e\xbb\xb5\x02\x95u\x94r\xfd\x00\xb9\xf8z\xa0\xe6\xcc\x85QO\x1dD\xd5\xe2\xa56j\\', 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r8) (async, rerun: 64) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x86) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f0000001f00)={0x2020}, 0x2020) 51.044266238s ago: executing program 0 (id=185): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000e1ffffff050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000208"], 0x88}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x34, &(0x7f000000c280)={&(0x7f00000004c0)=ANY=[], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000280)=@req={0x0, 0x8000, 0xff, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b26, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) accept4(r1, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f00000003c0)=0x80, 0x75ce9f7c83b0f866) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/block/md123/md/new_dev\x00', 0x82042, 0x1b6) fallocate(r4, 0x0, 0x0, 0x10000) pwrite64(r4, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b9f000000000000000000000000000000000000000000000000000000001c532ba901001600"/236, 0xec, 0x0) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf257b00000008000300", @ANYRES32=r7, @ANYBLOB="b4299a0cc74a535c7654c59468303e81f7e891eb7c98cb3565f84f1d22b82e06895032bdf78df2ba65269029a08aa379d3579d4caacfff1e83ce8fbcb15ed17fbe6b77221c2575d719e7f34c"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) r8 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r9, &(0x7f0000000300)='md123', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x200401, 0x0) write(r10, &(0x7f0000000700)="373a30ff", 0x4) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) 50.962363843s ago: executing program 37 (id=185): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000e1ffffff050000000900010073797a300000000040000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000014000480080001400000000208"], 0x88}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x34, &(0x7f000000c280)={&(0x7f00000004c0)=ANY=[], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000280)=@req={0x0, 0x8000, 0xff, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b26, &(0x7f00000002c0)) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) accept4(r1, &(0x7f0000000340)=@x25={0x9, @remote}, &(0x7f00000003c0)=0x80, 0x75ce9f7c83b0f866) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/block/md123/md/new_dev\x00', 0x82042, 0x1b6) fallocate(r4, 0x0, 0x0, 0x10000) pwrite64(r4, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b9f000000000000000000000000000000000000000000000000000000001c532ba901001600"/236, 0xec, 0x0) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf257b00000008000300", @ANYRES32=r7, @ANYBLOB="b4299a0cc74a535c7654c59468303e81f7e891eb7c98cb3565f84f1d22b82e06895032bdf78df2ba65269029a08aa379d3579d4caacfff1e83ce8fbcb15ed17fbe6b77221c2575d719e7f34c"], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) r8 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r9, &(0x7f0000000300)='md123', 0x5) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x200401, 0x0) write(r10, &(0x7f0000000700)="373a30ff", 0x4) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) 50.351152863s ago: executing program 9 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) (async) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac141400000000000000000003000600"], 0x50}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000180), 0x40000000000007b, 0x4004) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) shutdown(r2, 0x0) symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) (async, rerun: 64) mount$nfs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)={[{'udp\x00'}]}) (async, rerun: 64) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) recvmmsg(r3, &(0x7f00000000c0), 0x400000000000256, 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) (async) chdir(&(0x7f0000000240)='./file1/file0\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)={0x2f0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "a270b114f04cc1af33efab868b74420e12fd044091b6be7bb8b93b5e8ef69cf47eb6a912a0ef236e56d5bc1e169d4cf2949e8ea925c444"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbe, 0x5, "f8903f47889faffc239f21ba92eb2507902a5f94dbf70bf8c761cc9a05308a6f8f791f7065a30e7d77861bf71a35a7a978c2e7e064d7ac8e0bb8313a526ee0cbd0eaebe8c2f2fcf047c185648e4ef930225e81ecfe62d7001f3f83f4c5b8b424f66b74e745292af5125f75ccbf0c8815e1ff9c18356f06769737c730a65348c0dda0acbb930008262fe0546b752f875d8a916391caa2fcd5d7cf6fbcd69d86965e4e82409962f4a587ee5fff7185ec540815ef29c2bdaddab735"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+$\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4011}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfs\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x140, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf8, 0x4, "b989d3da779ed020cc731fe3d5f9e4bc26956b738bf101cddac27e2e7941edf3b13aaf604079b27188fbe2f86f2c9dfb7e124668981609f91fe567ebdbe234fe95ad6d039c21a2b12ea6cbf040439d06ca78cbe93fa0894a70a0ae82a7a827c0cd01f1e4fe8431764ffe8d43f283ff9f228fea280e36f5e6383db4977b7e4a380a55a3b3b552b396c00b009063b1d8ee1ea4b37f26cb41a6465d1a705c8c889f4b2676e74e1669c4ce9c0568444e5f8d5d1de5435acb04d68902d6cdfc6641b9f7993cd1a4ca1be28fef2febaa3278af29c445235ecd95f1d9810b51208511ac393eac2df7140ae5a24e5a78220806060b9285f7"}, @ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "49777c8e784e6b47d7f92a813b44e65b87f6fe3810b9e4dcf82ab033bce7be1965b38263a30a816bf73264f8d0d00dea0442b53ffce683f081"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8c4}, 0x880) (async, rerun: 64) file_setattr(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x14010, 0x7fffffff, 0x7ff, 0xf30, 0xb8}, 0x18, 0x100) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f0000000180), 0x61) (async) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x20, 0x0, @fd=r4, 0x5, 0x0, 0x0, 0x18, 0x0, {0x1, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x4}, 0x1}}) io_uring_enter(r5, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 50.279362213s ago: executing program 38 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) (async) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac141400000000000000000003000600"], 0x50}}, 0x0) (async) sendmmsg(r1, &(0x7f0000000180), 0x40000000000007b, 0x4004) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) shutdown(r2, 0x0) symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) (async, rerun: 64) mount$nfs(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000006c0)={[{'udp\x00'}]}) (async, rerun: 64) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) recvmmsg(r3, &(0x7f00000000c0), 0x400000000000256, 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) (async) chdir(&(0x7f0000000240)='./file1/file0\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)={0x2f0, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3b, 0x5, "a270b114f04cc1af33efab868b74420e12fd044091b6be7bb8b93b5e8ef69cf47eb6a912a0ef236e56d5bc1e169d4cf2949e8ea925c444"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xbe, 0x5, "f8903f47889faffc239f21ba92eb2507902a5f94dbf70bf8c761cc9a05308a6f8f791f7065a30e7d77861bf71a35a7a978c2e7e064d7ac8e0bb8313a526ee0cbd0eaebe8c2f2fcf047c185648e4ef930225e81ecfe62d7001f3f83f4c5b8b424f66b74e745292af5125f75ccbf0c8815e1ff9c18356f06769737c730a65348c0dda0acbb930008262fe0546b752f875d8a916391caa2fcd5d7cf6fbcd69d86965e4e82409962f4a587ee5fff7185ec540815ef29c2bdaddab735"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+$\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4011}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfs\x00'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x140, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf8, 0x4, "b989d3da779ed020cc731fe3d5f9e4bc26956b738bf101cddac27e2e7941edf3b13aaf604079b27188fbe2f86f2c9dfb7e124668981609f91fe567ebdbe234fe95ad6d039c21a2b12ea6cbf040439d06ca78cbe93fa0894a70a0ae82a7a827c0cd01f1e4fe8431764ffe8d43f283ff9f228fea280e36f5e6383db4977b7e4a380a55a3b3b552b396c00b009063b1d8ee1ea4b37f26cb41a6465d1a705c8c889f4b2676e74e1669c4ce9c0568444e5f8d5d1de5435acb04d68902d6cdfc6641b9f7993cd1a4ca1be28fef2febaa3278af29c445235ecd95f1d9810b51208511ac393eac2df7140ae5a24e5a78220806060b9285f7"}, @ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "49777c8e784e6b47d7f92a813b44e65b87f6fe3810b9e4dcf82ab033bce7be1965b38263a30a816bf73264f8d0d00dea0442b53ffce683f081"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x8c4}, 0x880) (async, rerun: 64) file_setattr(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x14010, 0x7fffffff, 0x7ff, 0xf30, 0xb8}, 0x18, 0x100) (rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x34, &(0x7f0000000180), 0x61) (async) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_READ_MULTISHOT={0x31, 0x20, 0x0, @fd=r4, 0x5, 0x0, 0x0, 0x18, 0x0, {0x1, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x2, 0xa, 0x0, 0x0, 0x4}, 0x1}}) io_uring_enter(r5, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) 47.343533455s ago: executing program 8 (id=224): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xda39, 0x10, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd, 0x0, 0x400, 0x1}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000080)=@IORING_OP_READV_FIXED={0x3c, 0x4d, 0x2004, @fd_index=0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, {0x2, 0x0, 0x76, '\x00', 0x0, 0x7fffffffffffffff}}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=@upd={0x120, 0x12, 0x400, 0x70bd26, 0x25dfdbfc, {{'jitterentropy_rng\x00'}, '\x00', '\x00', 0x0, 0x6000}, [{0x8, 0x1, 0x3}, {0x8, 0x1, 0xb}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0xb0}, {0x8, 0x1, 0xfffffffa}, {0x8, 0x1, 0xffff}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0xfff}]}, 0x120}, 0x1, 0x0, 0x0, 0x18}, 0x20008005) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x29, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x3, 0x77, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) 47.232276173s ago: executing program 8 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) (rerun: 32) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, 0x210c8, 0x84}, [@IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x28}}, 0x0) 47.215964445s ago: executing program 8 (id=228): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000070060000000000000900000073110c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 47.155524487s ago: executing program 8 (id=229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 46.291200529s ago: executing program 8 (id=232): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffff418668f88000170000000000009e0001000000000095000000"], &(0x7f0000000100)='syzkaller\x00', 0x2}, 0x94) ioctl(r1, 0xfffff000, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000080), &(0x7f00000000c0), 0x4, 0x3) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000140)={@private0}, &(0x7f0000000180)=0x14) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000000)={0xe, r1, 0x1}) 46.155983153s ago: executing program 8 (id=233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000000f) write$binfmt_elf64(r2, &(0x7f0000000bc0)=ANY=[], 0x578) close(r2) (async) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4008af03, 0x7ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffccb, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYRESDEC=r4], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffccb, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYRESDEC=r4], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8004) write(r7, &(0x7f0000000000)="83c64b46be7b002ce604eeac2b74402f6c30709fd8743093fef0c5d9eb493740", 0x20) (async) write(r7, &(0x7f0000000000)="83c64b46be7b002ce604eeac2b74402f6c30709fd8743093fef0c5d9eb493740", 0x20) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mount$bpf(0x0, 0x0, 0x0, 0x8080, &(0x7f0000000380)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756964654c50fa905aeb7766651354393d", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7040010000000f00000005002e002000000008000300", @ANYRES32=r8, @ANYBLOB="a4746fc7f35f7817000000000000000000000000000004"], 0x24}}, 0x18) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40051}, 0x800) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40051}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004090) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b211800000035ea"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 31.164879571s ago: executing program 39 (id=233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000000f) write$binfmt_elf64(r2, &(0x7f0000000bc0)=ANY=[], 0x578) close(r2) (async) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4008af03, 0x7ff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r6, 0x890c, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffccb, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYRESDEC=r4], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8004) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffccb, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYRESDEC=r4], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8004) write(r7, &(0x7f0000000000)="83c64b46be7b002ce604eeac2b74402f6c30709fd8743093fef0c5d9eb493740", 0x20) (async) write(r7, &(0x7f0000000000)="83c64b46be7b002ce604eeac2b74402f6c30709fd8743093fef0c5d9eb493740", 0x20) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mount$bpf(0x0, 0x0, 0x0, 0x8080, &(0x7f0000000380)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756964654c50fa905aeb7766651354393d", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7040010000000f00000005002e002000000008000300", @ANYRES32=r8, @ANYBLOB="a4746fc7f35f7817000000000000000000000000000004"], 0x24}}, 0x18) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40051}, 0x800) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x40051}, 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004090) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b211800000035ea"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0xa}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 26.538867559s ago: executing program 7 (id=457): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x8914, &(0x7f0000000040)="6574683000000000000000000000000001000000") ioctl(r0, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') bind$x25(r0, &(0x7f0000000080), 0x12) connect$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) close(r0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 25.646070505s ago: executing program 7 (id=470): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file4/file7\x00', 0x8ac0, 0xe4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) 24.7347908s ago: executing program 7 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x16, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8849088a8", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0xfffffffffffffffe) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_vhci(&(0x7f0000000640)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfffffffffffffe20}, @HCI_OP_LE_SET_RANDOM_ADDR={{0x6}, 0x5}}}, 0xb) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x4010) 24.221835927s ago: executing program 7 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipmr_delroute={0x28, 0x19, 0x1, 0x0, 0x2, {0x80, 0x20, 0x0, 0x4, 0x69fdbf6de728244c, 0x4, 0x0, 0x5, 0x700}, [@RTA_MULTIPATH={0xc, 0x9, {0x2b, 0x0, 0x73}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40010) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000200)={[{@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@shortname_lower}, {@numtail}, {@utf8}, {@shortname_winnt}, {@fat=@umask={'umask', 0x3d, 0xb4}}, {@fat=@flush}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_winnt}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8no}]}, 0x3, 0x28e, &(0x7f0000000640)="$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") ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r1, 0x2e, 0x4b8d, 0x62}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r5 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) setns(0xc9, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002140)={0x50, 0x0, r8, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r6, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r9}, 0x10) syz_fuse_handle_req(r6, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) ioctl$sock_inet_SIOCGARP(r7, 0x8954, 0x0) socket(0x8, 0x5, 0x5) close_range(r5, 0xffffffffffffffff, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="13050b249d4ec4744f3c26e3653a77725fbac5b82ef06586b41dc10b9b457613b3ff7f303f41e812bba19e1b24cbc3774f930241b7d889b3861c150efb87377231c07e9a1170aff7c696cb66", 0x4c}], 0x1, 0x0, 0x0, 0x81817f961ce36e31}], 0x1, 0x4044800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f00000000c0)=""/105, 0x69}], 0x2}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x80, 0x777133c1c2a4193, 0x0, 0xfff, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x66, 0x0, 0x4, 0x4, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x1c, 0xc1, 0x1, 0xa, [{@multicast1, 0x9}, {@multicast1, 0x8}, {@remote, 0x1}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200027bd7000fedbdf250b0000000800000800030009000000340006800500020003000000060001000a000000080007000000000000", @ANYRES32=r12, @ANYBLOB="060005004e200000060001000a000000060005004e210000"], 0x58}}, 0x20000004) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x40a801, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 24.01969338s ago: executing program 7 (id=486): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000340)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x2, 0x2, 0x5, 0x7, 0x100, 0x4}], &(0x7f00000003c0)='syzkaller\x00', 0x3e, 0x0, &(0x7f0000000400), 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0xd, 0x940, 0xffffffff}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)=[0x1], 0x0, 0x10, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xde, 0x94, &(0x7f0000000600)="336e5f7185d959d1a8000178bf5487558513bbb3d1fc1e93a91733520b311e4338c76c41b450ce0af619dbc3e55295f3b701174bfecac02e09fefc8aa38133c880de83c459a14705a6f95c7d2e1b70a0f993fb2d788ebafdeaf8be8ecfe359ae92125a63c24b45777370ef9dfdb46a916e64ba09f523fbd76d1f32eb0e1ddc920c8b164e5038ebd842b1cd83e25cf05451f53a34f870406e2903453d5b083f3344a44898ebe071c76b4c0dcc06a3e4ac1ca9faf8d3ef1ce33b8878c3216ac74bfbd152054e0a76c033abe0e2fae81eb29c563d7b844af5a35b3a496f3672", &(0x7f0000000700)=""/148, 0x9, 0x0, 0xb3, 0x8c, &(0x7f00000007c0)="fc2747340f1e7dd9e0f69d3c0671a570952b6accd5a4372662f99d93e990208088e8822f98901673c1463e2d76bdcd8236c4e49465bb6e9a459ab371165d4d69b82503a8cced444a4e3760cbe7f5be999d2ea6b089062990fcdae54c5da9068adc9818630b104720c51640327c46230aa89750b80c8f2402f681ef9daa28b7ee21ca6db9d79520cb8e95d5e5f1c0535840db734736449b90c60e1d4ff307794e1acbc6c44f76197cf50a949c2141bc8c1fb894", &(0x7f0000000880)="83edfeee2c09c732a1def4500489ccc77c40825b61b64e0923152be72cc3f37c2e186bfe881fec1fd173eef878ac2a4dd03c7e750651b13840a2e32b0ae7bc251e63428c9bbd1faefc93b5edd136eb2ae895722431e3d9c591ea073930f6d29868e8ee7245d40f28c95bfda47177989496107b5351f3fb4242bf801cdb28d17be90624f19506fb42db907eed", 0x4, 0x0, 0x7ff}, 0x50) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f0000000500), 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x257, &(0x7f00000000c0)="$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") syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18) 23.608207546s ago: executing program 7 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x4001) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000001010102000000000020000002000000240002800c000280050001003a0000001400018008000100000000c6bd9c9a00ac1e01010c001980080002002a"], 0x44}, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) 23.460641652s ago: executing program 40 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x4001) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000001010102000000000020000002000000240002800c000280050001003a0000001400018008000100000000c6bd9c9a00ac1e01010c001980080002002a"], 0x44}, 0x1, 0x0, 0x0, 0x40400d0}, 0x0) 6.187058922s ago: executing program 4 (id=787): bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x19, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900048095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 6.153587471s ago: executing program 4 (id=788): socket(0xa, 0x3, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='1', 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) mlock(&(0x7f0000bf3000/0x3000)=nil, 0x3000) write(r1, &(0x7f00000000c0)='1', 0x1) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'ipvlan0\x00'}) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={'\x00', 0xfffd, 0x0, 0x101, 0x1, 0x7fffffff, 0x0}) capset(&(0x7f0000000200)={0x20080522, r3}, &(0x7f0000000280)={0x6, 0x8000, 0x40, 0x8, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0042f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x10009, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) 5.739788957s ago: executing program 4 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x4000000) 4.557172583s ago: executing program 4 (id=808): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d3, &(0x7f00000001c0)="$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") socket$nl_route(0x10, 0x3, 0x0) fsopen(0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_mnt/irq/1/smp_affinity\x00', 0x2, 0x1aa) write$binfmt_misc(r0, &(0x7f0000000040), 0x1fff0) 4.524808247s ago: executing program 4 (id=811): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f0000002b00)=[{0x0}, {&(0x7f0000000700)="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", 0x781}, {0x0}], 0x3) 4.108332793s ago: executing program 4 (id=831): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x200, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x7, @remote, 0x46}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x28}}], 0x2, 0x8c4) 3.982781152s ago: executing program 41 (id=831): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0x200, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x7, @remote, 0x46}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x28}}], 0x2, 0x8c4) 1.473524188s ago: executing program 5 (id=900): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 1.421593981s ago: executing program 5 (id=901): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0x7b5ce000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x17) 1.314288297s ago: executing program 5 (id=903): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sync() sync() sync() r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) accept(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000003c0)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000042c0)=@IORING_OP_GETXATTR={0x2c, 0x20, 0x0, 0x0, &(0x7f0000000480), &(0x7f0000004200)="cd8a34cc16f7e80d8a3e51d4703206e0c0866e2a5eef509e62157554c52a8148af6102dd837e22f9f115db3c218c34b97e81bd953d606dc647f62b21c16d7a9fb7971221351bccf79ee2d59e6f4163b1a86ca5ac1efa1b036815f322e111e6ec0bf323ea3f06c353045b443b7457d22bb2", 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, &(0x7f0000004280)='./file0\x00'}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1.055971429s ago: executing program 1 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) write$FUSE_INIT(r0, 0x0, 0x0) 1.008778654s ago: executing program 1 (id=910): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) unshare(0x16000a80) kexec_load(0x2, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x400000041000000}], 0x0) 935.904443ms ago: executing program 1 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 907.488308ms ago: executing program 2 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0x7b5ce000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x17) 828.758774ms ago: executing program 2 (id=914): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xc}, {}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 338.948572ms ago: executing program 6 (id=917): r0 = socket$can_j1939(0x1d, 0x2, 0x7) timer_delete(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='da', 0x2}}, 0x0) recvmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 296.193464ms ago: executing program 5 (id=918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xffffffffffffff29, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000001000000004920800024000000001"], 0xfea1}, 0x1, 0x0, 0x0, 0xc085}, 0x8800) 292.086044ms ago: executing program 6 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) 286.069222ms ago: executing program 1 (id=920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=@deltfilter={0x24, 0x2d, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000740)=""/232, 0xe8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 236.016479ms ago: executing program 2 (id=921): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x80, 0x4d, 0x2ba4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x4, 0x34}) 227.605028ms ago: executing program 5 (id=922): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffea3, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 225.022546ms ago: executing program 6 (id=923): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 203.908519ms ago: executing program 5 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 152.822745ms ago: executing program 2 (id=925): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x50) write(r0, &(0x7f0000000000)='3', 0x4e) set_mempolicy_home_node(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0) 152.538962ms ago: executing program 1 (id=926): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000008c0)="b907ef19edfff00702000ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 148.085385ms ago: executing program 6 (id=927): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000100)=""/171}, 0x20) 145.980155ms ago: executing program 2 (id=928): socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2160) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_ext={0x1a, 0xf, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)=ANY=[], 0x20) 84.394466ms ago: executing program 2 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) 36.119349ms ago: executing program 6 (id=930): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x8000001}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r5}, 0x20) 23.953705ms ago: executing program 1 (id=931): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000270000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000019c0)="ba", 0x10002, 0x4011, 0x0, 0x0) 0s ago: executing program 6 (id=932): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffa, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6accbd3fe37d36128bbad009bc712d90f500000000000000406bdd8a0f350000e35abdb80e38f5eb01000100", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): es in process `syz.7.248'. [ 61.514024][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.248'. [ 61.674322][ T4720] Bluetooth: hci1: command tx timeout [ 61.834554][ T4238] usb 15-1: device descriptor read/8, error -110 [ 62.075463][ T4720] Bluetooth: hci4: command tx timeout [ 62.108991][ T4720] Bluetooth: hci0: unexpected cc 0x2005 length: 5 > 1 [ 62.184751][ T6744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.194520][ T6833] loop7: detected capacity change from 0 to 8 [ 62.236129][ T4238] usb usb15-port1: attempt power cycle [ 62.272480][ T6841] netlink: 20 bytes leftover after parsing attributes in process `syz.1.252'. [ 62.375281][ T6856] loop7: detected capacity change from 0 to 1024 [ 62.644336][ T5016] IPVS: starting estimator thread 0... [ 62.744357][ T6865] IPVS: using max 61 ests per chain, 146400 per kthread [ 62.797025][ T4238] usb usb15-port1: unable to enumerate USB device [ 62.813928][ T6886] netlink: 'syz.7.258': attribute type 1 has an invalid length. [ 62.837626][ T6886] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 62.842852][ T6886] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 62.844439][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.7.258'. [ 62.846939][ T6886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.847177][ T1226] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 62.855083][ T6886] loop7: detected capacity change from 0 to 512 [ 62.861871][ T6886] EXT4-fs (loop7): orphan cleanup on readonly fs [ 62.869142][ T6886] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.873762][ T6886] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.258: corrupted inode contents [ 62.883095][ T6886] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.887600][ T6886] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #15: comm syz.7.258: mark_inode_dirty error [ 62.887645][ T6886] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.893097][ T6886] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.258: corrupted inode contents [ 62.893142][ T6886] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.895103][ C1] EXT4-fs (loop7): error count since last fsck: 3 [ 62.895120][ C1] EXT4-fs (loop7): initial error at time 62: ext4_do_update_inode:5742: inode 15 [ 62.895141][ C1] EXT4-fs (loop7): last error at time 62: ext4_do_update_inode:5742: inode 15 [ 62.905210][ T6886] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3001: inode #15: comm syz.7.258: mark_inode_dirty error [ 62.905248][ T6886] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.907914][ T6886] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3004: inode #15: comm syz.7.258: mark inode dirty (error -117) [ 62.907936][ T6886] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.912548][ T6886] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -117) [ 62.912643][ T6886] EXT4-fs (loop7): 1 orphan inode deleted [ 62.913083][ T6886] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 62.950769][ T5660] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.988482][ T6847] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 63.011584][ T6898] loop2: detected capacity change from 0 to 512 [ 63.088727][ T4720] Bluetooth: hci0: unexpected cc 0x2005 length: 5 > 1 [ 63.099415][ T6899] vhci_hcd vhci_hcd.2: default hub control req: 010b v0000 i0000 l0 [ 63.133387][ T6893] netlink: 56 bytes leftover after parsing attributes in process `syz.6.260'. [ 63.272155][ T6922] loop1: detected capacity change from 0 to 1024 [ 63.276984][ T6921] loop7: detected capacity change from 0 to 512 [ 63.285337][ T6921] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 63.296072][ T6921] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 63.298692][ T6921] EXT4-fs (loop7): 1 truncate cleaned up [ 63.338523][ T6921] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.410296][ T5660] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.448534][ T6934] loop6: detected capacity change from 0 to 512 [ 63.453789][ T6934] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 63.503588][ T6934] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.271: bg 0: block 104: invalid block bitmap [ 63.503643][ T6934] loop6: lost filesystem error report for type 5 error -117 [ 63.504156][ T6934] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 63.504169][ T6934] loop6: lost filesystem error report for type 5 error -117 [ 63.504238][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 63.504254][ C0] EXT4-fs (loop6): initial error at time 63: ext4_validate_block_bitmap:432 [ 63.504268][ C0] EXT4-fs (loop6): last error at time 63: ext4_mb_clear_bb:6679 [ 63.505320][ T6934] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.271: invalid indirect mapped block 1 (level 1) [ 63.505334][ T6934] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.505622][ T6934] EXT4-fs (loop6): 1 truncate cleaned up [ 63.506201][ T6934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.563039][ T6934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.271'. [ 63.626771][ T6953] loop2: detected capacity change from 0 to 256 [ 63.667711][ T6953] netdevsim netdevsim2: Direct firmware load for T)`)YFnA@T<3ڂ$rcnHwC" -8/ failed with error -2 [ 63.667749][ T6953] netdevsim netdevsim2: Falling back to sysfs fallback for: T)`)YFnA@T<3ڂ$rcnHwC" -8/ [ 63.692141][ T4720] Bluetooth: hci4: unexpected cc 0x2005 length: 5 > 1 [ 63.754670][ T4720] Bluetooth: hci1: command tx timeout [ 63.767914][ T6960] loop1: detected capacity change from 0 to 512 [ 63.787631][ T6960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.800213][ T6960] netlink: 56 bytes leftover after parsing attributes in process `syz.1.276'. [ 63.818405][ T5489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.846515][ T6292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.900957][ T6969] loop6: detected capacity change from 0 to 128 [ 63.901293][ T6969] ext4: Unknown parameter 'func' [ 63.961014][ T6977] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.967934][ T6972] use of bytesused == 0 is deprecated and will be removed in the future, [ 63.970167][ T6972] use the actual size instead. [ 63.981563][ T4824] kernel write not supported for file netdevsim1/hwstats/l3/enable_ifindex (pid: 4824 comm: kworker/0:8) [ 64.039194][ T6983] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.039507][ T6983] EXT4-fs error (device loop1): dx_probe:791: inode #2: comm syz.1.280: Directory hole found for htree index block 0 [ 64.039526][ T6983] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 64.042704][ T6983] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 64.043162][ T6983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.045721][ T6983] EXT4-fs (loop1): shut down requested (2) [ 64.175772][ T6292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.470288][ T7026] warning: `syz.7.285' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.477247][ T24] cfg80211: failed to load regulatory.db [ 64.484107][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.484156][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.496286][ T7025] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.497354][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.7.285'. [ 64.504820][ T7025] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.284: inode has both inline data and extents flags [ 64.504861][ T7025] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 64.505460][ T7025] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.284: couldn't read orphan inode 15 (err -117) [ 64.505482][ T7025] loop2: lost filesystem error report for type 5 error -117 [ 64.506018][ T7025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.590873][ T4720] Bluetooth: hci0: unexpected cc 0x2005 length: 5 > 1 [ 64.650093][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 64.694103][ T7033] netlink: 196 bytes leftover after parsing attributes in process `syz.2.284'. [ 64.698460][ T7033] vxcan3: entered promiscuous mode [ 64.698494][ T7033] vxcan3: entered allmulticast mode [ 65.011732][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 65.342125][ T7064] netlink: 'syz.7.290': attribute type 10 has an invalid length. [ 65.359308][ T6253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.425129][ T30] audit: type=1326 audit(65.420:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.430192][ T30] audit: type=1326 audit(65.420:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.437315][ T30] audit: type=1326 audit(65.430:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.450414][ T30] audit: type=1326 audit(65.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.450458][ T30] audit: type=1326 audit(65.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.450494][ T30] audit: type=1326 audit(65.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.450517][ T30] audit: type=1326 audit(65.440:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.450539][ T30] audit: type=1326 audit(65.440:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.450560][ T30] audit: type=1326 audit(65.440:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.450579][ T30] audit: type=1326 audit(65.440:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7079 comm="syz.2.292" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffba1792a8 code=0x7ffc0000 [ 65.720603][ T7080] netlink: 'syz.2.292': attribute type 298 has an invalid length. [ 65.724115][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 65.922450][ T7106] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 66.011990][ T4720] Bluetooth: hci1: unexpected cc 0x2005 length: 5 > 1 [ 66.135482][ T7129] gtp0: entered allmulticast mode [ 66.222642][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.383347][ T7148] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 66.430072][ T7155] netlink: 'syz.2.307': attribute type 16 has an invalid length. [ 66.437575][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.302'. [ 66.448968][ T7153] /dev/loop7: Can't open blockdev [ 66.538961][ T4720] Bluetooth: hci0: unexpected cc 0x2005 length: 5 > 1 [ 66.911491][ T7189] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 66.913662][ T7189] FAT-fs (loop6): Filesystem has been set read-only [ 66.918468][ T7189] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 66.918522][ T7189] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 548) [ 67.216597][ T7194] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 67.218430][ T7195] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 67.247948][ T7200] set_capacity_and_notify: 9 callbacks suppressed [ 67.249420][ T7200] loop1: detected capacity change from 0 to 512 [ 67.251094][ T7200] ext4: Unknown parameter 'noacl' [ 67.363443][ T7204] loop1: detected capacity change from 0 to 512 [ 67.568004][ T7221] loop2: detected capacity change from 0 to 1024 [ 67.584461][ T7221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.667607][ T6253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.835100][ T7235] overlayfs: failed to resolve './file0': -2 [ 67.892001][ T4720] Bluetooth: hci1: unexpected cc 0x2005 length: 5 > 1 [ 68.057728][ T7258] loop2: detected capacity change from 0 to 256 [ 68.103671][ T7266] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 68.382100][ T7289] loop7: detected capacity change from 0 to 256 [ 68.807601][ T7323] loop1: detected capacity change from 0 to 1024 [ 68.834800][ T7323] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 68.834849][ T7323] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 68.834901][ T7323] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 68.834916][ T7323] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 68.847004][ T4720] Bluetooth: hci0: unexpected cc 0x2005 length: 5 > 1 [ 69.155076][ T7349] qrtr: Invalid version 120 [ 69.174037][ T7351] loop2: detected capacity change from 0 to 512 [ 69.287054][ T7353] alloc_netdev: Unable to allocate device with zero queues [ 69.695492][ T7374] loop6: detected capacity change from 0 to 1024 [ 69.698862][ T7374] EXT4-fs: Ignoring removed i_version option [ 69.700773][ T7374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.702746][ T7374] EXT4-fs: Mount option(s) incompatible with ext2 [ 69.851436][ T7381] netlink: 64 bytes leftover after parsing attributes in process `syz.6.342'. [ 70.015590][ T7393] netlink: 64 bytes leftover after parsing attributes in process `syz.1.344'. [ 70.019061][ T7393] syzkaller1: entered promiscuous mode [ 70.019073][ T7393] syzkaller1: entered allmulticast mode [ 70.034642][ T7393] sl0: compressed packet ignored [ 70.252715][ T4720] Bluetooth: hci2: unexpected cc 0x2005 length: 5 > 1 [ 70.434661][ T30] kauditd_printk_skb: 153193 callbacks suppressed [ 70.445779][ T30] audit: type=1400 audit(70.430:44158): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5796 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 70.449826][ T30] audit: type=1400 audit(70.430:44159): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7416 comm="dhcpcd" name="/" dev="nvme0n1p2" ino=2 [ 70.453545][ T30] audit: type=1400 audit(70.430:44160): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7416 comm="dhcpcd" name="lib" dev="nvme0n1p2" ino=219 [ 70.458876][ T30] audit: type=1400 audit(70.430:44161): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7416 comm="dhcpcd" name="dhcpcd" dev="nvme0n1p2" ino=220 [ 70.463229][ T30] audit: type=1400 audit(70.430:44162): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7416 comm="dhcpcd" name="dhcpcd-run-hooks" dev="nvme0n1p2" ino=228 [ 70.467670][ T30] audit: type=1400 audit(70.430:44163): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=7416 comm="dhcpcd" path="/lib/dhcpcd/dhcpcd-run-hooks" dev="nvme0n1p2" ino=228 [ 70.471558][ T30] audit: type=1400 audit(70.430:44164): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7416 comm="dhcpcd" name="/" dev="nvme0n1p2" ino=2 [ 70.475737][ T30] audit: type=1400 audit(70.430:44165): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7416 comm="dhcpcd" name="lib" dev="nvme0n1p2" ino=219 [ 70.479371][ T30] audit: type=1400 audit(70.430:44166): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7416 comm="dhcpcd" name="dhcpcd" dev="nvme0n1p2" ino=220 [ 70.482933][ T30] audit: type=1400 audit(70.430:44167): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7416 comm="dhcpcd" name="/" dev="nvme0n1p2" ino=2 [ 70.503800][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'. [ 70.525327][ T7417] macsec1: entered allmulticast mode [ 70.525422][ T7417] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 70.525671][ T7417] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 70.527400][ T7417] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 70.709301][ T7422] loop6: detected capacity change from 0 to 1024 [ 70.711110][ T7422] EXT4-fs: Ignoring removed bh option [ 70.723720][ T7422] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 70.768649][ T7422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.798350][ T7429] input: syz1 as /devices/virtual/input/input5 [ 71.238651][ T7435] loop1: detected capacity change from 0 to 1024 [ 71.250858][ T7435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.325209][ T6292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.326334][ T7458] netlink: 256 bytes leftover after parsing attributes in process `syz.2.353'. [ 71.347401][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 71.435893][ T7463] Injecting memory failure for pfn 0x136a00 at process virtual address 0x20000000 [ 71.444077][ T7463] Memory failure: 0x136a00: Sending SIGBUS to syz.1.354:7463 due to hardware memory corruption [ 71.449885][ T7463] Memory failure: 0x136a00: recovery action for unsplit thp: Failed [ 71.580740][ T5489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.584122][ T7479] gadgetfs: bound to dummy_udc driver [ 71.651061][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.6.358'. [ 71.651107][ T7485] netlink: 48 bytes leftover after parsing attributes in process `syz.6.358'. [ 71.651118][ T7485] netlink: 48 bytes leftover after parsing attributes in process `syz.6.358'. [ 71.660105][ T7485] netlink: 32 bytes leftover after parsing attributes in process `syz.6.358'. [ 71.660185][ T7485] netlink: 48 bytes leftover after parsing attributes in process `syz.6.358'. [ 71.868742][ T4720] Bluetooth: hci4: unexpected cc 0x2005 length: 5 > 1 [ 72.131084][ T7515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 72.214545][ T5489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 72.283831][ T7536] set_capacity_and_notify: 3 callbacks suppressed [ 72.285448][ T7536] loop1: detected capacity change from 0 to 512 [ 72.343449][ T7536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.478419][ T7547] tmpfs: Bad value for 'mpol' [ 72.481090][ T6292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.682161][ T7567] loop2: detected capacity change from 0 to 512 [ 72.709031][ T7567] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 72.716863][ T7567] EXT4-fs (loop2): mount failed [ 72.745804][ T4720] Bluetooth: hci4: unexpected cc 0x2005 length: 5 > 1 [ 72.917413][ T7583] loop1: detected capacity change from 0 to 1024 [ 73.026695][ T7353] netdevsim netdevsim10: probe with driver netdevsim failed with error -12 [ 73.168473][ T7605] loop7: detected capacity change from 0 to 7 [ 73.170109][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.170163][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.175422][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.175470][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.180555][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.180607][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.183842][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.183892][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.187532][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.187584][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.191133][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.191170][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.194672][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.194706][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.194755][ T7605] ldm_validate_partition_table(): Disk read failed. [ 73.199513][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.199546][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.202865][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.202898][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.205413][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 73.205452][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 73.206660][ T7605] Dev loop7: unable to read RDB block 0 [ 73.206971][ T7605] loop7: unable to read partition table [ 73.207038][ T7605] loop7: partition table beyond EOD, truncated [ 73.207048][ T7605] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 73.302529][ T7613] overlay: filesystem on ./file0 is read-only [ 73.320240][ T7611] ldm_validate_partition_table(): Disk read failed. [ 73.322124][ T7611] Dev loop7: unable to read RDB block 0 [ 73.323871][ T7611] loop7: unable to read partition table [ 73.323950][ T7611] loop7: partition table beyond EOD, truncated [ 73.420638][ T7616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.424924][ T7616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.429067][ T7616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.430941][ T7616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.463641][ T7619] netlink: 'syz.7.385': attribute type 1 has an invalid length. [ 73.473988][ T4345] ldm_validate_partition_table(): Disk read failed. [ 73.475180][ T4345] Dev loop7: unable to read RDB block 0 [ 73.475855][ T4345] loop7: unable to read partition table [ 73.475922][ T4345] loop7: partition table beyond EOD, truncated [ 73.529750][ T4345] ldm_validate_partition_table(): Disk read failed. [ 73.530651][ T4345] Dev loop7: unable to read RDB block 0 [ 73.530865][ T4345] loop7: unable to read partition table [ 73.530915][ T4345] loop7: partition table beyond EOD, truncated [ 74.550259][ T7649] loop6: detected capacity change from 0 to 2048 [ 74.582151][ T7649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.616147][ T7649] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #12: block 2: comm syz.6.395: lblock 0 mapped to illegal pblock 2 (length 1) [ 74.631023][ T7649] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #12: block 2: comm syz.6.395: lblock 0 mapped to illegal pblock 2 (length 1) [ 74.635759][ T7649] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #12: block 2: comm syz.6.395: lblock 0 mapped to illegal pblock 2 (length 1) [ 74.711423][ T5489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.723698][ T4720] Bluetooth: hci0: unexpected cc 0x2005 length: 5 > 1 [ 74.840436][ T7657] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 74.840473][ T7657] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 74.840483][ T7657] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 74.895354][ T7660] overlayfs: failed lookup in lower (newroot/35, name='file0', err=-40): overlapping layers [ 74.933873][ T7663] overlayfs: workdir and upperdir must be separate subtrees [ 74.957484][ T7665] loop6: detected capacity change from 0 to 1024 [ 74.957996][ T7665] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.958008][ T7665] EXT4-fs: Ignoring removed oldalloc option [ 74.983446][ T7665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.022740][ T7665] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.401: lblock 0 mapped to illegal pblock 0 (length 1) [ 75.038777][ T7665] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 75.038840][ T7665] EXT4-fs (loop6): This should not happen!! Data will be lost [ 75.038840][ T7665] [ 75.039687][ T7665] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm syz.6.401: lblock 8 mapped to illegal pblock 8 (length 5) [ 75.064750][ T7665] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 75.064790][ T7665] EXT4-fs (loop6): This should not happen!! Data will be lost [ 75.064790][ T7665] [ 75.070792][ T7675] loop7: detected capacity change from 0 to 1024 [ 75.075570][ T7675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.084660][ T7675] EXT4-fs: Mount option(s) incompatible with ext2 [ 75.101636][ T6853] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 112: padding at end of block bitmap is not set [ 75.106625][ T6853] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 75.111285][ T6853] EXT4-fs (loop6): This should not happen!! Data will be lost [ 75.111285][ T6853] [ 75.113227][ T6853] EXT4-fs (loop6): Total free blocks count 0 [ 75.114597][ T6853] EXT4-fs (loop6): Free/Dirty block details [ 75.114642][ T6853] EXT4-fs (loop6): free_blocks=0 [ 75.119214][ T5489] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 75.126752][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.134963][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.135735][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.140208][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.140723][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.343512][ T7686] __nla_validate_parse: 1 callbacks suppressed [ 75.343552][ T7686] netlink: 88 bytes leftover after parsing attributes in process `syz.7.406'. [ 75.428906][ T7692] loop6: detected capacity change from 0 to 2048 [ 75.444500][ T30] kauditd_printk_skb: 211684 callbacks suppressed [ 75.444538][ T30] audit: type=1400 audit(75.430:113169): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="tmpfs" ino=1 [ 75.444565][ T30] audit: type=1400 audit(75.430:113170): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 75.444585][ T30] audit: type=1400 audit(75.430:113171): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" name="queue" dev="tmpfs" ino=4067 [ 75.444603][ T30] audit: type=1400 audit(75.430:113172): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4345 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=4067 [ 75.444620][ T30] audit: type=1400 audit(75.430:113173): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" name="queue" dev="tmpfs" ino=4067 [ 75.444637][ T30] audit: type=1400 audit(75.430:113174): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 75.444654][ T30] audit: type=1400 audit(75.430:113175): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="sysfs" ino=1 [ 75.444670][ T30] audit: type=1400 audit(75.430:113176): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=4703 comm="udevd" path="/dev/loop7" dev="devtmpfs" ino=646 [ 75.444686][ T30] audit: type=1400 audit(75.430:113177): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4703 comm="udevd" path="/dev/loop7" dev="devtmpfs" ino=646 [ 75.444702][ T30] audit: type=1400 audit(75.430:113178): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 75.494420][ T7692] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.613519][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.763136][ T50] Bluetooth: hci4: unexpected cc 0x2005 length: 5 > 1 [ 75.809128][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.870156][ T26] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.872916][ T26] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.910257][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.922357][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.923208][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.410'. [ 75.925969][ T7676] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.926150][ T7676] bridge_slave_0: entered allmulticast mode [ 75.926641][ T7676] bridge_slave_0: entered promiscuous mode [ 75.938744][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.940177][ T7676] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.941740][ T7676] bridge_slave_1: entered allmulticast mode [ 75.943480][ T7676] bridge_slave_1: entered promiscuous mode [ 75.950055][ T7717] loop2: detected capacity change from 0 to 512 [ 75.960829][ T7717] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.967105][ T7717] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.410: invalid indirect mapped block 9 (level 0) [ 75.971646][ T7717] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.973771][ T7717] EXT4-fs (loop2): 1 truncate cleaned up [ 75.977970][ T7717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.980147][ T7718] overlayfs: workdir and upperdir must reside under the same mount [ 75.983870][ T7676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.987269][ T7676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.998183][ T7722] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 75.998215][ T7722] netlink: 224 bytes leftover after parsing attributes in process `syz.1.411'. [ 75.998238][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 76.023815][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.034505][ T6253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.051895][ T7676] team0: Port device team_slave_0 added [ 76.053022][ T7676] team0: Port device team_slave_1 added [ 76.076558][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.076592][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.076605][ T7676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.080871][ T7676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.080880][ T7676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.080894][ T7676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.126204][ T7676] hsr_slave_0: entered promiscuous mode [ 76.128654][ T7676] hsr_slave_1: entered promiscuous mode [ 76.130064][ T7676] debugfs: 'hsr0' already exists in 'hsr' [ 76.131188][ T7676] Cannot create hsr debugfs directory [ 76.146165][ T5489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.290103][ T12] bridge_slave_1: left allmulticast mode [ 76.290290][ T12] bridge_slave_1: left promiscuous mode [ 76.290386][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.293534][ T12] bridge_slave_0: left allmulticast mode [ 76.293549][ T12] bridge_slave_0: left promiscuous mode [ 76.293616][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.357655][ T7737] loop6: detected capacity change from 0 to 1024 [ 76.358573][ T7737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.381805][ T7737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.412163][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.425509][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.445759][ T12] bond0 (unregistering): Released all slaves [ 76.553694][ T5489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.872780][ T7762] netlink: 'syz.6.422': attribute type 1 has an invalid length. [ 76.872814][ T7762] netlink: 'syz.6.422': attribute type 1 has an invalid length. [ 76.933032][ T50] Bluetooth: hci1: unexpected cc 0x2005 length: 5 > 1 [ 77.032861][ T12] hsr_slave_0: left promiscuous mode [ 77.040645][ T12] hsr_slave_1: left promiscuous mode [ 77.042114][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.044646][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.047968][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.054340][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.059523][ T12] veth1_macvtap: left promiscuous mode [ 77.059565][ T12] veth0_macvtap: left promiscuous mode [ 77.059627][ T12] veth1_vlan: left promiscuous mode [ 77.059669][ T12] veth0_vlan: left promiscuous mode [ 77.191070][ T7791] netlink: 'syz.1.426': attribute type 11 has an invalid length. [ 77.191108][ T7791] netlink: 140 bytes leftover after parsing attributes in process `syz.1.426'. [ 77.204340][ T50] Bluetooth: hci5: command tx timeout [ 77.213691][ T12] team0 (unregistering): Port device team_slave_1 removed [ 77.229312][ T12] team0 (unregistering): Port device team_slave_0 removed [ 77.312097][ T7780] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 77.312129][ T7780] syzkaller1: group set to 0 [ 77.314099][ T7787] syzkaller1: tun_chr_ioctl cmd 43784 [ 77.315573][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 77.319192][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 77.359837][ T7783] syzkaller0: entered promiscuous mode [ 77.359873][ T7783] syzkaller0: entered allmulticast mode [ 77.465813][ T7807] set_capacity_and_notify: 1 callbacks suppressed [ 77.467012][ T7807] loop1: detected capacity change from 0 to 128 [ 77.474484][ T7807] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.486651][ T7807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.612889][ T7814] netlink: 'syz.2.431': attribute type 10 has an invalid length. [ 77.758984][ T7815] Bluetooth: MGMT ver 1.23 [ 77.973964][ T7840] Cannot find add_set index 1 as target [ 77.996673][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.049356][ T7845] input: syz1 as /devices/virtual/input/input6 [ 78.189544][ T7857] loop7: detected capacity change from 0 to 2048 [ 78.220501][ T7857] loop7: p1 < > p4 [ 78.220501][ T7857] p4: [ 78.237958][ T7860] syzkaller0: entered promiscuous mode [ 78.237973][ T7860] syzkaller0: entered allmulticast mode [ 78.260836][ T7857] loop7: p4 size 722688 extends beyond EOD, truncated [ 78.332918][ T6292] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.411905][ T7873] netlink: 'syz.1.442': attribute type 3 has an invalid length. [ 78.479985][ T7676] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.506444][ T7676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.507551][ T7676] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.515631][ T7676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.517152][ T7676] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.523263][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 78.532964][ T7676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.533380][ T7676] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.541221][ T7676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.550964][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 78.641336][ T7676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.680947][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.685015][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.685060][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.702061][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.702113][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.715327][ T7676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.718351][ T7676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.728207][ T50] Bluetooth: hci4: unexpected cc 0x2005 length: 5 > 1 [ 78.775698][ T7899] loop2: detected capacity change from 0 to 256 [ 78.777585][ T7899] vfat: Unknown parameter 'chtSk' [ 78.893775][ T7917] FAULT_INJECTION: forcing a failure. [ 78.893775][ T7917] name fail_futex, interval 1, probability 0, space 0, times 1 [ 78.893812][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.6.448 Not tainted syzkaller #0 PREEMPT [ 78.893827][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.893834][ T7917] Call trace: [ 78.893838][ T7917] show_stack+0x2c/0x3c (C) [ 78.893857][ T7917] __dump_stack+0x30/0x40 [ 78.893869][ T7917] dump_stack_lvl+0xd8/0x12c [ 78.893879][ T7917] dump_stack+0x1c/0x28 [ 78.893888][ T7917] should_fail_ex+0x41c/0x590 [ 78.893896][ T7917] should_fail+0x14/0x24 [ 78.893903][ T7917] get_futex_key+0x1ec/0x12b0 [ 78.893912][ T7917] futex_wait_setup+0x58/0x674 [ 78.893921][ T7917] __futex_wait+0x108/0x25c [ 78.893930][ T7917] futex_wait+0x108/0x2c0 [ 78.893938][ T7917] do_futex+0x320/0x378 [ 78.893946][ T7917] __arm64_sys_futex+0x2e4/0x418 [ 78.893954][ T7917] invoke_syscall+0x98/0x244 [ 78.893964][ T7917] el0_svc_common+0xec/0x23c [ 78.893974][ T7917] do_el0_svc+0x4c/0x5c [ 78.893983][ T7917] el0_svc+0x64/0x260 [ 78.893992][ T7917] el0t_64_sync_handler+0x44/0x104 [ 78.894000][ T7917] el0t_64_sync+0x198/0x19c [ 79.088632][ T7942] loop6: detected capacity change from 0 to 256 [ 79.098216][ T7942] vfat: Unknown parameter 'uof8' [ 79.112452][ T7944] loop1: detected capacity change from 0 to 256 [ 79.232970][ T7953] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 79.232970][ T7953] Please contact the netfilter-devel mailing list or update your nftables rules. [ 79.243205][ T7676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.275602][ T50] Bluetooth: hci5: command tx timeout [ 79.351813][ T7967] loop1: detected capacity change from 0 to 8 [ 79.360304][ T7967] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 79.362282][ T7967] unable to read xattr id index table [ 79.372072][ T7967] SQUASHFS error: zlib decompression failed, data probably corrupt [ 79.372297][ T7967] SQUASHFS error: Failed to read block 0x9b: -5 [ 79.372328][ T7967] SQUASHFS error: Unable to read metadata cache entry [99] [ 79.372341][ T7967] SQUASHFS error: Unable to read inode 0x104 [ 79.475143][ T7972] loop7: detected capacity change from 0 to 8192 [ 79.480501][ T7676] veth0_vlan: entered promiscuous mode [ 79.485739][ T7676] veth1_vlan: entered promiscuous mode [ 79.511224][ T7676] veth0_macvtap: entered promiscuous mode [ 79.517493][ T7676] veth1_macvtap: entered promiscuous mode [ 79.526349][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.532423][ T7676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.575387][ T6847] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.575438][ T6847] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.575461][ T6847] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.575479][ T6847] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.628939][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.628980][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.669676][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.669712][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.025278][ T8041] Soft offlining pfn 0x11e2f0 at process virtual address 0x20001000 [ 80.037826][ T8039] loop2: detected capacity change from 0 to 512 [ 80.042458][ T8039] EXT4-fs: Ignoring removed oldalloc option [ 80.051298][ T8039] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.062128][ T8041] Soft offlining pfn 0x1200a5 at process virtual address 0x20002000 [ 80.062284][ T8041] Soft offlining pfn 0x219070 at process virtual address 0x20003000 [ 80.070119][ T8041] Memory failure: 0x219070: unhandlable page. [ 80.086780][ T8039] EXT4-fs (loop2): 1 orphan inode deleted [ 80.086814][ T8039] EXT4-fs (loop2): 1 truncate cleaned up [ 80.087278][ T8039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.208805][ T6253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.253172][ T8058] loop2: detected capacity change from 0 to 1024 [ 80.304176][ T8062] overlay: filesystem on ./file0 is read-only [ 80.352238][ T8068] netlink: 9 bytes leftover after parsing attributes in process `syz.1.469'. [ 80.454265][ T4703] audit_log_start: 118227 callbacks suppressed [ 80.456233][ T4703] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.457678][ T4703] audit: audit_lost=106617 audit_rate_limit=0 audit_backlog_limit=64 [ 80.459418][ T4703] audit: backlog limit exceeded [ 80.460609][ T4703] audit: audit_backlog=65 > audit_backlog_limit=64 [ 80.461971][ T4703] audit: audit_lost=106618 audit_rate_limit=0 audit_backlog_limit=64 [ 80.463906][ T8072] audit: audit_backlog=66 > audit_backlog_limit=64 [ 80.465410][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 80.465423][ C0] audit: audit_lost=106619 audit_rate_limit=0 audit_backlog_limit=64 [ 80.465435][ C0] audit: backlog limit exceeded [ 80.465599][ T4703] audit: backlog limit exceeded [ 80.768792][ T8089] loop2: detected capacity change from 0 to 512 [ 80.810621][ T8089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 80.838542][ T8089] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.472: inode has both inline data and extents flags [ 80.838586][ T8089] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 80.838802][ T8089] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.472: couldn't read orphan inode 15 (err -117) [ 80.838818][ T8089] loop2: lost filesystem error report for type 5 error -117 [ 80.839842][ T8089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.849558][ T8087] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[6253] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8087] [ 80.993025][ T8098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.246488][ T8105] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 16: comm syz.6.474: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 81.256822][ T8105] 9p: Bad value for 'rfdno' [ 81.354373][ T50] Bluetooth: hci5: command tx timeout [ 81.402396][ T6253] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.427950][ T5489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.559351][ T50] Bluetooth: hci0: unexpected cc 0x2005 length: 5 > 1 [ 82.003310][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.482'. [ 82.003347][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.482'. [ 82.029496][ T5660] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 82.029531][ T5660] FAT-fs (loop7): Filesystem has been set read-only [ 82.036685][ T5660] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 82.070536][ T8158] netlink: 520 bytes leftover after parsing attributes in process `syz.5.485'. [ 82.095575][ T8159] netlink: 520 bytes leftover after parsing attributes in process `syz.5.485'. [ 82.171654][ T8159] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 82.171687][ T8159] CPU: 0 UID: 0 PID: 8159 Comm: syz.5.485 Not tainted syzkaller #0 PREEMPT [ 82.171698][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.171704][ T8159] Call trace: [ 82.171708][ T8159] show_stack+0x2c/0x3c (C) [ 82.171729][ T8159] __dump_stack+0x30/0x40 [ 82.171743][ T8159] dump_stack_lvl+0xd8/0x12c [ 82.171752][ T8159] dump_stack+0x1c/0x28 [ 82.171771][ T8159] sysfs_warn_dup+0x9c/0xb8 [ 82.171784][ T8159] sysfs_create_dir_ns+0x190/0x1f4 [ 82.171794][ T8159] kobject_add_internal+0x290/0x6f0 [ 82.171805][ T8159] kobject_add_varg+0x9c/0xe8 [ 82.171814][ T8159] kobject_add+0x110/0x1c8 [ 82.171823][ T8159] device_add+0x394/0x9e0 [ 82.171831][ T8159] device_register+0x28/0x38 [ 82.171843][ T8159] tty_register_device_attr+0x31c/0x5e8 [ 82.171853][ T8159] tty_register_device+0x3c/0x50 [ 82.171861][ T8159] gsm_activate_mux+0xdc/0x284 [ 82.171871][ T8159] gsmld_ioctl+0xea8/0x1414 [ 82.171879][ T8159] tty_ioctl+0x8a8/0xcb0 [ 82.171887][ T8159] __arm64_sys_ioctl+0x154/0x1cc [ 82.171898][ T8159] invoke_syscall+0x98/0x244 [ 82.171908][ T8159] el0_svc_common+0xec/0x23c [ 82.171917][ T8159] do_el0_svc+0x4c/0x5c [ 82.171927][ T8159] el0_svc+0x64/0x260 [ 82.171935][ T8159] el0t_64_sync_handler+0x44/0x104 [ 82.171943][ T8159] el0t_64_sync+0x198/0x19c [ 82.172303][ T8159] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 82.480934][ T1047] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.480981][ T1047] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.556140][ T1047] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.556186][ T1047] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.559026][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 82.647649][ T1047] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.647696][ T1047] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.747554][ T4720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.759513][ T4720] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.761479][ T4720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.765491][ T4720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.765745][ T4720] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.788222][ T1047] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.788272][ T1047] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.866944][ T8216] nft_compat: unsupported protocol 5 [ 82.936821][ T4720] Bluetooth: hci2: unexpected cc 0x2005 length: 5 > 1 [ 82.991967][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.495'. [ 83.132921][ T5016] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 83.141143][ T5016] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.166457][ T1047] bridge_slave_1: left allmulticast mode [ 83.167601][ T1047] bridge_slave_1: left promiscuous mode [ 83.168748][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.205699][ T1047] bridge_slave_0: left allmulticast mode [ 83.206959][ T1047] bridge_slave_0: left promiscuous mode [ 83.208106][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.276563][ T8255] set_capacity_and_notify: 4 callbacks suppressed [ 83.277203][ T8255] loop6: detected capacity change from 0 to 256 [ 83.277741][ T8255] vfat: Bad value for 'shortname' [ 83.280054][ T1047] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 83.281830][ T1047] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 83.283329][ T1047] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 2e:36:8c:dd:f8:c6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 83.434423][ T4720] Bluetooth: hci5: command tx timeout [ 83.436513][ T8245] loop6: detected capacity change from 0 to 256 [ 83.522202][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.499'. [ 83.539943][ T1047] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 83.603587][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.638769][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.657818][ T1047] bond0 (unregistering): Released all slaves [ 83.661791][ T1047] bond1 (unregistering): Released all slaves [ 83.676498][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.499'. [ 83.678772][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.499'. [ 83.686792][ T8272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.499'. [ 83.725721][ T8278] fido_id[8278]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.100935][ T8301] loop2: detected capacity change from 0 to 512 [ 84.105475][ T8301] ext4: Unknown parameter 'uid' [ 84.834707][ T4720] Bluetooth: hci0: command tx timeout [ 85.052715][ T1047] hsr_slave_0: left promiscuous mode [ 85.054081][ T1047] hsr_slave_1: left promiscuous mode [ 85.055863][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.057491][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.063955][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.066770][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.073497][ T1047] veth1_vlan: left promiscuous mode [ 85.074893][ T1047] veth0_vlan: left promiscuous mode [ 85.171136][ T8317] loop2: detected capacity change from 0 to 128 [ 85.273160][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 85.282380][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 85.472386][ T30] kauditd_printk_skb: 87138 callbacks suppressed [ 85.472424][ T30] audit: type=1400 audit(85.450:199205): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="devices" dev="sysfs" ino=18 [ 85.472453][ T30] audit: type=1400 audit(85.450:199206): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="virtual" dev="sysfs" ino=1344 [ 85.472472][ T30] audit: type=1400 audit(85.450:199207): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="block" dev="sysfs" ino=14110 [ 85.472492][ T30] audit: type=1400 audit(85.460:199208): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="watch" dev="tmpfs" ino=135 [ 85.472511][ T30] audit: type=1400 audit(85.460:199209): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 85.472529][ T30] audit: type=1400 audit(85.460:199210): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="tmpfs" ino=1 [ 85.472601][ T30] audit: type=1400 audit(85.460:199211): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 85.472631][ T30] audit: type=1400 audit(85.460:199212): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" name="queue" dev="tmpfs" ino=4787 [ 85.472656][ T30] audit: type=1400 audit(85.460:199213): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4345 comm="udevd" path="/run/udev/queue" dev="tmpfs" ino=4787 [ 85.472678][ T30] audit: type=1400 audit(85.460:199214): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=4345 comm="udevd" name="queue" dev="tmpfs" ino=4787 [ 85.489497][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 85.879855][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.881535][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.883180][ T8202] bridge_slave_0: entered allmulticast mode [ 85.884951][ T8202] bridge_slave_0: entered promiscuous mode [ 85.887245][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.888711][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.890291][ T8202] bridge_slave_1: entered allmulticast mode [ 85.892034][ T8202] bridge_slave_1: entered promiscuous mode [ 85.909072][ T8202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.912396][ T8202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.924720][ T8202] team0: Port device team_slave_0 added [ 85.927969][ T8202] team0: Port device team_slave_1 added [ 85.941343][ T4720] Bluetooth: hci1: unexpected cc 0x2005 length: 5 > 1 [ 85.951470][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.952878][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.958148][ T8202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.958807][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.958825][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.958845][ T8202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.967691][ T8364] loop5: detected capacity change from 0 to 512 [ 85.968278][ T8364] EXT4-fs: Ignoring removed oldalloc option [ 85.985559][ T8364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.989292][ T8364] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 85.989331][ T8364] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 85.989445][ T8364] EXT4-fs (loop5): orphan cleanup on readonly fs [ 85.989506][ T8364] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.989518][ T8364] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 86.007920][ T8364] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.516: bg 0: block 40: padding at end of block bitmap is not set [ 86.008504][ T8364] loop5: lost filesystem error report for type 5 error -117 [ 86.016321][ T8364] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 86.016360][ T8364] loop5: lost filesystem error report for type 5 error -117 [ 86.017984][ T8364] EXT4-fs (loop5): 1 truncate cleaned up [ 86.019791][ T8364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.060171][ T8202] hsr_slave_0: entered promiscuous mode [ 86.062859][ T8202] hsr_slave_1: entered promiscuous mode [ 86.305653][ T8384] __nla_validate_parse: 61 callbacks suppressed [ 86.305694][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 86.398362][ T6847] Bluetooth: hci3: Frame reassembly failed (-84) [ 86.500273][ T4328] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 86.500984][ T4328] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.628669][ T8398] overlayfs: missing 'lowerdir' [ 86.770052][ T8202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.805238][ T7676] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.805559][ T8202] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.806091][ T8202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.812482][ T8202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.815789][ T8202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.824414][ T8202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.824734][ T8202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.865941][ T50] Bluetooth: hci4: unexpected cc 0x2005 length: 5 > 1 [ 86.871038][ T8202] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.882275][ T8425] FAULT_INJECTION: forcing a failure. [ 86.882275][ T8425] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 86.882312][ T8425] CPU: 1 UID: 0 PID: 8425 Comm: syz.5.528 Not tainted syzkaller #0 PREEMPT [ 86.882326][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 86.882332][ T8425] Call trace: [ 86.882336][ T8425] show_stack+0x2c/0x3c (C) [ 86.882357][ T8425] __dump_stack+0x30/0x40 [ 86.882370][ T8425] dump_stack_lvl+0xd8/0x12c [ 86.882382][ T8425] dump_stack+0x1c/0x28 [ 86.882394][ T8425] should_fail_ex+0x41c/0x590 [ 86.882403][ T8425] should_fail_alloc_page+0xec/0x10c [ 86.882413][ T8425] prepare_alloc_pages+0x194/0x4a4 [ 86.882423][ T8425] __alloc_frozen_pages_noprof+0x134/0x320 [ 86.882434][ T8425] alloc_pages_mpol+0x1ec/0x3c0 [ 86.882444][ T8425] folio_alloc_mpol_noprof+0x4c/0x248 [ 86.882455][ T8425] vma_alloc_folio_noprof+0x100/0x1dc [ 86.882466][ T8425] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 86.882478][ T8425] folio_prealloc+0x3c/0x1b0 [ 86.882487][ T8425] do_pte_missing+0x1bcc/0x2a24 [ 86.882497][ T8425] handle_mm_fault+0x14f8/0x2514 [ 86.882505][ T8425] do_page_fault+0x77c/0xb88 [ 86.882516][ T8425] do_translation_fault+0xc4/0x114 [ 86.882527][ T8425] do_mem_abort+0x70/0x194 [ 86.882538][ T8425] el0_da+0x78/0x254 [ 86.882549][ T8425] el0t_64_sync_handler+0xd8/0x104 [ 86.882559][ T8425] el0t_64_sync+0x198/0x19c [ 86.882636][ T8425] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 86.887667][ T50] Bluetooth: hci0: command tx timeout [ 86.999405][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.023961][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.088820][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.088874][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.092510][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.092557][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.100244][ T8202] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.100284][ T8202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.365386][ T8483] loop1: detected capacity change from 0 to 256 [ 87.366122][ T8483] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.374999][ T8483] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.513997][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.730120][ T8202] veth0_vlan: entered promiscuous mode [ 87.732755][ T8202] veth1_vlan: entered promiscuous mode [ 87.741264][ T8533] netlink: 'syz.2.556': attribute type 2 has an invalid length. [ 87.773380][ T8534] FAULT_INJECTION: forcing a failure. [ 87.773380][ T8534] name fail_futex, interval 1, probability 0, space 0, times 0 [ 87.773421][ T8534] CPU: 1 UID: 0 PID: 8534 Comm: syz.1.557 Not tainted syzkaller #0 PREEMPT [ 87.773433][ T8534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.773440][ T8534] Call trace: [ 87.773443][ T8534] show_stack+0x2c/0x3c (C) [ 87.773463][ T8534] __dump_stack+0x30/0x40 [ 87.773476][ T8534] dump_stack_lvl+0xd8/0x12c [ 87.773488][ T8534] dump_stack+0x1c/0x28 [ 87.773499][ T8534] should_fail_ex+0x41c/0x590 [ 87.773508][ T8534] should_fail+0x14/0x24 [ 87.773515][ T8534] get_futex_key+0x1ec/0x12b0 [ 87.773525][ T8534] futex_wake+0x10c/0x594 [ 87.773535][ T8534] do_futex+0x2c4/0x378 [ 87.773544][ T8534] __arm64_sys_futex+0x2e4/0x418 [ 87.773554][ T8534] invoke_syscall+0x98/0x244 [ 87.773566][ T8534] el0_svc_common+0xec/0x23c [ 87.773578][ T8534] do_el0_svc+0x4c/0x5c [ 87.773589][ T8534] el0_svc+0x64/0x260 [ 87.773600][ T8534] el0t_64_sync_handler+0x44/0x104 [ 87.773610][ T8534] el0t_64_sync+0x198/0x19c [ 87.777804][ T8202] veth0_macvtap: entered promiscuous mode [ 87.786092][ T8202] veth1_macvtap: entered promiscuous mode [ 87.791510][ T8536] FAULT_INJECTION: forcing a failure. [ 87.791510][ T8536] name failslab, interval 1, probability 0, space 0, times 0 [ 87.791526][ T8536] CPU: 1 UID: 0 PID: 8536 Comm: syz.5.559 Not tainted syzkaller #0 PREEMPT [ 87.791536][ T8536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 87.791542][ T8536] Call trace: [ 87.791544][ T8536] show_stack+0x2c/0x3c (C) [ 87.791565][ T8536] __dump_stack+0x30/0x40 [ 87.791579][ T8536] dump_stack_lvl+0xd8/0x12c [ 87.791591][ T8536] dump_stack+0x1c/0x28 [ 87.791603][ T8536] should_fail_ex+0x41c/0x590 [ 87.791612][ T8536] should_failslab+0xc4/0x120 [ 87.791621][ T8536] __kvmalloc_node_noprof+0x160/0x7d8 [ 87.791632][ T8536] bpf_stack_liveness_init+0x30/0x94 [ 87.791644][ T8536] bpf_check+0x1068/0x40dc [ 87.791655][ T8536] bpf_prog_load+0xfe4/0x158c [ 87.791663][ T8536] __sys_bpf+0x7d4/0x82c [ 87.791672][ T8536] __arm64_sys_bpf+0xd0/0xec [ 87.791679][ T8536] invoke_syscall+0x98/0x244 [ 87.791691][ T8536] el0_svc_common+0xec/0x23c [ 87.791703][ T8536] do_el0_svc+0x4c/0x5c [ 87.791714][ T8536] el0_svc+0x64/0x260 [ 87.791725][ T8536] el0t_64_sync_handler+0x44/0x104 [ 87.791735][ T8536] el0t_64_sync+0x198/0x19c [ 87.803364][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.818092][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.873668][ T6850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.874963][ T6850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.875005][ T6850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.875012][ T6850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.875104][ T6850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.875555][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.890926][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.890954][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.957253][ T8546] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 87.957293][ T8546] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 88.056586][ T8555] ip_tables: iptables: counters copy to user failed while replacing table [ 88.101002][ T8564] FAULT_INJECTION: forcing a failure. [ 88.101002][ T8564] name failslab, interval 1, probability 0, space 0, times 0 [ 88.103649][ T8564] CPU: 0 UID: 0 PID: 8564 Comm: syz.1.567 Not tainted syzkaller #0 PREEMPT [ 88.103669][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.103675][ T8564] Call trace: [ 88.103679][ T8564] show_stack+0x2c/0x3c (C) [ 88.103703][ T8564] __dump_stack+0x30/0x40 [ 88.103716][ T8564] dump_stack_lvl+0xd8/0x12c [ 88.103729][ T8564] dump_stack+0x1c/0x28 [ 88.103740][ T8564] should_fail_ex+0x41c/0x590 [ 88.103749][ T8564] should_failslab+0xc4/0x120 [ 88.103759][ T8564] kmem_cache_alloc_noprof+0x94/0x5d8 [ 88.103776][ T8564] do_getname+0x48/0x234 [ 88.103785][ T8564] getname_flags+0x2c/0x3c [ 88.103793][ T8564] __arm64_sys_quotactl+0x228/0xa18 [ 88.103803][ T8564] invoke_syscall+0x98/0x244 [ 88.103815][ T8564] el0_svc_common+0xec/0x23c [ 88.103827][ T8564] do_el0_svc+0x4c/0x5c [ 88.103838][ T8564] el0_svc+0x64/0x260 [ 88.103849][ T8564] el0t_64_sync_handler+0x44/0x104 [ 88.103859][ T8564] el0t_64_sync+0x198/0x19c [ 88.333620][ T8587] loop2: detected capacity change from 0 to 128 [ 88.334777][ T8589] ip_tables: iptables: counters copy to user failed while replacing table [ 88.339258][ T8587] FAT-fs (loop2): data area starts beyond volume (36 > 11) [ 88.339294][ T8587] FAT-fs (loop2): Can't find a valid FAT filesystem [ 88.475066][ T50] Bluetooth: hci3: command 0x1003 tx timeout [ 88.476111][ T4720] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 88.534517][ T8607] FAULT_INJECTION: forcing a failure. [ 88.534517][ T8607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.534552][ T8607] CPU: 1 UID: 0 PID: 8607 Comm: syz.2.580 Not tainted syzkaller #0 PREEMPT [ 88.534564][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.534571][ T8607] Call trace: [ 88.534575][ T8607] show_stack+0x2c/0x3c (C) [ 88.534597][ T8607] __dump_stack+0x30/0x40 [ 88.534610][ T8607] dump_stack_lvl+0xd8/0x12c [ 88.534621][ T8607] dump_stack+0x1c/0x28 [ 88.534633][ T8607] should_fail_ex+0x41c/0x590 [ 88.534642][ T8607] should_fail+0x14/0x24 [ 88.534649][ T8607] should_fail_usercopy+0x20/0x30 [ 88.534657][ T8607] _inline_copy_from_user+0x3c/0x174 [ 88.534668][ T8607] get_timespec64+0x9c/0x188 [ 88.534677][ T8607] ksys_semtimedop+0xa4/0x144 [ 88.534687][ T8607] __arm64_sys_semtimedop+0xa8/0xc0 [ 88.534696][ T8607] invoke_syscall+0x98/0x244 [ 88.534708][ T8607] el0_svc_common+0xec/0x23c [ 88.534720][ T8607] do_el0_svc+0x4c/0x5c [ 88.534731][ T8607] el0_svc+0x64/0x260 [ 88.534742][ T8607] el0t_64_sync_handler+0x44/0x104 [ 88.534756][ T8607] el0t_64_sync+0x198/0x19c [ 88.593965][ T8611] FAULT_INJECTION: forcing a failure. [ 88.593965][ T8611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.594011][ T8611] CPU: 1 UID: 0 PID: 8611 Comm: syz.2.581 Not tainted syzkaller #0 PREEMPT [ 88.594024][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.594031][ T8611] Call trace: [ 88.594035][ T8611] show_stack+0x2c/0x3c (C) [ 88.594055][ T8611] __dump_stack+0x30/0x40 [ 88.594068][ T8611] dump_stack_lvl+0xd8/0x12c [ 88.594080][ T8611] dump_stack+0x1c/0x28 [ 88.594091][ T8611] should_fail_ex+0x41c/0x590 [ 88.594100][ T8611] should_fail+0x14/0x24 [ 88.594108][ T8611] should_fail_usercopy+0x20/0x30 [ 88.594116][ T8611] set_fd_set+0x48/0xb8 [ 88.594125][ T8611] core_sys_select+0x7ec/0x9e4 [ 88.594133][ T8611] __arm64_sys_pselect6+0x2f0/0x39c [ 88.594141][ T8611] invoke_syscall+0x98/0x244 [ 88.594153][ T8611] el0_svc_common+0xec/0x23c [ 88.594165][ T8611] do_el0_svc+0x4c/0x5c [ 88.594177][ T8611] el0_svc+0x64/0x260 [ 88.594187][ T8611] el0t_64_sync_handler+0x44/0x104 [ 88.594200][ T8611] el0t_64_sync+0x198/0x19c [ 88.923754][ T8640] FAULT_INJECTION: forcing a failure. [ 88.923754][ T8640] name failslab, interval 1, probability 0, space 0, times 0 [ 88.923804][ T8640] CPU: 1 UID: 0 PID: 8640 Comm: syz.6.586 Not tainted syzkaller #0 PREEMPT [ 88.923816][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 88.923824][ T8640] Call trace: [ 88.923828][ T8640] show_stack+0x2c/0x3c (C) [ 88.923850][ T8640] __dump_stack+0x30/0x40 [ 88.923863][ T8640] dump_stack_lvl+0xd8/0x12c [ 88.923875][ T8640] dump_stack+0x1c/0x28 [ 88.923886][ T8640] should_fail_ex+0x41c/0x590 [ 88.923896][ T8640] should_failslab+0xc4/0x120 [ 88.923905][ T8640] kmem_cache_alloc_noprof+0x94/0x5d8 [ 88.923915][ T8640] __mpol_dup+0x88/0x1c4 [ 88.923926][ T8640] __arm64_sys_set_mempolicy_home_node+0x3a4/0x6f8 [ 88.923937][ T8640] invoke_syscall+0x98/0x244 [ 88.923949][ T8640] el0_svc_common+0xec/0x23c [ 88.923961][ T8640] do_el0_svc+0x4c/0x5c [ 88.923973][ T8640] el0_svc+0x64/0x260 [ 88.923984][ T8640] el0t_64_sync_handler+0x44/0x104 [ 88.923994][ T8640] el0t_64_sync+0x198/0x19c [ 88.956015][ T4720] Bluetooth: hci0: command tx timeout [ 89.253836][ T8669] FAULT_INJECTION: forcing a failure. [ 89.253836][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 89.257654][ T8669] CPU: 0 UID: 0 PID: 8669 Comm: syz.1.595 Not tainted syzkaller #0 PREEMPT [ 89.257678][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 89.257685][ T8669] Call trace: [ 89.257689][ T8669] show_stack+0x2c/0x3c (C) [ 89.257712][ T8669] __dump_stack+0x30/0x40 [ 89.257726][ T8669] dump_stack_lvl+0xd8/0x12c [ 89.257739][ T8669] dump_stack+0x1c/0x28 [ 89.257751][ T8669] should_fail_ex+0x41c/0x590 [ 89.257769][ T8669] should_failslab+0xc4/0x120 [ 89.257779][ T8669] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 89.257790][ T8669] __d_alloc+0x50/0x690 [ 89.257800][ T8669] d_alloc_pseudo+0x2c/0xd8 [ 89.257809][ T8669] alloc_path_pseudo+0xe8/0x1d4 [ 89.257819][ T8669] alloc_file_pseudo+0xb0/0x198 [ 89.257828][ T8669] __shmem_file_setup+0x210/0x284 [ 89.257837][ T8669] shmem_zero_setup+0x90/0x130 [ 89.257845][ T8669] mmap_region+0x1308/0x1c38 [ 89.257853][ T8669] do_mmap+0xa50/0xf0c [ 89.257863][ T8669] vm_mmap_pgoff+0x298/0x46c [ 89.257874][ T8669] ksys_mmap_pgoff+0xd0/0x5b4 [ 89.257884][ T8669] __arm64_sys_mmap+0x110/0x12c [ 89.257896][ T8669] invoke_syscall+0x98/0x244 [ 89.257908][ T8669] el0_svc_common+0xec/0x23c [ 89.257920][ T8669] do_el0_svc+0x4c/0x5c [ 89.257932][ T8669] el0_svc+0x64/0x260 [ 89.257943][ T8669] el0t_64_sync_handler+0x44/0x104 [ 89.257953][ T8669] el0t_64_sync+0x198/0x19c [ 89.358486][ T8675] syz.4.596 (8675): /proc/8674/oom_adj is deprecated, please use /proc/8674/oom_score_adj instead. [ 89.456860][ T8689] loop4: detected capacity change from 0 to 256 [ 89.557916][ T8701] netlink: 208 bytes leftover after parsing attributes in process `syz.6.603'. [ 89.557952][ T8701] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.623138][ T8706] FAULT_INJECTION: forcing a failure. [ 89.623138][ T8706] name failslab, interval 1, probability 0, space 0, times 0 [ 89.626031][ T8706] CPU: 0 UID: 0 PID: 8706 Comm: syz.4.605 Not tainted syzkaller #0 PREEMPT [ 89.626048][ T8706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 89.626057][ T8706] Call trace: [ 89.626061][ T8706] show_stack+0x2c/0x3c (C) [ 89.626081][ T8706] __dump_stack+0x30/0x40 [ 89.626095][ T8706] dump_stack_lvl+0xd8/0x12c [ 89.626107][ T8706] dump_stack+0x1c/0x28 [ 89.626118][ T8706] should_fail_ex+0x41c/0x590 [ 89.626127][ T8706] should_failslab+0xc4/0x120 [ 89.626137][ T8706] __kmalloc_noprof+0x108/0x6b8 [ 89.626147][ T8706] security_prepare_creds+0x60/0x35c [ 89.626157][ T8706] prepare_creds+0x500/0x7d0 [ 89.626169][ T8706] __sys_setresuid+0x414/0x848 [ 89.626180][ T8706] __arm64_sys_setresuid+0x84/0x98 [ 89.626190][ T8706] invoke_syscall+0x98/0x244 [ 89.626203][ T8706] el0_svc_common+0xec/0x23c [ 89.626214][ T8706] do_el0_svc+0x4c/0x5c [ 89.626226][ T8706] el0_svc+0x64/0x260 [ 89.626237][ T8706] el0t_64_sync_handler+0x44/0x104 [ 89.626250][ T8706] el0t_64_sync+0x198/0x19c [ 89.970945][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.613'. [ 89.974063][ T8740] netlink: 32 bytes leftover after parsing attributes in process `syz.4.613'. [ 90.265221][ T8763] netlink: 40 bytes leftover after parsing attributes in process `syz.4.618'. [ 90.340471][ T8767] FAULT_INJECTION: forcing a failure. [ 90.340471][ T8767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 90.340509][ T8767] CPU: 1 UID: 0 PID: 8767 Comm: syz.4.620 Not tainted syzkaller #0 PREEMPT [ 90.340522][ T8767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.340528][ T8767] Call trace: [ 90.340532][ T8767] show_stack+0x2c/0x3c (C) [ 90.340554][ T8767] __dump_stack+0x30/0x40 [ 90.340567][ T8767] dump_stack_lvl+0xd8/0x12c [ 90.340579][ T8767] dump_stack+0x1c/0x28 [ 90.340591][ T8767] should_fail_ex+0x41c/0x590 [ 90.340600][ T8767] should_fail_alloc_page+0xec/0x10c [ 90.340610][ T8767] prepare_alloc_pages+0x194/0x4a4 [ 90.340621][ T8767] __alloc_frozen_pages_noprof+0x134/0x320 [ 90.340631][ T8767] alloc_pages_mpol+0x1ec/0x3c0 [ 90.340642][ T8767] alloc_frozen_pages_noprof+0xc4/0x10c [ 90.340653][ T8767] alloc_pages_noprof+0x30/0x148 [ 90.340663][ T8767] __do_fault+0x264/0x4a8 [ 90.340673][ T8767] do_pte_missing+0x4f0/0x2a24 [ 90.340683][ T8767] handle_mm_fault+0x14f8/0x2514 [ 90.340691][ T8767] __get_user_pages+0x8b4/0x15b8 [ 90.340702][ T8767] faultin_page_range+0x1f0/0x6d8 [ 90.340712][ T8767] madvise_do_behavior+0x558/0x7c0 [ 90.340721][ T8767] do_madvise+0x28c/0x2f0 [ 90.340728][ T8767] __arm64_sys_madvise+0xac/0xc8 [ 90.340736][ T8767] invoke_syscall+0x98/0x244 [ 90.340748][ T8767] el0_svc_common+0xec/0x23c [ 90.340767][ T8767] do_el0_svc+0x4c/0x5c [ 90.340780][ T8767] el0_svc+0x64/0x260 [ 90.340791][ T8767] el0t_64_sync_handler+0x44/0x104 [ 90.340801][ T8767] el0t_64_sync+0x198/0x19c [ 90.474219][ T30] kauditd_printk_skb: 145264 callbacks suppressed [ 90.474264][ T30] audit: type=1400 audit(90.460:250929): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 90.474290][ T30] audit: type=1400 audit(90.460:250930): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="tmpfs" ino=1 [ 90.474310][ T30] audit: type=1400 audit(90.460:250931): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 90.474325][ T30] audit: type=1400 audit(90.460:250932): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="watch" dev="tmpfs" ino=135 [ 90.474339][ T30] audit: type=1400 audit(90.460:250933): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 90.474352][ T30] audit: type=1400 audit(90.460:250934): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="sysfs" ino=1 [ 90.474365][ T30] audit: type=1400 audit(90.460:250935): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="dev" dev="sysfs" ino=19 [ 90.474379][ T30] audit: type=1400 audit(90.460:250936): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="block" dev="sysfs" ino=20 [ 90.474392][ T30] audit: type=1400 audit(90.460:250937): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 90.474405][ T30] audit: type=1400 audit(90.460:250938): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="sysfs" ino=1 [ 90.552411][ T8778] Invalid ELF header magic: != ELF [ 91.045236][ T4720] Bluetooth: hci0: command tx timeout [ 91.189182][ T8817] loop6: detected capacity change from 0 to 256 [ 91.714148][ T4402] 8021q: adding VLAN 0 to HW filter on device eth9 [ 91.924931][ T8863] FAULT_INJECTION: forcing a failure. [ 91.924931][ T8863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.924972][ T8863] CPU: 1 UID: 0 PID: 8863 Comm: syz.2.643 Not tainted syzkaller #0 PREEMPT [ 91.924986][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.924992][ T8863] Call trace: [ 91.924996][ T8863] show_stack+0x2c/0x3c (C) [ 91.925018][ T8863] __dump_stack+0x30/0x40 [ 91.925031][ T8863] dump_stack_lvl+0xd8/0x12c [ 91.925043][ T8863] dump_stack+0x1c/0x28 [ 91.925055][ T8863] should_fail_ex+0x41c/0x590 [ 91.925064][ T8863] should_fail_alloc_page+0xec/0x10c [ 91.925074][ T8863] prepare_alloc_pages+0x194/0x4a4 [ 91.925084][ T8863] __alloc_frozen_pages_noprof+0x134/0x320 [ 91.925095][ T8863] alloc_pages_mpol+0x1ec/0x3c0 [ 91.925105][ T8863] alloc_frozen_pages_noprof+0xc4/0x10c [ 91.925116][ T8863] alloc_pages_noprof+0x30/0x148 [ 91.925127][ T8863] __do_fault+0x264/0x4a8 [ 91.925136][ T8863] do_pte_missing+0x4f0/0x2a24 [ 91.925146][ T8863] handle_mm_fault+0x14f8/0x2514 [ 91.925154][ T8863] __get_user_pages+0x8b4/0x15b8 [ 91.925165][ T8863] faultin_page_range+0x1f0/0x6d8 [ 91.925175][ T8863] madvise_do_behavior+0x558/0x7c0 [ 91.925184][ T8863] do_madvise+0x28c/0x2f0 [ 91.925191][ T8863] __arm64_sys_madvise+0xac/0xc8 [ 91.925199][ T8863] invoke_syscall+0x98/0x244 [ 91.925212][ T8863] el0_svc_common+0xec/0x23c [ 91.925224][ T8863] do_el0_svc+0x4c/0x5c [ 91.925235][ T8863] el0_svc+0x64/0x260 [ 91.925246][ T8863] el0t_64_sync_handler+0x44/0x104 [ 91.925257][ T8863] el0t_64_sync+0x198/0x19c [ 92.015925][ T8870] FAULT_INJECTION: forcing a failure. [ 92.015925][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.015969][ T8870] CPU: 1 UID: 0 PID: 8870 Comm: syz.4.646 Not tainted syzkaller #0 PREEMPT [ 92.015982][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.015988][ T8870] Call trace: [ 92.015991][ T8870] show_stack+0x2c/0x3c (C) [ 92.016013][ T8870] __dump_stack+0x30/0x40 [ 92.016026][ T8870] dump_stack_lvl+0xd8/0x12c [ 92.016038][ T8870] dump_stack+0x1c/0x28 [ 92.016050][ T8870] should_fail_ex+0x41c/0x590 [ 92.016059][ T8870] should_fail+0x14/0x24 [ 92.016067][ T8870] should_fail_usercopy+0x20/0x30 [ 92.016075][ T8870] _inline_copy_from_user+0x3c/0x174 [ 92.016089][ T8870] __arm64_sys_epoll_ctl+0x128/0x1b8 [ 92.016100][ T8870] invoke_syscall+0x98/0x244 [ 92.016112][ T8870] el0_svc_common+0xec/0x23c [ 92.016124][ T8870] do_el0_svc+0x4c/0x5c [ 92.016136][ T8870] el0_svc+0x64/0x260 [ 92.016147][ T8870] el0t_64_sync_handler+0x44/0x104 [ 92.016157][ T8870] el0t_64_sync+0x198/0x19c [ 92.338083][ T8898] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 92.347739][ T8898] netlink: 'syz.6.655': attribute type 3 has an invalid length. [ 92.347775][ T8898] netlink: 24 bytes leftover after parsing attributes in process `syz.6.655'. [ 92.414377][ T4402] 8021q: adding VLAN 0 to HW filter on device eth8 [ 93.096720][ T4402] 8021q: adding VLAN 0 to HW filter on device eth10 [ 93.195087][ T8955] 9pnet: p9_errstr2errno: server reported unknown error 0 [ 93.299848][ T6850] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.552750][ T6850] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.572475][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.579909][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.582685][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.587212][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.589976][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.711410][ T6850] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.818551][ T6850] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 93.845201][ T6850] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.890006][ T4402] 8021q: adding VLAN 0 to HW filter on device eth11 [ 94.111015][ T6850] bridge_slave_1: left allmulticast mode [ 94.111054][ T6850] bridge_slave_1: left promiscuous mode [ 94.111134][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.158911][ T6850] bridge_slave_0: left allmulticast mode [ 94.158943][ T6850] bridge_slave_0: left promiscuous mode [ 94.159046][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.454560][ T6850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.487525][ T6850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.527338][ T6850] bond0 (unregistering): Released all slaves [ 94.614635][ T8979] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.614688][ T8979] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.614810][ T8979] bridge_slave_0: entered allmulticast mode [ 94.615255][ T8979] bridge_slave_0: entered promiscuous mode [ 94.616009][ T8979] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.616047][ T8979] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.616098][ T8979] bridge_slave_1: entered allmulticast mode [ 94.616524][ T8979] bridge_slave_1: entered promiscuous mode [ 94.623900][ T8979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.647486][ T8979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.697250][ T8979] team0: Port device team_slave_0 added [ 94.698037][ T8979] team0: Port device team_slave_1 added [ 94.719112][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.719147][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.719166][ T8979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.720044][ T8979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.720054][ T8979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.720068][ T8979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.832214][ T8979] hsr_slave_0: entered promiscuous mode [ 94.834157][ T8979] hsr_slave_1: entered promiscuous mode [ 94.835578][ T8979] debugfs: 'hsr0' already exists in 'hsr' [ 94.836636][ T8979] Cannot create hsr debugfs directory [ 94.903791][ T9072] FAULT_INJECTION: forcing a failure. [ 94.903791][ T9072] name fail_futex, interval 1, probability 0, space 0, times 0 [ 94.903832][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.4.695 Not tainted syzkaller #0 PREEMPT [ 94.903845][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.903852][ T9072] Call trace: [ 94.903855][ T9072] show_stack+0x2c/0x3c (C) [ 94.903876][ T9072] __dump_stack+0x30/0x40 [ 94.903889][ T9072] dump_stack_lvl+0xd8/0x12c [ 94.903901][ T9072] dump_stack+0x1c/0x28 [ 94.903912][ T9072] should_fail_ex+0x41c/0x590 [ 94.903921][ T9072] should_fail+0x14/0x24 [ 94.903928][ T9072] get_futex_key+0x1ec/0x12b0 [ 94.903939][ T9072] futex_wait_setup+0x58/0x674 [ 94.903950][ T9072] __futex_wait+0x108/0x25c [ 94.903960][ T9072] futex_wait+0x108/0x2c0 [ 94.903970][ T9072] do_futex+0x320/0x378 [ 94.903980][ T9072] __arm64_sys_futex+0x2e4/0x418 [ 94.903990][ T9072] invoke_syscall+0x98/0x244 [ 94.904002][ T9072] el0_svc_common+0xec/0x23c [ 94.904013][ T9072] do_el0_svc+0x4c/0x5c [ 94.904025][ T9072] el0_svc+0x64/0x260 [ 94.904036][ T9072] el0t_64_sync_handler+0x44/0x104 [ 94.904046][ T9072] el0t_64_sync+0x198/0x19c [ 94.922934][ T6850] hsr_slave_0: left promiscuous mode [ 94.930567][ T6850] hsr_slave_1: left promiscuous mode [ 94.930890][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.931090][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.934660][ T6850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.934670][ T6850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.971584][ T6850] veth1_macvtap: left promiscuous mode [ 94.971637][ T6850] veth0_macvtap: left promiscuous mode [ 94.971739][ T6850] veth1_vlan: left promiscuous mode [ 94.971779][ T6850] veth0_vlan: left promiscuous mode [ 94.990295][ T9079] overlayfs: missing 'lowerdir' [ 95.234361][ T6850] team0 (unregistering): Port device team_slave_1 removed [ 95.301298][ T6850] team0 (unregistering): Port device team_slave_0 removed [ 95.484277][ T30] kauditd_printk_skb: 93341 callbacks suppressed [ 95.485741][ T30] audit: type=1400 audit(95.470:295465): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="loop1" dev="sysfs" ino=15921 [ 95.489436][ T30] audit: type=1400 audit(95.480:295466): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="queue" dev="sysfs" ino=15961 [ 95.493090][ T30] audit: type=1400 audit(95.480:295467): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4345 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 95.496844][ T30] audit: type=1400 audit(95.480:295468): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4703 comm="udevd" path="/run/udev/data" dev="tmpfs" ino=11 [ 95.500747][ T30] audit: type=1400 audit(95.480:295469): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 95.504614][ T30] audit: type=1400 audit(95.480:295470): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="/" dev="tmpfs" ino=1 [ 95.508473][ T30] audit: type=1400 audit(95.480:295471): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 95.512511][ T30] audit: type=1400 audit(95.480:295472): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4703 comm="udevd" name="data" dev="tmpfs" ino=11 [ 95.516917][ T30] audit: type=1400 audit(95.480:295473): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=4703 comm="udevd" name="data" dev="tmpfs" ino=11 [ 95.520743][ T30] audit: type=1400 audit(95.480:295474): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4703 comm="udevd" path="/run/udev/data/b7:1.tmp" dev="tmpfs" ino=5390 [ 95.681807][ T4720] Bluetooth: hci1: command tx timeout [ 95.712657][ T9119] FAULT_INJECTION: forcing a failure. [ 95.712657][ T9119] name fail_futex, interval 1, probability 0, space 0, times 0 [ 95.712695][ T9119] CPU: 0 UID: 0 PID: 9119 Comm: syz.1.711 Not tainted syzkaller #0 PREEMPT [ 95.712712][ T9119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.712721][ T9119] Call trace: [ 95.712725][ T9119] show_stack+0x2c/0x3c (C) [ 95.712748][ T9119] __dump_stack+0x30/0x40 [ 95.712760][ T9119] dump_stack_lvl+0xd8/0x12c [ 95.712773][ T9119] dump_stack+0x1c/0x28 [ 95.712784][ T9119] should_fail_ex+0x41c/0x590 [ 95.712794][ T9119] should_fail+0x14/0x24 [ 95.712801][ T9119] get_futex_key+0x1ec/0x12b0 [ 95.712811][ T9119] futex_wake+0x10c/0x594 [ 95.712821][ T9119] do_futex+0x2c4/0x378 [ 95.712831][ T9119] __arm64_sys_futex+0x2e4/0x418 [ 95.712841][ T9119] invoke_syscall+0x98/0x244 [ 95.712853][ T9119] el0_svc_common+0xec/0x23c [ 95.712865][ T9119] do_el0_svc+0x4c/0x5c [ 95.712877][ T9119] el0_svc+0x64/0x260 [ 95.712888][ T9119] el0t_64_sync_handler+0x44/0x104 [ 95.712898][ T9119] el0t_64_sync+0x198/0x19c [ 95.970618][ T9144] overlayfs: refusing to follow metacopy origin for (/file1) [ 96.101740][ T9152] loop4: detected capacity change from 0 to 256 [ 96.111646][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 96.114918][ T9152] ip6gre1: entered promiscuous mode [ 96.114948][ T9152] ip6gre1: entered allmulticast mode [ 96.124164][ T9152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.192723][ T8979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.202822][ T8979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.204935][ T9157] loop4: detected capacity change from 0 to 256 [ 96.205842][ T8979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.209764][ T8979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.210685][ T8979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.214690][ T8979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.215170][ T8979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.227557][ T8979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.338656][ T8979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.358942][ T8979] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.396881][ T6853] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.396937][ T6853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.397677][ T6853] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.397704][ T6853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.875368][ T6847] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.875478][ T6847] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.888383][ T8979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.904323][ T5017] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.917893][ T8979] veth0_vlan: entered promiscuous mode [ 96.932446][ T8979] veth1_vlan: entered promiscuous mode [ 96.984513][ T8979] veth0_macvtap: entered promiscuous mode [ 96.994882][ T8979] veth1_macvtap: entered promiscuous mode [ 97.007706][ T8979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.019160][ T8979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.130118][ T6850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.131094][ T6850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.131472][ T6850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.131488][ T6850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.131593][ T6850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.144425][ T866] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 97.177058][ T5318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.177098][ T5318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.185052][ T5318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.366460][ T9268] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 97.398580][ T9273] netlink: 'syz.5.738': attribute type 1 has an invalid length. [ 97.400361][ T9273] netlink: 'syz.5.738': attribute type 2 has an invalid length. [ 97.614874][ T9296] 9p: Bad value for 'wfdno' [ 97.750171][ T9304] device-mapper: ioctl: device name cannot contain '/' [ 97.764403][ T4720] Bluetooth: hci1: command tx timeout [ 97.914439][ T866] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.617914][ T9366] loop4: detected capacity change from 0 to 256 [ 98.647410][ T9369] FAULT_INJECTION: forcing a failure. [ 98.647410][ T9369] name failslab, interval 1, probability 0, space 0, times 0 [ 98.647447][ T9369] CPU: 1 UID: 0 PID: 9369 Comm: syz.6.760 Not tainted syzkaller #0 PREEMPT [ 98.647462][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.647469][ T9369] Call trace: [ 98.647473][ T9369] show_stack+0x2c/0x3c (C) [ 98.647493][ T9369] __dump_stack+0x30/0x40 [ 98.647506][ T9369] dump_stack_lvl+0xd8/0x12c [ 98.647517][ T9369] dump_stack+0x1c/0x28 [ 98.647529][ T9369] should_fail_ex+0x41c/0x590 [ 98.647538][ T9369] should_failslab+0xc4/0x120 [ 98.647547][ T9369] __kmalloc_cache_noprof+0x94/0x5ec [ 98.647558][ T9369] do_kimage_alloc_init+0x54/0x1b4 [ 98.647567][ T9369] do_kexec_load+0x120/0x678 [ 98.647575][ T9369] __arm64_sys_kexec_load+0x1b4/0x1d4 [ 98.647584][ T9369] invoke_syscall+0x98/0x244 [ 98.647596][ T9369] el0_svc_common+0xec/0x23c [ 98.647608][ T9369] do_el0_svc+0x4c/0x5c [ 98.647619][ T9369] el0_svc+0x64/0x260 [ 98.647630][ T9369] el0t_64_sync_handler+0x44/0x104 [ 98.647640][ T9369] el0t_64_sync+0x198/0x19c [ 98.821029][ T9382] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 98.822959][ T9382] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 98.876118][ T9388] FAULT_INJECTION: forcing a failure. [ 98.876118][ T9388] name failslab, interval 1, probability 0, space 0, times 0 [ 98.878608][ T9388] CPU: 0 UID: 0 PID: 9388 Comm: syz.6.772 Not tainted syzkaller #0 PREEMPT [ 98.878633][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.878643][ T9388] Call trace: [ 98.878649][ T9388] show_stack+0x2c/0x3c (C) [ 98.878671][ T9388] __dump_stack+0x30/0x40 [ 98.878684][ T9388] dump_stack_lvl+0xd8/0x12c [ 98.878696][ T9388] dump_stack+0x1c/0x28 [ 98.878708][ T9388] should_fail_ex+0x41c/0x590 [ 98.878717][ T9388] should_failslab+0xc4/0x120 [ 98.878727][ T9388] __kvmalloc_node_noprof+0x160/0x7d8 [ 98.878739][ T9388] evdev_open+0xd4/0x3e0 [ 98.878749][ T9388] chrdev_open+0x398/0x3e8 [ 98.878761][ T9388] do_dentry_open+0x5c4/0xfc0 [ 98.878772][ T9388] vfs_open+0x44/0x2dc [ 98.878784][ T9388] path_openat+0x21fc/0x2a60 [ 98.878794][ T9388] do_file_open+0x1c8/0x2e8 [ 98.878804][ T9388] do_sys_openat2+0x114/0x1e8 [ 98.878815][ T9388] do_sys_open+0xb0/0xe0 [ 98.878827][ T9388] __arm64_sys_openat+0xa8/0xc4 [ 98.878839][ T9388] invoke_syscall+0x98/0x244 [ 98.878851][ T9388] el0_svc_common+0xec/0x23c [ 98.878863][ T9388] do_el0_svc+0x4c/0x5c [ 98.878875][ T9388] el0_svc+0x64/0x260 [ 98.878886][ T9388] el0t_64_sync_handler+0x44/0x104 [ 98.878896][ T9388] el0t_64_sync+0x198/0x19c [ 98.879583][ T9385] FAULT_INJECTION: forcing a failure. [ 98.879583][ T9385] name failslab, interval 1, probability 0, space 0, times 0 [ 98.879598][ T9385] CPU: 1 UID: 0 PID: 9385 Comm: syz.5.770 Not tainted syzkaller #0 PREEMPT [ 98.879607][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.879613][ T9385] Call trace: [ 98.879615][ T9385] show_stack+0x2c/0x3c (C) [ 98.879631][ T9385] __dump_stack+0x30/0x40 [ 98.879643][ T9385] dump_stack_lvl+0xd8/0x12c [ 98.879655][ T9385] dump_stack+0x1c/0x28 [ 98.879666][ T9385] should_fail_ex+0x41c/0x590 [ 98.879674][ T9385] should_failslab+0xc4/0x120 [ 98.879683][ T9385] __kmalloc_cache_noprof+0x94/0x5ec [ 98.879693][ T9385] fsnotify_alloc_group+0x80/0x284 [ 98.879703][ T9385] __arm64_sys_fanotify_init+0x314/0x89c [ 98.879714][ T9385] invoke_syscall+0x98/0x244 [ 98.879726][ T9385] el0_svc_common+0xec/0x23c [ 98.879738][ T9385] do_el0_svc+0x4c/0x5c [ 98.879749][ T9385] el0_svc+0x64/0x260 [ 98.879759][ T9385] el0t_64_sync_handler+0x44/0x104 [ 98.879769][ T9385] el0t_64_sync+0x198/0x19c [ 99.043757][ T9400] FAULT_INJECTION: forcing a failure. [ 99.043757][ T9400] name fail_futex, interval 1, probability 0, space 0, times 0 [ 99.043799][ T9400] CPU: 1 UID: 0 PID: 9400 Comm: syz.5.775 Not tainted syzkaller #0 PREEMPT [ 99.043813][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.043821][ T9400] Call trace: [ 99.043825][ T9400] show_stack+0x2c/0x3c (C) [ 99.043848][ T9400] __dump_stack+0x30/0x40 [ 99.043861][ T9400] dump_stack_lvl+0xd8/0x12c [ 99.043873][ T9400] dump_stack+0x1c/0x28 [ 99.043885][ T9400] should_fail_ex+0x41c/0x590 [ 99.043894][ T9400] should_fail+0x14/0x24 [ 99.043902][ T9400] get_futex_key+0x1ec/0x12b0 [ 99.043912][ T9400] futex_wait_setup+0x58/0x674 [ 99.043923][ T9400] __futex_wait+0x108/0x25c [ 99.043933][ T9400] futex_wait+0x108/0x2c0 [ 99.043943][ T9400] do_futex+0x320/0x378 [ 99.043953][ T9400] __arm64_sys_futex+0x2e4/0x418 [ 99.043963][ T9400] invoke_syscall+0x98/0x244 [ 99.043975][ T9400] el0_svc_common+0xec/0x23c [ 99.043987][ T9400] do_el0_svc+0x4c/0x5c [ 99.043999][ T9400] el0_svc+0x64/0x260 [ 99.044010][ T9400] el0t_64_sync_handler+0x44/0x104 [ 99.044020][ T9400] el0t_64_sync+0x198/0x19c [ 99.173353][ T9402] loop5: detected capacity change from 0 to 8192 [ 99.780196][ T9420] vhci_hcd vhci_hcd.2: default hub control req: 010b v0000 i0000 l0 [ 99.834308][ T4720] Bluetooth: hci1: command tx timeout [ 99.850154][ T9424] FAULT_INJECTION: forcing a failure. [ 99.850154][ T9424] name failslab, interval 1, probability 0, space 0, times 0 [ 99.850192][ T9424] CPU: 1 UID: 0 PID: 9424 Comm: syz.4.786 Not tainted syzkaller #0 PREEMPT [ 99.850206][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.850213][ T9424] Call trace: [ 99.850217][ T9424] show_stack+0x2c/0x3c (C) [ 99.850237][ T9424] __dump_stack+0x30/0x40 [ 99.850250][ T9424] dump_stack_lvl+0xd8/0x12c [ 99.850267][ T9424] dump_stack+0x1c/0x28 [ 99.850279][ T9424] should_fail_ex+0x41c/0x590 [ 99.850288][ T9424] should_failslab+0xc4/0x120 [ 99.850298][ T9424] __kmalloc_cache_noprof+0x94/0x5ec [ 99.850312][ T9424] do_kimage_alloc_init+0x54/0x1b4 [ 99.850321][ T9424] do_kexec_load+0x120/0x678 [ 99.850330][ T9424] __arm64_sys_kexec_load+0x1b4/0x1d4 [ 99.850339][ T9424] invoke_syscall+0x98/0x244 [ 99.850351][ T9424] el0_svc_common+0xec/0x23c [ 99.850363][ T9424] do_el0_svc+0x4c/0x5c [ 99.850375][ T9424] el0_svc+0x64/0x260 [ 99.850385][ T9424] el0t_64_sync_handler+0x44/0x104 [ 99.850396][ T9424] el0t_64_sync+0x198/0x19c [ 100.063904][ T9441] loop2: detected capacity change from 0 to 128 [ 100.098467][ T9441] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 100.098498][ T9441] FAT-fs (loop2): Filesystem has been set read-only [ 100.100944][ T9417] netlink: 56 bytes leftover after parsing attributes in process `syz.5.783'. [ 100.189436][ T9453] loop1: detected capacity change from 0 to 128 [ 100.201090][ T9453] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 100.201129][ T9453] FAT-fs (loop1): Filesystem has been set read-only [ 100.228047][ T9455] loop2: detected capacity change from 0 to 512 [ 100.233507][ T9455] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.337760][ T9461] loop2: detected capacity change from 0 to 512 [ 100.349288][ T9461] EXT4-fs (loop2): Test dummy encryption mode enabled [ 100.349325][ T9461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.370857][ T9463] loop6: detected capacity change from 0 to 256 [ 100.457481][ T9469] FAULT_INJECTION: forcing a failure. [ 100.457481][ T9469] name failslab, interval 1, probability 0, space 0, times 0 [ 100.457522][ T9469] CPU: 1 UID: 0 PID: 9469 Comm: syz.1.801 Not tainted syzkaller #0 PREEMPT [ 100.457537][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.457544][ T9469] Call trace: [ 100.457548][ T9469] show_stack+0x2c/0x3c (C) [ 100.457568][ T9469] __dump_stack+0x30/0x40 [ 100.457581][ T9469] dump_stack_lvl+0xd8/0x12c [ 100.457593][ T9469] dump_stack+0x1c/0x28 [ 100.457605][ T9469] should_fail_ex+0x41c/0x590 [ 100.457614][ T9469] should_failslab+0xc4/0x120 [ 100.457623][ T9469] kmem_cache_alloc_noprof+0x94/0x5d8 [ 100.457633][ T9469] __kernfs_new_node+0xf0/0x7d8 [ 100.457643][ T9469] kernfs_new_node+0xe8/0x130 [ 100.457653][ T9469] kernfs_create_dir_ns+0x58/0x138 [ 100.457663][ T9469] sysfs_create_dir_ns+0x120/0x1f4 [ 100.457674][ T9469] kobject_add_internal+0x290/0x6f0 [ 100.457687][ T9469] kobject_add_varg+0x9c/0xe8 [ 100.457698][ T9469] kobject_add+0x110/0x1c8 [ 100.457709][ T9469] get_device_parent+0x2c8/0x350 [ 100.457718][ T9469] device_add+0x298/0x9e0 [ 100.457726][ T9469] wakeup_source_sysfs_add+0x1b4/0x2a4 [ 100.457737][ T9469] wakeup_source_register+0x158/0x2fc [ 100.457747][ T9469] ep_create_wakeup_source+0xf4/0x240 [ 100.457760][ T9469] ep_insert+0xb88/0x1418 [ 100.457771][ T9469] do_epoll_ctl_file+0xa0c/0xbd4 [ 100.457782][ T9469] do_epoll_ctl+0xa0/0x140 [ 100.457793][ T9469] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 100.457804][ T9469] invoke_syscall+0x98/0x244 [ 100.457817][ T9469] el0_svc_common+0xec/0x23c [ 100.457828][ T9469] do_el0_svc+0x4c/0x5c [ 100.457840][ T9469] el0_svc+0x64/0x260 [ 100.457850][ T9469] el0t_64_sync_handler+0x44/0x104 [ 100.457860][ T9469] el0t_64_sync+0x198/0x19c [ 100.457871][ T9469] kobject: kobject_add_internal failed for wakeup (error: -12 parent: virtual) [ 100.496879][ T4729] audit_log_start: 95258 callbacks suppressed [ 100.498099][ T4729] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.499380][ T4729] audit: audit_lost=187325 audit_rate_limit=0 audit_backlog_limit=64 [ 100.500823][ T4729] audit: backlog limit exceeded [ 100.501726][ T4729] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.503079][ T4729] audit: audit_lost=187326 audit_rate_limit=0 audit_backlog_limit=64 [ 100.504954][ T4729] audit: backlog limit exceeded [ 100.505979][ T4729] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.507287][ T4729] audit: audit_lost=187327 audit_rate_limit=0 audit_backlog_limit=64 [ 100.508781][ T4729] audit: backlog limit exceeded [ 100.509818][ T4729] audit: audit_backlog=65 > audit_backlog_limit=64 [ 100.554340][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.577311][ T9474] FAULT_INJECTION: forcing a failure. [ 100.577311][ T9474] name fail_futex, interval 1, probability 0, space 0, times 0 [ 100.579496][ T9474] CPU: 1 UID: 0 PID: 9474 Comm: syz.6.803 Not tainted syzkaller #0 PREEMPT [ 100.579515][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.579521][ T9474] Call trace: [ 100.579525][ T9474] show_stack+0x2c/0x3c (C) [ 100.579547][ T9474] __dump_stack+0x30/0x40 [ 100.579560][ T9474] dump_stack_lvl+0xd8/0x12c [ 100.579572][ T9474] dump_stack+0x1c/0x28 [ 100.579585][ T9474] should_fail_ex+0x41c/0x590 [ 100.579594][ T9474] should_fail+0x14/0x24 [ 100.579601][ T9474] get_futex_key+0x1ec/0x12b0 [ 100.579612][ T9474] futex_wake+0x10c/0x594 [ 100.579622][ T9474] do_futex+0x2c4/0x378 [ 100.579632][ T9474] __arm64_sys_futex+0x2e4/0x418 [ 100.579642][ T9474] invoke_syscall+0x98/0x244 [ 100.579655][ T9474] el0_svc_common+0xec/0x23c [ 100.579668][ T9474] do_el0_svc+0x4c/0x5c [ 100.579679][ T9474] el0_svc+0x64/0x260 [ 100.579690][ T9474] el0t_64_sync_handler+0x44/0x104 [ 100.579701][ T9474] el0t_64_sync+0x198/0x19c [ 100.896896][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.802'. [ 101.489865][ T9501] loop4: detected capacity change from 0 to 256 [ 101.516665][ T8202] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 101.518139][ T8202] FAT-fs (loop4): Filesystem has been set read-only [ 101.520325][ T8202] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 101.804109][ T9527] netlink: 'syz.6.822': attribute type 2 has an invalid length. [ 101.817396][ T9529] bond1: Removing last ns target with arp_interval on [ 101.899104][ T9540] netlink: 24 bytes leftover after parsing attributes in process `syz.2.827'. [ 101.910158][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 101.910314][ T9540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.914586][ T4720] Bluetooth: hci1: command tx timeout [ 101.930834][ T9540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.057145][ T9546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.113717][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.226675][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.230346][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.232679][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.242794][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.245644][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.247299][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.348433][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.449433][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.470390][ T9575] bridge0: port 3(ipvlan2) entered blocking state [ 102.471783][ T9575] bridge0: port 3(ipvlan2) entered disabled state [ 102.473236][ T9575] ipvlan2: entered allmulticast mode [ 102.474187][ T9575] bridge0: entered allmulticast mode [ 102.477315][ T9575] ipvlan2: left allmulticast mode [ 102.478317][ T9575] bridge0: left allmulticast mode [ 102.783968][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.5.850'. [ 102.813544][ T9604] veth1_macvtap: left promiscuous mode [ 102.976800][ T9621] FAULT_INJECTION: forcing a failure. [ 102.976800][ T9621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 102.976837][ T9621] CPU: 1 UID: 0 PID: 9621 Comm: syz.1.858 Not tainted syzkaller #0 PREEMPT [ 102.976851][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.976859][ T9621] Call trace: [ 102.976862][ T9621] show_stack+0x2c/0x3c (C) [ 102.976883][ T9621] __dump_stack+0x30/0x40 [ 102.976896][ T9621] dump_stack_lvl+0xd8/0x12c [ 102.976908][ T9621] dump_stack+0x1c/0x28 [ 102.976919][ T9621] should_fail_ex+0x41c/0x590 [ 102.976928][ T9621] should_fail_alloc_page+0xec/0x10c [ 102.976938][ T9621] prepare_alloc_pages+0x194/0x4a4 [ 102.976948][ T9621] __alloc_frozen_pages_noprof+0x134/0x320 [ 102.976959][ T9621] alloc_pages_mpol+0x1ec/0x3c0 [ 102.976969][ T9621] alloc_frozen_pages_noprof+0xc4/0x10c [ 102.976980][ T9621] alloc_pages_noprof+0x30/0x148 [ 102.976990][ T9621] folio_alloc_noprof+0x2c/0x148 [ 102.977001][ T9621] filemap_alloc_folio_noprof+0x108/0x430 [ 102.977014][ T9621] __filemap_get_folio_mpol+0x444/0x1054 [ 102.977022][ T9621] aio_setup_ring+0x2f4/0xad4 [ 102.977031][ T9621] ioctx_alloc+0x2ec/0x780 [ 102.977040][ T9621] __arm64_sys_io_setup+0x14c/0x2f4 [ 102.977048][ T9621] invoke_syscall+0x98/0x244 [ 102.977061][ T9621] el0_svc_common+0xec/0x23c [ 102.977073][ T9621] do_el0_svc+0x4c/0x5c [ 102.977084][ T9621] el0_svc+0x64/0x260 [ 102.977095][ T9621] el0t_64_sync_handler+0x44/0x104 [ 102.977105][ T9621] el0t_64_sync+0x198/0x19c [ 103.023537][ T9622] FAULT_INJECTION: forcing a failure. [ 103.023537][ T9622] name fail_futex, interval 1, probability 0, space 0, times 0 [ 103.023585][ T9622] CPU: 0 UID: 0 PID: 9622 Comm: syz.2.857 Not tainted syzkaller #0 PREEMPT [ 103.023601][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.023608][ T9622] Call trace: [ 103.023611][ T9622] show_stack+0x2c/0x3c (C) [ 103.023632][ T9622] __dump_stack+0x30/0x40 [ 103.023645][ T9622] dump_stack_lvl+0xd8/0x12c [ 103.023657][ T9622] dump_stack+0x1c/0x28 [ 103.023668][ T9622] should_fail_ex+0x41c/0x590 [ 103.023677][ T9622] should_fail+0x14/0x24 [ 103.023684][ T9622] get_futex_key+0x1ec/0x12b0 [ 103.023695][ T9622] futex_wake+0x10c/0x594 [ 103.023705][ T9622] do_futex+0x2c4/0x378 [ 103.023714][ T9622] __arm64_sys_futex+0x2e4/0x418 [ 103.023724][ T9622] invoke_syscall+0x98/0x244 [ 103.023737][ T9622] el0_svc_common+0xec/0x23c [ 103.023749][ T9622] do_el0_svc+0x4c/0x5c [ 103.023760][ T9622] el0_svc+0x64/0x260 [ 103.023771][ T9622] el0t_64_sync_handler+0x44/0x104 [ 103.023781][ T9622] el0t_64_sync+0x198/0x19c [ 103.098866][ T9563] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.117120][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.117291][ T9563] bridge_slave_0: entered allmulticast mode [ 103.117769][ T9563] bridge_slave_0: entered promiscuous mode [ 103.122010][ T9563] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.130158][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.130332][ T9563] bridge_slave_1: entered allmulticast mode [ 103.131128][ T9563] bridge_slave_1: entered promiscuous mode [ 103.167345][ T9563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.168328][ T9563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.196424][ T9563] team0: Port device team_slave_0 added [ 103.204023][ T9563] team0: Port device team_slave_1 added [ 103.215676][ T9632] loop5: detected capacity change from 0 to 8192 [ 103.248584][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.248620][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.248634][ T9563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.249196][ T9563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.249202][ T9563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.249215][ T9563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.298410][ T9563] hsr_slave_0: entered promiscuous mode [ 103.298783][ T9563] hsr_slave_1: entered promiscuous mode [ 103.298974][ T9563] debugfs: 'hsr0' already exists in 'hsr' [ 103.298985][ T9563] Cannot create hsr debugfs directory [ 103.387790][ T9650] FAULT_INJECTION: forcing a failure. [ 103.387790][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 103.391909][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.6.871 Not tainted syzkaller #0 PREEMPT [ 103.391925][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.391932][ T9650] Call trace: [ 103.391937][ T9650] show_stack+0x2c/0x3c (C) [ 103.391959][ T9650] __dump_stack+0x30/0x40 [ 103.391972][ T9650] dump_stack_lvl+0xd8/0x12c [ 103.391985][ T9650] dump_stack+0x1c/0x28 [ 103.391997][ T9650] should_fail_ex+0x41c/0x590 [ 103.392006][ T9650] should_failslab+0xc4/0x120 [ 103.392015][ T9650] __kmalloc_noprof+0x108/0x6b8 [ 103.392026][ T9650] tomoyo_encode2+0x10c/0x330 [ 103.392036][ T9650] tomoyo_encode+0x34/0x50 [ 103.392045][ T9650] tomoyo_realpath_from_path+0x488/0x4dc [ 103.392055][ T9650] tomoyo_path_number_perm+0x1f0/0x500 [ 103.392064][ T9650] tomoyo_file_ioctl+0x2c/0x3c [ 103.392075][ T9650] security_file_ioctl+0xdc/0x2b0 [ 103.392084][ T9650] __arm64_sys_ioctl+0xb0/0x1cc [ 103.392097][ T9650] invoke_syscall+0x98/0x244 [ 103.392109][ T9650] el0_svc_common+0xec/0x23c [ 103.392121][ T9650] do_el0_svc+0x4c/0x5c [ 103.392133][ T9650] el0_svc+0x64/0x260 [ 103.392143][ T9650] el0t_64_sync_handler+0x44/0x104 [ 103.392154][ T9650] el0t_64_sync+0x198/0x19c [ 103.415655][ T9650] ERROR: Out of memory at tomoyo_realpath_from_path. [ 103.522622][ T9657] netlink: 48 bytes leftover after parsing attributes in process `syz.5.874'. [ 103.612986][ T9660] binder: 9659:9660 tried to acquire reference to desc 0, got 1 instead [ 103.615477][ T9660] binder: 9659:9660 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 103.617851][ T9660] binder: 9660 RLIMIT_NICE not set [ 103.618910][ T9660] binder: 9660 RLIMIT_NICE not set [ 103.620228][ T9660] binder: 9659:9660 got reply transaction with bad transaction stack, transaction 5 has target 9659:9660 [ 103.622552][ T9660] binder: 9659:9660 transaction reply to 0:0 failed 6/29201/-71, code 0 size 0-0 line 3170 [ 103.625135][ T5017] binder: release 9659:9660 transaction 5 out, still active [ 103.625163][ T5017] binder: undelivered TRANSACTION_COMPLETE [ 103.625182][ T5017] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.634995][ T5017] binder: release 9659:9660 transaction 5 in, still active [ 103.635031][ T5017] binder: send failed reply for transaction 5, target dead [ 103.655008][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.876'. [ 103.727307][ T39] bridge_slave_1: left allmulticast mode [ 103.728437][ T39] bridge_slave_1: left promiscuous mode [ 103.729617][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.743364][ T39] bridge_slave_0: left allmulticast mode [ 103.744701][ T39] bridge_slave_0: left promiscuous mode [ 103.746039][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.828454][ T9682] netlink: 32 bytes leftover after parsing attributes in process `syz.6.881'. [ 104.008926][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.028319][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.047339][ T39] bond0 (unregistering): Released all slaves [ 104.072498][ T9692] syzkaller0: entered promiscuous mode [ 104.073812][ T9692] syzkaller0: entered allmulticast mode [ 104.130832][ T9707] random: crng reseeded on system resumption [ 104.176360][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.184501][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.315955][ T50] Bluetooth: hci0: command tx timeout [ 104.687593][ T9755] FAULT_INJECTION: forcing a failure. [ 104.687593][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 104.692642][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.5.901 Not tainted syzkaller #0 PREEMPT [ 104.692663][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.692669][ T9755] Call trace: [ 104.692673][ T9755] show_stack+0x2c/0x3c (C) [ 104.692697][ T9755] __dump_stack+0x30/0x40 [ 104.692711][ T9755] dump_stack_lvl+0xd8/0x12c [ 104.692723][ T9755] dump_stack+0x1c/0x28 [ 104.692735][ T9755] should_fail_ex+0x41c/0x590 [ 104.692745][ T9755] should_failslab+0xc4/0x120 [ 104.692754][ T9755] kmem_cache_alloc_noprof+0x94/0x5d8 [ 104.692764][ T9755] security_inode_alloc+0x40/0x304 [ 104.692777][ T9755] inode_init_always_gfp+0x704/0xbac [ 104.692789][ T9755] alloc_inode+0x9c/0x198 [ 104.692800][ T9755] sock_alloc+0x4c/0x204 [ 104.692810][ T9755] __sock_create+0x108/0x670 [ 104.692821][ T9755] __sys_socket_create+0xc0/0x11c [ 104.692831][ T9755] __sys_socket+0x44/0xec [ 104.692841][ T9755] __arm64_sys_socket+0x84/0x9c [ 104.692852][ T9755] invoke_syscall+0x98/0x244 [ 104.692864][ T9755] el0_svc_common+0xec/0x23c [ 104.692876][ T9755] do_el0_svc+0x4c/0x5c [ 104.692887][ T9755] el0_svc+0x64/0x260 [ 104.692898][ T9755] el0t_64_sync_handler+0x44/0x104 [ 104.692908][ T9755] el0t_64_sync+0x198/0x19c [ 104.714535][ T9755] socket: no more sockets [ 104.860894][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.903'. [ 105.037229][ T9779] 9pnet_virtio: no channels available for device syz [ 105.117170][ T50] Bluetooth: hci2: command tx timeout [ 105.179871][ T9793] FAULT_INJECTION: forcing a failure. [ 105.179871][ T9793] name failslab, interval 1, probability 0, space 0, times 0 [ 105.182613][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.2.913 Not tainted syzkaller #0 PREEMPT [ 105.182632][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 105.182639][ T9793] Call trace: [ 105.182643][ T9793] show_stack+0x2c/0x3c (C) [ 105.182666][ T9793] __dump_stack+0x30/0x40 [ 105.182680][ T9793] dump_stack_lvl+0xd8/0x12c [ 105.182692][ T9793] dump_stack+0x1c/0x28 [ 105.182704][ T9793] should_fail_ex+0x41c/0x590 [ 105.182713][ T9793] should_failslab+0xc4/0x120 [ 105.182723][ T9793] kmem_cache_alloc_lru_noprof+0x98/0x5dc [ 105.182733][ T9793] sock_alloc_inode+0x30/0x180 [ 105.182747][ T9793] alloc_inode+0x68/0x198 [ 105.182758][ T9793] sock_alloc+0x4c/0x204 [ 105.182768][ T9793] __sock_create+0x108/0x670 [ 105.182778][ T9793] __sys_socket_create+0xc0/0x11c [ 105.182789][ T9793] __sys_socket+0x44/0xec [ 105.182799][ T9793] __arm64_sys_socket+0x84/0x9c [ 105.182809][ T9793] invoke_syscall+0x98/0x244 [ 105.182822][ T9793] el0_svc_common+0xec/0x23c [ 105.182834][ T9793] do_el0_svc+0x4c/0x5c [ 105.182845][ T9793] el0_svc+0x64/0x260 [ 105.182856][ T9793] el0t_64_sync_handler+0x44/0x104 [ 105.182866][ T9793] el0t_64_sync+0x198/0x19c [ 105.182895][ T9793] socket: no more sockets [ 105.595686][ T30] kauditd_printk_skb: 116160 callbacks suppressed [ 105.595726][ T30] audit: type=1400 audit(105.590:387680): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5489 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 105.595747][ T30] audit: type=1400 audit(105.590:387681): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5489 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 105.597847][ T30] audit: type=1400 audit(105.590:387682): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5489 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 105.597876][ T30] audit: type=1400 audit(105.590:387683): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5489 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 105.597899][ T30] audit: type=1400 audit(105.590:387684): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5489 comm="syz-executor" name="213" dev="tmpfs" ino=1159 [ 105.597983][ T30] audit: type=1400 audit(105.590:387685): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5489 comm="syz-executor" path="/213" dev="tmpfs" ino=1159 [ 105.598602][ T30] audit: type=1400 audit(105.590:387686): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5489 comm="syz-executor" path="/213" dev="tmpfs" ino=1159 [ 105.598941][ T30] audit: type=1400 audit(105.590:387687): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5489 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 105.598968][ T30] audit: type=1400 audit(105.590:387688): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5489 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 105.598990][ T30] audit: type=1400 audit(105.590:387689): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5489 comm="syz-executor" name="213" dev="tmpfs" ino=1159 [ 105.742921][ T9820] Cannot find add_set index 0 as target [ 105.840830][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.5.922'. [ 105.959813][ T39] hsr_slave_0: left promiscuous mode [ 105.960930][ T39] hsr_slave_1: left promiscuous mode [ 105.961189][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.961207][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.961526][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.961536][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.992911][ T39] veth1_macvtap: left promiscuous mode [ 105.992962][ T39] veth0_macvtap: left promiscuous mode [ 105.993016][ T39] veth1_vlan: left promiscuous mode [ 105.993054][ T39] veth0_vlan: left promiscuous mode [ 106.117245][ T9857] loop3: detected capacity change from 0 to 7 [ 106.121803][ C1] blk_print_req_error: 65 callbacks suppressed [ 106.121849][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.121880][ C1] buffer_io_error: 65 callbacks suppressed [ 106.121886][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.129166][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.129214][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.133585][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.133645][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.139768][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.139811][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.140215][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.140245][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.140724][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.140751][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.140829][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.140851][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.140875][ T9857] ldm_validate_partition_table(): Disk read failed. [ 106.140916][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.140934][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.140988][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.141006][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.141058][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 106.141076][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 106.141151][ T9857] Dev loop3: unable to read RDB block 0 [ 106.141397][ T9857] loop3: unable to read partition table [ 106.141466][ T9857] loop3: partition table beyond EOD, truncated [ 106.141793][ T9857] loop_reread_partitions: partition scan of loop3 (Cj̽?}6 q-) failed (rc=-5) [ 106.200635][ T9857] [ 106.201130][ T9857] ====================================================== [ 106.202439][ T9857] WARNING: possible circular locking dependency detected [ 106.203730][ T9857] syzkaller #0 Not tainted [ 106.204563][ T9857] ------------------------------------------------------ [ 106.205945][ T9857] syz.6.932/9857 is trying to acquire lock: [ 106.206981][ T9857] ffff0000c1919210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x98/0xe0 [ 106.208922][ T9857] [ 106.208922][ T9857] but task is already holding lock: [ 106.210272][ T9857] ffff0000c7e01c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 106.212385][ T9857] [ 106.212385][ T9857] which lock already depends on the new lock. [ 106.212385][ T9857] [ 106.214256][ T9857] [ 106.214256][ T9857] the existing dependency chain (in reverse order) is: [ 106.215888][ T9857] [ 106.215888][ T9857] -> #2 (&q->q_usage_counter(io)#20){++++}-{0:0}: [ 106.217479][ T9857] blk_alloc_queue+0x488/0x590 [ 106.218466][ T9857] blk_mq_alloc_queue+0x148/0x284 [ 106.219499][ T9857] __blk_mq_alloc_disk+0x38/0x10c [ 106.220506][ T9857] loop_add+0x358/0x8e4 [ 106.221393][ T9857] loop_init+0xe8/0x10c [ 106.222274][ T9857] do_one_initcall+0x274/0xc38 [ 106.223219][ T9857] do_initcall_level+0x12c/0x1c4 [ 106.224201][ T9857] do_initcalls+0x70/0xd0 [ 106.225108][ T9857] do_basic_setup+0x7c/0x90 [ 106.226055][ T9857] kernel_init_freeable+0x268/0x3a8 [ 106.227117][ T9857] kernel_init+0x24/0x1dc [ 106.228022][ T9857] ret_from_fork+0x10/0x20 [ 106.228958][ T9857] [ 106.228958][ T9857] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 106.230340][ T9857] fs_reclaim_acquire+0x90/0x110 [ 106.231401][ T9857] kmem_cache_alloc_noprof+0x60/0x5d8 [ 106.232537][ T9857] __kernfs_iattrs+0xd8/0x310 [ 106.233551][ T9857] __kernfs_setattr+0x48/0x2ac [ 106.234568][ T9857] kernfs_iop_setattr+0xc4/0x11c [ 106.235598][ T9857] notify_change+0x928/0xb7c [ 106.236523][ T9857] do_truncate+0x1a8/0x22c [ 106.237414][ T9857] path_openat+0x2368/0x2a60 [ 106.238361][ T9857] do_file_open+0x1c8/0x2e8 [ 106.239274][ T9857] do_sys_openat2+0x114/0x1e8 [ 106.240248][ T9857] do_sys_open+0xb0/0xe0 [ 106.241104][ T9857] __arm64_sys_openat+0xa8/0xc4 [ 106.242074][ T9857] invoke_syscall+0x98/0x244 [ 106.242993][ T9857] el0_svc_common+0xec/0x23c [ 106.243938][ T9857] do_el0_svc+0x4c/0x5c [ 106.244798][ T9857] el0_svc+0x64/0x260 [ 106.245644][ T9857] el0t_64_sync_handler+0x44/0x104 [ 106.246684][ T9857] el0t_64_sync+0x198/0x19c [ 106.247635][ T9857] [ 106.247635][ T9857] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 106.249266][ T9857] __lock_acquire+0x17c0/0x2ebc [ 106.250253][ T9857] lock_acquire+0x140/0x364 [ 106.251174][ T9857] down_read+0x58/0x2bc [ 106.252034][ T9857] kernfs_iop_getattr+0x98/0xe0 [ 106.253006][ T9857] vfs_getattr_nosec+0x250/0x388 [ 106.253999][ T9857] vfs_getattr+0x60/0x88 [ 106.254871][ T9857] loop_assign_backing_file+0x200/0x3c0 [ 106.255990][ T9857] lo_ioctl+0x1134/0x1650 [ 106.256874][ T9857] blkdev_ioctl+0x574/0x904 [ 106.257818][ T9857] __arm64_sys_ioctl+0x154/0x1cc [ 106.258835][ T9857] invoke_syscall+0x98/0x244 [ 106.259778][ T9857] el0_svc_common+0xec/0x23c [ 106.260713][ T9857] do_el0_svc+0x4c/0x5c [ 106.261574][ T9857] el0_svc+0x64/0x260 [ 106.262386][ T9857] el0t_64_sync_handler+0x44/0x104 [ 106.263398][ T9857] el0t_64_sync+0x198/0x19c [ 106.264293][ T9857] [ 106.264293][ T9857] other info that might help us debug this: [ 106.264293][ T9857] [ 106.266114][ T9857] Chain exists of: [ 106.266114][ T9857] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#20 [ 106.266114][ T9857] [ 106.268846][ T9857] Possible unsafe locking scenario: [ 106.268846][ T9857] [ 106.270227][ T9857] CPU0 CPU1 [ 106.271219][ T9857] ---- ---- [ 106.272233][ T9857] lock(&q->q_usage_counter(io)#20); [ 106.273240][ T9857] lock(fs_reclaim); [ 106.274445][ T9857] lock(&q->q_usage_counter(io)#20); [ 106.275915][ T9857] rlock(&root->kernfs_iattr_rwsem); [ 106.276903][ T9857] [ 106.276903][ T9857] *** DEADLOCK *** [ 106.276903][ T9857] [ 106.278328][ T9857] 3 locks held by syz.6.932/9857: [ 106.279230][ T9857] #0: ffff0000c7ebe430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 106.281088][ T9857] #1: ffff0000c7e01c38 (&q->q_usage_counter(io)#20){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 106.283160][ T9857] #2: ffff0000c7e01c70 (&q->q_usage_counter(queue)#4){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 106.285247][ T9857] [ 106.285247][ T9857] stack backtrace: [ 106.286297][ T9857] CPU: 1 UID: 0 PID: 9857 Comm: syz.6.932 Not tainted syzkaller #0 PREEMPT [ 106.287810][ T9857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 106.289542][ T9857] Call trace: [ 106.290104][ T9857] show_stack+0x2c/0x3c (C) [ 106.290884][ T9857] __dump_stack+0x30/0x40 [ 106.291631][ T9857] dump_stack_lvl+0xd8/0x12c [ 106.292414][ T9857] dump_stack+0x1c/0x28 [ 106.293118][ T9857] print_circular_bug+0x328/0x330 [ 106.294008][ T9857] check_noncircular+0x158/0x174 [ 106.294887][ T9857] __lock_acquire+0x17c0/0x2ebc [ 106.295754][ T9857] lock_acquire+0x140/0x364 [ 106.296553][ T9857] down_read+0x58/0x2bc [ 106.297290][ T9857] kernfs_iop_getattr+0x98/0xe0 [ 106.298144][ T9857] vfs_getattr_nosec+0x250/0x388 [ 106.299037][ T9857] vfs_getattr+0x60/0x88 [ 106.299808][ T9857] loop_assign_backing_file+0x200/0x3c0 [ 106.300820][ T9857] lo_ioctl+0x1134/0x1650 [ 106.301593][ T9857] blkdev_ioctl+0x574/0x904 [ 106.302412][ T9857] __arm64_sys_ioctl+0x154/0x1cc [ 106.303284][ T9857] invoke_syscall+0x98/0x244 [ 106.304116][ T9857] el0_svc_common+0xec/0x23c [ 106.304947][ T9857] do_el0_svc+0x4c/0x5c [ 106.305667][ T9857] el0_svc+0x64/0x260 [ 106.306421][ T9857] el0t_64_sync_handler+0x44/0x104 [ 106.307334][ T9857] el0t_64_sync+0x198/0x19c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.309131][ T39] team0 (unregistering): Port device team_slave_1 removed [ 106.319779][ T39] team0 (unregistering): Port device team_slave_0 removed [ 106.394495][ T50] Bluetooth: hci0: command tx timeout [ 106.399842][ T9859] tap0: tun_chr_ioctl cmd 1074025677 [ 106.399914][ T9859] tap0: linktype set to 6 [ 106.514783][ T9857] ldm_validate_partition_table(): Disk read failed. [ 106.516323][ T9857] Dev loop3: unable to read RDB block 0 [ 106.517601][ T9857] loop3: unable to read partition table [ 106.518752][ T9857] loop3: partition table beyond EOD, truncated [ 106.519889][ T9857] loop_reread_partitions: partition scan of loop3 (Cj̽?}6 q-) failed (rc=-5) [ 106.741783][ T39] bridge_slave_1: left allmulticast mode [ 106.743169][ T39] bridge_slave_1: left promiscuous mode [ 106.748663][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.754480][ T39] bridge_slave_0: left allmulticast mode [ 106.755633][ T39] bridge_slave_0: left promiscuous mode [ 106.756810][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.773437][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.818647][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.854879][ T39] bond0 (unregistering): Released all slaves [ 106.905916][ T39] hsr_slave_0: left promiscuous mode [ 106.907230][ T39] hsr_slave_1: left promiscuous mode [ 106.908533][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.915566][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.969763][ T39] team0 (unregistering): Port device team_slave_1 removed [ 106.973552][ T39] team0 (unregistering): Port device team_slave_0 removed [ 107.344809][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.379250][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.439528][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.495975][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.626580][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.627133][ T39] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.685167][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.685206][ T39] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.777335][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.777370][ T39] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.856954][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.857029][ T39] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 107.956347][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.016244][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.098896][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.185907][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.297396][ T39] bridge_slave_1: left allmulticast mode [ 108.297425][ T39] bridge_slave_1: left promiscuous mode [ 108.297513][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.303874][ T39] bridge_slave_0: left allmulticast mode [ 108.303895][ T39] bridge_slave_0: left promiscuous mode [ 108.303960][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.313682][ T39] bridge_slave_1: left allmulticast mode [ 108.313710][ T39] bridge_slave_1: left promiscuous mode [ 108.313789][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.318169][ T39] bridge_slave_0: left allmulticast mode [ 108.319257][ T39] bridge_slave_0: left promiscuous mode [ 108.320329][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.325993][ T39] bridge_slave_1: left allmulticast mode [ 108.327065][ T39] bridge_slave_1: left promiscuous mode [ 108.327144][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.330344][ T39] bridge_slave_0: left allmulticast mode [ 108.330362][ T39] bridge_slave_0: left promiscuous mode [ 108.330412][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.410891][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.435193][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.445188][ T39] bond0 (unregistering): Released all slaves [ 108.446766][ T39] bond1 (unregistering): Released all slaves [ 108.467778][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.485152][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.515095][ T39] bond0 (unregistering): Released all slaves [ 108.517707][ T39] bond1 (unregistering): Released all slaves [ 108.537424][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.565425][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.568369][ T39] bond0 (unregistering): Released all slaves [ 109.397902][ T39] hsr_slave_0: left promiscuous mode [ 109.398212][ T39] hsr_slave_1: left promiscuous mode [ 109.398371][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.398381][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.399395][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.399403][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.405639][ T39] hsr_slave_0: left promiscuous mode [ 109.406734][ T39] hsr_slave_1: left promiscuous mode [ 109.406891][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.406900][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.407929][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.407937][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.413312][ T39] hsr_slave_0: left promiscuous mode [ 109.414538][ T39] hsr_slave_1: left promiscuous mode [ 109.414758][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.414774][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.423755][ T39] veth1_macvtap: left promiscuous mode [ 109.423786][ T39] veth0_macvtap: left promiscuous mode [ 109.423845][ T39] veth1_vlan: left promiscuous mode [ 109.423878][ T39] veth0_vlan: left promiscuous mode [ 109.428400][ T39] veth1_macvtap: left promiscuous mode [ 109.428427][ T39] veth0_macvtap: left promiscuous mode [ 109.428469][ T39] veth1_vlan: left promiscuous mode [ 109.428497][ T39] veth0_vlan: left promiscuous mode [ 109.432370][ T39] veth0_macvtap: left promiscuous mode [ 109.432625][ T39] veth1_vlan: left promiscuous mode [ 109.432658][ T39] veth0_vlan: left promiscuous mode [ 109.561367][ T39] team0 (unregistering): Port device team_slave_1 removed [ 109.563677][ T39] team0 (unregistering): Port device team_slave_0 removed [ 109.635362][ T39] team0 (unregistering): Port device team_slave_1 removed [ 109.637636][ T39] team0 (unregistering): Port device team_slave_0 removed [ 109.701109][ T39] team0 (unregistering): Port device team_slave_1 removed [ 109.703512][ T39] team0 (unregistering): Port device team_slave_0 removed [ 110.604292][ T30] kauditd_printk_skb: 44753 callbacks suppressed [ 110.605697][ T30] audit: type=1400 audit(110.590:416237): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10010 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 [ 110.605729][ T30] audit: type=1400 audit(110.600:416238): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10010 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1118 [ 110.605756][ T30] audit: type=1400 audit(110.600:416239): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1122 [ 110.605777][ T30] audit: type=1400 audit(110.600:416240): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=10010 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1123 [ 110.605796][ T30] audit: type=1400 audit(110.600:416241): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=10010 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1123 [ 110.605814][ T30] audit: type=1400 audit(110.600:416242): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=10010 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1123 [ 110.605831][ T30] audit: type=1400 audit(110.600:416243): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10010 comm="dhcpcd-run-hook" name="/" dev="nvme0n1p2" ino=2 [ 110.605847][ T30] audit: type=1400 audit(110.600:416244): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10010 comm="dhcpcd-run-hook" name="var" dev="nvme0n1p2" ino=1849 [ 110.605863][ T30] audit: type=1400 audit(110.600:416245): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10010 comm="dhcpcd-run-hook" name="var" dev="nvme0n1p2" ino=1849 [ 110.605878][ T30] audit: type=1400 audit(110.600:416246): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10010 comm="dhcpcd-run-hook" name="/" dev="nvme0n1p2" ino=2